X=r23, @ANYRESDEC=r24]], 0xfffffffffffffe56}}, 0x20004850)
r25 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r26 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0)
r27 = dup2(r26, r25)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r27, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r28 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r28)
r29 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x101405)
writev(r29, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2)
ioctl$SG_GET_REQUEST_TABLE(r29, 0x227d, &(0x7f0000000780))
kcmp(r28, r24, 0x0, 0xffffffffffffffff, r29)
ptrace$setopts(0x4206, r28, 0x0, 0x0)
r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r31=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0x2}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r28, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r27, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r19, r20, 0x0, 0x1, &(0x7f0000000080)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r17, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r13, r16, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r12, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)='/dev/ptmx\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r10, r11, 0x0, 0x8, &(0x7f0000000100)='syz_tun\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r9, r8, 0x0, 0x5, &(0x7f0000000340)=',em1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r32=>r5, r7, 0x0, 0xd, &(0x7f0000000240)='/selinux/mls\x00', r31}, 0x30)
fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, <r33=>0x0})
rt_tgsigqueueinfo(r32, r33, 0x0, &(0x7f0000000300)={0x5, 0x10000})
write(r4, &(0x7f0000000340), 0x41395527)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001500)={0x10000}, 0x4)
setsockopt$inet6_tcp_buf(r2, 0x6, 0xe, &(0x7f0000000140)="1e5da9bc7793999e848025a58b324ebec78eb457fc22a9e91a841566ddc30961db08bd91ad5ea2a218f05f3fb06130c4093e900401dd01a04f3fd0af6bb6fd28b48b72da1eacd8692603b2498782d70f20177ea068104186eafb3993141dbff6b01ebca167692945705816bda6fced47f1e92eeca8bac413dc06c5da1b61cf2ba6be8142491c9231dc1bdeb25d4b32ffc985c8639f973474ddb8677c463877e38f49a9ae688751f291613491cfb6148c0e1f66a5f0208d5b2e798eb9711c51fbe4c5e0257e3310dafeaae347ce9e3e9696f32d9ca7d0", 0xd6)
pipe(&(0x7f0000000200)={<r34=>0xffffffffffffffff})
vmsplice(r34, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

23:37:29 executing program 1:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$P9_RVERSION(r1, &(0x7f0000000240)=ANY=[], 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, r2, 0x8)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
syz_open_dev$admmidi(&(0x7f00000014c0)='/dev/admmidi#\x00', 0xffffffff, 0x800080)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
r5 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setownex(r6, 0xf, &(0x7f0000000180)={0x0, r5})
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r8}, 0x10)
r9 = getpid()
sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r10 = getpgrp(0x0)
setpriority(0x0, r10, 0x0)
r11 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x1)
r12 = gettid()
process_vm_writev(r12, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/240, 0xf0}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/224, 0xe0}], 0x1, 0x0)
r13 = getpgid(0x0)
r14 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5)
r15 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1)
r16 = dup2(r15, r14)
writev(r16, &(0x7f0000000040)=[{&(0x7f00000002c0)='3', 0x1}], 0x1)
ppoll(&(0x7f0000000200)=[{r16}], 0x1, &(0x7f0000000280), 0x0, 0x0)
r17 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r18 = inotify_init1(0x0)
fcntl$setown(r18, 0x8, 0xffffffffffffffff)
fcntl$getownex(r18, 0x10, &(0x7f00000000c0)={0x0, <r19=>0x0})
r20 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r20, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="020000000100eb0000000000020001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYBLOB='\b\x00\x00', @ANYRES32, @ANYBLOB="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", @ANYBLOB="74b24e1f0ef01479f571f55b37d7089c077e74b1bd50a45834473f982e6fd1fd97f815af9ca38040c073a4e24e033248357bfb5ab67092f29f0b1a66e443cc9e9ef2a93a80607607e3231fc4077092a7af7f95cd0ac29c703cc271896016d7b31ca22f"], 0x8, 0x1)
r21 = socket(0xa, 0x3, 0x8)
r22 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000)
ioctl$sock_inet_SIOCSIFFLAGS(r21, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r22, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r23=>0xffffffffffffffff}}}, 0x20)
sendmsg$key(r21, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
r24 = gettid()
waitid(0x83b895581628fca4, r24, &(0x7f0000000040), 0x2, &(0x7f0000000480))
sendmsg$key(r21, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r23, @ANYRESDEC=r24]], 0xfffffffffffffe56}}, 0x20004850)
r25 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r26 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0)
r27 = dup2(r26, r25)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r27, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r28 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r28)
r29 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x101405)
writev(r29, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2)
ioctl$SG_GET_REQUEST_TABLE(r29, 0x227d, &(0x7f0000000780))
kcmp(r28, r24, 0x0, 0xffffffffffffffff, r29)
ptrace$setopts(0x4206, r28, 0x0, 0x0)
r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r31=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0x2}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r28, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r27, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r19, r20, 0x0, 0x1, &(0x7f0000000080)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r17, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r13, r16, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r12, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)='/dev/ptmx\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r10, r11, 0x0, 0x8, &(0x7f0000000100)='syz_tun\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r9, r8, 0x0, 0x5, &(0x7f0000000340)=',em1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r32=>r5, r7, 0x0, 0xd, &(0x7f0000000240)='/selinux/mls\x00', r31}, 0x30)
fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, <r33=>0x0})
rt_tgsigqueueinfo(r32, r33, 0x0, &(0x7f0000000300)={0x5, 0x10000})
write(r4, &(0x7f0000000340), 0x41395527)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001500)={0x10000}, 0x4)
pipe(&(0x7f0000000200)={<r34=>0xffffffffffffffff})
vmsplice(r34, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

23:37:29 executing program 0:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:29 executing program 2:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:29 executing program 3:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:29 executing program 0:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:29 executing program 5:
socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
r4 = perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000180)='/contrf\xe9\xd8\\\xfa\xff\x00', 0x0, 0x0)
openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, &(0x7f0000000700))
r5 = socket$inet(0x2, 0x6000000000000003, 0x6)
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10)
sendto$inet(r5, 0x0, 0x0, 0x404c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10)
sendto$inet(r5, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
syz_genetlink_get_family_id$team(&(0x7f00000003c0)='team\x00')
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00'})
socket(0x10, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002280)=ANY=[@ANYBLOB="380000000004000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32], 0x4}}, 0x0)

23:37:30 executing program 2:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:30 executing program 0:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:30 executing program 3:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:30 executing program 4:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x8, r2, 0x8)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
syz_open_dev$admmidi(&(0x7f00000014c0)='/dev/admmidi#\x00', 0xffffffff, 0x800080)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
r5 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setownex(r6, 0xf, &(0x7f0000000180)={0x0, r5})
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r8}, 0x10)
r9 = getpid()
sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r10 = getpgrp(0x0)
setpriority(0x0, r10, 0x0)
r11 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x1)
r12 = gettid()
process_vm_writev(r12, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/240, 0xf0}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/224, 0xe0}], 0x1, 0x0)
r13 = getpgid(0x0)
r14 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5)
r15 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1)
r16 = dup2(r15, r14)
writev(r16, &(0x7f0000000040)=[{&(0x7f00000002c0)='3', 0x1}], 0x1)
ppoll(&(0x7f0000000200)=[{r16}], 0x1, &(0x7f0000000280), 0x0, 0x0)
r17 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r18 = inotify_init1(0x0)
fcntl$setown(r18, 0x8, 0xffffffffffffffff)
fcntl$getownex(r18, 0x10, &(0x7f00000000c0)={0x0, <r19=>0x0})
r20 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r20, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="020000000100eb0000000000020001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYBLOB='\b\x00\x00', @ANYRES32, @ANYBLOB="080005115951c076757a2164ca8343141a694359b9c301bf24d95441febf5a16ae429194cf41f9773a21df3fbefdfd920f68e5e58ca390181d9c686c6f0806797ac4b7731b7f6de976e4e0d345ac1f83f37848b5967ec0775d6b112c47c6e95551477839c728d326f78e5d0799b1c02c3418b1a48e41d54f698cc38b60a6a0375079bff305c0f0bbeddd3edfffcfdc456e464d8c1a7da7b7b2d8a43ac3491716431f09760a1563fe6d0296d3c466fe2c062668338b9185831dd35125bdd22378d3cf071a878b7a063b2d46a938629ac3291d146d87e0fe731694a7c32dbaabe14569f75cb0e55047f247d758bba0b8d668926655aad9aa6f2bd7", @ANYBLOB="74b24e1f0ef01479f571f55b37d7089c077e74b1bd50a45834473f982e6fd1fd97f815af9ca38040c073a4e24e033248357bfb5ab67092f29f0b1a66e443cc9e9ef2a93a80607607e3231fc4077092a7af7f95cd0ac29c703cc271896016d7b31ca22f3b0b56e5fec2690ec778d14906d776e06d"], 0x8, 0x1)
r21 = socket(0xa, 0x3, 0x8)
r22 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000)
ioctl$sock_inet_SIOCSIFFLAGS(r21, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r22, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r23=>0xffffffffffffffff}}}, 0x20)
sendmsg$key(r21, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
r24 = gettid()
waitid(0x83b895581628fca4, r24, &(0x7f0000000040), 0x2, &(0x7f0000000480))
sendmsg$key(r21, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r23, @ANYRESDEC=r24]], 0xfffffffffffffe56}}, 0x20004850)
r25 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r26 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0)
r27 = dup2(r26, r25)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r27, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r28 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r28)
r29 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x101405)
writev(r29, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2)
ioctl$SG_GET_REQUEST_TABLE(r29, 0x227d, &(0x7f0000000780))
kcmp(r28, r24, 0x0, 0xffffffffffffffff, r29)
ptrace$setopts(0x4206, r28, 0x0, 0x0)
r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r31=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0x2}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r28, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r27, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r19, r20, 0x0, 0x1, &(0x7f0000000080)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r17, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r13, r16, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r12, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)='/dev/ptmx\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r10, r11, 0x0, 0x8, &(0x7f0000000100)='syz_tun\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r9, r8, 0x0, 0x5, &(0x7f0000000340)=',em1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r32=>r5, r7, 0x0, 0xd, &(0x7f0000000240)='/selinux/mls\x00', r31}, 0x30)
fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, <r33=>0x0})
rt_tgsigqueueinfo(r32, r33, 0x0, &(0x7f0000000300)={0x5, 0x10000})
write(r4, &(0x7f0000000340), 0x41395527)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001500)={0x10000}, 0x4)
setsockopt$inet6_tcp_buf(r2, 0x6, 0xe, &(0x7f0000000140)="1e5da9bc7793999e848025a58b324ebec78eb457fc22a9e91a841566ddc30961db08bd91ad5ea2a218f05f3fb06130c4093e900401dd01a04f3fd0af6bb6fd28b48b72da1eacd8692603b2498782d70f20177ea068104186eafb3993141dbff6b01ebca167692945705816bda6fced47f1e92eeca8bac413dc06c5da1b61cf2ba6be8142491c9231dc1bdeb25d4b32ffc985c8639f973474ddb8677c463877e38f49a9ae688751f291613491cfb6148c0e1f66a5f0208d5b2e798eb9711c51fbe4c5e0257e3310dafeaae347ce9e3e9696f32d9ca7d0", 0xd6)
pipe(&(0x7f0000000200)={<r34=>0xffffffffffffffff})
vmsplice(r34, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

23:37:30 executing program 1:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$P9_RVERSION(r1, &(0x7f0000000240)=ANY=[], 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, r2, 0x8)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
syz_open_dev$admmidi(&(0x7f00000014c0)='/dev/admmidi#\x00', 0xffffffff, 0x800080)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
r5 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setownex(r6, 0xf, &(0x7f0000000180)={0x0, r5})
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r8}, 0x10)
r9 = getpid()
sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r10 = getpgrp(0x0)
setpriority(0x0, r10, 0x0)
r11 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x1)
r12 = gettid()
process_vm_writev(r12, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/240, 0xf0}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/224, 0xe0}], 0x1, 0x0)
r13 = getpgid(0x0)
r14 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5)
r15 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1)
r16 = dup2(r15, r14)
writev(r16, &(0x7f0000000040)=[{&(0x7f00000002c0)='3', 0x1}], 0x1)
ppoll(&(0x7f0000000200)=[{r16}], 0x1, &(0x7f0000000280), 0x0, 0x0)
r17 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r18 = inotify_init1(0x0)
fcntl$setown(r18, 0x8, 0xffffffffffffffff)
fcntl$getownex(r18, 0x10, &(0x7f00000000c0)={0x0, <r19=>0x0})
r20 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r20, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="020000000100eb0000000000020001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYBLOB='\b\x00\x00', @ANYRES32, @ANYBLOB="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", @ANYBLOB="74b24e1f0ef01479f571f55b37d7089c077e74b1bd50a45834473f982e6fd1fd97f815af9ca38040c073a4e24e033248357bfb5ab67092f29f0b1a66e443cc9e9ef2a93a80607607e3231fc4077092a7af7f95cd0ac29c703cc271896016d7b31ca22f3b0b56e5fec2690ec778d14906d776e06d"], 0x8, 0x1)
r21 = socket(0xa, 0x3, 0x8)
r22 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000)
ioctl$sock_inet_SIOCSIFFLAGS(r21, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r22, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r23=>0xffffffffffffffff}}}, 0x20)
sendmsg$key(r21, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
r24 = gettid()
waitid(0x83b895581628fca4, r24, &(0x7f0000000040), 0x2, &(0x7f0000000480))
sendmsg$key(r21, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r23, @ANYRESDEC=r24]], 0xfffffffffffffe56}}, 0x20004850)
r25 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r26 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0)
r27 = dup2(r26, r25)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r27, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r28 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r28)
r29 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x101405)
writev(r29, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2)
ioctl$SG_GET_REQUEST_TABLE(r29, 0x227d, &(0x7f0000000780))
kcmp(r28, r24, 0x0, 0xffffffffffffffff, r29)
ptrace$setopts(0x4206, r28, 0x0, 0x0)
r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r31=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0x2}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r28, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r27, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r19, r20, 0x0, 0x1, &(0x7f0000000080)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r17, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r13, r16, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r12, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)='/dev/ptmx\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r10, r11, 0x0, 0x8, &(0x7f0000000100)='syz_tun\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r9, r8, 0x0, 0x5, &(0x7f0000000340)=',em1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r32=>r5, r7, 0x0, 0xd, &(0x7f0000000240)='/selinux/mls\x00', r31}, 0x30)
fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, <r33=>0x0})
rt_tgsigqueueinfo(r32, r33, 0x0, &(0x7f0000000300)={0x5, 0x10000})
write(r4, &(0x7f0000000340), 0x41395527)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001500)={0x10000}, 0x4)
pipe(&(0x7f0000000200)={<r34=>0xffffffffffffffff})
vmsplice(r34, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

23:37:30 executing program 2:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:30 executing program 0:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:30 executing program 3:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:31 executing program 2:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:31 executing program 5:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:31 executing program 3:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:31 executing program 0:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:31 executing program 4:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x8, r2, 0x8)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
syz_open_dev$admmidi(&(0x7f00000014c0)='/dev/admmidi#\x00', 0xffffffff, 0x800080)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
r5 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setownex(r6, 0xf, &(0x7f0000000180)={0x0, r5})
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r8}, 0x10)
r9 = getpid()
sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r10 = getpgrp(0x0)
setpriority(0x0, r10, 0x0)
r11 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x1)
r12 = gettid()
process_vm_writev(r12, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/240, 0xf0}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/224, 0xe0}], 0x1, 0x0)
r13 = getpgid(0x0)
r14 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5)
r15 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1)
r16 = dup2(r15, r14)
writev(r16, &(0x7f0000000040)=[{&(0x7f00000002c0)='3', 0x1}], 0x1)
ppoll(&(0x7f0000000200)=[{r16}], 0x1, &(0x7f0000000280), 0x0, 0x0)
r17 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r18 = inotify_init1(0x0)
fcntl$setown(r18, 0x8, 0xffffffffffffffff)
fcntl$getownex(r18, 0x10, &(0x7f00000000c0)={0x0, <r19=>0x0})
r20 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r20, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="020000000100eb0000000000020001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYBLOB='\b\x00\x00', @ANYRES32, @ANYBLOB="080005115951c076757a2164ca8343141a694359b9c301bf24d95441febf5a16ae429194cf41f9773a21df3fbefdfd920f68e5e58ca390181d9c686c6f0806797ac4b7731b7f6de976e4e0d345ac1f83f37848b5967ec0775d6b112c47c6e95551477839c728d326f78e5d0799b1c02c3418b1a48e41d54f698cc38b60a6a0375079bff305c0f0bbeddd3edfffcfdc456e464d8c1a7da7b7b2d8a43ac3491716431f09760a1563fe6d0296d3c466fe2c062668338b9185831dd35125bdd22378d3cf071a878b7a063b2d46a938629ac3291d146d87e0fe731694a7c32dbaabe14569f75cb0e55047f247d758bba0b8d668926655aad9aa6f2bd7", @ANYBLOB="74b24e1f0ef01479f571f55b37d7089c077e74b1bd50a45834473f982e6fd1fd97f815af9ca38040c073a4e24e033248357bfb5ab67092f29f0b1a66e443cc9e9ef2a93a80607607e3231fc4077092a7af7f95cd0ac29c703cc271896016d7b31ca22f3b0b56e5fec2690ec778d14906d776e06d"], 0x8, 0x1)
r21 = socket(0xa, 0x3, 0x8)
r22 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000)
ioctl$sock_inet_SIOCSIFFLAGS(r21, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r22, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r23=>0xffffffffffffffff}}}, 0x20)
sendmsg$key(r21, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
r24 = gettid()
waitid(0x83b895581628fca4, r24, &(0x7f0000000040), 0x2, &(0x7f0000000480))
sendmsg$key(r21, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r23, @ANYRESDEC=r24]], 0xfffffffffffffe56}}, 0x20004850)
r25 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r26 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0)
r27 = dup2(r26, r25)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r27, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r28 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r28)
r29 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x101405)
writev(r29, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2)
ioctl$SG_GET_REQUEST_TABLE(r29, 0x227d, &(0x7f0000000780))
kcmp(r28, r24, 0x0, 0xffffffffffffffff, r29)
ptrace$setopts(0x4206, r28, 0x0, 0x0)
r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r31=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0x2}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r28, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r27, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r19, r20, 0x0, 0x1, &(0x7f0000000080)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r17, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r13, r16, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r12, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)='/dev/ptmx\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r10, r11, 0x0, 0x8, &(0x7f0000000100)='syz_tun\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r9, r8, 0x0, 0x5, &(0x7f0000000340)=',em1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r32=>r5, r7, 0x0, 0xd, &(0x7f0000000240)='/selinux/mls\x00', r31}, 0x30)
fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, <r33=>0x0})
rt_tgsigqueueinfo(r32, r33, 0x0, &(0x7f0000000300)={0x5, 0x10000})
write(r4, &(0x7f0000000340), 0x41395527)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001500)={0x10000}, 0x4)
setsockopt$inet6_tcp_buf(r2, 0x6, 0xe, &(0x7f0000000140)="1e5da9bc7793999e848025a58b324ebec78eb457fc22a9e91a841566ddc30961db08bd91ad5ea2a218f05f3fb06130c4093e900401dd01a04f3fd0af6bb6fd28b48b72da1eacd8692603b2498782d70f20177ea068104186eafb3993141dbff6b01ebca167692945705816bda6fced47f1e92eeca8bac413dc06c5da1b61cf2ba6be8142491c9231dc1bdeb25d4b32ffc985c8639f973474ddb8677c463877e38f49a9ae688751f291613491cfb6148c0e1f66a5f0208d5b2e798eb9711c51fbe4c5e0257e3310dafeaae347ce9e3e9696f32d9ca7d0", 0xd6)
pipe(&(0x7f0000000200)={<r34=>0xffffffffffffffff})
vmsplice(r34, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

23:37:31 executing program 5:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:31 executing program 2:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:31 executing program 1:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$P9_RVERSION(r1, &(0x7f0000000240)=ANY=[], 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, r2, 0x8)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
syz_open_dev$admmidi(&(0x7f00000014c0)='/dev/admmidi#\x00', 0xffffffff, 0x800080)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
r5 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setownex(r6, 0xf, &(0x7f0000000180)={0x0, r5})
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r8}, 0x10)
r9 = getpid()
sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r10 = getpgrp(0x0)
setpriority(0x0, r10, 0x0)
r11 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x1)
r12 = gettid()
process_vm_writev(r12, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/240, 0xf0}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/224, 0xe0}], 0x1, 0x0)
r13 = getpgid(0x0)
r14 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5)
r15 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1)
r16 = dup2(r15, r14)
writev(r16, &(0x7f0000000040)=[{&(0x7f00000002c0)='3', 0x1}], 0x1)
ppoll(&(0x7f0000000200)=[{r16}], 0x1, &(0x7f0000000280), 0x0, 0x0)
r17 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r18 = inotify_init1(0x0)
fcntl$setown(r18, 0x8, 0xffffffffffffffff)
fcntl$getownex(r18, 0x10, &(0x7f00000000c0)={0x0, <r19=>0x0})
r20 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r20, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="020000000100eb0000000000020001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYBLOB='\b\x00\x00', @ANYRES32, @ANYBLOB="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", @ANYBLOB="74b24e1f0ef01479f571f55b37d7089c077e74b1bd50a45834473f982e6fd1fd97f815af9ca38040c073a4e24e033248357bfb5ab67092f29f0b1a66e443cc9e9ef2a93a80607607e3231fc4077092a7af7f95cd0ac29c703cc271896016d7b31ca22f3b0b56e5fec2690ec778d14906d776e06d"], 0x8, 0x1)
r21 = socket(0xa, 0x3, 0x8)
r22 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000)
ioctl$sock_inet_SIOCSIFFLAGS(r21, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r22, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r23=>0xffffffffffffffff}}}, 0x20)
sendmsg$key(r21, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
r24 = gettid()
waitid(0x83b895581628fca4, r24, &(0x7f0000000040), 0x2, &(0x7f0000000480))
sendmsg$key(r21, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r23, @ANYRESDEC=r24]], 0xfffffffffffffe56}}, 0x20004850)
r25 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r26 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0)
r27 = dup2(r26, r25)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r27, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r28 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r28)
r29 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x101405)
writev(r29, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2)
ioctl$SG_GET_REQUEST_TABLE(r29, 0x227d, &(0x7f0000000780))
kcmp(r28, r24, 0x0, 0xffffffffffffffff, r29)
ptrace$setopts(0x4206, r28, 0x0, 0x0)
r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r31=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0x2}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r28, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r27, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r19, r20, 0x0, 0x1, &(0x7f0000000080)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r17, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r13, r16, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r12, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)='/dev/ptmx\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r10, r11, 0x0, 0x8, &(0x7f0000000100)='syz_tun\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r9, r8, 0x0, 0x5, &(0x7f0000000340)=',em1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r32=>r5, r7, 0x0, 0xd, &(0x7f0000000240)='/selinux/mls\x00', r31}, 0x30)
fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, <r33=>0x0})
rt_tgsigqueueinfo(r32, r33, 0x0, &(0x7f0000000300)={0x5, 0x10000})
write(r4, &(0x7f0000000340), 0x41395527)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001500)={0x10000}, 0x4)
pipe(&(0x7f0000000200)={<r34=>0xffffffffffffffff})
vmsplice(r34, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

23:37:31 executing program 3:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x8, r2, 0x8)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
syz_open_dev$admmidi(&(0x7f00000014c0)='/dev/admmidi#\x00', 0xffffffff, 0x800080)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
r5 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setownex(r6, 0xf, &(0x7f0000000180)={0x0, r5})
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r8}, 0x10)
r9 = getpid()
sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r10 = getpgrp(0x0)
setpriority(0x0, r10, 0x0)
r11 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x1)
r12 = gettid()
process_vm_writev(r12, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/240, 0xf0}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/224, 0xe0}], 0x1, 0x0)
r13 = getpgid(0x0)
r14 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5)
r15 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1)
r16 = dup2(r15, r14)
writev(r16, &(0x7f0000000040)=[{&(0x7f00000002c0)='3', 0x1}], 0x1)
ppoll(&(0x7f0000000200)=[{r16}], 0x1, &(0x7f0000000280), 0x0, 0x0)
r17 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r18 = inotify_init1(0x0)
fcntl$setown(r18, 0x8, 0xffffffffffffffff)
fcntl$getownex(r18, 0x10, &(0x7f00000000c0)={0x0, <r19=>0x0})
r20 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r20, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="020000000100eb0000000000020001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYBLOB='\b\x00\x00', @ANYRES32, @ANYBLOB="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", @ANYBLOB="74b24e1f0ef01479f571f55b37d7089c077e74b1bd50a45834473f982e6fd1fd97f815af9ca38040c073a4e24e033248357bfb5ab67092f29f0b1a66e443cc9e9ef2a93a80607607e3231fc4077092a7af7f95cd0ac29c703cc271896016d7b31ca22f3b0b56e5fec2690ec778d14906d776e06d"], 0x8, 0x1)
r21 = socket(0xa, 0x3, 0x8)
r22 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000)
ioctl$sock_inet_SIOCSIFFLAGS(r21, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r22, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r23=>0xffffffffffffffff}}}, 0x20)
sendmsg$key(r21, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
r24 = gettid()
waitid(0x83b895581628fca4, r24, &(0x7f0000000040), 0x2, &(0x7f0000000480))
sendmsg$key(r21, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r23, @ANYRESDEC=r24]], 0xfffffffffffffe56}}, 0x20004850)
r25 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r26 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0)
r27 = dup2(r26, r25)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r27, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r28 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r28)
r29 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x101405)
writev(r29, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2)
ioctl$SG_GET_REQUEST_TABLE(r29, 0x227d, &(0x7f0000000780))
kcmp(r28, r24, 0x0, 0xffffffffffffffff, r29)
ptrace$setopts(0x4206, r28, 0x0, 0x0)
r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r31=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0x2}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r28, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r27, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r19, r20, 0x0, 0x1, &(0x7f0000000080)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r17, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r13, r16, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r12, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)='/dev/ptmx\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r10, r11, 0x0, 0x8, &(0x7f0000000100)='syz_tun\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r9, r8, 0x0, 0x5, &(0x7f0000000340)=',em1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r32=>r5, r7, 0x0, 0xd, &(0x7f0000000240)='/selinux/mls\x00', r31}, 0x30)
fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, <r33=>0x0})
rt_tgsigqueueinfo(r32, r33, 0x0, &(0x7f0000000300)={0x5, 0x10000})
write(r4, &(0x7f0000000340), 0x41395527)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001500)={0x10000}, 0x4)
setsockopt$inet6_tcp_buf(r2, 0x6, 0xe, &(0x7f0000000140)="1e5da9bc7793999e848025a58b324ebec78eb457fc22a9e91a841566ddc30961db08bd91ad5ea2a218f05f3fb06130c4093e900401dd01a04f3fd0af6bb6fd28b48b72da1eacd8692603b2498782d70f20177ea068104186eafb3993141dbff6b01ebca167692945705816bda6fced47f1e92eeca8bac413dc06c5da1b61cf2ba6be8142491c9231dc1bdeb25d4b32ffc985c8639f973474ddb8677c463877e38f49a9ae688751f291613491cfb6148c0e1f66a5f0208d5b2e798eb9711c51fbe4c5e0257e3310dafeaae347ce9e3e9696f32d9ca7d0", 0xd6)
pipe(&(0x7f0000000200)={<r34=>0xffffffffffffffff})
vmsplice(r34, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

23:37:31 executing program 0:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:31 executing program 5:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:32 executing program 2:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:32 executing program 0:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:32 executing program 2:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:32 executing program 5:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:32 executing program 4:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x8, r2, 0x8)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
syz_open_dev$admmidi(&(0x7f00000014c0)='/dev/admmidi#\x00', 0xffffffff, 0x800080)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
r5 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setownex(r6, 0xf, &(0x7f0000000180)={0x0, r5})
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r8}, 0x10)
r9 = getpid()
sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r10 = getpgrp(0x0)
setpriority(0x0, r10, 0x0)
r11 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x1)
r12 = gettid()
process_vm_writev(r12, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/240, 0xf0}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/224, 0xe0}], 0x1, 0x0)
r13 = getpgid(0x0)
r14 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5)
r15 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1)
r16 = dup2(r15, r14)
writev(r16, &(0x7f0000000040)=[{&(0x7f00000002c0)='3', 0x1}], 0x1)
ppoll(&(0x7f0000000200)=[{r16}], 0x1, &(0x7f0000000280), 0x0, 0x0)
r17 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r18 = inotify_init1(0x0)
fcntl$setown(r18, 0x8, 0xffffffffffffffff)
fcntl$getownex(r18, 0x10, &(0x7f00000000c0)={0x0, <r19=>0x0})
r20 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r20, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="020000000100eb0000000000020001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYBLOB='\b\x00\x00', @ANYRES32, @ANYBLOB="080005115951c076757a2164ca8343141a694359b9c301bf24d95441febf5a16ae429194cf41f9773a21df3fbefdfd920f68e5e58ca390181d9c686c6f0806797ac4b7731b7f6de976e4e0d345ac1f83f37848b5967ec0775d6b112c47c6e95551477839c728d326f78e5d0799b1c02c3418b1a48e41d54f698cc38b60a6a0375079bff305c0f0bbeddd3edfffcfdc456e464d8c1a7da7b7b2d8a43ac3491716431f09760a1563fe6d0296d3c466fe2c062668338b9185831dd35125bdd22378d3cf071a878b7a063b2d46a938629ac3291d146d87e0fe731694a7c32dbaabe14569f75cb0e55047f247d758bba0b8d668926655aad9aa6f2bd7", @ANYBLOB="74b24e1f0ef01479f571f55b37d7089c077e74b1bd50a45834473f982e6fd1fd97f815af9ca38040c073a4e24e033248357bfb5ab67092f29f0b1a66e443cc9e9ef2a93a80607607e3231fc4077092a7af7f95cd0ac29c703cc271896016d7b31ca22f3b0b56e5fec2690ec778d14906d776e06d1e11235fee66cd66"], 0x8, 0x1)
r21 = socket(0xa, 0x3, 0x8)
r22 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000)
ioctl$sock_inet_SIOCSIFFLAGS(r21, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r22, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r23=>0xffffffffffffffff}}}, 0x20)
sendmsg$key(r21, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
r24 = gettid()
waitid(0x83b895581628fca4, r24, &(0x7f0000000040), 0x2, &(0x7f0000000480))
sendmsg$key(r21, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r23, @ANYRESDEC=r24]], 0xfffffffffffffe56}}, 0x20004850)
r25 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r26 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0)
r27 = dup2(r26, r25)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r27, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r28 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r28)
r29 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x101405)
writev(r29, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2)
ioctl$SG_GET_REQUEST_TABLE(r29, 0x227d, &(0x7f0000000780))
kcmp(r28, r24, 0x0, 0xffffffffffffffff, r29)
ptrace$setopts(0x4206, r28, 0x0, 0x0)
r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r31=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0x2}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r28, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r27, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r19, r20, 0x0, 0x1, &(0x7f0000000080)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r17, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r13, r16, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r12, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)='/dev/ptmx\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r10, r11, 0x0, 0x8, &(0x7f0000000100)='syz_tun\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r9, r8, 0x0, 0x5, &(0x7f0000000340)=',em1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r32=>r5, r7, 0x0, 0xd, &(0x7f0000000240)='/selinux/mls\x00', r31}, 0x30)
fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, <r33=>0x0})
rt_tgsigqueueinfo(r32, r33, 0x0, &(0x7f0000000300)={0x5, 0x10000})
write(r4, &(0x7f0000000340), 0x41395527)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001500)={0x10000}, 0x4)
setsockopt$inet6_tcp_buf(r2, 0x6, 0xe, &(0x7f0000000140)="1e5da9bc7793999e848025a58b324ebec78eb457fc22a9e91a841566ddc30961db08bd91ad5ea2a218f05f3fb06130c4093e900401dd01a04f3fd0af6bb6fd28b48b72da1eacd8692603b2498782d70f20177ea068104186eafb3993141dbff6b01ebca167692945705816bda6fced47f1e92eeca8bac413dc06c5da1b61cf2ba6be8142491c9231dc1bdeb25d4b32ffc985c8639f973474ddb8677c463877e38f49a9ae688751f291613491cfb6148c0e1f66a5f0208d5b2e798eb9711c51fbe4c5e0257e3310dafeaae347ce9e3e9696f32d9ca7d0", 0xd6)
pipe(&(0x7f0000000200)={<r34=>0xffffffffffffffff})
vmsplice(r34, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

23:37:32 executing program 0:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:32 executing program 1:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$P9_RVERSION(r1, &(0x7f0000000240)=ANY=[], 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, r2, 0x8)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
syz_open_dev$admmidi(&(0x7f00000014c0)='/dev/admmidi#\x00', 0xffffffff, 0x800080)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
r5 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setownex(r6, 0xf, &(0x7f0000000180)={0x0, r5})
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r8}, 0x10)
r9 = getpid()
sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r10 = getpgrp(0x0)
setpriority(0x0, r10, 0x0)
r11 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x1)
r12 = gettid()
process_vm_writev(r12, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/240, 0xf0}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/224, 0xe0}], 0x1, 0x0)
r13 = getpgid(0x0)
r14 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5)
r15 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1)
r16 = dup2(r15, r14)
writev(r16, &(0x7f0000000040)=[{&(0x7f00000002c0)='3', 0x1}], 0x1)
ppoll(&(0x7f0000000200)=[{r16}], 0x1, &(0x7f0000000280), 0x0, 0x0)
r17 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r18 = inotify_init1(0x0)
fcntl$setown(r18, 0x8, 0xffffffffffffffff)
fcntl$getownex(r18, 0x10, &(0x7f00000000c0)={0x0, <r19=>0x0})
r20 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r20, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="020000000100eb0000000000020001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYBLOB='\b\x00\x00', @ANYRES32, @ANYBLOB="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", @ANYBLOB="74b24e1f0ef01479f571f55b37d7089c077e74b1bd50a45834473f982e6fd1fd97f815af9ca38040c073a4e24e033248357bfb5ab67092f29f0b1a66e443cc9e9ef2a93a80607607e3231fc4077092a7af7f95cd0ac29c703cc271896016d7b31ca22f3b0b56e5fec2690ec778d14906d776e06d"], 0x8, 0x1)
r21 = socket(0xa, 0x3, 0x8)
r22 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000)
ioctl$sock_inet_SIOCSIFFLAGS(r21, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r22, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r23=>0xffffffffffffffff}}}, 0x20)
sendmsg$key(r21, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
r24 = gettid()
waitid(0x83b895581628fca4, r24, &(0x7f0000000040), 0x2, &(0x7f0000000480))
sendmsg$key(r21, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r23, @ANYRESDEC=r24]], 0xfffffffffffffe56}}, 0x20004850)
r25 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r26 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0)
r27 = dup2(r26, r25)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r27, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r28 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r28)
r29 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x101405)
writev(r29, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2)
ioctl$SG_GET_REQUEST_TABLE(r29, 0x227d, &(0x7f0000000780))
kcmp(r28, r24, 0x0, 0xffffffffffffffff, r29)
ptrace$setopts(0x4206, r28, 0x0, 0x0)
r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r31=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0x2}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r28, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r27, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r19, r20, 0x0, 0x1, &(0x7f0000000080)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r17, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r13, r16, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r12, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)='/dev/ptmx\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r10, r11, 0x0, 0x8, &(0x7f0000000100)='syz_tun\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r9, r8, 0x0, 0x5, &(0x7f0000000340)=',em1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r32=>r5, r7, 0x0, 0xd, &(0x7f0000000240)='/selinux/mls\x00', r31}, 0x30)
fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, <r33=>0x0})
rt_tgsigqueueinfo(r32, r33, 0x0, &(0x7f0000000300)={0x5, 0x10000})
write(r4, &(0x7f0000000340), 0x41395527)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001500)={0x10000}, 0x4)
pipe(&(0x7f0000000200)={<r34=>0xffffffffffffffff})
vmsplice(r34, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

23:37:32 executing program 3:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$P9_RVERSION(r1, &(0x7f0000000240)=ANY=[], 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, r2, 0x8)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
syz_open_dev$admmidi(&(0x7f00000014c0)='/dev/admmidi#\x00', 0xffffffff, 0x800080)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
r5 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setownex(r6, 0xf, &(0x7f0000000180)={0x0, r5})
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r8}, 0x10)
r9 = getpid()
sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r10 = getpgrp(0x0)
setpriority(0x0, r10, 0x0)
r11 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x1)
r12 = gettid()
process_vm_writev(r12, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/240, 0xf0}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/224, 0xe0}], 0x1, 0x0)
r13 = getpgid(0x0)
r14 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5)
r15 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1)
r16 = dup2(r15, r14)
writev(r16, &(0x7f0000000040)=[{&(0x7f00000002c0)='3', 0x1}], 0x1)
ppoll(&(0x7f0000000200)=[{r16}], 0x1, &(0x7f0000000280), 0x0, 0x0)
r17 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r18 = inotify_init1(0x0)
fcntl$setown(r18, 0x8, 0xffffffffffffffff)
fcntl$getownex(r18, 0x10, &(0x7f00000000c0)={0x0, <r19=>0x0})
r20 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r20, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="020000000100eb0000000000020001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYBLOB='\b\x00\x00', @ANYRES32, @ANYBLOB="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", @ANYBLOB="74b24e1f0ef01479f571f55b37d7089c077e74b1bd50a45834473f982e6fd1fd97f815af9ca38040c073a4e24e033248357bfb5ab67092f29f0b1a66e443cc9e9ef2a93a80607607e3231fc4077092a7af7f95cd0ac29c703cc271896016d7b31ca22f3b0b56e5fec2690ec778d14906d776e06d"], 0x8, 0x1)
r21 = socket(0xa, 0x3, 0x8)
r22 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000)
ioctl$sock_inet_SIOCSIFFLAGS(r21, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r22, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r23=>0xffffffffffffffff}}}, 0x20)
sendmsg$key(r21, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
r24 = gettid()
waitid(0x83b895581628fca4, r24, &(0x7f0000000040), 0x2, &(0x7f0000000480))
sendmsg$key(r21, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r23, @ANYRESDEC=r24]], 0xfffffffffffffe56}}, 0x20004850)
r25 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r26 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0)
r27 = dup2(r26, r25)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r27, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r28 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r28)
r29 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x101405)
writev(r29, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2)
ioctl$SG_GET_REQUEST_TABLE(r29, 0x227d, &(0x7f0000000780))
kcmp(r28, r24, 0x0, 0xffffffffffffffff, r29)
ptrace$setopts(0x4206, r28, 0x0, 0x0)
r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r31=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0x2}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r28, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r27, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r19, r20, 0x0, 0x1, &(0x7f0000000080)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r17, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r13, r16, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r12, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)='/dev/ptmx\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r10, r11, 0x0, 0x8, &(0x7f0000000100)='syz_tun\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r9, r8, 0x0, 0x5, &(0x7f0000000340)=',em1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r32=>r5, r7, 0x0, 0xd, &(0x7f0000000240)='/selinux/mls\x00', r31}, 0x30)
fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, <r33=>0x0})
rt_tgsigqueueinfo(r32, r33, 0x0, &(0x7f0000000300)={0x5, 0x10000})
write(r4, &(0x7f0000000340), 0x41395527)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001500)={0x10000}, 0x4)
pipe(&(0x7f0000000200)={<r34=>0xffffffffffffffff})
vmsplice(r34, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

23:37:32 executing program 2:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:32 executing program 0:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:32 executing program 5:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:33 executing program 2:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:33 executing program 5:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:33 executing program 4:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x8, r2, 0x8)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
syz_open_dev$admmidi(&(0x7f00000014c0)='/dev/admmidi#\x00', 0xffffffff, 0x800080)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
r5 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setownex(r6, 0xf, &(0x7f0000000180)={0x0, r5})
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r8}, 0x10)
r9 = getpid()
sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r10 = getpgrp(0x0)
setpriority(0x0, r10, 0x0)
r11 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x1)
r12 = gettid()
process_vm_writev(r12, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/240, 0xf0}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/224, 0xe0}], 0x1, 0x0)
r13 = getpgid(0x0)
r14 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5)
r15 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1)
r16 = dup2(r15, r14)
writev(r16, &(0x7f0000000040)=[{&(0x7f00000002c0)='3', 0x1}], 0x1)
ppoll(&(0x7f0000000200)=[{r16}], 0x1, &(0x7f0000000280), 0x0, 0x0)
r17 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r18 = inotify_init1(0x0)
fcntl$setown(r18, 0x8, 0xffffffffffffffff)
fcntl$getownex(r18, 0x10, &(0x7f00000000c0)={0x0, <r19=>0x0})
r20 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r20, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="020000000100eb0000000000020001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYBLOB='\b\x00\x00', @ANYRES32, @ANYBLOB="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", @ANYBLOB="74b24e1f0ef01479f571f55b37d7089c077e74b1bd50a45834473f982e6fd1fd97f815af9ca38040c073a4e24e033248357bfb5ab67092f29f0b1a66e443cc9e9ef2a93a80607607e3231fc4077092a7af7f95cd0ac29c703cc271896016d7b31ca22f3b0b56e5fec2690ec778d14906d776e06d1e11235fee66cd66"], 0x8, 0x1)
r21 = socket(0xa, 0x3, 0x8)
r22 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000)
ioctl$sock_inet_SIOCSIFFLAGS(r21, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r22, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r23=>0xffffffffffffffff}}}, 0x20)
sendmsg$key(r21, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
r24 = gettid()
waitid(0x83b895581628fca4, r24, &(0x7f0000000040), 0x2, &(0x7f0000000480))
sendmsg$key(r21, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r23, @ANYRESDEC=r24]], 0xfffffffffffffe56}}, 0x20004850)
r25 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r26 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0)
r27 = dup2(r26, r25)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r27, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r28 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r28)
r29 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x101405)
writev(r29, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2)
ioctl$SG_GET_REQUEST_TABLE(r29, 0x227d, &(0x7f0000000780))
kcmp(r28, r24, 0x0, 0xffffffffffffffff, r29)
ptrace$setopts(0x4206, r28, 0x0, 0x0)
r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r31=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0x2}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r28, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r27, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r19, r20, 0x0, 0x1, &(0x7f0000000080)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r17, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r13, r16, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r12, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)='/dev/ptmx\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r10, r11, 0x0, 0x8, &(0x7f0000000100)='syz_tun\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r9, r8, 0x0, 0x5, &(0x7f0000000340)=',em1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r32=>r5, r7, 0x0, 0xd, &(0x7f0000000240)='/selinux/mls\x00', r31}, 0x30)
fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, <r33=>0x0})
rt_tgsigqueueinfo(r32, r33, 0x0, &(0x7f0000000300)={0x5, 0x10000})
write(r4, &(0x7f0000000340), 0x41395527)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001500)={0x10000}, 0x4)
setsockopt$inet6_tcp_buf(r2, 0x6, 0xe, &(0x7f0000000140)="1e5da9bc7793999e848025a58b324ebec78eb457fc22a9e91a841566ddc30961db08bd91ad5ea2a218f05f3fb06130c4093e900401dd01a04f3fd0af6bb6fd28b48b72da1eacd8692603b2498782d70f20177ea068104186eafb3993141dbff6b01ebca167692945705816bda6fced47f1e92eeca8bac413dc06c5da1b61cf2ba6be8142491c9231dc1bdeb25d4b32ffc985c8639f973474ddb8677c463877e38f49a9ae688751f291613491cfb6148c0e1f66a5f0208d5b2e798eb9711c51fbe4c5e0257e3310dafeaae347ce9e3e9696f32d9ca7d0", 0xd6)
pipe(&(0x7f0000000200)={<r34=>0xffffffffffffffff})
vmsplice(r34, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

23:37:33 executing program 0:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:33 executing program 1:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$P9_RVERSION(r1, &(0x7f0000000240)=ANY=[], 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, r2, 0x8)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
syz_open_dev$admmidi(&(0x7f00000014c0)='/dev/admmidi#\x00', 0xffffffff, 0x800080)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
r5 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setownex(r6, 0xf, &(0x7f0000000180)={0x0, r5})
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r8}, 0x10)
r9 = getpid()
sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r10 = getpgrp(0x0)
setpriority(0x0, r10, 0x0)
r11 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x1)
r12 = gettid()
process_vm_writev(r12, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/240, 0xf0}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/224, 0xe0}], 0x1, 0x0)
r13 = getpgid(0x0)
r14 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5)
r15 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1)
r16 = dup2(r15, r14)
writev(r16, &(0x7f0000000040)=[{&(0x7f00000002c0)='3', 0x1}], 0x1)
ppoll(&(0x7f0000000200)=[{r16}], 0x1, &(0x7f0000000280), 0x0, 0x0)
r17 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r18 = inotify_init1(0x0)
fcntl$setown(r18, 0x8, 0xffffffffffffffff)
fcntl$getownex(r18, 0x10, &(0x7f00000000c0)={0x0, <r19=>0x0})
r20 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r20, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="020000000100eb0000000000020001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYBLOB='\b\x00\x00', @ANYRES32, @ANYBLOB="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", @ANYBLOB="74b24e1f0ef01479f571f55b37d7089c077e74b1bd50a45834473f982e6fd1fd97f815af9ca38040c073a4e24e033248357bfb5ab67092f29f0b1a66e443cc9e9ef2a93a80607607e3231fc4077092a7af7f95cd0ac29c703cc271896016d7b31ca22f3b0b56e5fec2690ec778d14906d776e06d1e11235fee66cd66"], 0x8, 0x1)
r21 = socket(0xa, 0x3, 0x8)
r22 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000)
ioctl$sock_inet_SIOCSIFFLAGS(r21, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r22, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r23=>0xffffffffffffffff}}}, 0x20)
sendmsg$key(r21, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
r24 = gettid()
waitid(0x83b895581628fca4, r24, &(0x7f0000000040), 0x2, &(0x7f0000000480))
sendmsg$key(r21, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r23, @ANYRESDEC=r24]], 0xfffffffffffffe56}}, 0x20004850)
r25 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r26 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0)
r27 = dup2(r26, r25)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r27, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r28 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r28)
r29 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x101405)
writev(r29, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2)
ioctl$SG_GET_REQUEST_TABLE(r29, 0x227d, &(0x7f0000000780))
kcmp(r28, r24, 0x0, 0xffffffffffffffff, r29)
ptrace$setopts(0x4206, r28, 0x0, 0x0)
r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r31=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0x2}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r28, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r27, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r19, r20, 0x0, 0x1, &(0x7f0000000080)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r17, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r13, r16, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r12, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)='/dev/ptmx\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r10, r11, 0x0, 0x8, &(0x7f0000000100)='syz_tun\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r9, r8, 0x0, 0x5, &(0x7f0000000340)=',em1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r32=>r5, r7, 0x0, 0xd, &(0x7f0000000240)='/selinux/mls\x00', r31}, 0x30)
fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, <r33=>0x0})
rt_tgsigqueueinfo(r32, r33, 0x0, &(0x7f0000000300)={0x5, 0x10000})
write(r4, &(0x7f0000000340), 0x41395527)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001500)={0x10000}, 0x4)
pipe(&(0x7f0000000200)={<r34=>0xffffffffffffffff})
vmsplice(r34, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

23:37:33 executing program 2:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:33 executing program 3:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:33 executing program 0:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:33 executing program 5:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:33 executing program 2:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
socket(0x840000000002, 0x3, 0xff)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:34 executing program 3:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:34 executing program 5:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:34 executing program 2:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
socket(0x840000000002, 0x3, 0xff)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:34 executing program 0:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:34 executing program 4:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x8, r2, 0x8)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
syz_open_dev$admmidi(&(0x7f00000014c0)='/dev/admmidi#\x00', 0xffffffff, 0x800080)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
r5 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setownex(r6, 0xf, &(0x7f0000000180)={0x0, r5})
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r8}, 0x10)
r9 = getpid()
sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r10 = getpgrp(0x0)
setpriority(0x0, r10, 0x0)
r11 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x1)
r12 = gettid()
process_vm_writev(r12, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/240, 0xf0}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/224, 0xe0}], 0x1, 0x0)
r13 = getpgid(0x0)
r14 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5)
r15 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1)
r16 = dup2(r15, r14)
writev(r16, &(0x7f0000000040)=[{&(0x7f00000002c0)='3', 0x1}], 0x1)
ppoll(&(0x7f0000000200)=[{r16}], 0x1, &(0x7f0000000280), 0x0, 0x0)
r17 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r18 = inotify_init1(0x0)
fcntl$setown(r18, 0x8, 0xffffffffffffffff)
fcntl$getownex(r18, 0x10, &(0x7f00000000c0)={0x0, <r19=>0x0})
r20 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r20, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="020000000100eb0000000000020001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYBLOB='\b\x00\x00', @ANYRES32, @ANYBLOB="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", @ANYBLOB="74b24e1f0ef01479f571f55b37d7089c077e74b1bd50a45834473f982e6fd1fd97f815af9ca38040c073a4e24e033248357bfb5ab67092f29f0b1a66e443cc9e9ef2a93a80607607e3231fc4077092a7af7f95cd0ac29c703cc271896016d7b31ca22f3b0b56e5fec2690ec778d14906d776e06d1e11235fee66cd66"], 0x8, 0x1)
r21 = socket(0xa, 0x3, 0x8)
r22 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000)
ioctl$sock_inet_SIOCSIFFLAGS(r21, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r22, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r23=>0xffffffffffffffff}}}, 0x20)
sendmsg$key(r21, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
r24 = gettid()
waitid(0x83b895581628fca4, r24, &(0x7f0000000040), 0x2, &(0x7f0000000480))
sendmsg$key(r21, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r23, @ANYRESDEC=r24]], 0xfffffffffffffe56}}, 0x20004850)
r25 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r26 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0)
r27 = dup2(r26, r25)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r27, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r28 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r28)
r29 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x101405)
writev(r29, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2)
ioctl$SG_GET_REQUEST_TABLE(r29, 0x227d, &(0x7f0000000780))
kcmp(r28, r24, 0x0, 0xffffffffffffffff, r29)
ptrace$setopts(0x4206, r28, 0x0, 0x0)
r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r31=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0x2}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r28, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r27, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r19, r20, 0x0, 0x1, &(0x7f0000000080)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r17, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r13, r16, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r12, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)='/dev/ptmx\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r10, r11, 0x0, 0x8, &(0x7f0000000100)='syz_tun\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r9, r8, 0x0, 0x5, &(0x7f0000000340)=',em1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r32=>r5, r7, 0x0, 0xd, &(0x7f0000000240)='/selinux/mls\x00', r31}, 0x30)
fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, <r33=>0x0})
rt_tgsigqueueinfo(r32, r33, 0x0, &(0x7f0000000300)={0x5, 0x10000})
write(r4, &(0x7f0000000340), 0x41395527)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001500)={0x10000}, 0x4)
setsockopt$inet6_tcp_buf(r2, 0x6, 0xe, &(0x7f0000000140)="1e5da9bc7793999e848025a58b324ebec78eb457fc22a9e91a841566ddc30961db08bd91ad5ea2a218f05f3fb06130c4093e900401dd01a04f3fd0af6bb6fd28b48b72da1eacd8692603b2498782d70f20177ea068104186eafb3993141dbff6b01ebca167692945705816bda6fced47f1e92eeca8bac413dc06c5da1b61cf2ba6be8142491c9231dc1bdeb25d4b32ffc985c8639f973474ddb8677c463877e38f49a9ae688751f291613491cfb6148c0e1f66a5f0208d5b2e798eb9711c51fbe4c5e0257e3310dafeaae347ce9e3e9696f32d9ca7d0", 0xd6)
pipe(&(0x7f0000000200)={<r34=>0xffffffffffffffff})
vmsplice(r34, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

23:37:34 executing program 1:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$P9_RVERSION(r1, &(0x7f0000000240)=ANY=[], 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, r2, 0x8)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
syz_open_dev$admmidi(&(0x7f00000014c0)='/dev/admmidi#\x00', 0xffffffff, 0x800080)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
r5 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setownex(r6, 0xf, &(0x7f0000000180)={0x0, r5})
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r8}, 0x10)
r9 = getpid()
sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r10 = getpgrp(0x0)
setpriority(0x0, r10, 0x0)
r11 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x1)
r12 = gettid()
process_vm_writev(r12, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/240, 0xf0}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/224, 0xe0}], 0x1, 0x0)
r13 = getpgid(0x0)
r14 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5)
r15 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1)
r16 = dup2(r15, r14)
writev(r16, &(0x7f0000000040)=[{&(0x7f00000002c0)='3', 0x1}], 0x1)
ppoll(&(0x7f0000000200)=[{r16}], 0x1, &(0x7f0000000280), 0x0, 0x0)
r17 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r18 = inotify_init1(0x0)
fcntl$setown(r18, 0x8, 0xffffffffffffffff)
fcntl$getownex(r18, 0x10, &(0x7f00000000c0)={0x0, <r19=>0x0})
r20 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r20, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="020000000100eb0000000000020001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYBLOB='\b\x00\x00', @ANYRES32, @ANYBLOB="080005115951c076757a2164ca8343141a694359b9c301bf24d95441febf5a16ae429194cf41f9773a21df3fbefdfd920f68e5e58ca390181d9c686c6f0806797ac4b7731b7f6de976e4e0d345ac1f83f37848b5967ec0775d6b112c47c6e95551477839c728d326f78e5d0799b1c02c3418b1a48e41d54f698cc38b60a6a0375079bff305c0f0bbeddd3edfffcfdc456e464d8c1a7da7b7b2d8a43ac3491716431f09760a1563fe6d0296d3c466fe2c062668338b9185831dd35125bdd22378d3cf071a878b7a063b2d46a938629ac3291d146d87e0fe731694a7c32dbaabe14569f75cb0e55047f247d758bba0b8d668926655aad9aa6f2bd7", @ANYBLOB="74b24e1f0ef01479f571f55b37d7089c077e74b1bd50a45834473f982e6fd1fd97f815af9ca38040c073a4e24e033248357bfb5ab67092f29f0b1a66e443cc9e9ef2a93a80607607e3231fc4077092a7af7f95cd0ac29c703cc271896016d7b31ca22f3b0b56e5fec2690ec778d14906d776e06d1e11235fee66cd66"], 0x8, 0x1)
r21 = socket(0xa, 0x3, 0x8)
r22 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000)
ioctl$sock_inet_SIOCSIFFLAGS(r21, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r22, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r23=>0xffffffffffffffff}}}, 0x20)
sendmsg$key(r21, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
r24 = gettid()
waitid(0x83b895581628fca4, r24, &(0x7f0000000040), 0x2, &(0x7f0000000480))
sendmsg$key(r21, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r23, @ANYRESDEC=r24]], 0xfffffffffffffe56}}, 0x20004850)
r25 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r26 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0)
r27 = dup2(r26, r25)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r27, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r28 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r28)
r29 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x101405)
writev(r29, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2)
ioctl$SG_GET_REQUEST_TABLE(r29, 0x227d, &(0x7f0000000780))
kcmp(r28, r24, 0x0, 0xffffffffffffffff, r29)
ptrace$setopts(0x4206, r28, 0x0, 0x0)
r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r31=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0x2}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r28, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r27, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r19, r20, 0x0, 0x1, &(0x7f0000000080)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r17, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r13, r16, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r12, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)='/dev/ptmx\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r10, r11, 0x0, 0x8, &(0x7f0000000100)='syz_tun\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r9, r8, 0x0, 0x5, &(0x7f0000000340)=',em1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r32=>r5, r7, 0x0, 0xd, &(0x7f0000000240)='/selinux/mls\x00', r31}, 0x30)
fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, <r33=>0x0})
rt_tgsigqueueinfo(r32, r33, 0x0, &(0x7f0000000300)={0x5, 0x10000})
write(r4, &(0x7f0000000340), 0x41395527)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001500)={0x10000}, 0x4)
pipe(&(0x7f0000000200)={<r34=>0xffffffffffffffff})
vmsplice(r34, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

23:37:34 executing program 2:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
socket(0x840000000002, 0x3, 0xff)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:34 executing program 5:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:34 executing program 3:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:34 executing program 0:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:34 executing program 2:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:34 executing program 5:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:35 executing program 3:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:35 executing program 0:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:35 executing program 4:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x8, r2, 0x8)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
syz_open_dev$admmidi(&(0x7f00000014c0)='/dev/admmidi#\x00', 0xffffffff, 0x800080)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
r5 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setownex(r6, 0xf, &(0x7f0000000180)={0x0, r5})
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r8}, 0x10)
r9 = getpid()
sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r10 = getpgrp(0x0)
setpriority(0x0, r10, 0x0)
r11 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x1)
r12 = gettid()
process_vm_writev(r12, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/240, 0xf0}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/224, 0xe0}], 0x1, 0x0)
r13 = getpgid(0x0)
r14 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5)
r15 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1)
r16 = dup2(r15, r14)
writev(r16, &(0x7f0000000040)=[{&(0x7f00000002c0)='3', 0x1}], 0x1)
ppoll(&(0x7f0000000200)=[{r16}], 0x1, &(0x7f0000000280), 0x0, 0x0)
r17 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r18 = inotify_init1(0x0)
fcntl$setown(r18, 0x8, 0xffffffffffffffff)
fcntl$getownex(r18, 0x10, &(0x7f00000000c0)={0x0, <r19=>0x0})
r20 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r20, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="020000000100eb0000000000020001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYBLOB='\b\x00\x00', @ANYRES32, @ANYBLOB="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", @ANYBLOB="74b24e1f0ef01479f571f55b37d7089c077e74b1bd50a45834473f982e6fd1fd97f815af9ca38040c073a4e24e033248357bfb5ab67092f29f0b1a66e443cc9e9ef2a93a80607607e3231fc4077092a7af7f95cd0ac29c703cc271896016d7b31ca22f3b0b56e5fec2690ec778d14906d776e06d1e11235fee66cd668482429c"], 0x8, 0x1)
r21 = socket(0xa, 0x3, 0x8)
r22 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000)
ioctl$sock_inet_SIOCSIFFLAGS(r21, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r22, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r23=>0xffffffffffffffff}}}, 0x20)
sendmsg$key(r21, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
r24 = gettid()
waitid(0x83b895581628fca4, r24, &(0x7f0000000040), 0x2, &(0x7f0000000480))
sendmsg$key(r21, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r23, @ANYRESDEC=r24]], 0xfffffffffffffe56}}, 0x20004850)
r25 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r26 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0)
r27 = dup2(r26, r25)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r27, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r28 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r28)
r29 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x101405)
writev(r29, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2)
ioctl$SG_GET_REQUEST_TABLE(r29, 0x227d, &(0x7f0000000780))
kcmp(r28, r24, 0x0, 0xffffffffffffffff, r29)
ptrace$setopts(0x4206, r28, 0x0, 0x0)
r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r31=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0x2}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r28, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r27, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r19, r20, 0x0, 0x1, &(0x7f0000000080)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r17, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r13, r16, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r12, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)='/dev/ptmx\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r10, r11, 0x0, 0x8, &(0x7f0000000100)='syz_tun\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r9, r8, 0x0, 0x5, &(0x7f0000000340)=',em1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r32=>r5, r7, 0x0, 0xd, &(0x7f0000000240)='/selinux/mls\x00', r31}, 0x30)
fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, <r33=>0x0})
rt_tgsigqueueinfo(r32, r33, 0x0, &(0x7f0000000300)={0x5, 0x10000})
write(r4, &(0x7f0000000340), 0x41395527)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001500)={0x10000}, 0x4)
setsockopt$inet6_tcp_buf(r2, 0x6, 0xe, &(0x7f0000000140)="1e5da9bc7793999e848025a58b324ebec78eb457fc22a9e91a841566ddc30961db08bd91ad5ea2a218f05f3fb06130c4093e900401dd01a04f3fd0af6bb6fd28b48b72da1eacd8692603b2498782d70f20177ea068104186eafb3993141dbff6b01ebca167692945705816bda6fced47f1e92eeca8bac413dc06c5da1b61cf2ba6be8142491c9231dc1bdeb25d4b32ffc985c8639f973474ddb8677c463877e38f49a9ae688751f291613491cfb6148c0e1f66a5f0208d5b2e798eb9711c51fbe4c5e0257e3310dafeaae347ce9e3e9696f32d9ca7d0", 0xd6)
pipe(&(0x7f0000000200)={<r34=>0xffffffffffffffff})
vmsplice(r34, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

23:37:35 executing program 2:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:35 executing program 5:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:35 executing program 1:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$P9_RVERSION(r1, &(0x7f0000000240)=ANY=[], 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, r2, 0x8)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
syz_open_dev$admmidi(&(0x7f00000014c0)='/dev/admmidi#\x00', 0xffffffff, 0x800080)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
r5 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setownex(r6, 0xf, &(0x7f0000000180)={0x0, r5})
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r8}, 0x10)
r9 = getpid()
sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r10 = getpgrp(0x0)
setpriority(0x0, r10, 0x0)
r11 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x1)
r12 = gettid()
process_vm_writev(r12, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/240, 0xf0}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/224, 0xe0}], 0x1, 0x0)
r13 = getpgid(0x0)
r14 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5)
r15 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1)
r16 = dup2(r15, r14)
writev(r16, &(0x7f0000000040)=[{&(0x7f00000002c0)='3', 0x1}], 0x1)
ppoll(&(0x7f0000000200)=[{r16}], 0x1, &(0x7f0000000280), 0x0, 0x0)
r17 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r18 = inotify_init1(0x0)
fcntl$setown(r18, 0x8, 0xffffffffffffffff)
fcntl$getownex(r18, 0x10, &(0x7f00000000c0)={0x0, <r19=>0x0})
r20 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r20, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="020000000100eb0000000000020001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYBLOB='\b\x00\x00', @ANYRES32, @ANYBLOB="080005115951c076757a2164ca8343141a694359b9c301bf24d95441febf5a16ae429194cf41f9773a21df3fbefdfd920f68e5e58ca390181d9c686c6f0806797ac4b7731b7f6de976e4e0d345ac1f83f37848b5967ec0775d6b112c47c6e95551477839c728d326f78e5d0799b1c02c3418b1a48e41d54f698cc38b60a6a0375079bff305c0f0bbeddd3edfffcfdc456e464d8c1a7da7b7b2d8a43ac3491716431f09760a1563fe6d0296d3c466fe2c062668338b9185831dd35125bdd22378d3cf071a878b7a063b2d46a938629ac3291d146d87e0fe731694a7c32dbaabe14569f75cb0e55047f247d758bba0b8d668926655aad9aa6f2bd7", @ANYBLOB="74b24e1f0ef01479f571f55b37d7089c077e74b1bd50a45834473f982e6fd1fd97f815af9ca38040c073a4e24e033248357bfb5ab67092f29f0b1a66e443cc9e9ef2a93a80607607e3231fc4077092a7af7f95cd0ac29c703cc271896016d7b31ca22f3b0b56e5fec2690ec778d14906d776e06d1e11235fee66cd66"], 0x8, 0x1)
r21 = socket(0xa, 0x3, 0x8)
r22 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000)
ioctl$sock_inet_SIOCSIFFLAGS(r21, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r22, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r23=>0xffffffffffffffff}}}, 0x20)
sendmsg$key(r21, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
r24 = gettid()
waitid(0x83b895581628fca4, r24, &(0x7f0000000040), 0x2, &(0x7f0000000480))
sendmsg$key(r21, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r23, @ANYRESDEC=r24]], 0xfffffffffffffe56}}, 0x20004850)
r25 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r26 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0)
r27 = dup2(r26, r25)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r27, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r28 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r28)
r29 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x101405)
writev(r29, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2)
ioctl$SG_GET_REQUEST_TABLE(r29, 0x227d, &(0x7f0000000780))
kcmp(r28, r24, 0x0, 0xffffffffffffffff, r29)
ptrace$setopts(0x4206, r28, 0x0, 0x0)
r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r31=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0x2}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r28, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r27, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r19, r20, 0x0, 0x1, &(0x7f0000000080)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r17, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r13, r16, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r12, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)='/dev/ptmx\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r10, r11, 0x0, 0x8, &(0x7f0000000100)='syz_tun\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r9, r8, 0x0, 0x5, &(0x7f0000000340)=',em1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r32=>r5, r7, 0x0, 0xd, &(0x7f0000000240)='/selinux/mls\x00', r31}, 0x30)
fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, <r33=>0x0})
rt_tgsigqueueinfo(r32, r33, 0x0, &(0x7f0000000300)={0x5, 0x10000})
write(r4, &(0x7f0000000340), 0x41395527)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001500)={0x10000}, 0x4)
pipe(&(0x7f0000000200)={<r34=>0xffffffffffffffff})
vmsplice(r34, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

23:37:35 executing program 3:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:35 executing program 0:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:35 executing program 2:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:35 executing program 5:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:36 executing program 3:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:36 executing program 0:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:36 executing program 2:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r3, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:36 executing program 4:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x8, r2, 0x8)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
syz_open_dev$admmidi(&(0x7f00000014c0)='/dev/admmidi#\x00', 0xffffffff, 0x800080)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
r5 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setownex(r6, 0xf, &(0x7f0000000180)={0x0, r5})
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r8}, 0x10)
r9 = getpid()
sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r10 = getpgrp(0x0)
setpriority(0x0, r10, 0x0)
r11 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x1)
r12 = gettid()
process_vm_writev(r12, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/240, 0xf0}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/224, 0xe0}], 0x1, 0x0)
r13 = getpgid(0x0)
r14 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5)
r15 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1)
r16 = dup2(r15, r14)
writev(r16, &(0x7f0000000040)=[{&(0x7f00000002c0)='3', 0x1}], 0x1)
ppoll(&(0x7f0000000200)=[{r16}], 0x1, &(0x7f0000000280), 0x0, 0x0)
r17 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r18 = inotify_init1(0x0)
fcntl$setown(r18, 0x8, 0xffffffffffffffff)
fcntl$getownex(r18, 0x10, &(0x7f00000000c0)={0x0, <r19=>0x0})
r20 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r20, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="020000000100eb0000000000020001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYBLOB='\b\x00\x00', @ANYRES32, @ANYBLOB="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", @ANYBLOB="74b24e1f0ef01479f571f55b37d7089c077e74b1bd50a45834473f982e6fd1fd97f815af9ca38040c073a4e24e033248357bfb5ab67092f29f0b1a66e443cc9e9ef2a93a80607607e3231fc4077092a7af7f95cd0ac29c703cc271896016d7b31ca22f3b0b56e5fec2690ec778d14906d776e06d1e11235fee66cd668482429c"], 0x8, 0x1)
r21 = socket(0xa, 0x3, 0x8)
r22 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000)
ioctl$sock_inet_SIOCSIFFLAGS(r21, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r22, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r23=>0xffffffffffffffff}}}, 0x20)
sendmsg$key(r21, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
r24 = gettid()
waitid(0x83b895581628fca4, r24, &(0x7f0000000040), 0x2, &(0x7f0000000480))
sendmsg$key(r21, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r23, @ANYRESDEC=r24]], 0xfffffffffffffe56}}, 0x20004850)
r25 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r26 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0)
r27 = dup2(r26, r25)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r27, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r28 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r28)
r29 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x101405)
writev(r29, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2)
ioctl$SG_GET_REQUEST_TABLE(r29, 0x227d, &(0x7f0000000780))
kcmp(r28, r24, 0x0, 0xffffffffffffffff, r29)
ptrace$setopts(0x4206, r28, 0x0, 0x0)
r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r31=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0x2}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r28, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r27, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r19, r20, 0x0, 0x1, &(0x7f0000000080)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r17, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r13, r16, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r12, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)='/dev/ptmx\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r10, r11, 0x0, 0x8, &(0x7f0000000100)='syz_tun\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r9, r8, 0x0, 0x5, &(0x7f0000000340)=',em1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r32=>r5, r7, 0x0, 0xd, &(0x7f0000000240)='/selinux/mls\x00', r31}, 0x30)
fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, <r33=>0x0})
rt_tgsigqueueinfo(r32, r33, 0x0, &(0x7f0000000300)={0x5, 0x10000})
write(r4, &(0x7f0000000340), 0x41395527)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001500)={0x10000}, 0x4)
setsockopt$inet6_tcp_buf(r2, 0x6, 0xe, &(0x7f0000000140)="1e5da9bc7793999e848025a58b324ebec78eb457fc22a9e91a841566ddc30961db08bd91ad5ea2a218f05f3fb06130c4093e900401dd01a04f3fd0af6bb6fd28b48b72da1eacd8692603b2498782d70f20177ea068104186eafb3993141dbff6b01ebca167692945705816bda6fced47f1e92eeca8bac413dc06c5da1b61cf2ba6be8142491c9231dc1bdeb25d4b32ffc985c8639f973474ddb8677c463877e38f49a9ae688751f291613491cfb6148c0e1f66a5f0208d5b2e798eb9711c51fbe4c5e0257e3310dafeaae347ce9e3e9696f32d9ca7d0", 0xd6)
pipe(&(0x7f0000000200)={<r34=>0xffffffffffffffff})
vmsplice(r34, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

23:37:36 executing program 3:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:36 executing program 0:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:36 executing program 2:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r3, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:36 executing program 1:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$P9_RVERSION(r1, &(0x7f0000000240)=ANY=[], 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, r2, 0x8)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
syz_open_dev$admmidi(&(0x7f00000014c0)='/dev/admmidi#\x00', 0xffffffff, 0x800080)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
r5 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setownex(r6, 0xf, &(0x7f0000000180)={0x0, r5})
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r8}, 0x10)
r9 = getpid()
sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r10 = getpgrp(0x0)
setpriority(0x0, r10, 0x0)
r11 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x1)
r12 = gettid()
process_vm_writev(r12, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/240, 0xf0}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/224, 0xe0}], 0x1, 0x0)
r13 = getpgid(0x0)
r14 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5)
r15 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1)
r16 = dup2(r15, r14)
writev(r16, &(0x7f0000000040)=[{&(0x7f00000002c0)='3', 0x1}], 0x1)
ppoll(&(0x7f0000000200)=[{r16}], 0x1, &(0x7f0000000280), 0x0, 0x0)
r17 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r18 = inotify_init1(0x0)
fcntl$setown(r18, 0x8, 0xffffffffffffffff)
fcntl$getownex(r18, 0x10, &(0x7f00000000c0)={0x0, <r19=>0x0})
r20 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r20, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="020000000100eb0000000000020001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYBLOB='\b\x00\x00', @ANYRES32, @ANYBLOB="080005115951c076757a2164ca8343141a694359b9c301bf24d95441febf5a16ae429194cf41f9773a21df3fbefdfd920f68e5e58ca390181d9c686c6f0806797ac4b7731b7f6de976e4e0d345ac1f83f37848b5967ec0775d6b112c47c6e95551477839c728d326f78e5d0799b1c02c3418b1a48e41d54f698cc38b60a6a0375079bff305c0f0bbeddd3edfffcfdc456e464d8c1a7da7b7b2d8a43ac3491716431f09760a1563fe6d0296d3c466fe2c062668338b9185831dd35125bdd22378d3cf071a878b7a063b2d46a938629ac3291d146d87e0fe731694a7c32dbaabe14569f75cb0e55047f247d758bba0b8d668926655aad9aa6f2bd7", @ANYBLOB="74b24e1f0ef01479f571f55b37d7089c077e74b1bd50a45834473f982e6fd1fd97f815af9ca38040c073a4e24e033248357bfb5ab67092f29f0b1a66e443cc9e9ef2a93a80607607e3231fc4077092a7af7f95cd0ac29c703cc271896016d7b31ca22f3b0b56e5fec2690ec778d14906d776e06d1e11235fee66cd668482429c"], 0x8, 0x1)
r21 = socket(0xa, 0x3, 0x8)
r22 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000)
ioctl$sock_inet_SIOCSIFFLAGS(r21, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r22, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r23=>0xffffffffffffffff}}}, 0x20)
sendmsg$key(r21, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
r24 = gettid()
waitid(0x83b895581628fca4, r24, &(0x7f0000000040), 0x2, &(0x7f0000000480))
sendmsg$key(r21, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r23, @ANYRESDEC=r24]], 0xfffffffffffffe56}}, 0x20004850)
r25 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r26 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0)
r27 = dup2(r26, r25)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r27, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r28 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r28)
r29 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x101405)
writev(r29, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2)
ioctl$SG_GET_REQUEST_TABLE(r29, 0x227d, &(0x7f0000000780))
kcmp(r28, r24, 0x0, 0xffffffffffffffff, r29)
ptrace$setopts(0x4206, r28, 0x0, 0x0)
r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r31=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0x2}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r28, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r27, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r19, r20, 0x0, 0x1, &(0x7f0000000080)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r17, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r13, r16, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r12, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)='/dev/ptmx\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r10, r11, 0x0, 0x8, &(0x7f0000000100)='syz_tun\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r9, r8, 0x0, 0x5, &(0x7f0000000340)=',em1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r32=>r5, r7, 0x0, 0xd, &(0x7f0000000240)='/selinux/mls\x00', r31}, 0x30)
fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, <r33=>0x0})
rt_tgsigqueueinfo(r32, r33, 0x0, &(0x7f0000000300)={0x5, 0x10000})
write(r4, &(0x7f0000000340), 0x41395527)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001500)={0x10000}, 0x4)
pipe(&(0x7f0000000200)={<r34=>0xffffffffffffffff})
vmsplice(r34, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

23:37:36 executing program 5:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:36 executing program 2:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r3, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:36 executing program 3:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:36 executing program 0:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:37 executing program 5:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:37 executing program 2:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:37 executing program 3:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r3, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:37 executing program 4:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x8, r2, 0x8)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
syz_open_dev$admmidi(&(0x7f00000014c0)='/dev/admmidi#\x00', 0xffffffff, 0x800080)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
r5 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setownex(r6, 0xf, &(0x7f0000000180)={0x0, r5})
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r8}, 0x10)
r9 = getpid()
sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r10 = getpgrp(0x0)
setpriority(0x0, r10, 0x0)
r11 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x1)
r12 = gettid()
process_vm_writev(r12, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/240, 0xf0}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/224, 0xe0}], 0x1, 0x0)
r13 = getpgid(0x0)
r14 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5)
r15 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1)
r16 = dup2(r15, r14)
writev(r16, &(0x7f0000000040)=[{&(0x7f00000002c0)='3', 0x1}], 0x1)
ppoll(&(0x7f0000000200)=[{r16}], 0x1, &(0x7f0000000280), 0x0, 0x0)
r17 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r18 = inotify_init1(0x0)
fcntl$setown(r18, 0x8, 0xffffffffffffffff)
fcntl$getownex(r18, 0x10, &(0x7f00000000c0)={0x0, <r19=>0x0})
r20 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r20, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="020000000100eb0000000000020001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYBLOB='\b\x00\x00', @ANYRES32, @ANYBLOB="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", @ANYBLOB="74b24e1f0ef01479f571f55b37d7089c077e74b1bd50a45834473f982e6fd1fd97f815af9ca38040c073a4e24e033248357bfb5ab67092f29f0b1a66e443cc9e9ef2a93a80607607e3231fc4077092a7af7f95cd0ac29c703cc271896016d7b31ca22f3b0b56e5fec2690ec778d14906d776e06d1e11235fee66cd668482429c"], 0x8, 0x1)
r21 = socket(0xa, 0x3, 0x8)
r22 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000)
ioctl$sock_inet_SIOCSIFFLAGS(r21, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r22, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r23=>0xffffffffffffffff}}}, 0x20)
sendmsg$key(r21, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
r24 = gettid()
waitid(0x83b895581628fca4, r24, &(0x7f0000000040), 0x2, &(0x7f0000000480))
sendmsg$key(r21, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r23, @ANYRESDEC=r24]], 0xfffffffffffffe56}}, 0x20004850)
r25 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r26 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0)
r27 = dup2(r26, r25)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r27, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r28 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r28)
r29 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x101405)
writev(r29, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2)
ioctl$SG_GET_REQUEST_TABLE(r29, 0x227d, &(0x7f0000000780))
kcmp(r28, r24, 0x0, 0xffffffffffffffff, r29)
ptrace$setopts(0x4206, r28, 0x0, 0x0)
r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r31=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0x2}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r28, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r27, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r19, r20, 0x0, 0x1, &(0x7f0000000080)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r17, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r13, r16, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r12, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)='/dev/ptmx\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r10, r11, 0x0, 0x8, &(0x7f0000000100)='syz_tun\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r9, r8, 0x0, 0x5, &(0x7f0000000340)=',em1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r32=>r5, r7, 0x0, 0xd, &(0x7f0000000240)='/selinux/mls\x00', r31}, 0x30)
fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, <r33=>0x0})
rt_tgsigqueueinfo(r32, r33, 0x0, &(0x7f0000000300)={0x5, 0x10000})
write(r4, &(0x7f0000000340), 0x41395527)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001500)={0x10000}, 0x4)
setsockopt$inet6_tcp_buf(r2, 0x6, 0xe, &(0x7f0000000140)="1e5da9bc7793999e848025a58b324ebec78eb457fc22a9e91a841566ddc30961db08bd91ad5ea2a218f05f3fb06130c4093e900401dd01a04f3fd0af6bb6fd28b48b72da1eacd8692603b2498782d70f20177ea068104186eafb3993141dbff6b01ebca167692945705816bda6fced47f1e92eeca8bac413dc06c5da1b61cf2ba6be8142491c9231dc1bdeb25d4b32ffc985c8639f973474ddb8677c463877e38f49a9ae688751f291613491cfb6148c0e1f66a5f0208d5b2e798eb9711c51fbe4c5e0257e3310dafeaae347ce9e3e9696f32d9ca7d0", 0xd6)
pipe(&(0x7f0000000200)={<r34=>0xffffffffffffffff})
vmsplice(r34, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

23:37:37 executing program 0:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:37 executing program 3:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:37 executing program 5:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:37 executing program 1:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$P9_RVERSION(r1, &(0x7f0000000240)=ANY=[], 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, r2, 0x8)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
syz_open_dev$admmidi(&(0x7f00000014c0)='/dev/admmidi#\x00', 0xffffffff, 0x800080)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
r5 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setownex(r6, 0xf, &(0x7f0000000180)={0x0, r5})
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r8}, 0x10)
r9 = getpid()
sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r10 = getpgrp(0x0)
setpriority(0x0, r10, 0x0)
r11 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x1)
r12 = gettid()
process_vm_writev(r12, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/240, 0xf0}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/224, 0xe0}], 0x1, 0x0)
r13 = getpgid(0x0)
r14 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5)
r15 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1)
r16 = dup2(r15, r14)
writev(r16, &(0x7f0000000040)=[{&(0x7f00000002c0)='3', 0x1}], 0x1)
ppoll(&(0x7f0000000200)=[{r16}], 0x1, &(0x7f0000000280), 0x0, 0x0)
r17 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r18 = inotify_init1(0x0)
fcntl$setown(r18, 0x8, 0xffffffffffffffff)
fcntl$getownex(r18, 0x10, &(0x7f00000000c0)={0x0, <r19=>0x0})
r20 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r20, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="020000000100eb0000000000020001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYBLOB='\b\x00\x00', @ANYRES32, @ANYBLOB="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", @ANYBLOB="74b24e1f0ef01479f571f55b37d7089c077e74b1bd50a45834473f982e6fd1fd97f815af9ca38040c073a4e24e033248357bfb5ab67092f29f0b1a66e443cc9e9ef2a93a80607607e3231fc4077092a7af7f95cd0ac29c703cc271896016d7b31ca22f3b0b56e5fec2690ec778d14906d776e06d1e11235fee66cd668482429c"], 0x8, 0x1)
r21 = socket(0xa, 0x3, 0x8)
r22 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000)
ioctl$sock_inet_SIOCSIFFLAGS(r21, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r22, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r23=>0xffffffffffffffff}}}, 0x20)
sendmsg$key(r21, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
r24 = gettid()
waitid(0x83b895581628fca4, r24, &(0x7f0000000040), 0x2, &(0x7f0000000480))
sendmsg$key(r21, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r23, @ANYRESDEC=r24]], 0xfffffffffffffe56}}, 0x20004850)
r25 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r26 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0)
r27 = dup2(r26, r25)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r27, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r28 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r28)
r29 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x101405)
writev(r29, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2)
ioctl$SG_GET_REQUEST_TABLE(r29, 0x227d, &(0x7f0000000780))
kcmp(r28, r24, 0x0, 0xffffffffffffffff, r29)
ptrace$setopts(0x4206, r28, 0x0, 0x0)
r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r31=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0x2}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r28, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r27, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r19, r20, 0x0, 0x1, &(0x7f0000000080)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r17, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r13, r16, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r12, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)='/dev/ptmx\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r10, r11, 0x0, 0x8, &(0x7f0000000100)='syz_tun\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r9, r8, 0x0, 0x5, &(0x7f0000000340)=',em1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r32=>r5, r7, 0x0, 0xd, &(0x7f0000000240)='/selinux/mls\x00', r31}, 0x30)
fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, <r33=>0x0})
rt_tgsigqueueinfo(r32, r33, 0x0, &(0x7f0000000300)={0x5, 0x10000})
write(r4, &(0x7f0000000340), 0x41395527)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001500)={0x10000}, 0x4)
pipe(&(0x7f0000000200)={<r34=>0xffffffffffffffff})
vmsplice(r34, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

23:37:37 executing program 2:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:37 executing program 3:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:37 executing program 0:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:37 executing program 5:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:38 executing program 2:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:38 executing program 3:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:38 executing program 0:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:38 executing program 5:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:38 executing program 2:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:38 executing program 4:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x8, r2, 0x8)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
syz_open_dev$admmidi(&(0x7f00000014c0)='/dev/admmidi#\x00', 0xffffffff, 0x800080)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
r5 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setownex(r6, 0xf, &(0x7f0000000180)={0x0, r5})
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r8}, 0x10)
r9 = getpid()
sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r10 = getpgrp(0x0)
setpriority(0x0, r10, 0x0)
r11 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x1)
r12 = gettid()
process_vm_writev(r12, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/240, 0xf0}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/224, 0xe0}], 0x1, 0x0)
r13 = getpgid(0x0)
r14 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5)
r15 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1)
r16 = dup2(r15, r14)
writev(r16, &(0x7f0000000040)=[{&(0x7f00000002c0)='3', 0x1}], 0x1)
ppoll(&(0x7f0000000200)=[{r16}], 0x1, &(0x7f0000000280), 0x0, 0x0)
r17 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r18 = inotify_init1(0x0)
fcntl$setown(r18, 0x8, 0xffffffffffffffff)
fcntl$getownex(r18, 0x10, &(0x7f00000000c0)={0x0, <r19=>0x0})
r20 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r20, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="020000000100eb0000000000020001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYBLOB='\b\x00\x00', @ANYRES32, @ANYBLOB="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", @ANYBLOB="74b24e1f0ef01479f571f55b37d7089c077e74b1bd50a45834473f982e6fd1fd97f815af9ca38040c073a4e24e033248357bfb5ab67092f29f0b1a66e443cc9e9ef2a93a80607607e3231fc4077092a7af7f95cd0ac29c703cc271896016d7b31ca22f3b0b56e5fec2690ec778d14906d776e06d1e11235fee66cd668482429cbe84"], 0x8, 0x1)
r21 = socket(0xa, 0x3, 0x8)
r22 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000)
ioctl$sock_inet_SIOCSIFFLAGS(r21, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r22, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r23=>0xffffffffffffffff}}}, 0x20)
sendmsg$key(r21, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
r24 = gettid()
waitid(0x83b895581628fca4, r24, &(0x7f0000000040), 0x2, &(0x7f0000000480))
sendmsg$key(r21, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r23, @ANYRESDEC=r24]], 0xfffffffffffffe56}}, 0x20004850)
r25 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r26 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0)
r27 = dup2(r26, r25)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r27, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r28 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r28)
r29 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x101405)
writev(r29, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2)
ioctl$SG_GET_REQUEST_TABLE(r29, 0x227d, &(0x7f0000000780))
kcmp(r28, r24, 0x0, 0xffffffffffffffff, r29)
ptrace$setopts(0x4206, r28, 0x0, 0x0)
r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r31=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0x2}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r28, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r27, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r19, r20, 0x0, 0x1, &(0x7f0000000080)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r17, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r13, r16, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r12, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)='/dev/ptmx\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r10, r11, 0x0, 0x8, &(0x7f0000000100)='syz_tun\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r9, r8, 0x0, 0x5, &(0x7f0000000340)=',em1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r32=>r5, r7, 0x0, 0xd, &(0x7f0000000240)='/selinux/mls\x00', r31}, 0x30)
fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, <r33=>0x0})
rt_tgsigqueueinfo(r32, r33, 0x0, &(0x7f0000000300)={0x5, 0x10000})
write(r4, &(0x7f0000000340), 0x41395527)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001500)={0x10000}, 0x4)
setsockopt$inet6_tcp_buf(r2, 0x6, 0xe, &(0x7f0000000140)="1e5da9bc7793999e848025a58b324ebec78eb457fc22a9e91a841566ddc30961db08bd91ad5ea2a218f05f3fb06130c4093e900401dd01a04f3fd0af6bb6fd28b48b72da1eacd8692603b2498782d70f20177ea068104186eafb3993141dbff6b01ebca167692945705816bda6fced47f1e92eeca8bac413dc06c5da1b61cf2ba6be8142491c9231dc1bdeb25d4b32ffc985c8639f973474ddb8677c463877e38f49a9ae688751f291613491cfb6148c0e1f66a5f0208d5b2e798eb9711c51fbe4c5e0257e3310dafeaae347ce9e3e9696f32d9ca7d0", 0xd6)
pipe(&(0x7f0000000200)={<r34=>0xffffffffffffffff})
vmsplice(r34, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

23:37:38 executing program 3:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:38 executing program 1:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$P9_RVERSION(r1, &(0x7f0000000240)=ANY=[], 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, r2, 0x8)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
syz_open_dev$admmidi(&(0x7f00000014c0)='/dev/admmidi#\x00', 0xffffffff, 0x800080)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
r5 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setownex(r6, 0xf, &(0x7f0000000180)={0x0, r5})
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r8}, 0x10)
r9 = getpid()
sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r10 = getpgrp(0x0)
setpriority(0x0, r10, 0x0)
r11 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x1)
r12 = gettid()
process_vm_writev(r12, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/240, 0xf0}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/224, 0xe0}], 0x1, 0x0)
r13 = getpgid(0x0)
r14 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5)
r15 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1)
r16 = dup2(r15, r14)
writev(r16, &(0x7f0000000040)=[{&(0x7f00000002c0)='3', 0x1}], 0x1)
ppoll(&(0x7f0000000200)=[{r16}], 0x1, &(0x7f0000000280), 0x0, 0x0)
r17 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r18 = inotify_init1(0x0)
fcntl$setown(r18, 0x8, 0xffffffffffffffff)
fcntl$getownex(r18, 0x10, &(0x7f00000000c0)={0x0, <r19=>0x0})
r20 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r20, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="020000000100eb0000000000020001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYBLOB='\b\x00\x00', @ANYRES32, @ANYBLOB="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", @ANYBLOB="74b24e1f0ef01479f571f55b37d7089c077e74b1bd50a45834473f982e6fd1fd97f815af9ca38040c073a4e24e033248357bfb5ab67092f29f0b1a66e443cc9e9ef2a93a80607607e3231fc4077092a7af7f95cd0ac29c703cc271896016d7b31ca22f3b0b56e5fec2690ec778d14906d776e06d1e11235fee66cd668482429c"], 0x8, 0x1)
r21 = socket(0xa, 0x3, 0x8)
r22 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000)
ioctl$sock_inet_SIOCSIFFLAGS(r21, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r22, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r23=>0xffffffffffffffff}}}, 0x20)
sendmsg$key(r21, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
r24 = gettid()
waitid(0x83b895581628fca4, r24, &(0x7f0000000040), 0x2, &(0x7f0000000480))
sendmsg$key(r21, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r23, @ANYRESDEC=r24]], 0xfffffffffffffe56}}, 0x20004850)
r25 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r26 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0)
r27 = dup2(r26, r25)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r27, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r28 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r28)
r29 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x101405)
writev(r29, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2)
ioctl$SG_GET_REQUEST_TABLE(r29, 0x227d, &(0x7f0000000780))
kcmp(r28, r24, 0x0, 0xffffffffffffffff, r29)
ptrace$setopts(0x4206, r28, 0x0, 0x0)
r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r31=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0x2}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r28, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r27, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r19, r20, 0x0, 0x1, &(0x7f0000000080)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r17, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r13, r16, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r12, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)='/dev/ptmx\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r10, r11, 0x0, 0x8, &(0x7f0000000100)='syz_tun\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r9, r8, 0x0, 0x5, &(0x7f0000000340)=',em1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r32=>r5, r7, 0x0, 0xd, &(0x7f0000000240)='/selinux/mls\x00', r31}, 0x30)
fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, <r33=>0x0})
rt_tgsigqueueinfo(r32, r33, 0x0, &(0x7f0000000300)={0x5, 0x10000})
write(r4, &(0x7f0000000340), 0x41395527)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001500)={0x10000}, 0x4)
pipe(&(0x7f0000000200)={<r34=>0xffffffffffffffff})
vmsplice(r34, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

23:37:38 executing program 0:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:38 executing program 2:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:38 executing program 5:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:38 executing program 3:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:39 executing program 5:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:39 executing program 0:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:39 executing program 4:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x8, r2, 0x8)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
syz_open_dev$admmidi(&(0x7f00000014c0)='/dev/admmidi#\x00', 0xffffffff, 0x800080)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
r5 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setownex(r6, 0xf, &(0x7f0000000180)={0x0, r5})
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r8}, 0x10)
r9 = getpid()
sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r10 = getpgrp(0x0)
setpriority(0x0, r10, 0x0)
r11 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x1)
r12 = gettid()
process_vm_writev(r12, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/240, 0xf0}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/224, 0xe0}], 0x1, 0x0)
r13 = getpgid(0x0)
r14 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5)
r15 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1)
r16 = dup2(r15, r14)
writev(r16, &(0x7f0000000040)=[{&(0x7f00000002c0)='3', 0x1}], 0x1)
ppoll(&(0x7f0000000200)=[{r16}], 0x1, &(0x7f0000000280), 0x0, 0x0)
r17 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r18 = inotify_init1(0x0)
fcntl$setown(r18, 0x8, 0xffffffffffffffff)
fcntl$getownex(r18, 0x10, &(0x7f00000000c0)={0x0, <r19=>0x0})
r20 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r20, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="020000000100eb0000000000020001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYBLOB='\b\x00\x00', @ANYRES32, @ANYBLOB="080005115951c076757a2164ca8343141a694359b9c301bf24d95441febf5a16ae429194cf41f9773a21df3fbefdfd920f68e5e58ca390181d9c686c6f0806797ac4b7731b7f6de976e4e0d345ac1f83f37848b5967ec0775d6b112c47c6e95551477839c728d326f78e5d0799b1c02c3418b1a48e41d54f698cc38b60a6a0375079bff305c0f0bbeddd3edfffcfdc456e464d8c1a7da7b7b2d8a43ac3491716431f09760a1563fe6d0296d3c466fe2c062668338b9185831dd35125bdd22378d3cf071a878b7a063b2d46a938629ac3291d146d87e0fe731694a7c32dbaabe14569f75cb0e55047f247d758bba0b8d668926655aad9aa6f2bd7", @ANYBLOB="74b24e1f0ef01479f571f55b37d7089c077e74b1bd50a45834473f982e6fd1fd97f815af9ca38040c073a4e24e033248357bfb5ab67092f29f0b1a66e443cc9e9ef2a93a80607607e3231fc4077092a7af7f95cd0ac29c703cc271896016d7b31ca22f3b0b56e5fec2690ec778d14906d776e06d1e11235fee66cd668482429cbe84"], 0x8, 0x1)
r21 = socket(0xa, 0x3, 0x8)
r22 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000)
ioctl$sock_inet_SIOCSIFFLAGS(r21, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r22, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r23=>0xffffffffffffffff}}}, 0x20)
sendmsg$key(r21, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
r24 = gettid()
waitid(0x83b895581628fca4, r24, &(0x7f0000000040), 0x2, &(0x7f0000000480))
sendmsg$key(r21, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r23, @ANYRESDEC=r24]], 0xfffffffffffffe56}}, 0x20004850)
r25 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r26 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0)
r27 = dup2(r26, r25)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r27, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r28 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r28)
r29 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x101405)
writev(r29, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2)
ioctl$SG_GET_REQUEST_TABLE(r29, 0x227d, &(0x7f0000000780))
kcmp(r28, r24, 0x0, 0xffffffffffffffff, r29)
ptrace$setopts(0x4206, r28, 0x0, 0x0)
r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r31=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0x2}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r28, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r27, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r19, r20, 0x0, 0x1, &(0x7f0000000080)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r17, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r13, r16, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r12, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)='/dev/ptmx\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r10, r11, 0x0, 0x8, &(0x7f0000000100)='syz_tun\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r9, r8, 0x0, 0x5, &(0x7f0000000340)=',em1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r32=>r5, r7, 0x0, 0xd, &(0x7f0000000240)='/selinux/mls\x00', r31}, 0x30)
fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, <r33=>0x0})
rt_tgsigqueueinfo(r32, r33, 0x0, &(0x7f0000000300)={0x5, 0x10000})
write(r4, &(0x7f0000000340), 0x41395527)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001500)={0x10000}, 0x4)
setsockopt$inet6_tcp_buf(r2, 0x6, 0xe, &(0x7f0000000140)="1e5da9bc7793999e848025a58b324ebec78eb457fc22a9e91a841566ddc30961db08bd91ad5ea2a218f05f3fb06130c4093e900401dd01a04f3fd0af6bb6fd28b48b72da1eacd8692603b2498782d70f20177ea068104186eafb3993141dbff6b01ebca167692945705816bda6fced47f1e92eeca8bac413dc06c5da1b61cf2ba6be8142491c9231dc1bdeb25d4b32ffc985c8639f973474ddb8677c463877e38f49a9ae688751f291613491cfb6148c0e1f66a5f0208d5b2e798eb9711c51fbe4c5e0257e3310dafeaae347ce9e3e9696f32d9ca7d0", 0xd6)
pipe(&(0x7f0000000200)={<r34=>0xffffffffffffffff})
vmsplice(r34, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

23:37:39 executing program 2:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:39 executing program 3:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:39 executing program 0:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:39 executing program 5:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:39 executing program 1:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$P9_RVERSION(r1, &(0x7f0000000240)=ANY=[], 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, r2, 0x8)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
syz_open_dev$admmidi(&(0x7f00000014c0)='/dev/admmidi#\x00', 0xffffffff, 0x800080)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
r5 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setownex(r6, 0xf, &(0x7f0000000180)={0x0, r5})
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r8}, 0x10)
r9 = getpid()
sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r10 = getpgrp(0x0)
setpriority(0x0, r10, 0x0)
r11 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x1)
r12 = gettid()
process_vm_writev(r12, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/240, 0xf0}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/224, 0xe0}], 0x1, 0x0)
r13 = getpgid(0x0)
r14 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5)
r15 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1)
r16 = dup2(r15, r14)
writev(r16, &(0x7f0000000040)=[{&(0x7f00000002c0)='3', 0x1}], 0x1)
ppoll(&(0x7f0000000200)=[{r16}], 0x1, &(0x7f0000000280), 0x0, 0x0)
r17 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r18 = inotify_init1(0x0)
fcntl$setown(r18, 0x8, 0xffffffffffffffff)
fcntl$getownex(r18, 0x10, &(0x7f00000000c0)={0x0, <r19=>0x0})
r20 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r20, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="020000000100eb0000000000020001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYBLOB='\b\x00\x00', @ANYRES32, @ANYBLOB="080005115951c076757a2164ca8343141a694359b9c301bf24d95441febf5a16ae429194cf41f9773a21df3fbefdfd920f68e5e58ca390181d9c686c6f0806797ac4b7731b7f6de976e4e0d345ac1f83f37848b5967ec0775d6b112c47c6e95551477839c728d326f78e5d0799b1c02c3418b1a48e41d54f698cc38b60a6a0375079bff305c0f0bbeddd3edfffcfdc456e464d8c1a7da7b7b2d8a43ac3491716431f09760a1563fe6d0296d3c466fe2c062668338b9185831dd35125bdd22378d3cf071a878b7a063b2d46a938629ac3291d146d87e0fe731694a7c32dbaabe14569f75cb0e55047f247d758bba0b8d668926655aad9aa6f2bd7", @ANYBLOB="74b24e1f0ef01479f571f55b37d7089c077e74b1bd50a45834473f982e6fd1fd97f815af9ca38040c073a4e24e033248357bfb5ab67092f29f0b1a66e443cc9e9ef2a93a80607607e3231fc4077092a7af7f95cd0ac29c703cc271896016d7b31ca22f3b0b56e5fec2690ec778d14906d776e06d1e11235fee66cd668482429cbe84"], 0x8, 0x1)
r21 = socket(0xa, 0x3, 0x8)
r22 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000)
ioctl$sock_inet_SIOCSIFFLAGS(r21, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r22, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r23=>0xffffffffffffffff}}}, 0x20)
sendmsg$key(r21, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
r24 = gettid()
waitid(0x83b895581628fca4, r24, &(0x7f0000000040), 0x2, &(0x7f0000000480))
sendmsg$key(r21, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r23, @ANYRESDEC=r24]], 0xfffffffffffffe56}}, 0x20004850)
r25 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r26 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0)
r27 = dup2(r26, r25)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r27, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r28 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r28)
r29 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x101405)
writev(r29, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2)
ioctl$SG_GET_REQUEST_TABLE(r29, 0x227d, &(0x7f0000000780))
kcmp(r28, r24, 0x0, 0xffffffffffffffff, r29)
ptrace$setopts(0x4206, r28, 0x0, 0x0)
r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r31=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0x2}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r28, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r27, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r19, r20, 0x0, 0x1, &(0x7f0000000080)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r17, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r13, r16, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r12, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)='/dev/ptmx\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r10, r11, 0x0, 0x8, &(0x7f0000000100)='syz_tun\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r9, r8, 0x0, 0x5, &(0x7f0000000340)=',em1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r32=>r5, r7, 0x0, 0xd, &(0x7f0000000240)='/selinux/mls\x00', r31}, 0x30)
fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, <r33=>0x0})
rt_tgsigqueueinfo(r32, r33, 0x0, &(0x7f0000000300)={0x5, 0x10000})
write(r4, &(0x7f0000000340), 0x41395527)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001500)={0x10000}, 0x4)
pipe(&(0x7f0000000200)={<r34=>0xffffffffffffffff})
vmsplice(r34, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

23:37:39 executing program 2:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:39 executing program 3:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:39 executing program 0:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:39 executing program 5:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:40 executing program 2:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:40 executing program 3:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:40 executing program 4:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x8, r2, 0x8)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
syz_open_dev$admmidi(&(0x7f00000014c0)='/dev/admmidi#\x00', 0xffffffff, 0x800080)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
r5 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setownex(r6, 0xf, &(0x7f0000000180)={0x0, r5})
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r8}, 0x10)
r9 = getpid()
sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r10 = getpgrp(0x0)
setpriority(0x0, r10, 0x0)
r11 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x1)
r12 = gettid()
process_vm_writev(r12, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/240, 0xf0}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/224, 0xe0}], 0x1, 0x0)
r13 = getpgid(0x0)
r14 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5)
r15 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1)
r16 = dup2(r15, r14)
writev(r16, &(0x7f0000000040)=[{&(0x7f00000002c0)='3', 0x1}], 0x1)
ppoll(&(0x7f0000000200)=[{r16}], 0x1, &(0x7f0000000280), 0x0, 0x0)
r17 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r18 = inotify_init1(0x0)
fcntl$setown(r18, 0x8, 0xffffffffffffffff)
fcntl$getownex(r18, 0x10, &(0x7f00000000c0)={0x0, <r19=>0x0})
r20 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r20, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="020000000100eb0000000000020001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYBLOB='\b\x00\x00', @ANYRES32, @ANYBLOB="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", @ANYBLOB="74b24e1f0ef01479f571f55b37d7089c077e74b1bd50a45834473f982e6fd1fd97f815af9ca38040c073a4e24e033248357bfb5ab67092f29f0b1a66e443cc9e9ef2a93a80607607e3231fc4077092a7af7f95cd0ac29c703cc271896016d7b31ca22f3b0b56e5fec2690ec778d14906d776e06d1e11235fee66cd668482429cbe84"], 0x8, 0x1)
r21 = socket(0xa, 0x3, 0x8)
r22 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000)
ioctl$sock_inet_SIOCSIFFLAGS(r21, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r22, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r23=>0xffffffffffffffff}}}, 0x20)
sendmsg$key(r21, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
r24 = gettid()
waitid(0x83b895581628fca4, r24, &(0x7f0000000040), 0x2, &(0x7f0000000480))
sendmsg$key(r21, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r23, @ANYRESDEC=r24]], 0xfffffffffffffe56}}, 0x20004850)
r25 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r26 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0)
r27 = dup2(r26, r25)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r27, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r28 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r28)
r29 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x101405)
writev(r29, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2)
ioctl$SG_GET_REQUEST_TABLE(r29, 0x227d, &(0x7f0000000780))
kcmp(r28, r24, 0x0, 0xffffffffffffffff, r29)
ptrace$setopts(0x4206, r28, 0x0, 0x0)
r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r31=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0x2}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r28, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r27, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r19, r20, 0x0, 0x1, &(0x7f0000000080)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r17, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r13, r16, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r12, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)='/dev/ptmx\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r10, r11, 0x0, 0x8, &(0x7f0000000100)='syz_tun\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r9, r8, 0x0, 0x5, &(0x7f0000000340)=',em1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r32=>r5, r7, 0x0, 0xd, &(0x7f0000000240)='/selinux/mls\x00', r31}, 0x30)
fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, <r33=>0x0})
rt_tgsigqueueinfo(r32, r33, 0x0, &(0x7f0000000300)={0x5, 0x10000})
write(r4, &(0x7f0000000340), 0x41395527)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001500)={0x10000}, 0x4)
setsockopt$inet6_tcp_buf(r2, 0x6, 0xe, &(0x7f0000000140)="1e5da9bc7793999e848025a58b324ebec78eb457fc22a9e91a841566ddc30961db08bd91ad5ea2a218f05f3fb06130c4093e900401dd01a04f3fd0af6bb6fd28b48b72da1eacd8692603b2498782d70f20177ea068104186eafb3993141dbff6b01ebca167692945705816bda6fced47f1e92eeca8bac413dc06c5da1b61cf2ba6be8142491c9231dc1bdeb25d4b32ffc985c8639f973474ddb8677c463877e38f49a9ae688751f291613491cfb6148c0e1f66a5f0208d5b2e798eb9711c51fbe4c5e0257e3310dafeaae347ce9e3e9696f32d9ca7d0", 0xd6)
pipe(&(0x7f0000000200)={<r34=>0xffffffffffffffff})
vmsplice(r34, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

23:37:40 executing program 0:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:40 executing program 5:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:40 executing program 2:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:40 executing program 3:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:40 executing program 1:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$P9_RVERSION(r1, &(0x7f0000000240)=ANY=[], 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, r2, 0x8)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
syz_open_dev$admmidi(&(0x7f00000014c0)='/dev/admmidi#\x00', 0xffffffff, 0x800080)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
r5 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setownex(r6, 0xf, &(0x7f0000000180)={0x0, r5})
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r8}, 0x10)
r9 = getpid()
sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r10 = getpgrp(0x0)
setpriority(0x0, r10, 0x0)
r11 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x1)
r12 = gettid()
process_vm_writev(r12, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/240, 0xf0}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/224, 0xe0}], 0x1, 0x0)
r13 = getpgid(0x0)
r14 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5)
r15 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1)
r16 = dup2(r15, r14)
writev(r16, &(0x7f0000000040)=[{&(0x7f00000002c0)='3', 0x1}], 0x1)
ppoll(&(0x7f0000000200)=[{r16}], 0x1, &(0x7f0000000280), 0x0, 0x0)
r17 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r18 = inotify_init1(0x0)
fcntl$setown(r18, 0x8, 0xffffffffffffffff)
fcntl$getownex(r18, 0x10, &(0x7f00000000c0)={0x0, <r19=>0x0})
r20 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r20, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="020000000100eb0000000000020001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYBLOB='\b\x00\x00', @ANYRES32, @ANYBLOB="080005115951c076757a2164ca8343141a694359b9c301bf24d95441febf5a16ae429194cf41f9773a21df3fbefdfd920f68e5e58ca390181d9c686c6f0806797ac4b7731b7f6de976e4e0d345ac1f83f37848b5967ec0775d6b112c47c6e95551477839c728d326f78e5d0799b1c02c3418b1a48e41d54f698cc38b60a6a0375079bff305c0f0bbeddd3edfffcfdc456e464d8c1a7da7b7b2d8a43ac3491716431f09760a1563fe6d0296d3c466fe2c062668338b9185831dd35125bdd22378d3cf071a878b7a063b2d46a938629ac3291d146d87e0fe731694a7c32dbaabe14569f75cb0e55047f247d758bba0b8d668926655aad9aa6f2bd7", @ANYBLOB="74b24e1f0ef01479f571f55b37d7089c077e74b1bd50a45834473f982e6fd1fd97f815af9ca38040c073a4e24e033248357bfb5ab67092f29f0b1a66e443cc9e9ef2a93a80607607e3231fc4077092a7af7f95cd0ac29c703cc271896016d7b31ca22f3b0b56e5fec2690ec778d14906d776e06d1e11235fee66cd668482429cbe84"], 0x8, 0x1)
r21 = socket(0xa, 0x3, 0x8)
r22 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000)
ioctl$sock_inet_SIOCSIFFLAGS(r21, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r22, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r23=>0xffffffffffffffff}}}, 0x20)
sendmsg$key(r21, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
r24 = gettid()
waitid(0x83b895581628fca4, r24, &(0x7f0000000040), 0x2, &(0x7f0000000480))
sendmsg$key(r21, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r23, @ANYRESDEC=r24]], 0xfffffffffffffe56}}, 0x20004850)
r25 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r26 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0)
r27 = dup2(r26, r25)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r27, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r28 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r28)
r29 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x101405)
writev(r29, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2)
ioctl$SG_GET_REQUEST_TABLE(r29, 0x227d, &(0x7f0000000780))
kcmp(r28, r24, 0x0, 0xffffffffffffffff, r29)
ptrace$setopts(0x4206, r28, 0x0, 0x0)
r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r31=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0x2}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r28, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r27, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r19, r20, 0x0, 0x1, &(0x7f0000000080)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r17, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r13, r16, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r12, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)='/dev/ptmx\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r10, r11, 0x0, 0x8, &(0x7f0000000100)='syz_tun\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r9, r8, 0x0, 0x5, &(0x7f0000000340)=',em1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r32=>r5, r7, 0x0, 0xd, &(0x7f0000000240)='/selinux/mls\x00', r31}, 0x30)
fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, <r33=>0x0})
rt_tgsigqueueinfo(r32, r33, 0x0, &(0x7f0000000300)={0x5, 0x10000})
write(r4, &(0x7f0000000340), 0x41395527)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001500)={0x10000}, 0x4)
pipe(&(0x7f0000000200)={<r34=>0xffffffffffffffff})
vmsplice(r34, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

23:37:40 executing program 0:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:40 executing program 5:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:40 executing program 3:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:40 executing program 2:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f3)
r3 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r3, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:41 executing program 0:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:41 executing program 5:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:41 executing program 4:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x8, r2, 0x8)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
syz_open_dev$admmidi(&(0x7f00000014c0)='/dev/admmidi#\x00', 0xffffffff, 0x800080)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
r5 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setownex(r6, 0xf, &(0x7f0000000180)={0x0, r5})
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r8}, 0x10)
r9 = getpid()
sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r10 = getpgrp(0x0)
setpriority(0x0, r10, 0x0)
r11 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x1)
r12 = gettid()
process_vm_writev(r12, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/240, 0xf0}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/224, 0xe0}], 0x1, 0x0)
r13 = getpgid(0x0)
r14 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5)
r15 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1)
r16 = dup2(r15, r14)
writev(r16, &(0x7f0000000040)=[{&(0x7f00000002c0)='3', 0x1}], 0x1)
ppoll(&(0x7f0000000200)=[{r16}], 0x1, &(0x7f0000000280), 0x0, 0x0)
r17 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r18 = inotify_init1(0x0)
fcntl$setown(r18, 0x8, 0xffffffffffffffff)
fcntl$getownex(r18, 0x10, &(0x7f00000000c0)={0x0, <r19=>0x0})
r20 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r20, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="020000000100eb0000000000020001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYBLOB='\b\x00\x00', @ANYRES32, @ANYBLOB="080005115951c076757a2164ca8343141a694359b9c301bf24d95441febf5a16ae429194cf41f9773a21df3fbefdfd920f68e5e58ca390181d9c686c6f0806797ac4b7731b7f6de976e4e0d345ac1f83f37848b5967ec0775d6b112c47c6e95551477839c728d326f78e5d0799b1c02c3418b1a48e41d54f698cc38b60a6a0375079bff305c0f0bbeddd3edfffcfdc456e464d8c1a7da7b7b2d8a43ac3491716431f09760a1563fe6d0296d3c466fe2c062668338b9185831dd35125bdd22378d3cf071a878b7a063b2d46a938629ac3291d146d87e0fe731694a7c32dbaabe14569f75cb0e55047f247d758bba0b8d668926655aad9aa6f2bd7", @ANYBLOB="74b24e1f0ef01479f571f55b37d7089c077e74b1bd50a45834473f982e6fd1fd97f815af9ca38040c073a4e24e033248357bfb5ab67092f29f0b1a66e443cc9e9ef2a93a80607607e3231fc4077092a7af7f95cd0ac29c703cc271896016d7b31ca22f3b0b56e5fec2690ec778d14906d776e06d1e11235fee66cd668482429cbe849c"], 0x8, 0x1)
r21 = socket(0xa, 0x3, 0x8)
r22 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000)
ioctl$sock_inet_SIOCSIFFLAGS(r21, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r22, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r23=>0xffffffffffffffff}}}, 0x20)
sendmsg$key(r21, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
r24 = gettid()
waitid(0x83b895581628fca4, r24, &(0x7f0000000040), 0x2, &(0x7f0000000480))
sendmsg$key(r21, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r23, @ANYRESDEC=r24]], 0xfffffffffffffe56}}, 0x20004850)
r25 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r26 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0)
r27 = dup2(r26, r25)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r27, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r28 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r28)
r29 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x101405)
writev(r29, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2)
ioctl$SG_GET_REQUEST_TABLE(r29, 0x227d, &(0x7f0000000780))
kcmp(r28, r24, 0x0, 0xffffffffffffffff, r29)
ptrace$setopts(0x4206, r28, 0x0, 0x0)
r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r31=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0x2}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r28, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r27, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r19, r20, 0x0, 0x1, &(0x7f0000000080)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r17, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r13, r16, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r12, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)='/dev/ptmx\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r10, r11, 0x0, 0x8, &(0x7f0000000100)='syz_tun\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r9, r8, 0x0, 0x5, &(0x7f0000000340)=',em1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r32=>r5, r7, 0x0, 0xd, &(0x7f0000000240)='/selinux/mls\x00', r31}, 0x30)
fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, <r33=>0x0})
rt_tgsigqueueinfo(r32, r33, 0x0, &(0x7f0000000300)={0x5, 0x10000})
write(r4, &(0x7f0000000340), 0x41395527)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001500)={0x10000}, 0x4)
setsockopt$inet6_tcp_buf(r2, 0x6, 0xe, &(0x7f0000000140)="1e5da9bc7793999e848025a58b324ebec78eb457fc22a9e91a841566ddc30961db08bd91ad5ea2a218f05f3fb06130c4093e900401dd01a04f3fd0af6bb6fd28b48b72da1eacd8692603b2498782d70f20177ea068104186eafb3993141dbff6b01ebca167692945705816bda6fced47f1e92eeca8bac413dc06c5da1b61cf2ba6be8142491c9231dc1bdeb25d4b32ffc985c8639f973474ddb8677c463877e38f49a9ae688751f291613491cfb6148c0e1f66a5f0208d5b2e798eb9711c51fbe4c5e0257e3310dafeaae347ce9e3e9696f32d9ca7d0", 0xd6)
pipe(&(0x7f0000000200)={<r34=>0xffffffffffffffff})
vmsplice(r34, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

23:37:41 executing program 3:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:41 executing program 2:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f3)
r3 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r3, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:41 executing program 0:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
socket(0x840000000002, 0x3, 0xff)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:41 executing program 5:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:41 executing program 1:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$P9_RVERSION(r1, &(0x7f0000000240)=ANY=[], 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, r2, 0x8)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
syz_open_dev$admmidi(&(0x7f00000014c0)='/dev/admmidi#\x00', 0xffffffff, 0x800080)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
r5 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setownex(r6, 0xf, &(0x7f0000000180)={0x0, r5})
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r8}, 0x10)
r9 = getpid()
sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r10 = getpgrp(0x0)
setpriority(0x0, r10, 0x0)
r11 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x1)
r12 = gettid()
process_vm_writev(r12, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/240, 0xf0}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/224, 0xe0}], 0x1, 0x0)
r13 = getpgid(0x0)
r14 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5)
r15 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1)
r16 = dup2(r15, r14)
writev(r16, &(0x7f0000000040)=[{&(0x7f00000002c0)='3', 0x1}], 0x1)
ppoll(&(0x7f0000000200)=[{r16}], 0x1, &(0x7f0000000280), 0x0, 0x0)
r17 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r18 = inotify_init1(0x0)
fcntl$setown(r18, 0x8, 0xffffffffffffffff)
fcntl$getownex(r18, 0x10, &(0x7f00000000c0)={0x0, <r19=>0x0})
r20 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r20, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="020000000100eb0000000000020001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYBLOB='\b\x00\x00', @ANYRES32, @ANYBLOB="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", @ANYBLOB="74b24e1f0ef01479f571f55b37d7089c077e74b1bd50a45834473f982e6fd1fd97f815af9ca38040c073a4e24e033248357bfb5ab67092f29f0b1a66e443cc9e9ef2a93a80607607e3231fc4077092a7af7f95cd0ac29c703cc271896016d7b31ca22f3b0b56e5fec2690ec778d14906d776e06d1e11235fee66cd668482429cbe84"], 0x8, 0x1)
r21 = socket(0xa, 0x3, 0x8)
r22 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000)
ioctl$sock_inet_SIOCSIFFLAGS(r21, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r22, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r23=>0xffffffffffffffff}}}, 0x20)
sendmsg$key(r21, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
r24 = gettid()
waitid(0x83b895581628fca4, r24, &(0x7f0000000040), 0x2, &(0x7f0000000480))
sendmsg$key(r21, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r23, @ANYRESDEC=r24]], 0xfffffffffffffe56}}, 0x20004850)
r25 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r26 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0)
r27 = dup2(r26, r25)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r27, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r28 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r28)
r29 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x101405)
writev(r29, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2)
ioctl$SG_GET_REQUEST_TABLE(r29, 0x227d, &(0x7f0000000780))
kcmp(r28, r24, 0x0, 0xffffffffffffffff, r29)
ptrace$setopts(0x4206, r28, 0x0, 0x0)
r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r31=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0x2}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r28, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r27, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r19, r20, 0x0, 0x1, &(0x7f0000000080)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r17, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r13, r16, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r12, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)='/dev/ptmx\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r10, r11, 0x0, 0x8, &(0x7f0000000100)='syz_tun\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r9, r8, 0x0, 0x5, &(0x7f0000000340)=',em1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r32=>r5, r7, 0x0, 0xd, &(0x7f0000000240)='/selinux/mls\x00', r31}, 0x30)
fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, <r33=>0x0})
rt_tgsigqueueinfo(r32, r33, 0x0, &(0x7f0000000300)={0x5, 0x10000})
write(r4, &(0x7f0000000340), 0x41395527)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001500)={0x10000}, 0x4)
pipe(&(0x7f0000000200)={<r34=>0xffffffffffffffff})
vmsplice(r34, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

23:37:41 executing program 2:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f3)
r3 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r3, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:41 executing program 0:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
socket(0x840000000002, 0x3, 0xff)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:41 executing program 3:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:41 executing program 5:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:42 executing program 2:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:42 executing program 3:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:42 executing program 4:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x8, r2, 0x8)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
syz_open_dev$admmidi(&(0x7f00000014c0)='/dev/admmidi#\x00', 0xffffffff, 0x800080)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
r5 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setownex(r6, 0xf, &(0x7f0000000180)={0x0, r5})
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r8}, 0x10)
r9 = getpid()
sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r10 = getpgrp(0x0)
setpriority(0x0, r10, 0x0)
r11 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x1)
r12 = gettid()
process_vm_writev(r12, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/240, 0xf0}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/224, 0xe0}], 0x1, 0x0)
r13 = getpgid(0x0)
r14 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5)
r15 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1)
r16 = dup2(r15, r14)
writev(r16, &(0x7f0000000040)=[{&(0x7f00000002c0)='3', 0x1}], 0x1)
ppoll(&(0x7f0000000200)=[{r16}], 0x1, &(0x7f0000000280), 0x0, 0x0)
r17 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r18 = inotify_init1(0x0)
fcntl$setown(r18, 0x8, 0xffffffffffffffff)
fcntl$getownex(r18, 0x10, &(0x7f00000000c0)={0x0, <r19=>0x0})
r20 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r20, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="020000000100eb0000000000020001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYBLOB='\b\x00\x00', @ANYRES32, @ANYBLOB="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", @ANYBLOB="74b24e1f0ef01479f571f55b37d7089c077e74b1bd50a45834473f982e6fd1fd97f815af9ca38040c073a4e24e033248357bfb5ab67092f29f0b1a66e443cc9e9ef2a93a80607607e3231fc4077092a7af7f95cd0ac29c703cc271896016d7b31ca22f3b0b56e5fec2690ec778d14906d776e06d1e11235fee66cd668482429cbe849c"], 0x8, 0x1)
r21 = socket(0xa, 0x3, 0x8)
r22 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000)
ioctl$sock_inet_SIOCSIFFLAGS(r21, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r22, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r23=>0xffffffffffffffff}}}, 0x20)
sendmsg$key(r21, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
r24 = gettid()
waitid(0x83b895581628fca4, r24, &(0x7f0000000040), 0x2, &(0x7f0000000480))
sendmsg$key(r21, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r23, @ANYRESDEC=r24]], 0xfffffffffffffe56}}, 0x20004850)
r25 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r26 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0)
r27 = dup2(r26, r25)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r27, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r28 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r28)
r29 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x101405)
writev(r29, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2)
ioctl$SG_GET_REQUEST_TABLE(r29, 0x227d, &(0x7f0000000780))
kcmp(r28, r24, 0x0, 0xffffffffffffffff, r29)
ptrace$setopts(0x4206, r28, 0x0, 0x0)
r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r31=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0x2}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r28, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r27, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r19, r20, 0x0, 0x1, &(0x7f0000000080)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r17, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r13, r16, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r12, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)='/dev/ptmx\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r10, r11, 0x0, 0x8, &(0x7f0000000100)='syz_tun\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r9, r8, 0x0, 0x5, &(0x7f0000000340)=',em1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r32=>r5, r7, 0x0, 0xd, &(0x7f0000000240)='/selinux/mls\x00', r31}, 0x30)
fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, <r33=>0x0})
rt_tgsigqueueinfo(r32, r33, 0x0, &(0x7f0000000300)={0x5, 0x10000})
write(r4, &(0x7f0000000340), 0x41395527)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001500)={0x10000}, 0x4)
setsockopt$inet6_tcp_buf(r2, 0x6, 0xe, &(0x7f0000000140)="1e5da9bc7793999e848025a58b324ebec78eb457fc22a9e91a841566ddc30961db08bd91ad5ea2a218f05f3fb06130c4093e900401dd01a04f3fd0af6bb6fd28b48b72da1eacd8692603b2498782d70f20177ea068104186eafb3993141dbff6b01ebca167692945705816bda6fced47f1e92eeca8bac413dc06c5da1b61cf2ba6be8142491c9231dc1bdeb25d4b32ffc985c8639f973474ddb8677c463877e38f49a9ae688751f291613491cfb6148c0e1f66a5f0208d5b2e798eb9711c51fbe4c5e0257e3310dafeaae347ce9e3e9696f32d9ca7d0", 0xd6)
pipe(&(0x7f0000000200)={<r34=>0xffffffffffffffff})
vmsplice(r34, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

23:37:42 executing program 0:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
socket(0x840000000002, 0x3, 0xff)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:42 executing program 2:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:42 executing program 5:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:42 executing program 3:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x8, r2, 0x8)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
syz_open_dev$admmidi(&(0x7f00000014c0)='/dev/admmidi#\x00', 0xffffffff, 0x800080)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
r5 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setownex(r6, 0xf, &(0x7f0000000180)={0x0, r5})
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r8}, 0x10)
r9 = getpid()
sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r10 = getpgrp(0x0)
setpriority(0x0, r10, 0x0)
r11 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x1)
r12 = gettid()
process_vm_writev(r12, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/240, 0xf0}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/224, 0xe0}], 0x1, 0x0)
r13 = getpgid(0x0)
r14 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5)
r15 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1)
r16 = dup2(r15, r14)
writev(r16, &(0x7f0000000040)=[{&(0x7f00000002c0)='3', 0x1}], 0x1)
ppoll(&(0x7f0000000200)=[{r16}], 0x1, &(0x7f0000000280), 0x0, 0x0)
r17 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r18 = inotify_init1(0x0)
fcntl$setown(r18, 0x8, 0xffffffffffffffff)
fcntl$getownex(r18, 0x10, &(0x7f00000000c0)={0x0, <r19=>0x0})
r20 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r20, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="020000000100eb0000000000020001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYBLOB='\b\x00\x00', @ANYRES32, @ANYBLOB="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", @ANYBLOB="74b24e1f0ef01479f571f55b37d7089c077e74b1bd50a45834473f982e6fd1fd97f815af9ca38040c073a4e24e033248357bfb5ab67092f29f0b1a66e443cc9e9ef2a93a80607607e3231fc4077092a7af7f95cd0ac29c703cc271896016d7b31ca22f3b0b56e5fec2690ec778d14906d776e06d1e11235fee66cd668482429cbe849c"], 0x8, 0x1)
r21 = socket(0xa, 0x3, 0x8)
r22 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000)
ioctl$sock_inet_SIOCSIFFLAGS(r21, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r22, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r23=>0xffffffffffffffff}}}, 0x20)
sendmsg$key(r21, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
r24 = gettid()
waitid(0x83b895581628fca4, r24, &(0x7f0000000040), 0x2, &(0x7f0000000480))
sendmsg$key(r21, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r23, @ANYRESDEC=r24]], 0xfffffffffffffe56}}, 0x20004850)
r25 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r26 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0)
r27 = dup2(r26, r25)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r27, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r28 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r28)
r29 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x101405)
writev(r29, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2)
ioctl$SG_GET_REQUEST_TABLE(r29, 0x227d, &(0x7f0000000780))
kcmp(r28, r24, 0x0, 0xffffffffffffffff, r29)
ptrace$setopts(0x4206, r28, 0x0, 0x0)
r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r31=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0x2}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r28, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r27, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r19, r20, 0x0, 0x1, &(0x7f0000000080)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r17, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r13, r16, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r12, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)='/dev/ptmx\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r10, r11, 0x0, 0x8, &(0x7f0000000100)='syz_tun\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r9, r8, 0x0, 0x5, &(0x7f0000000340)=',em1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r32=>r5, r7, 0x0, 0xd, &(0x7f0000000240)='/selinux/mls\x00', r31}, 0x30)
fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, <r33=>0x0})
rt_tgsigqueueinfo(r32, r33, 0x0, &(0x7f0000000300)={0x5, 0x10000})
write(r4, &(0x7f0000000340), 0x41395527)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001500)={0x10000}, 0x4)
setsockopt$inet6_tcp_buf(r2, 0x6, 0xe, &(0x7f0000000140)="1e5da9bc7793999e848025a58b324ebec78eb457fc22a9e91a841566ddc30961db08bd91ad5ea2a218f05f3fb06130c4093e900401dd01a04f3fd0af6bb6fd28b48b72da1eacd8692603b2498782d70f20177ea068104186eafb3993141dbff6b01ebca167692945705816bda6fced47f1e92eeca8bac413dc06c5da1b61cf2ba6be8142491c9231dc1bdeb25d4b32ffc985c8639f973474ddb8677c463877e38f49a9ae688751f291613491cfb6148c0e1f66a5f0208d5b2e798eb9711c51fbe4c5e0257e3310dafeaae347ce9e3e9696f32d9ca7d0", 0xd6)
pipe(&(0x7f0000000200)={<r34=>0xffffffffffffffff})
vmsplice(r34, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

23:37:42 executing program 1:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$P9_RVERSION(r1, &(0x7f0000000240)=ANY=[], 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, r2, 0x8)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
syz_open_dev$admmidi(&(0x7f00000014c0)='/dev/admmidi#\x00', 0xffffffff, 0x800080)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
r5 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setownex(r6, 0xf, &(0x7f0000000180)={0x0, r5})
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r8}, 0x10)
r9 = getpid()
sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r10 = getpgrp(0x0)
setpriority(0x0, r10, 0x0)
r11 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x1)
r12 = gettid()
process_vm_writev(r12, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/240, 0xf0}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/224, 0xe0}], 0x1, 0x0)
r13 = getpgid(0x0)
r14 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5)
r15 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1)
r16 = dup2(r15, r14)
writev(r16, &(0x7f0000000040)=[{&(0x7f00000002c0)='3', 0x1}], 0x1)
ppoll(&(0x7f0000000200)=[{r16}], 0x1, &(0x7f0000000280), 0x0, 0x0)
r17 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r18 = inotify_init1(0x0)
fcntl$setown(r18, 0x8, 0xffffffffffffffff)
fcntl$getownex(r18, 0x10, &(0x7f00000000c0)={0x0, <r19=>0x0})
r20 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r20, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="020000000100eb0000000000020001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYBLOB='\b\x00\x00', @ANYRES32, @ANYBLOB="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", @ANYBLOB="74b24e1f0ef01479f571f55b37d7089c077e74b1bd50a45834473f982e6fd1fd97f815af9ca38040c073a4e24e033248357bfb5ab67092f29f0b1a66e443cc9e9ef2a93a80607607e3231fc4077092a7af7f95cd0ac29c703cc271896016d7b31ca22f3b0b56e5fec2690ec778d14906d776e06d1e11235fee66cd668482429cbe849c"], 0x8, 0x1)
r21 = socket(0xa, 0x3, 0x8)
r22 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000)
ioctl$sock_inet_SIOCSIFFLAGS(r21, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r22, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r23=>0xffffffffffffffff}}}, 0x20)
sendmsg$key(r21, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
r24 = gettid()
waitid(0x83b895581628fca4, r24, &(0x7f0000000040), 0x2, &(0x7f0000000480))
sendmsg$key(r21, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r23, @ANYRESDEC=r24]], 0xfffffffffffffe56}}, 0x20004850)
r25 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r26 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0)
r27 = dup2(r26, r25)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r27, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r28 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r28)
r29 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x101405)
writev(r29, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2)
ioctl$SG_GET_REQUEST_TABLE(r29, 0x227d, &(0x7f0000000780))
kcmp(r28, r24, 0x0, 0xffffffffffffffff, r29)
ptrace$setopts(0x4206, r28, 0x0, 0x0)
r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r31=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0x2}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r28, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r27, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r19, r20, 0x0, 0x1, &(0x7f0000000080)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r17, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r13, r16, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r12, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)='/dev/ptmx\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r10, r11, 0x0, 0x8, &(0x7f0000000100)='syz_tun\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r9, r8, 0x0, 0x5, &(0x7f0000000340)=',em1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r32=>r5, r7, 0x0, 0xd, &(0x7f0000000240)='/selinux/mls\x00', r31}, 0x30)
fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, <r33=>0x0})
rt_tgsigqueueinfo(r32, r33, 0x0, &(0x7f0000000300)={0x5, 0x10000})
write(r4, &(0x7f0000000340), 0x41395527)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001500)={0x10000}, 0x4)
pipe(&(0x7f0000000200)={<r34=>0xffffffffffffffff})
vmsplice(r34, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

23:37:42 executing program 2:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:42 executing program 0:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:42 executing program 5:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:42 executing program 2:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6100)
r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f3)
r3 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r3, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(0xffffffffffffffff, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:43 executing program 0:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:43 executing program 2:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6100)
r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f3)
r3 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r3, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(0xffffffffffffffff, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:43 executing program 4:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x8, r2, 0x8)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
syz_open_dev$admmidi(&(0x7f00000014c0)='/dev/admmidi#\x00', 0xffffffff, 0x800080)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
r5 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setownex(r6, 0xf, &(0x7f0000000180)={0x0, r5})
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r8}, 0x10)
r9 = getpid()
sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r10 = getpgrp(0x0)
setpriority(0x0, r10, 0x0)
r11 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x1)
r12 = gettid()
process_vm_writev(r12, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/240, 0xf0}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/224, 0xe0}], 0x1, 0x0)
r13 = getpgid(0x0)
r14 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5)
r15 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1)
r16 = dup2(r15, r14)
writev(r16, &(0x7f0000000040)=[{&(0x7f00000002c0)='3', 0x1}], 0x1)
ppoll(&(0x7f0000000200)=[{r16}], 0x1, &(0x7f0000000280), 0x0, 0x0)
r17 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r18 = inotify_init1(0x0)
fcntl$setown(r18, 0x8, 0xffffffffffffffff)
fcntl$getownex(r18, 0x10, &(0x7f00000000c0)={0x0, <r19=>0x0})
r20 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r20, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="020000000100eb0000000000020001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYBLOB='\b\x00\x00', @ANYRES32, @ANYBLOB="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", @ANYBLOB="74b24e1f0ef01479f571f55b37d7089c077e74b1bd50a45834473f982e6fd1fd97f815af9ca38040c073a4e24e033248357bfb5ab67092f29f0b1a66e443cc9e9ef2a93a80607607e3231fc4077092a7af7f95cd0ac29c703cc271896016d7b31ca22f3b0b56e5fec2690ec778d14906d776e06d1e11235fee66cd668482429cbe849c"], 0x8, 0x1)
r21 = socket(0xa, 0x3, 0x8)
r22 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000)
ioctl$sock_inet_SIOCSIFFLAGS(r21, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r22, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r23=>0xffffffffffffffff}}}, 0x20)
sendmsg$key(r21, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
r24 = gettid()
waitid(0x83b895581628fca4, r24, &(0x7f0000000040), 0x2, &(0x7f0000000480))
sendmsg$key(r21, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r23, @ANYRESDEC=r24]], 0xfffffffffffffe56}}, 0x20004850)
r25 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r26 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0)
r27 = dup2(r26, r25)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r27, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r28 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r28)
r29 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x101405)
writev(r29, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2)
ioctl$SG_GET_REQUEST_TABLE(r29, 0x227d, &(0x7f0000000780))
kcmp(r28, r24, 0x0, 0xffffffffffffffff, r29)
ptrace$setopts(0x4206, r28, 0x0, 0x0)
r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r31=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0x2}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r28, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r27, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r19, r20, 0x0, 0x1, &(0x7f0000000080)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r17, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r13, r16, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r12, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)='/dev/ptmx\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r10, r11, 0x0, 0x8, &(0x7f0000000100)='syz_tun\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r9, r8, 0x0, 0x5, &(0x7f0000000340)=',em1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r32=>r5, r7, 0x0, 0xd, &(0x7f0000000240)='/selinux/mls\x00', r31}, 0x30)
fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, <r33=>0x0})
rt_tgsigqueueinfo(r32, r33, 0x0, &(0x7f0000000300)={0x5, 0x10000})
write(r4, &(0x7f0000000340), 0x41395527)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001500)={0x10000}, 0x4)
setsockopt$inet6_tcp_buf(r2, 0x6, 0xe, &(0x7f0000000140)="1e5da9bc7793999e848025a58b324ebec78eb457fc22a9e91a841566ddc30961db08bd91ad5ea2a218f05f3fb06130c4093e900401dd01a04f3fd0af6bb6fd28b48b72da1eacd8692603b2498782d70f20177ea068104186eafb3993141dbff6b01ebca167692945705816bda6fced47f1e92eeca8bac413dc06c5da1b61cf2ba6be8142491c9231dc1bdeb25d4b32ffc985c8639f973474ddb8677c463877e38f49a9ae688751f291613491cfb6148c0e1f66a5f0208d5b2e798eb9711c51fbe4c5e0257e3310dafeaae347ce9e3e9696f32d9ca7d0", 0xd6)
pipe(&(0x7f0000000200)={<r34=>0xffffffffffffffff})
vmsplice(r34, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

23:37:43 executing program 5:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:43 executing program 0:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:43 executing program 2:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6100)
r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f3)
r3 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r3, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(0xffffffffffffffff, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:43 executing program 3:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:43 executing program 1:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$P9_RVERSION(r1, &(0x7f0000000240)=ANY=[], 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, r2, 0x8)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
syz_open_dev$admmidi(&(0x7f00000014c0)='/dev/admmidi#\x00', 0xffffffff, 0x800080)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
r5 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setownex(r6, 0xf, &(0x7f0000000180)={0x0, r5})
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r8}, 0x10)
r9 = getpid()
sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r10 = getpgrp(0x0)
setpriority(0x0, r10, 0x0)
r11 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x1)
r12 = gettid()
process_vm_writev(r12, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/240, 0xf0}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/224, 0xe0}], 0x1, 0x0)
r13 = getpgid(0x0)
r14 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5)
r15 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1)
r16 = dup2(r15, r14)
writev(r16, &(0x7f0000000040)=[{&(0x7f00000002c0)='3', 0x1}], 0x1)
ppoll(&(0x7f0000000200)=[{r16}], 0x1, &(0x7f0000000280), 0x0, 0x0)
r17 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r18 = inotify_init1(0x0)
fcntl$setown(r18, 0x8, 0xffffffffffffffff)
fcntl$getownex(r18, 0x10, &(0x7f00000000c0)={0x0, <r19=>0x0})
r20 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r20, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="020000000100eb0000000000020001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYBLOB='\b\x00\x00', @ANYRES32, @ANYBLOB="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", @ANYBLOB="74b24e1f0ef01479f571f55b37d7089c077e74b1bd50a45834473f982e6fd1fd97f815af9ca38040c073a4e24e033248357bfb5ab67092f29f0b1a66e443cc9e9ef2a93a80607607e3231fc4077092a7af7f95cd0ac29c703cc271896016d7b31ca22f3b0b56e5fec2690ec778d14906d776e06d1e11235fee66cd668482429cbe849c"], 0x8, 0x1)
r21 = socket(0xa, 0x3, 0x8)
r22 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000)
ioctl$sock_inet_SIOCSIFFLAGS(r21, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r22, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r23=>0xffffffffffffffff}}}, 0x20)
sendmsg$key(r21, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
r24 = gettid()
waitid(0x83b895581628fca4, r24, &(0x7f0000000040), 0x2, &(0x7f0000000480))
sendmsg$key(r21, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r23, @ANYRESDEC=r24]], 0xfffffffffffffe56}}, 0x20004850)
r25 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r26 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0)
r27 = dup2(r26, r25)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r27, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r28 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r28)
r29 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x101405)
writev(r29, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2)
ioctl$SG_GET_REQUEST_TABLE(r29, 0x227d, &(0x7f0000000780))
kcmp(r28, r24, 0x0, 0xffffffffffffffff, r29)
ptrace$setopts(0x4206, r28, 0x0, 0x0)
r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r31=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0x2}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r28, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r27, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r19, r20, 0x0, 0x1, &(0x7f0000000080)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r17, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r13, r16, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r12, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)='/dev/ptmx\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r10, r11, 0x0, 0x8, &(0x7f0000000100)='syz_tun\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r9, r8, 0x0, 0x5, &(0x7f0000000340)=',em1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r32=>r5, r7, 0x0, 0xd, &(0x7f0000000240)='/selinux/mls\x00', r31}, 0x30)
fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, <r33=>0x0})
rt_tgsigqueueinfo(r32, r33, 0x0, &(0x7f0000000300)={0x5, 0x10000})
write(r4, &(0x7f0000000340), 0x41395527)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001500)={0x10000}, 0x4)
pipe(&(0x7f0000000200)={<r34=>0xffffffffffffffff})
vmsplice(r34, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

23:37:43 executing program 5:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:43 executing program 0:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r3, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:43 executing program 2:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x6100)
r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f3)
r3 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r3, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r1, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:44 executing program 3:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:44 executing program 0:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r3, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:44 executing program 5:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$P9_RVERSION(r1, &(0x7f0000000240)=ANY=[], 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, r2, 0x8)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
syz_open_dev$admmidi(&(0x7f00000014c0)='/dev/admmidi#\x00', 0xffffffff, 0x800080)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
r5 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setownex(r6, 0xf, &(0x7f0000000180)={0x0, r5})
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r8}, 0x10)
r9 = getpid()
sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r10 = getpgrp(0x0)
setpriority(0x0, r10, 0x0)
r11 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x1)
r12 = gettid()
process_vm_writev(r12, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/240, 0xf0}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/224, 0xe0}], 0x1, 0x0)
r13 = getpgid(0x0)
r14 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5)
r15 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1)
r16 = dup2(r15, r14)
writev(r16, &(0x7f0000000040)=[{&(0x7f00000002c0)='3', 0x1}], 0x1)
ppoll(&(0x7f0000000200)=[{r16}], 0x1, &(0x7f0000000280), 0x0, 0x0)
r17 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r18 = inotify_init1(0x0)
fcntl$setown(r18, 0x8, 0xffffffffffffffff)
fcntl$getownex(r18, 0x10, &(0x7f00000000c0)={0x0, <r19=>0x0})
r20 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r20, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="020000000100eb0000000000020001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYBLOB='\b\x00\x00', @ANYRES32, @ANYBLOB="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", @ANYBLOB="74b24e1f0ef01479f571f55b37d7089c077e74b1bd50a45834473f982e6fd1fd97f815af9ca38040c073a4e24e033248357bfb5ab67092f29f0b1a66e443cc9e9ef2a93a80607607e3231fc4077092a7af7f95cd0ac29c703cc271896016d7b31ca22f"], 0x8, 0x1)
r21 = socket(0xa, 0x3, 0x8)
r22 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000)
ioctl$sock_inet_SIOCSIFFLAGS(r21, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r22, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r23=>0xffffffffffffffff}}}, 0x20)
sendmsg$key(r21, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
r24 = gettid()
waitid(0x83b895581628fca4, r24, &(0x7f0000000040), 0x2, &(0x7f0000000480))
sendmsg$key(r21, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r23, @ANYRESDEC=r24]], 0xfffffffffffffe56}}, 0x20004850)
r25 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r26 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0)
r27 = dup2(r26, r25)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r27, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r28 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r28)
r29 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x101405)
writev(r29, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2)
ioctl$SG_GET_REQUEST_TABLE(r29, 0x227d, &(0x7f0000000780))
kcmp(r28, r24, 0x0, 0xffffffffffffffff, r29)
ptrace$setopts(0x4206, r28, 0x0, 0x0)
r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r31=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0x2}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r28, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r27, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r19, r20, 0x0, 0x1, &(0x7f0000000080)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r17, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r13, r16, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r12, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)='/dev/ptmx\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r10, r11, 0x0, 0x8, &(0x7f0000000100)='syz_tun\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r9, r8, 0x0, 0x5, &(0x7f0000000340)=',em1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r32=>r5, r7, 0x0, 0xd, &(0x7f0000000240)='/selinux/mls\x00', r31}, 0x30)
fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, <r33=>0x0})
rt_tgsigqueueinfo(r32, r33, 0x0, &(0x7f0000000300)={0x5, 0x10000})
write(r4, &(0x7f0000000340), 0x41395527)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001500)={0x10000}, 0x4)
pipe(&(0x7f0000000200)={<r34=>0xffffffffffffffff})
vmsplice(r34, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

23:37:44 executing program 4:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x8, r2, 0x8)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
syz_open_dev$admmidi(&(0x7f00000014c0)='/dev/admmidi#\x00', 0xffffffff, 0x800080)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
r5 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setownex(r6, 0xf, &(0x7f0000000180)={0x0, r5})
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r8}, 0x10)
r9 = getpid()
sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r10 = getpgrp(0x0)
setpriority(0x0, r10, 0x0)
r11 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x1)
r12 = gettid()
process_vm_writev(r12, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/240, 0xf0}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/224, 0xe0}], 0x1, 0x0)
r13 = getpgid(0x0)
r14 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5)
r15 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1)
r16 = dup2(r15, r14)
writev(r16, &(0x7f0000000040)=[{&(0x7f00000002c0)='3', 0x1}], 0x1)
ppoll(&(0x7f0000000200)=[{r16}], 0x1, &(0x7f0000000280), 0x0, 0x0)
r17 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r18 = inotify_init1(0x0)
fcntl$setown(r18, 0x8, 0xffffffffffffffff)
fcntl$getownex(r18, 0x10, &(0x7f00000000c0)={0x0, <r19=>0x0})
r20 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r20, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="020000000100eb0000000000020001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYBLOB='\b\x00\x00', @ANYRES32, @ANYBLOB="74b24e1f0ef01479f571f55b37d7089c077e74b1bd50a45834473f982e6fd1fd97f815af9ca38040c073a4e24e033248357bfb5ab67092f29f0b1a66e443cc9e9ef2a93a80607607e3231fc4077092a7af7f95cd0ac29c703cc271896016d7b31ca22f3b0b56e5fec2690ec778d14906d776e06d1e11235fee66cd668482429cbe849c5b"], 0x7, 0x1)
r21 = socket(0xa, 0x3, 0x8)
r22 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000)
ioctl$sock_inet_SIOCSIFFLAGS(r21, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r22, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r23=>0xffffffffffffffff}}}, 0x20)
sendmsg$key(r21, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
r24 = gettid()
waitid(0x83b895581628fca4, r24, &(0x7f0000000040), 0x2, &(0x7f0000000480))
sendmsg$key(r21, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r23, @ANYRESDEC=r24]], 0xfffffffffffffe56}}, 0x20004850)
r25 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r26 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0)
r27 = dup2(r26, r25)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r27, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r28 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r28)
r29 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x101405)
writev(r29, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2)
ioctl$SG_GET_REQUEST_TABLE(r29, 0x227d, &(0x7f0000000780))
kcmp(r28, r24, 0x0, 0xffffffffffffffff, r29)
ptrace$setopts(0x4206, r28, 0x0, 0x0)
r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r31=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0x2}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r28, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r27, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r19, r20, 0x0, 0x1, &(0x7f0000000080)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r17, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r13, r16, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r12, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)='/dev/ptmx\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r10, r11, 0x0, 0x8, &(0x7f0000000100)='syz_tun\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r9, r8, 0x0, 0x5, &(0x7f0000000340)=',em1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r32=>r5, r7, 0x0, 0xd, &(0x7f0000000240)='/selinux/mls\x00', r31}, 0x30)
fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, <r33=>0x0})
rt_tgsigqueueinfo(r32, r33, 0x0, &(0x7f0000000300)={0x5, 0x10000})
write(r4, &(0x7f0000000340), 0x41395527)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001500)={0x10000}, 0x4)
setsockopt$inet6_tcp_buf(r2, 0x6, 0xe, &(0x7f0000000140)="1e5da9bc7793999e848025a58b324ebec78eb457fc22a9e91a841566ddc30961db08bd91ad5ea2a218f05f3fb06130c4093e900401dd01a04f3fd0af6bb6fd28b48b72da1eacd8692603b2498782d70f20177ea068104186eafb3993141dbff6b01ebca167692945705816bda6fced47f1e92eeca8bac413dc06c5da1b61cf2ba6be8142491c9231dc1bdeb25d4b32ffc985c8639f973474ddb8677c463877e38f49a9ae688751f291613491cfb6148c0e1f66a5f0208d5b2e798eb9711c51fbe4c5e0257e3310dafeaae347ce9e3e9696f32d9ca7d0", 0xd6)
pipe(&(0x7f0000000200)={<r34=>0xffffffffffffffff})
vmsplice(r34, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

23:37:44 executing program 0:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r3, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:44 executing program 3:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:44 executing program 1:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$P9_RVERSION(r1, &(0x7f0000000240)=ANY=[], 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, r2, 0x8)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
syz_open_dev$admmidi(&(0x7f00000014c0)='/dev/admmidi#\x00', 0xffffffff, 0x800080)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
r5 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setownex(r6, 0xf, &(0x7f0000000180)={0x0, r5})
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r8}, 0x10)
r9 = getpid()
sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r10 = getpgrp(0x0)
setpriority(0x0, r10, 0x0)
r11 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x1)
r12 = gettid()
process_vm_writev(r12, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/240, 0xf0}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/224, 0xe0}], 0x1, 0x0)
r13 = getpgid(0x0)
r14 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5)
r15 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1)
r16 = dup2(r15, r14)
writev(r16, &(0x7f0000000040)=[{&(0x7f00000002c0)='3', 0x1}], 0x1)
ppoll(&(0x7f0000000200)=[{r16}], 0x1, &(0x7f0000000280), 0x0, 0x0)
r17 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r18 = inotify_init1(0x0)
fcntl$setown(r18, 0x8, 0xffffffffffffffff)
fcntl$getownex(r18, 0x10, &(0x7f00000000c0)={0x0, <r19=>0x0})
r20 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r20, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="020000000100eb0000000000020001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYBLOB='\b\x00\x00', @ANYRES32, @ANYBLOB="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", @ANYBLOB="74b24e1f0ef01479f571f55b37d7089c077e74b1bd50a45834473f982e6fd1fd97f815af9ca38040c073a4e24e033248357bfb5ab67092f29f0b1a66e443cc9e9ef2a93a80607607e3231fc4077092a7af7f95cd0ac29c703cc271896016d7b31ca22f3b0b56e5fec2690ec778d14906d776e06d1e11235fee66cd668482429cbe849c"], 0x8, 0x1)
r21 = socket(0xa, 0x3, 0x8)
r22 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000)
ioctl$sock_inet_SIOCSIFFLAGS(r21, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r22, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r23=>0xffffffffffffffff}}}, 0x20)
sendmsg$key(r21, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
r24 = gettid()
waitid(0x83b895581628fca4, r24, &(0x7f0000000040), 0x2, &(0x7f0000000480))
sendmsg$key(r21, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r23, @ANYRESDEC=r24]], 0xfffffffffffffe56}}, 0x20004850)
r25 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r26 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0)
r27 = dup2(r26, r25)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r27, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r28 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r28)
r29 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x101405)
writev(r29, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2)
ioctl$SG_GET_REQUEST_TABLE(r29, 0x227d, &(0x7f0000000780))
kcmp(r28, r24, 0x0, 0xffffffffffffffff, r29)
ptrace$setopts(0x4206, r28, 0x0, 0x0)
r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r31=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0x2}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r28, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r27, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r19, r20, 0x0, 0x1, &(0x7f0000000080)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r17, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r13, r16, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r12, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)='/dev/ptmx\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r10, r11, 0x0, 0x8, &(0x7f0000000100)='syz_tun\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r9, r8, 0x0, 0x5, &(0x7f0000000340)=',em1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r32=>r5, r7, 0x0, 0xd, &(0x7f0000000240)='/selinux/mls\x00', r31}, 0x30)
fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, <r33=>0x0})
rt_tgsigqueueinfo(r32, r33, 0x0, &(0x7f0000000300)={0x5, 0x10000})
write(r4, &(0x7f0000000340), 0x41395527)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001500)={0x10000}, 0x4)
pipe(&(0x7f0000000200)={<r34=>0xffffffffffffffff})
vmsplice(r34, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

23:37:44 executing program 0:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:44 executing program 2:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x6100)
r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f3)
r3 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r3, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r1, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:45 executing program 3:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:45 executing program 5:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:45 executing program 0:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:45 executing program 4:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x8, r2, 0x8)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
syz_open_dev$admmidi(&(0x7f00000014c0)='/dev/admmidi#\x00', 0xffffffff, 0x800080)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
r5 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setownex(r6, 0xf, &(0x7f0000000180)={0x0, r5})
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r8}, 0x10)
r9 = getpid()
sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r10 = getpgrp(0x0)
setpriority(0x0, r10, 0x0)
r11 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x1)
r12 = gettid()
process_vm_writev(r12, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/240, 0xf0}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/224, 0xe0}], 0x1, 0x0)
r13 = getpgid(0x0)
r14 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5)
r15 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1)
r16 = dup2(r15, r14)
writev(r16, &(0x7f0000000040)=[{&(0x7f00000002c0)='3', 0x1}], 0x1)
ppoll(&(0x7f0000000200)=[{r16}], 0x1, &(0x7f0000000280), 0x0, 0x0)
r17 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r18 = inotify_init1(0x0)
fcntl$setown(r18, 0x8, 0xffffffffffffffff)
fcntl$getownex(r18, 0x10, &(0x7f00000000c0)={0x0, <r19=>0x0})
r20 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r20, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="020000000100eb0000000000020001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYBLOB='\b\x00\x00', @ANYRES32, @ANYBLOB="74b24e1f0ef01479f571f55b37d7089c077e74b1bd50a45834473f982e6fd1fd97f815af9ca38040c073a4e24e033248357bfb5ab67092f29f0b1a66e443cc9e9ef2a93a80607607e3231fc4077092a7af7f95cd0ac29c703cc271896016d7b31ca22f3b0b56e5fec2690ec778d14906d776e06d1e11235fee66cd668482429cbe849c5b"], 0x7, 0x1)
r21 = socket(0xa, 0x3, 0x8)
r22 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000)
ioctl$sock_inet_SIOCSIFFLAGS(r21, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r22, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r23=>0xffffffffffffffff}}}, 0x20)
sendmsg$key(r21, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
r24 = gettid()
waitid(0x83b895581628fca4, r24, &(0x7f0000000040), 0x2, &(0x7f0000000480))
sendmsg$key(r21, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r23, @ANYRESDEC=r24]], 0xfffffffffffffe56}}, 0x20004850)
r25 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r26 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0)
r27 = dup2(r26, r25)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r27, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r28 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r28)
r29 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x101405)
writev(r29, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2)
ioctl$SG_GET_REQUEST_TABLE(r29, 0x227d, &(0x7f0000000780))
kcmp(r28, r24, 0x0, 0xffffffffffffffff, r29)
ptrace$setopts(0x4206, r28, 0x0, 0x0)
r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r31=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0x2}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r28, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r27, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r19, r20, 0x0, 0x1, &(0x7f0000000080)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r17, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r13, r16, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r12, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)='/dev/ptmx\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r10, r11, 0x0, 0x8, &(0x7f0000000100)='syz_tun\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r9, r8, 0x0, 0x5, &(0x7f0000000340)=',em1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r32=>r5, r7, 0x0, 0xd, &(0x7f0000000240)='/selinux/mls\x00', r31}, 0x30)
fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, <r33=>0x0})
rt_tgsigqueueinfo(r32, r33, 0x0, &(0x7f0000000300)={0x5, 0x10000})
write(r4, &(0x7f0000000340), 0x41395527)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001500)={0x10000}, 0x4)
setsockopt$inet6_tcp_buf(r2, 0x6, 0xe, &(0x7f0000000140)="1e5da9bc7793999e848025a58b324ebec78eb457fc22a9e91a841566ddc30961db08bd91ad5ea2a218f05f3fb06130c4093e900401dd01a04f3fd0af6bb6fd28b48b72da1eacd8692603b2498782d70f20177ea068104186eafb3993141dbff6b01ebca167692945705816bda6fced47f1e92eeca8bac413dc06c5da1b61cf2ba6be8142491c9231dc1bdeb25d4b32ffc985c8639f973474ddb8677c463877e38f49a9ae688751f291613491cfb6148c0e1f66a5f0208d5b2e798eb9711c51fbe4c5e0257e3310dafeaae347ce9e3e9696f32d9ca7d0", 0xd6)
pipe(&(0x7f0000000200)={<r34=>0xffffffffffffffff})
vmsplice(r34, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

23:37:45 executing program 5:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x8, r2, 0x8)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
syz_open_dev$admmidi(&(0x7f00000014c0)='/dev/admmidi#\x00', 0xffffffff, 0x800080)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
r5 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setownex(r6, 0xf, &(0x7f0000000180)={0x0, r5})
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r8}, 0x10)
r9 = getpid()
sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r10 = getpgrp(0x0)
setpriority(0x0, r10, 0x0)
r11 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x1)
r12 = gettid()
process_vm_writev(r12, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/240, 0xf0}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/224, 0xe0}], 0x1, 0x0)
r13 = getpgid(0x0)
r14 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5)
r15 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1)
r16 = dup2(r15, r14)
writev(r16, &(0x7f0000000040)=[{&(0x7f00000002c0)='3', 0x1}], 0x1)
ppoll(&(0x7f0000000200)=[{r16}], 0x1, &(0x7f0000000280), 0x0, 0x0)
r17 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r18 = inotify_init1(0x0)
fcntl$setown(r18, 0x8, 0xffffffffffffffff)
fcntl$getownex(r18, 0x10, &(0x7f00000000c0)={0x0, <r19=>0x0})
r20 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r20, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="020000000100eb0000000000020001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYBLOB='\b\x00\x00', @ANYRES32, @ANYBLOB="74b24e1f0ef01479f571f55b37d7089c077e74b1bd50a45834473f982e6fd1fd97f815af9ca38040c073a4e24e033248357bfb5ab67092f29f0b1a66e443cc9e9ef2a93a80607607e3231fc4077092a7af7f95cd0ac29c703cc271896016d7b31ca22f3b0b56e5fec2690ec778d14906d776e06d1e11235fee66cd668482429cbe849c5b"], 0x7, 0x1)
r21 = socket(0xa, 0x3, 0x8)
r22 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000)
ioctl$sock_inet_SIOCSIFFLAGS(r21, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r22, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r23=>0xffffffffffffffff}}}, 0x20)
sendmsg$key(r21, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
r24 = gettid()
waitid(0x83b895581628fca4, r24, &(0x7f0000000040), 0x2, &(0x7f0000000480))
sendmsg$key(r21, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r23, @ANYRESDEC=r24]], 0xfffffffffffffe56}}, 0x20004850)
r25 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r26 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0)
r27 = dup2(r26, r25)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r27, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r28 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r28)
r29 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x101405)
writev(r29, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2)
ioctl$SG_GET_REQUEST_TABLE(r29, 0x227d, &(0x7f0000000780))
kcmp(r28, r24, 0x0, 0xffffffffffffffff, r29)
ptrace$setopts(0x4206, r28, 0x0, 0x0)
r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r31=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0x2}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r28, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r27, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r19, r20, 0x0, 0x1, &(0x7f0000000080)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r17, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r13, r16, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r12, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)='/dev/ptmx\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r10, r11, 0x0, 0x8, &(0x7f0000000100)='syz_tun\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r9, r8, 0x0, 0x5, &(0x7f0000000340)=',em1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r32=>r5, r7, 0x0, 0xd, &(0x7f0000000240)='/selinux/mls\x00', r31}, 0x30)
fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, <r33=>0x0})
rt_tgsigqueueinfo(r32, r33, 0x0, &(0x7f0000000300)={0x5, 0x10000})
write(r4, &(0x7f0000000340), 0x41395527)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001500)={0x10000}, 0x4)
setsockopt$inet6_tcp_buf(r2, 0x6, 0xe, &(0x7f0000000140)="1e5da9bc7793999e848025a58b324ebec78eb457fc22a9e91a841566ddc30961db08bd91ad5ea2a218f05f3fb06130c4093e900401dd01a04f3fd0af6bb6fd28b48b72da1eacd8692603b2498782d70f20177ea068104186eafb3993141dbff6b01ebca167692945705816bda6fced47f1e92eeca8bac413dc06c5da1b61cf2ba6be8142491c9231dc1bdeb25d4b32ffc985c8639f973474ddb8677c463877e38f49a9ae688751f291613491cfb6148c0e1f66a5f0208d5b2e798eb9711c51fbe4c5e0257e3310dafeaae347ce9e3e9696f32d9ca7d0", 0xd6)
pipe(&(0x7f0000000200)={<r34=>0xffffffffffffffff})
vmsplice(r34, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

23:37:45 executing program 3:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:45 executing program 2:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x6100)
r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f3)
r3 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r3, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r1, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:45 executing program 1:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$P9_RVERSION(r1, &(0x7f0000000240)=ANY=[], 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, r2, 0x8)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
syz_open_dev$admmidi(&(0x7f00000014c0)='/dev/admmidi#\x00', 0xffffffff, 0x800080)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
r5 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setownex(r6, 0xf, &(0x7f0000000180)={0x0, r5})
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r8}, 0x10)
r9 = getpid()
sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r10 = getpgrp(0x0)
setpriority(0x0, r10, 0x0)
r11 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x1)
r12 = gettid()
process_vm_writev(r12, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/240, 0xf0}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/224, 0xe0}], 0x1, 0x0)
r13 = getpgid(0x0)
r14 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5)
r15 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1)
r16 = dup2(r15, r14)
writev(r16, &(0x7f0000000040)=[{&(0x7f00000002c0)='3', 0x1}], 0x1)
ppoll(&(0x7f0000000200)=[{r16}], 0x1, &(0x7f0000000280), 0x0, 0x0)
r17 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r18 = inotify_init1(0x0)
fcntl$setown(r18, 0x8, 0xffffffffffffffff)
fcntl$getownex(r18, 0x10, &(0x7f00000000c0)={0x0, <r19=>0x0})
r20 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r20, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="020000000100eb0000000000020001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYBLOB='\b\x00\x00', @ANYRES32, @ANYBLOB="74b24e1f0ef01479f571f55b37d7089c077e74b1bd50a45834473f982e6fd1fd97f815af9ca38040c073a4e24e033248357bfb5ab67092f29f0b1a66e443cc9e9ef2a93a80607607e3231fc4077092a7af7f95cd0ac29c703cc271896016d7b31ca22f3b0b56e5fec2690ec778d14906d776e06d1e11235fee66cd668482429cbe849c5b"], 0x7, 0x1)
r21 = socket(0xa, 0x3, 0x8)
r22 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000)
ioctl$sock_inet_SIOCSIFFLAGS(r21, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r22, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r23=>0xffffffffffffffff}}}, 0x20)
sendmsg$key(r21, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
r24 = gettid()
waitid(0x83b895581628fca4, r24, &(0x7f0000000040), 0x2, &(0x7f0000000480))
sendmsg$key(r21, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r23, @ANYRESDEC=r24]], 0xfffffffffffffe56}}, 0x20004850)
r25 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r26 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0)
r27 = dup2(r26, r25)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r27, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r28 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r28)
r29 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x101405)
writev(r29, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2)
ioctl$SG_GET_REQUEST_TABLE(r29, 0x227d, &(0x7f0000000780))
kcmp(r28, r24, 0x0, 0xffffffffffffffff, r29)
ptrace$setopts(0x4206, r28, 0x0, 0x0)
r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r31=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0x2}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r28, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r27, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r19, r20, 0x0, 0x1, &(0x7f0000000080)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r17, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r13, r16, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r12, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)='/dev/ptmx\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r10, r11, 0x0, 0x8, &(0x7f0000000100)='syz_tun\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r9, r8, 0x0, 0x5, &(0x7f0000000340)=',em1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r32=>r5, r7, 0x0, 0xd, &(0x7f0000000240)='/selinux/mls\x00', r31}, 0x30)
fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, <r33=>0x0})
rt_tgsigqueueinfo(r32, r33, 0x0, &(0x7f0000000300)={0x5, 0x10000})
write(r4, &(0x7f0000000340), 0x41395527)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001500)={0x10000}, 0x4)
pipe(&(0x7f0000000200)={<r34=>0xffffffffffffffff})
vmsplice(r34, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

23:37:45 executing program 3:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:45 executing program 0:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:46 executing program 3:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:46 executing program 4:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x8, r2, 0x8)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
syz_open_dev$admmidi(&(0x7f00000014c0)='/dev/admmidi#\x00', 0xffffffff, 0x800080)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
r5 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setownex(r6, 0xf, &(0x7f0000000180)={0x0, r5})
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r8}, 0x10)
r9 = getpid()
sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r10 = getpgrp(0x0)
setpriority(0x0, r10, 0x0)
r11 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x1)
r12 = gettid()
process_vm_writev(r12, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/240, 0xf0}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/224, 0xe0}], 0x1, 0x0)
r13 = getpgid(0x0)
r14 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5)
r15 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1)
r16 = dup2(r15, r14)
writev(r16, &(0x7f0000000040)=[{&(0x7f00000002c0)='3', 0x1}], 0x1)
ppoll(&(0x7f0000000200)=[{r16}], 0x1, &(0x7f0000000280), 0x0, 0x0)
r17 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r18 = inotify_init1(0x0)
fcntl$setown(r18, 0x8, 0xffffffffffffffff)
fcntl$getownex(r18, 0x10, &(0x7f00000000c0)={0x0, <r19=>0x0})
r20 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r20, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="020000000100eb0000000000020001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYBLOB='\b\x00\x00', @ANYRES32, @ANYBLOB="74b24e1f0ef01479f571f55b37d7089c077e74b1bd50a45834473f982e6fd1fd97f815af9ca38040c073a4e24e033248357bfb5ab67092f29f0b1a66e443cc9e9ef2a93a80607607e3231fc4077092a7af7f95cd0ac29c703cc271896016d7b31ca22f3b0b56e5fec2690ec778d14906d776e06d1e11235fee66cd668482429cbe849c5b"], 0x7, 0x1)
r21 = socket(0xa, 0x3, 0x8)
r22 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000)
ioctl$sock_inet_SIOCSIFFLAGS(r21, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r22, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r23=>0xffffffffffffffff}}}, 0x20)
sendmsg$key(r21, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
r24 = gettid()
waitid(0x83b895581628fca4, r24, &(0x7f0000000040), 0x2, &(0x7f0000000480))
sendmsg$key(r21, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r23, @ANYRESDEC=r24]], 0xfffffffffffffe56}}, 0x20004850)
r25 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r26 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0)
r27 = dup2(r26, r25)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r27, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r28 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r28)
r29 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x101405)
writev(r29, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2)
ioctl$SG_GET_REQUEST_TABLE(r29, 0x227d, &(0x7f0000000780))
kcmp(r28, r24, 0x0, 0xffffffffffffffff, r29)
ptrace$setopts(0x4206, r28, 0x0, 0x0)
r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r31=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0x2}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r28, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r27, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r19, r20, 0x0, 0x1, &(0x7f0000000080)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r17, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r13, r16, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r12, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)='/dev/ptmx\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r10, r11, 0x0, 0x8, &(0x7f0000000100)='syz_tun\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r9, r8, 0x0, 0x5, &(0x7f0000000340)=',em1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r32=>r5, r7, 0x0, 0xd, &(0x7f0000000240)='/selinux/mls\x00', r31}, 0x30)
fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, <r33=>0x0})
rt_tgsigqueueinfo(r32, r33, 0x0, &(0x7f0000000300)={0x5, 0x10000})
write(r4, &(0x7f0000000340), 0x41395527)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001500)={0x10000}, 0x4)
setsockopt$inet6_tcp_buf(r2, 0x6, 0xe, &(0x7f0000000140)="1e5da9bc7793999e848025a58b324ebec78eb457fc22a9e91a841566ddc30961db08bd91ad5ea2a218f05f3fb06130c4093e900401dd01a04f3fd0af6bb6fd28b48b72da1eacd8692603b2498782d70f20177ea068104186eafb3993141dbff6b01ebca167692945705816bda6fced47f1e92eeca8bac413dc06c5da1b61cf2ba6be8142491c9231dc1bdeb25d4b32ffc985c8639f973474ddb8677c463877e38f49a9ae688751f291613491cfb6148c0e1f66a5f0208d5b2e798eb9711c51fbe4c5e0257e3310dafeaae347ce9e3e9696f32d9ca7d0", 0xd6)
pipe(&(0x7f0000000200)={<r34=>0xffffffffffffffff})
vmsplice(r34, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

23:37:46 executing program 0:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:46 executing program 5:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:46 executing program 2:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x6100)
r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f3)
r3 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r3, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r1, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:46 executing program 3:
socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
r4 = perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000180)='/contrf\xe9\xd8\\\xfa\xff\x00', 0x0, 0x0)
openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, &(0x7f0000000700))
r5 = socket$inet(0x2, 0x6000000000000003, 0x6)
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10)
sendto$inet(r5, 0x0, 0x0, 0x404c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10)
sendto$inet(r5, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
syz_genetlink_get_family_id$team(&(0x7f00000003c0)='team\x00')
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00'})
socket(0x10, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002280)=ANY=[@ANYBLOB="3800000000040000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32], 0x4}}, 0x0)

23:37:46 executing program 0:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:46 executing program 1:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$P9_RVERSION(r1, &(0x7f0000000240)=ANY=[], 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, r2, 0x8)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
syz_open_dev$admmidi(&(0x7f00000014c0)='/dev/admmidi#\x00', 0xffffffff, 0x800080)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
r5 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setownex(r6, 0xf, &(0x7f0000000180)={0x0, r5})
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r8}, 0x10)
r9 = getpid()
sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r10 = getpgrp(0x0)
setpriority(0x0, r10, 0x0)
r11 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x1)
r12 = gettid()
process_vm_writev(r12, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/240, 0xf0}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/224, 0xe0}], 0x1, 0x0)
r13 = getpgid(0x0)
r14 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5)
r15 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1)
r16 = dup2(r15, r14)
writev(r16, &(0x7f0000000040)=[{&(0x7f00000002c0)='3', 0x1}], 0x1)
ppoll(&(0x7f0000000200)=[{r16}], 0x1, &(0x7f0000000280), 0x0, 0x0)
r17 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r18 = inotify_init1(0x0)
fcntl$setown(r18, 0x8, 0xffffffffffffffff)
fcntl$getownex(r18, 0x10, &(0x7f00000000c0)={0x0, <r19=>0x0})
r20 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r20, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="020000000100eb0000000000020001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYBLOB='\b\x00\x00', @ANYRES32, @ANYBLOB="74b24e1f0ef01479f571f55b37d7089c077e74b1bd50a45834473f982e6fd1fd97f815af9ca38040c073a4e24e033248357bfb5ab67092f29f0b1a66e443cc9e9ef2a93a80607607e3231fc4077092a7af7f95cd0ac29c703cc271896016d7b31ca22f3b0b56e5fec2690ec778d14906d776e06d1e11235fee66cd668482429cbe849c5b"], 0x7, 0x1)
r21 = socket(0xa, 0x3, 0x8)
r22 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000)
ioctl$sock_inet_SIOCSIFFLAGS(r21, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r22, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r23=>0xffffffffffffffff}}}, 0x20)
sendmsg$key(r21, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
r24 = gettid()
waitid(0x83b895581628fca4, r24, &(0x7f0000000040), 0x2, &(0x7f0000000480))
sendmsg$key(r21, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r23, @ANYRESDEC=r24]], 0xfffffffffffffe56}}, 0x20004850)
r25 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r26 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0)
r27 = dup2(r26, r25)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r27, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r28 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r28)
r29 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x101405)
writev(r29, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2)
ioctl$SG_GET_REQUEST_TABLE(r29, 0x227d, &(0x7f0000000780))
kcmp(r28, r24, 0x0, 0xffffffffffffffff, r29)
ptrace$setopts(0x4206, r28, 0x0, 0x0)
r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r31=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0x2}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r28, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r27, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r19, r20, 0x0, 0x1, &(0x7f0000000080)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r17, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r13, r16, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r12, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)='/dev/ptmx\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r10, r11, 0x0, 0x8, &(0x7f0000000100)='syz_tun\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r9, r8, 0x0, 0x5, &(0x7f0000000340)=',em1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r32=>r5, r7, 0x0, 0xd, &(0x7f0000000240)='/selinux/mls\x00', r31}, 0x30)
fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, <r33=>0x0})
rt_tgsigqueueinfo(r32, r33, 0x0, &(0x7f0000000300)={0x5, 0x10000})
write(r4, &(0x7f0000000340), 0x41395527)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001500)={0x10000}, 0x4)
pipe(&(0x7f0000000200)={<r34=>0xffffffffffffffff})
vmsplice(r34, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

23:37:47 executing program 5:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:47 executing program 0:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:47 executing program 4:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x8, r2, 0x8)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
syz_open_dev$admmidi(&(0x7f00000014c0)='/dev/admmidi#\x00', 0xffffffff, 0x800080)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
r5 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setownex(r6, 0xf, &(0x7f0000000180)={0x0, r5})
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r8}, 0x10)
r9 = getpid()
sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r10 = getpgrp(0x0)
setpriority(0x0, r10, 0x0)
r11 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x1)
r12 = gettid()
process_vm_writev(r12, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/240, 0xf0}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/224, 0xe0}], 0x1, 0x0)
r13 = getpgid(0x0)
r14 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5)
r15 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1)
r16 = dup2(r15, r14)
writev(r16, &(0x7f0000000040)=[{&(0x7f00000002c0)='3', 0x1}], 0x1)
ppoll(&(0x7f0000000200)=[{r16}], 0x1, &(0x7f0000000280), 0x0, 0x0)
r17 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r18 = inotify_init1(0x0)
fcntl$setown(r18, 0x8, 0xffffffffffffffff)
fcntl$getownex(r18, 0x10, &(0x7f00000000c0)={0x0, <r19=>0x0})
r20 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r20, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="020000000100eb0000000000020001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYBLOB='\b\x00\x00', @ANYRES32, @ANYBLOB, @ANYBLOB="74b24e1f0ef01479f571f55b37d7089c077e74b1bd50a45834473f982e6fd1fd97f815af9ca38040c073a4e24e033248357bfb5ab67092f29f0b1a66e443cc9e9ef2a93a80607607e3231fc4077092a7af7f95cd0ac29c703cc271896016d7b31ca22f3b0b56e5fec2690ec778d14906d776e06d1e11235fee66cd668482429cbe849c5b"], 0x8, 0x1)
r21 = socket(0xa, 0x3, 0x8)
r22 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000)
ioctl$sock_inet_SIOCSIFFLAGS(r21, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r22, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r23=>0xffffffffffffffff}}}, 0x20)
sendmsg$key(r21, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
r24 = gettid()
waitid(0x83b895581628fca4, r24, &(0x7f0000000040), 0x2, &(0x7f0000000480))
sendmsg$key(r21, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r23, @ANYRESDEC=r24]], 0xfffffffffffffe56}}, 0x20004850)
r25 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r26 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0)
r27 = dup2(r26, r25)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r27, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r28 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r28)
r29 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x101405)
writev(r29, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2)
ioctl$SG_GET_REQUEST_TABLE(r29, 0x227d, &(0x7f0000000780))
kcmp(r28, r24, 0x0, 0xffffffffffffffff, r29)
ptrace$setopts(0x4206, r28, 0x0, 0x0)
r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r31=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0x2}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r28, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r27, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r19, r20, 0x0, 0x1, &(0x7f0000000080)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r17, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r13, r16, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r12, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)='/dev/ptmx\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r10, r11, 0x0, 0x8, &(0x7f0000000100)='syz_tun\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r9, r8, 0x0, 0x5, &(0x7f0000000340)=',em1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r32=>r5, r7, 0x0, 0xd, &(0x7f0000000240)='/selinux/mls\x00', r31}, 0x30)
fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, <r33=>0x0})
rt_tgsigqueueinfo(r32, r33, 0x0, &(0x7f0000000300)={0x5, 0x10000})
write(r4, &(0x7f0000000340), 0x41395527)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001500)={0x10000}, 0x4)
setsockopt$inet6_tcp_buf(r2, 0x6, 0xe, &(0x7f0000000140)="1e5da9bc7793999e848025a58b324ebec78eb457fc22a9e91a841566ddc30961db08bd91ad5ea2a218f05f3fb06130c4093e900401dd01a04f3fd0af6bb6fd28b48b72da1eacd8692603b2498782d70f20177ea068104186eafb3993141dbff6b01ebca167692945705816bda6fced47f1e92eeca8bac413dc06c5da1b61cf2ba6be8142491c9231dc1bdeb25d4b32ffc985c8639f973474ddb8677c463877e38f49a9ae688751f291613491cfb6148c0e1f66a5f0208d5b2e798eb9711c51fbe4c5e0257e3310dafeaae347ce9e3e9696f32d9ca7d0", 0xd6)
pipe(&(0x7f0000000200)={<r34=>0xffffffffffffffff})
vmsplice(r34, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

23:37:47 executing program 5:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:47 executing program 2:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x6100)
r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f3)
r3 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r3, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r1, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:47 executing program 0:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:47 executing program 3:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x6100)
r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f3)
r3 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r3, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r1, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:47 executing program 1:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$P9_RVERSION(r1, &(0x7f0000000240)=ANY=[], 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, r2, 0x8)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
syz_open_dev$admmidi(&(0x7f00000014c0)='/dev/admmidi#\x00', 0xffffffff, 0x800080)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
r5 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setownex(r6, 0xf, &(0x7f0000000180)={0x0, r5})
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r8}, 0x10)
r9 = getpid()
sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r10 = getpgrp(0x0)
setpriority(0x0, r10, 0x0)
r11 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x1)
r12 = gettid()
process_vm_writev(r12, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/240, 0xf0}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/224, 0xe0}], 0x1, 0x0)
r13 = getpgid(0x0)
r14 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5)
r15 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1)
r16 = dup2(r15, r14)
writev(r16, &(0x7f0000000040)=[{&(0x7f00000002c0)='3', 0x1}], 0x1)
ppoll(&(0x7f0000000200)=[{r16}], 0x1, &(0x7f0000000280), 0x0, 0x0)
r17 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r18 = inotify_init1(0x0)
fcntl$setown(r18, 0x8, 0xffffffffffffffff)
fcntl$getownex(r18, 0x10, &(0x7f00000000c0)={0x0, <r19=>0x0})
r20 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r20, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="020000000100eb0000000000020001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYBLOB='\b\x00\x00', @ANYRES32, @ANYBLOB="74b24e1f0ef01479f571f55b37d7089c077e74b1bd50a45834473f982e6fd1fd97f815af9ca38040c073a4e24e033248357bfb5ab67092f29f0b1a66e443cc9e9ef2a93a80607607e3231fc4077092a7af7f95cd0ac29c703cc271896016d7b31ca22f3b0b56e5fec2690ec778d14906d776e06d1e11235fee66cd668482429cbe849c5b"], 0x7, 0x1)
r21 = socket(0xa, 0x3, 0x8)
r22 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000)
ioctl$sock_inet_SIOCSIFFLAGS(r21, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r22, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r23=>0xffffffffffffffff}}}, 0x20)
sendmsg$key(r21, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
r24 = gettid()
waitid(0x83b895581628fca4, r24, &(0x7f0000000040), 0x2, &(0x7f0000000480))
sendmsg$key(r21, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r23, @ANYRESDEC=r24]], 0xfffffffffffffe56}}, 0x20004850)
r25 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r26 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0)
r27 = dup2(r26, r25)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r27, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r28 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r28)
r29 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x101405)
writev(r29, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2)
ioctl$SG_GET_REQUEST_TABLE(r29, 0x227d, &(0x7f0000000780))
kcmp(r28, r24, 0x0, 0xffffffffffffffff, r29)
ptrace$setopts(0x4206, r28, 0x0, 0x0)
r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r31=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0x2}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r28, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r27, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r19, r20, 0x0, 0x1, &(0x7f0000000080)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r17, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r13, r16, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r12, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)='/dev/ptmx\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r10, r11, 0x0, 0x8, &(0x7f0000000100)='syz_tun\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r9, r8, 0x0, 0x5, &(0x7f0000000340)=',em1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r32=>r5, r7, 0x0, 0xd, &(0x7f0000000240)='/selinux/mls\x00', r31}, 0x30)
fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, <r33=>0x0})
rt_tgsigqueueinfo(r32, r33, 0x0, &(0x7f0000000300)={0x5, 0x10000})
write(r4, &(0x7f0000000340), 0x41395527)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001500)={0x10000}, 0x4)
pipe(&(0x7f0000000200)={<r34=>0xffffffffffffffff})
vmsplice(r34, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

23:37:47 executing program 5:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:48 executing program 0:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:48 executing program 4:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x8, r2, 0x8)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
syz_open_dev$admmidi(&(0x7f00000014c0)='/dev/admmidi#\x00', 0xffffffff, 0x800080)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
r5 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setownex(r6, 0xf, &(0x7f0000000180)={0x0, r5})
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r8}, 0x10)
r9 = getpid()
sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r10 = getpgrp(0x0)
setpriority(0x0, r10, 0x0)
r11 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x1)
r12 = gettid()
process_vm_writev(r12, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/240, 0xf0}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/224, 0xe0}], 0x1, 0x0)
r13 = getpgid(0x0)
r14 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5)
r15 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1)
r16 = dup2(r15, r14)
writev(r16, &(0x7f0000000040)=[{&(0x7f00000002c0)='3', 0x1}], 0x1)
ppoll(&(0x7f0000000200)=[{r16}], 0x1, &(0x7f0000000280), 0x0, 0x0)
r17 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r18 = inotify_init1(0x0)
fcntl$setown(r18, 0x8, 0xffffffffffffffff)
fcntl$getownex(r18, 0x10, &(0x7f00000000c0)={0x0, <r19=>0x0})
r20 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r20, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="020000000100eb0000000000020001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYBLOB='\b\x00\x00', @ANYRES32, @ANYBLOB, @ANYBLOB="74b24e1f0ef01479f571f55b37d7089c077e74b1bd50a45834473f982e6fd1fd97f815af9ca38040c073a4e24e033248357bfb5ab67092f29f0b1a66e443cc9e9ef2a93a80607607e3231fc4077092a7af7f95cd0ac29c703cc271896016d7b31ca22f3b0b56e5fec2690ec778d14906d776e06d1e11235fee66cd668482429cbe849c5b"], 0x8, 0x1)
r21 = socket(0xa, 0x3, 0x8)
r22 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000)
ioctl$sock_inet_SIOCSIFFLAGS(r21, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r22, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r23=>0xffffffffffffffff}}}, 0x20)
sendmsg$key(r21, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
r24 = gettid()
waitid(0x83b895581628fca4, r24, &(0x7f0000000040), 0x2, &(0x7f0000000480))
sendmsg$key(r21, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r23, @ANYRESDEC=r24]], 0xfffffffffffffe56}}, 0x20004850)
r25 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r26 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0)
r27 = dup2(r26, r25)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r27, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r28 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r28)
r29 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x101405)
writev(r29, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2)
ioctl$SG_GET_REQUEST_TABLE(r29, 0x227d, &(0x7f0000000780))
kcmp(r28, r24, 0x0, 0xffffffffffffffff, r29)
ptrace$setopts(0x4206, r28, 0x0, 0x0)
r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r31=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0x2}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r28, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r27, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r19, r20, 0x0, 0x1, &(0x7f0000000080)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r17, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r13, r16, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r12, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)='/dev/ptmx\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r10, r11, 0x0, 0x8, &(0x7f0000000100)='syz_tun\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r9, r8, 0x0, 0x5, &(0x7f0000000340)=',em1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r32=>r5, r7, 0x0, 0xd, &(0x7f0000000240)='/selinux/mls\x00', r31}, 0x30)
fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, <r33=>0x0})
rt_tgsigqueueinfo(r32, r33, 0x0, &(0x7f0000000300)={0x5, 0x10000})
write(r4, &(0x7f0000000340), 0x41395527)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001500)={0x10000}, 0x4)
setsockopt$inet6_tcp_buf(r2, 0x6, 0xe, &(0x7f0000000140)="1e5da9bc7793999e848025a58b324ebec78eb457fc22a9e91a841566ddc30961db08bd91ad5ea2a218f05f3fb06130c4093e900401dd01a04f3fd0af6bb6fd28b48b72da1eacd8692603b2498782d70f20177ea068104186eafb3993141dbff6b01ebca167692945705816bda6fced47f1e92eeca8bac413dc06c5da1b61cf2ba6be8142491c9231dc1bdeb25d4b32ffc985c8639f973474ddb8677c463877e38f49a9ae688751f291613491cfb6148c0e1f66a5f0208d5b2e798eb9711c51fbe4c5e0257e3310dafeaae347ce9e3e9696f32d9ca7d0", 0xd6)
pipe(&(0x7f0000000200)={<r34=>0xffffffffffffffff})
vmsplice(r34, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

23:37:48 executing program 2:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x6100)
r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f3)
r3 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r3, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r1, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:48 executing program 5:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:48 executing program 1:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$P9_RVERSION(r1, &(0x7f0000000240)=ANY=[], 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, r2, 0x8)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
syz_open_dev$admmidi(&(0x7f00000014c0)='/dev/admmidi#\x00', 0xffffffff, 0x800080)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
r5 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setownex(r6, 0xf, &(0x7f0000000180)={0x0, r5})
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r8}, 0x10)
r9 = getpid()
sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r10 = getpgrp(0x0)
setpriority(0x0, r10, 0x0)
r11 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x1)
r12 = gettid()
process_vm_writev(r12, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/240, 0xf0}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/224, 0xe0}], 0x1, 0x0)
r13 = getpgid(0x0)
r14 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5)
r15 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1)
r16 = dup2(r15, r14)
writev(r16, &(0x7f0000000040)=[{&(0x7f00000002c0)='3', 0x1}], 0x1)
ppoll(&(0x7f0000000200)=[{r16}], 0x1, &(0x7f0000000280), 0x0, 0x0)
r17 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r18 = inotify_init1(0x0)
fcntl$setown(r18, 0x8, 0xffffffffffffffff)
fcntl$getownex(r18, 0x10, &(0x7f00000000c0)={0x0, <r19=>0x0})
r20 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r20, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="020000000100eb0000000000020001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYBLOB='\b\x00\x00', @ANYRES32, @ANYBLOB, @ANYBLOB="74b24e1f0ef01479f571f55b37d7089c077e74b1bd50a45834473f982e6fd1fd97f815af9ca38040c073a4e24e033248357bfb5ab67092f29f0b1a66e443cc9e9ef2a93a80607607e3231fc4077092a7af7f95cd0ac29c703cc271896016d7b31ca22f3b0b56e5fec2690ec778d14906d776e06d1e11235fee66cd668482429cbe849c5b"], 0x8, 0x1)
r21 = socket(0xa, 0x3, 0x8)
r22 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000)
ioctl$sock_inet_SIOCSIFFLAGS(r21, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r22, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r23=>0xffffffffffffffff}}}, 0x20)
sendmsg$key(r21, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
r24 = gettid()
waitid(0x83b895581628fca4, r24, &(0x7f0000000040), 0x2, &(0x7f0000000480))
sendmsg$key(r21, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r23, @ANYRESDEC=r24]], 0xfffffffffffffe56}}, 0x20004850)
r25 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r26 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0)
r27 = dup2(r26, r25)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r27, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r28 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r28)
r29 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x101405)
writev(r29, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2)
ioctl$SG_GET_REQUEST_TABLE(r29, 0x227d, &(0x7f0000000780))
kcmp(r28, r24, 0x0, 0xffffffffffffffff, r29)
ptrace$setopts(0x4206, r28, 0x0, 0x0)
r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r31=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0x2}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r28, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r27, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r19, r20, 0x0, 0x1, &(0x7f0000000080)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r17, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r13, r16, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r12, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)='/dev/ptmx\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r10, r11, 0x0, 0x8, &(0x7f0000000100)='syz_tun\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r9, r8, 0x0, 0x5, &(0x7f0000000340)=',em1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r32=>r5, r7, 0x0, 0xd, &(0x7f0000000240)='/selinux/mls\x00', r31}, 0x30)
fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, <r33=>0x0})
rt_tgsigqueueinfo(r32, r33, 0x0, &(0x7f0000000300)={0x5, 0x10000})
write(r4, &(0x7f0000000340), 0x41395527)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001500)={0x10000}, 0x4)
pipe(&(0x7f0000000200)={<r34=>0xffffffffffffffff})
vmsplice(r34, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

23:37:48 executing program 0:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:48 executing program 3:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:49 executing program 5:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:49 executing program 0:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f3)
r3 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r3, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:49 executing program 3:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:49 executing program 5:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:49 executing program 4:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x8, r2, 0x8)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
syz_open_dev$admmidi(&(0x7f00000014c0)='/dev/admmidi#\x00', 0xffffffff, 0x800080)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
r5 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setownex(r6, 0xf, &(0x7f0000000180)={0x0, r5})
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r8}, 0x10)
r9 = getpid()
sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r10 = getpgrp(0x0)
setpriority(0x0, r10, 0x0)
r11 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x1)
r12 = gettid()
process_vm_writev(r12, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/240, 0xf0}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/224, 0xe0}], 0x1, 0x0)
r13 = getpgid(0x0)
r14 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5)
r15 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1)
r16 = dup2(r15, r14)
writev(r16, &(0x7f0000000040)=[{&(0x7f00000002c0)='3', 0x1}], 0x1)
ppoll(&(0x7f0000000200)=[{r16}], 0x1, &(0x7f0000000280), 0x0, 0x0)
r17 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r18 = inotify_init1(0x0)
fcntl$setown(r18, 0x8, 0xffffffffffffffff)
fcntl$getownex(r18, 0x10, &(0x7f00000000c0)={0x0, <r19=>0x0})
r20 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r20, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="020000000100eb0000000000020001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYBLOB='\b\x00\x00', @ANYRES32, @ANYBLOB, @ANYBLOB="74b24e1f0ef01479f571f55b37d7089c077e74b1bd50a45834473f982e6fd1fd97f815af9ca38040c073a4e24e033248357bfb5ab67092f29f0b1a66e443cc9e9ef2a93a80607607e3231fc4077092a7af7f95cd0ac29c703cc271896016d7b31ca22f3b0b56e5fec2690ec778d14906d776e06d1e11235fee66cd668482429cbe849c5b"], 0x8, 0x1)
r21 = socket(0xa, 0x3, 0x8)
r22 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000)
ioctl$sock_inet_SIOCSIFFLAGS(r21, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r22, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r23=>0xffffffffffffffff}}}, 0x20)
sendmsg$key(r21, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
r24 = gettid()
waitid(0x83b895581628fca4, r24, &(0x7f0000000040), 0x2, &(0x7f0000000480))
sendmsg$key(r21, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r23, @ANYRESDEC=r24]], 0xfffffffffffffe56}}, 0x20004850)
r25 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r26 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0)
r27 = dup2(r26, r25)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r27, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r28 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r28)
r29 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x101405)
writev(r29, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2)
ioctl$SG_GET_REQUEST_TABLE(r29, 0x227d, &(0x7f0000000780))
kcmp(r28, r24, 0x0, 0xffffffffffffffff, r29)
ptrace$setopts(0x4206, r28, 0x0, 0x0)
r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r31=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0x2}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r28, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r27, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r19, r20, 0x0, 0x1, &(0x7f0000000080)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r17, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r13, r16, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r12, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)='/dev/ptmx\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r10, r11, 0x0, 0x8, &(0x7f0000000100)='syz_tun\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r9, r8, 0x0, 0x5, &(0x7f0000000340)=',em1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r32=>r5, r7, 0x0, 0xd, &(0x7f0000000240)='/selinux/mls\x00', r31}, 0x30)
fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, <r33=>0x0})
rt_tgsigqueueinfo(r32, r33, 0x0, &(0x7f0000000300)={0x5, 0x10000})
write(r4, &(0x7f0000000340), 0x41395527)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001500)={0x10000}, 0x4)
setsockopt$inet6_tcp_buf(r2, 0x6, 0xe, &(0x7f0000000140)="1e5da9bc7793999e848025a58b324ebec78eb457fc22a9e91a841566ddc30961db08bd91ad5ea2a218f05f3fb06130c4093e900401dd01a04f3fd0af6bb6fd28b48b72da1eacd8692603b2498782d70f20177ea068104186eafb3993141dbff6b01ebca167692945705816bda6fced47f1e92eeca8bac413dc06c5da1b61cf2ba6be8142491c9231dc1bdeb25d4b32ffc985c8639f973474ddb8677c463877e38f49a9ae688751f291613491cfb6148c0e1f66a5f0208d5b2e798eb9711c51fbe4c5e0257e3310dafeaae347ce9e3e9696f32d9ca7d0", 0xd6)
pipe(&(0x7f0000000200)={<r34=>0xffffffffffffffff})
vmsplice(r34, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

23:37:49 executing program 2:
add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x6100)
r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f3)
r3 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r3, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r1, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:49 executing program 0:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f3)
r3 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r3, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:49 executing program 1:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$P9_RVERSION(r1, &(0x7f0000000240)=ANY=[], 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, r2, 0x8)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
syz_open_dev$admmidi(&(0x7f00000014c0)='/dev/admmidi#\x00', 0xffffffff, 0x800080)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
r5 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setownex(r6, 0xf, &(0x7f0000000180)={0x0, r5})
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r8}, 0x10)
r9 = getpid()
sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r10 = getpgrp(0x0)
setpriority(0x0, r10, 0x0)
r11 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x1)
r12 = gettid()
process_vm_writev(r12, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/240, 0xf0}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/224, 0xe0}], 0x1, 0x0)
r13 = getpgid(0x0)
r14 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5)
r15 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1)
r16 = dup2(r15, r14)
writev(r16, &(0x7f0000000040)=[{&(0x7f00000002c0)='3', 0x1}], 0x1)
ppoll(&(0x7f0000000200)=[{r16}], 0x1, &(0x7f0000000280), 0x0, 0x0)
r17 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r18 = inotify_init1(0x0)
fcntl$setown(r18, 0x8, 0xffffffffffffffff)
fcntl$getownex(r18, 0x10, &(0x7f00000000c0)={0x0, <r19=>0x0})
r20 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r20, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="020000000100eb0000000000020001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYBLOB='\b\x00\x00', @ANYRES32, @ANYBLOB, @ANYBLOB="74b24e1f0ef01479f571f55b37d7089c077e74b1bd50a45834473f982e6fd1fd97f815af9ca38040c073a4e24e033248357bfb5ab67092f29f0b1a66e443cc9e9ef2a93a80607607e3231fc4077092a7af7f95cd0ac29c703cc271896016d7b31ca22f3b0b56e5fec2690ec778d14906d776e06d1e11235fee66cd668482429cbe849c5b"], 0x8, 0x1)
r21 = socket(0xa, 0x3, 0x8)
r22 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000)
ioctl$sock_inet_SIOCSIFFLAGS(r21, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r22, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r23=>0xffffffffffffffff}}}, 0x20)
sendmsg$key(r21, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
r24 = gettid()
waitid(0x83b895581628fca4, r24, &(0x7f0000000040), 0x2, &(0x7f0000000480))
sendmsg$key(r21, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r23, @ANYRESDEC=r24]], 0xfffffffffffffe56}}, 0x20004850)
r25 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r26 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0)
r27 = dup2(r26, r25)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r27, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r28 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r28)
r29 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x101405)
writev(r29, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2)
ioctl$SG_GET_REQUEST_TABLE(r29, 0x227d, &(0x7f0000000780))
kcmp(r28, r24, 0x0, 0xffffffffffffffff, r29)
ptrace$setopts(0x4206, r28, 0x0, 0x0)
r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r31=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0x2}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r28, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r27, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r19, r20, 0x0, 0x1, &(0x7f0000000080)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r17, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r13, r16, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r12, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)='/dev/ptmx\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r10, r11, 0x0, 0x8, &(0x7f0000000100)='syz_tun\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r9, r8, 0x0, 0x5, &(0x7f0000000340)=',em1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r32=>r5, r7, 0x0, 0xd, &(0x7f0000000240)='/selinux/mls\x00', r31}, 0x30)
fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, <r33=>0x0})
rt_tgsigqueueinfo(r32, r33, 0x0, &(0x7f0000000300)={0x5, 0x10000})
write(r4, &(0x7f0000000340), 0x41395527)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001500)={0x10000}, 0x4)
pipe(&(0x7f0000000200)={<r34=>0xffffffffffffffff})
vmsplice(r34, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

23:37:49 executing program 3:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$P9_RVERSION(r1, &(0x7f0000000240)=ANY=[], 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, r2, 0x8)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
syz_open_dev$admmidi(&(0x7f00000014c0)='/dev/admmidi#\x00', 0xffffffff, 0x800080)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
r5 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setownex(r6, 0xf, &(0x7f0000000180)={0x0, r5})
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r8}, 0x10)
r9 = getpid()
sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r10 = getpgrp(0x0)
setpriority(0x0, r10, 0x0)
r11 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x1)
r12 = gettid()
process_vm_writev(r12, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/240, 0xf0}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/224, 0xe0}], 0x1, 0x0)
r13 = getpgid(0x0)
r14 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5)
r15 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1)
r16 = dup2(r15, r14)
writev(r16, &(0x7f0000000040)=[{&(0x7f00000002c0)='3', 0x1}], 0x1)
ppoll(&(0x7f0000000200)=[{r16}], 0x1, &(0x7f0000000280), 0x0, 0x0)
r17 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r18 = inotify_init1(0x0)
fcntl$setown(r18, 0x8, 0xffffffffffffffff)
fcntl$getownex(r18, 0x10, &(0x7f00000000c0)={0x0, <r19=>0x0})
r20 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r20, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="020000000100eb0000000000020001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYBLOB='\b\x00\x00', @ANYRES32, @ANYBLOB, @ANYBLOB="74b24e1f0ef01479f571f55b37d7089c077e74b1bd50a45834473f982e6fd1fd97f815af9ca38040c073a4e24e033248357bfb5ab67092f29f0b1a66e443cc9e9ef2a93a80607607e3231fc4077092a7af7f95cd0ac29c703cc271896016d7b31ca22f3b0b56e5fec2690ec778d14906d776e06d1e11235fee66cd668482429cbe849c5b"], 0x8, 0x1)
r21 = socket(0xa, 0x3, 0x8)
r22 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000)
ioctl$sock_inet_SIOCSIFFLAGS(r21, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r22, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r23=>0xffffffffffffffff}}}, 0x20)
sendmsg$key(r21, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
r24 = gettid()
waitid(0x83b895581628fca4, r24, &(0x7f0000000040), 0x2, &(0x7f0000000480))
sendmsg$key(r21, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r23, @ANYRESDEC=r24]], 0xfffffffffffffe56}}, 0x20004850)
r25 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r26 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0)
r27 = dup2(r26, r25)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r27, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r28 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r28)
r29 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x101405)
writev(r29, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2)
ioctl$SG_GET_REQUEST_TABLE(r29, 0x227d, &(0x7f0000000780))
kcmp(r28, r24, 0x0, 0xffffffffffffffff, r29)
ptrace$setopts(0x4206, r28, 0x0, 0x0)
r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r31=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0x2}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r28, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r27, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r19, r20, 0x0, 0x1, &(0x7f0000000080)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r17, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r13, r16, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r12, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)='/dev/ptmx\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r10, r11, 0x0, 0x8, &(0x7f0000000100)='syz_tun\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r9, r8, 0x0, 0x5, &(0x7f0000000340)=',em1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r32=>r5, r7, 0x0, 0xd, &(0x7f0000000240)='/selinux/mls\x00', r31}, 0x30)
fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, <r33=>0x0})
rt_tgsigqueueinfo(r32, r33, 0x0, &(0x7f0000000300)={0x5, 0x10000})
write(r4, &(0x7f0000000340), 0x41395527)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001500)={0x10000}, 0x4)
pipe(&(0x7f0000000200)={<r34=>0xffffffffffffffff})
vmsplice(r34, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

23:37:50 executing program 2:
add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x6100)
r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f3)
r3 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r3, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r1, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:50 executing program 0:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f3)
r3 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r3, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:50 executing program 5:
add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x6100)
r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f3)
r3 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r3, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r1, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:50 executing program 0:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:50 executing program 4:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x8, r2, 0x8)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
syz_open_dev$admmidi(&(0x7f00000014c0)='/dev/admmidi#\x00', 0xffffffff, 0x800080)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
r5 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setownex(r6, 0xf, &(0x7f0000000180)={0x0, r5})
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r8}, 0x10)
r9 = getpid()
sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r10 = getpgrp(0x0)
setpriority(0x0, r10, 0x0)
r11 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x1)
r12 = gettid()
process_vm_writev(r12, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/240, 0xf0}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/224, 0xe0}], 0x1, 0x0)
r13 = getpgid(0x0)
r14 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5)
r15 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1)
r16 = dup2(r15, r14)
writev(r16, &(0x7f0000000040)=[{&(0x7f00000002c0)='3', 0x1}], 0x1)
ppoll(&(0x7f0000000200)=[{r16}], 0x1, &(0x7f0000000280), 0x0, 0x0)
r17 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r18 = inotify_init1(0x0)
fcntl$setown(r18, 0x8, 0xffffffffffffffff)
fcntl$getownex(r18, 0x10, &(0x7f00000000c0)={0x0, <r19=>0x0})
r20 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r20, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="020000000100eb0000000000020001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYBLOB='\b\x00\x00', @ANYRES32, @ANYBLOB="080005115951c076757a2164ca8343141a694359b9c301bf24d95441febf5a16ae429194cf41f9773a21df3fbefdfd920f68e5e58ca390181d9c686c6f0806797ac4b7731b7f6de976e4e0d345ac1f83f37848b5967ec0775d6b112c47c6e95551477839c728d326f78e5d0799b1c02c3418b1a48e41d54f698cc38b60", @ANYBLOB="74b24e1f0ef01479f571f55b37d7089c077e74b1bd50a45834473f982e6fd1fd97f815af9ca38040c073a4e24e033248357bfb5ab67092f29f0b1a66e443cc9e9ef2a93a80607607e3231fc4077092a7af7f95cd0ac29c703cc271896016d7b31ca22f3b0b56e5fec2690ec778d14906d776e06d1e11235fee66cd668482429cbe849c5b"], 0x8, 0x1)
r21 = socket(0xa, 0x3, 0x8)
r22 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000)
ioctl$sock_inet_SIOCSIFFLAGS(r21, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r22, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r23=>0xffffffffffffffff}}}, 0x20)
sendmsg$key(r21, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
r24 = gettid()
waitid(0x83b895581628fca4, r24, &(0x7f0000000040), 0x2, &(0x7f0000000480))
sendmsg$key(r21, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r23, @ANYRESDEC=r24]], 0xfffffffffffffe56}}, 0x20004850)
r25 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r26 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0)
r27 = dup2(r26, r25)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r27, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r28 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r28)
r29 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x101405)
writev(r29, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2)
ioctl$SG_GET_REQUEST_TABLE(r29, 0x227d, &(0x7f0000000780))
kcmp(r28, r24, 0x0, 0xffffffffffffffff, r29)
ptrace$setopts(0x4206, r28, 0x0, 0x0)
r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r31=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0x2}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r28, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r27, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r19, r20, 0x0, 0x1, &(0x7f0000000080)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r17, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r13, r16, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r12, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)='/dev/ptmx\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r10, r11, 0x0, 0x8, &(0x7f0000000100)='syz_tun\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r9, r8, 0x0, 0x5, &(0x7f0000000340)=',em1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r32=>r5, r7, 0x0, 0xd, &(0x7f0000000240)='/selinux/mls\x00', r31}, 0x30)
fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, <r33=>0x0})
rt_tgsigqueueinfo(r32, r33, 0x0, &(0x7f0000000300)={0x5, 0x10000})
write(r4, &(0x7f0000000340), 0x41395527)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001500)={0x10000}, 0x4)
setsockopt$inet6_tcp_buf(r2, 0x6, 0xe, &(0x7f0000000140)="1e5da9bc7793999e848025a58b324ebec78eb457fc22a9e91a841566ddc30961db08bd91ad5ea2a218f05f3fb06130c4093e900401dd01a04f3fd0af6bb6fd28b48b72da1eacd8692603b2498782d70f20177ea068104186eafb3993141dbff6b01ebca167692945705816bda6fced47f1e92eeca8bac413dc06c5da1b61cf2ba6be8142491c9231dc1bdeb25d4b32ffc985c8639f973474ddb8677c463877e38f49a9ae688751f291613491cfb6148c0e1f66a5f0208d5b2e798eb9711c51fbe4c5e0257e3310dafeaae347ce9e3e9696f32d9ca7d0", 0xd6)
pipe(&(0x7f0000000200)={<r34=>0xffffffffffffffff})
vmsplice(r34, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

23:37:50 executing program 2:
add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x6100)
r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f3)
r3 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r3, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r1, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:50 executing program 5:
add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x6100)
r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f3)
r3 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r3, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r1, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:50 executing program 0:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:50 executing program 1:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$P9_RVERSION(r1, &(0x7f0000000240)=ANY=[], 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, r2, 0x8)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
syz_open_dev$admmidi(&(0x7f00000014c0)='/dev/admmidi#\x00', 0xffffffff, 0x800080)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
r5 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setownex(r6, 0xf, &(0x7f0000000180)={0x0, r5})
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r8}, 0x10)
r9 = getpid()
sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r10 = getpgrp(0x0)
setpriority(0x0, r10, 0x0)
r11 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x1)
r12 = gettid()
process_vm_writev(r12, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/240, 0xf0}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/224, 0xe0}], 0x1, 0x0)
r13 = getpgid(0x0)
r14 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5)
r15 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1)
r16 = dup2(r15, r14)
writev(r16, &(0x7f0000000040)=[{&(0x7f00000002c0)='3', 0x1}], 0x1)
ppoll(&(0x7f0000000200)=[{r16}], 0x1, &(0x7f0000000280), 0x0, 0x0)
r17 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r18 = inotify_init1(0x0)
fcntl$setown(r18, 0x8, 0xffffffffffffffff)
fcntl$getownex(r18, 0x10, &(0x7f00000000c0)={0x0, <r19=>0x0})
r20 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r20, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="020000000100eb0000000000020001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYBLOB='\b\x00\x00', @ANYRES32, @ANYBLOB, @ANYBLOB="74b24e1f0ef01479f571f55b37d7089c077e74b1bd50a45834473f982e6fd1fd97f815af9ca38040c073a4e24e033248357bfb5ab67092f29f0b1a66e443cc9e9ef2a93a80607607e3231fc4077092a7af7f95cd0ac29c703cc271896016d7b31ca22f3b0b56e5fec2690ec778d14906d776e06d1e11235fee66cd668482429cbe849c5b"], 0x8, 0x1)
r21 = socket(0xa, 0x3, 0x8)
r22 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000)
ioctl$sock_inet_SIOCSIFFLAGS(r21, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r22, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r23=>0xffffffffffffffff}}}, 0x20)
sendmsg$key(r21, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
r24 = gettid()
waitid(0x83b895581628fca4, r24, &(0x7f0000000040), 0x2, &(0x7f0000000480))
sendmsg$key(r21, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r23, @ANYRESDEC=r24]], 0xfffffffffffffe56}}, 0x20004850)
r25 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r26 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0)
r27 = dup2(r26, r25)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r27, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r28 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r28)
r29 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x101405)
writev(r29, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2)
ioctl$SG_GET_REQUEST_TABLE(r29, 0x227d, &(0x7f0000000780))
kcmp(r28, r24, 0x0, 0xffffffffffffffff, r29)
ptrace$setopts(0x4206, r28, 0x0, 0x0)
r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r31=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0x2}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r28, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r27, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r19, r20, 0x0, 0x1, &(0x7f0000000080)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r17, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r13, r16, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r12, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)='/dev/ptmx\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r10, r11, 0x0, 0x8, &(0x7f0000000100)='syz_tun\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r9, r8, 0x0, 0x5, &(0x7f0000000340)=',em1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r32=>r5, r7, 0x0, 0xd, &(0x7f0000000240)='/selinux/mls\x00', r31}, 0x30)
fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, <r33=>0x0})
rt_tgsigqueueinfo(r32, r33, 0x0, &(0x7f0000000300)={0x5, 0x10000})
write(r4, &(0x7f0000000340), 0x41395527)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001500)={0x10000}, 0x4)
pipe(&(0x7f0000000200)={<r34=>0xffffffffffffffff})
vmsplice(r34, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

23:37:50 executing program 2:
keyctl$assume_authority(0x10, 0x0)
r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x6100)
r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f3)
r3 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r3, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r1, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:50 executing program 5:
add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x6100)
r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f3)
r3 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r3, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r1, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:51 executing program 3:
add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x6100)
r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f3)
r3 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r3, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r1, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:51 executing program 0:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:51 executing program 2:
keyctl$assume_authority(0x10, 0x0)
r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x6100)
r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f3)
r3 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r3, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r1, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:51 executing program 5:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:51 executing program 0:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6100)
r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f3)
r3 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r3, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(0xffffffffffffffff, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:51 executing program 4:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x8, r2, 0x8)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
syz_open_dev$admmidi(&(0x7f00000014c0)='/dev/admmidi#\x00', 0xffffffff, 0x800080)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
r5 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setownex(r6, 0xf, &(0x7f0000000180)={0x0, r5})
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r8}, 0x10)
r9 = getpid()
sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r10 = getpgrp(0x0)
setpriority(0x0, r10, 0x0)
r11 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x1)
r12 = gettid()
process_vm_writev(r12, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/240, 0xf0}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/224, 0xe0}], 0x1, 0x0)
r13 = getpgid(0x0)
r14 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5)
r15 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1)
r16 = dup2(r15, r14)
writev(r16, &(0x7f0000000040)=[{&(0x7f00000002c0)='3', 0x1}], 0x1)
ppoll(&(0x7f0000000200)=[{r16}], 0x1, &(0x7f0000000280), 0x0, 0x0)
r17 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r18 = inotify_init1(0x0)
fcntl$setown(r18, 0x8, 0xffffffffffffffff)
fcntl$getownex(r18, 0x10, &(0x7f00000000c0)={0x0, <r19=>0x0})
r20 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r20, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="020000000100eb0000000000020001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYBLOB='\b\x00\x00', @ANYRES32, @ANYBLOB="080005115951c076757a2164ca8343141a694359b9c301bf24d95441febf5a16ae429194cf41f9773a21df3fbefdfd920f68e5e58ca390181d9c686c6f0806797ac4b7731b7f6de976e4e0d345ac1f83f37848b5967ec0775d6b112c47c6e95551477839c728d326f78e5d0799b1c02c3418b1a48e41d54f698cc38b60", @ANYBLOB="74b24e1f0ef01479f571f55b37d7089c077e74b1bd50a45834473f982e6fd1fd97f815af9ca38040c073a4e24e033248357bfb5ab67092f29f0b1a66e443cc9e9ef2a93a80607607e3231fc4077092a7af7f95cd0ac29c703cc271896016d7b31ca22f3b0b56e5fec2690ec778d14906d776e06d1e11235fee66cd668482429cbe849c5b"], 0x8, 0x1)
r21 = socket(0xa, 0x3, 0x8)
r22 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000)
ioctl$sock_inet_SIOCSIFFLAGS(r21, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r22, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r23=>0xffffffffffffffff}}}, 0x20)
sendmsg$key(r21, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
r24 = gettid()
waitid(0x83b895581628fca4, r24, &(0x7f0000000040), 0x2, &(0x7f0000000480))
sendmsg$key(r21, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r23, @ANYRESDEC=r24]], 0xfffffffffffffe56}}, 0x20004850)
r25 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r26 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0)
r27 = dup2(r26, r25)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r27, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r28 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r28)
r29 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x101405)
writev(r29, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2)
ioctl$SG_GET_REQUEST_TABLE(r29, 0x227d, &(0x7f0000000780))
kcmp(r28, r24, 0x0, 0xffffffffffffffff, r29)
ptrace$setopts(0x4206, r28, 0x0, 0x0)
r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r31=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0x2}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r28, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r27, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r19, r20, 0x0, 0x1, &(0x7f0000000080)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r17, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r13, r16, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r12, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)='/dev/ptmx\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r10, r11, 0x0, 0x8, &(0x7f0000000100)='syz_tun\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r9, r8, 0x0, 0x5, &(0x7f0000000340)=',em1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r32=>r5, r7, 0x0, 0xd, &(0x7f0000000240)='/selinux/mls\x00', r31}, 0x30)
fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, <r33=>0x0})
rt_tgsigqueueinfo(r32, r33, 0x0, &(0x7f0000000300)={0x5, 0x10000})
write(r4, &(0x7f0000000340), 0x41395527)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001500)={0x10000}, 0x4)
setsockopt$inet6_tcp_buf(r2, 0x6, 0xe, &(0x7f0000000140)="1e5da9bc7793999e848025a58b324ebec78eb457fc22a9e91a841566ddc30961db08bd91ad5ea2a218f05f3fb06130c4093e900401dd01a04f3fd0af6bb6fd28b48b72da1eacd8692603b2498782d70f20177ea068104186eafb3993141dbff6b01ebca167692945705816bda6fced47f1e92eeca8bac413dc06c5da1b61cf2ba6be8142491c9231dc1bdeb25d4b32ffc985c8639f973474ddb8677c463877e38f49a9ae688751f291613491cfb6148c0e1f66a5f0208d5b2e798eb9711c51fbe4c5e0257e3310dafeaae347ce9e3e9696f32d9ca7d0", 0xd6)
pipe(&(0x7f0000000200)={<r34=>0xffffffffffffffff})
vmsplice(r34, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

23:37:51 executing program 2:
keyctl$assume_authority(0x10, 0x0)
r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x6100)
r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f3)
r3 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r3, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r1, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:51 executing program 3:
add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x6100)
r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f3)
r3 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r3, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r1, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:51 executing program 0:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6100)
r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f3)
r3 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r3, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(0xffffffffffffffff, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:51 executing program 0:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6100)
r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f3)
r3 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r3, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(0xffffffffffffffff, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:51 executing program 1:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$P9_RVERSION(r1, &(0x7f0000000240)=ANY=[], 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, r2, 0x8)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
syz_open_dev$admmidi(&(0x7f00000014c0)='/dev/admmidi#\x00', 0xffffffff, 0x800080)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
r5 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setownex(r6, 0xf, &(0x7f0000000180)={0x0, r5})
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r8}, 0x10)
r9 = getpid()
sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r10 = getpgrp(0x0)
setpriority(0x0, r10, 0x0)
r11 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x1)
r12 = gettid()
process_vm_writev(r12, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/240, 0xf0}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/224, 0xe0}], 0x1, 0x0)
r13 = getpgid(0x0)
r14 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5)
r15 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1)
r16 = dup2(r15, r14)
writev(r16, &(0x7f0000000040)=[{&(0x7f00000002c0)='3', 0x1}], 0x1)
ppoll(&(0x7f0000000200)=[{r16}], 0x1, &(0x7f0000000280), 0x0, 0x0)
r17 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r18 = inotify_init1(0x0)
fcntl$setown(r18, 0x8, 0xffffffffffffffff)
fcntl$getownex(r18, 0x10, &(0x7f00000000c0)={0x0, <r19=>0x0})
r20 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r20, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="020000000100eb0000000000020001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYBLOB='\b\x00\x00', @ANYRES32, @ANYBLOB="080005115951c076757a2164ca8343141a694359b9c301bf24d95441febf5a16ae429194cf41f9773a21df3fbefdfd920f68e5e58ca390181d9c686c6f0806797ac4b7731b7f6de976e4e0d345ac1f83f37848b5967ec0775d6b112c47c6e95551477839c728d326f78e5d0799b1c02c3418b1a48e41d54f698cc38b60", @ANYBLOB="74b24e1f0ef01479f571f55b37d7089c077e74b1bd50a45834473f982e6fd1fd97f815af9ca38040c073a4e24e033248357bfb5ab67092f29f0b1a66e443cc9e9ef2a93a80607607e3231fc4077092a7af7f95cd0ac29c703cc271896016d7b31ca22f3b0b56e5fec2690ec778d14906d776e06d1e11235fee66cd668482429cbe849c5b"], 0x8, 0x1)
r21 = socket(0xa, 0x3, 0x8)
r22 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000)
ioctl$sock_inet_SIOCSIFFLAGS(r21, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r22, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r23=>0xffffffffffffffff}}}, 0x20)
sendmsg$key(r21, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
r24 = gettid()
waitid(0x83b895581628fca4, r24, &(0x7f0000000040), 0x2, &(0x7f0000000480))
sendmsg$key(r21, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r23, @ANYRESDEC=r24]], 0xfffffffffffffe56}}, 0x20004850)
r25 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r26 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0)
r27 = dup2(r26, r25)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r27, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r28 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r28)
r29 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x101405)
writev(r29, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2)
ioctl$SG_GET_REQUEST_TABLE(r29, 0x227d, &(0x7f0000000780))
kcmp(r28, r24, 0x0, 0xffffffffffffffff, r29)
ptrace$setopts(0x4206, r28, 0x0, 0x0)
r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r31=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0x2}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r28, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r27, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r19, r20, 0x0, 0x1, &(0x7f0000000080)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r17, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r13, r16, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r12, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)='/dev/ptmx\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r10, r11, 0x0, 0x8, &(0x7f0000000100)='syz_tun\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r9, r8, 0x0, 0x5, &(0x7f0000000340)=',em1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r32=>r5, r7, 0x0, 0xd, &(0x7f0000000240)='/selinux/mls\x00', r31}, 0x30)
fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, <r33=>0x0})
rt_tgsigqueueinfo(r32, r33, 0x0, &(0x7f0000000300)={0x5, 0x10000})
write(r4, &(0x7f0000000340), 0x41395527)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001500)={0x10000}, 0x4)
pipe(&(0x7f0000000200)={<r34=>0xffffffffffffffff})
vmsplice(r34, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

23:37:51 executing program 2:
r0 = add_key$user(0x0, &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:51 executing program 5:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x8, r2, 0x8)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
syz_open_dev$admmidi(&(0x7f00000014c0)='/dev/admmidi#\x00', 0xffffffff, 0x800080)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
r5 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setownex(r6, 0xf, &(0x7f0000000180)={0x0, r5})
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r8}, 0x10)
r9 = getpid()
sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r10 = getpgrp(0x0)
setpriority(0x0, r10, 0x0)
r11 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x1)
r12 = gettid()
process_vm_writev(r12, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/240, 0xf0}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/224, 0xe0}], 0x1, 0x0)
r13 = getpgid(0x0)
r14 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5)
r15 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1)
r16 = dup2(r15, r14)
writev(r16, &(0x7f0000000040)=[{&(0x7f00000002c0)='3', 0x1}], 0x1)
ppoll(&(0x7f0000000200)=[{r16}], 0x1, &(0x7f0000000280), 0x0, 0x0)
r17 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r18 = inotify_init1(0x0)
fcntl$setown(r18, 0x8, 0xffffffffffffffff)
fcntl$getownex(r18, 0x10, &(0x7f00000000c0)={0x0, <r19=>0x0})
r20 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r20, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="020000000100eb0000000000020001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYBLOB='\b\x00\x00', @ANYRES32, @ANYBLOB="080005115951c076757a2164ca8343141a694359b9c301bf24d95441febf5a16ae429194cf41f9773a21df3fbefdfd920f68e5e58ca390181d9c686c6f0806797ac4b7731b7f6de976e4e0d345ac1f83f37848b5967ec0775d6b112c47c6e95551477839c728d326f78e5d0799b1c02c3418b1a48e41d54f698cc38b60", @ANYBLOB="74b24e1f0ef01479f571f55b37d7089c077e74b1bd50a45834473f982e6fd1fd97f815af9ca38040c073a4e24e033248357bfb5ab67092f29f0b1a66e443cc9e9ef2a93a80607607e3231fc4077092a7af7f95cd0ac29c703cc271896016d7b31ca22f3b0b56e5fec2690ec778d14906d776e06d1e11235fee66cd668482429cbe849c5b"], 0x8, 0x1)
r21 = socket(0xa, 0x3, 0x8)
r22 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000)
ioctl$sock_inet_SIOCSIFFLAGS(r21, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r22, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r23=>0xffffffffffffffff}}}, 0x20)
sendmsg$key(r21, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
r24 = gettid()
waitid(0x83b895581628fca4, r24, &(0x7f0000000040), 0x2, &(0x7f0000000480))
sendmsg$key(r21, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r23, @ANYRESDEC=r24]], 0xfffffffffffffe56}}, 0x20004850)
r25 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r26 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0)
r27 = dup2(r26, r25)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r27, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r28 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r28)
r29 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x101405)
writev(r29, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2)
ioctl$SG_GET_REQUEST_TABLE(r29, 0x227d, &(0x7f0000000780))
kcmp(r28, r24, 0x0, 0xffffffffffffffff, r29)
ptrace$setopts(0x4206, r28, 0x0, 0x0)
r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r31=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0x2}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r28, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r27, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r19, r20, 0x0, 0x1, &(0x7f0000000080)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r17, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r13, r16, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r12, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)='/dev/ptmx\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r10, r11, 0x0, 0x8, &(0x7f0000000100)='syz_tun\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r9, r8, 0x0, 0x5, &(0x7f0000000340)=',em1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r32=>r5, r7, 0x0, 0xd, &(0x7f0000000240)='/selinux/mls\x00', r31}, 0x30)
fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, <r33=>0x0})
rt_tgsigqueueinfo(r32, r33, 0x0, &(0x7f0000000300)={0x5, 0x10000})
write(r4, &(0x7f0000000340), 0x41395527)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001500)={0x10000}, 0x4)
setsockopt$inet6_tcp_buf(r2, 0x6, 0xe, &(0x7f0000000140)="1e5da9bc7793999e848025a58b324ebec78eb457fc22a9e91a841566ddc30961db08bd91ad5ea2a218f05f3fb06130c4093e900401dd01a04f3fd0af6bb6fd28b48b72da1eacd8692603b2498782d70f20177ea068104186eafb3993141dbff6b01ebca167692945705816bda6fced47f1e92eeca8bac413dc06c5da1b61cf2ba6be8142491c9231dc1bdeb25d4b32ffc985c8639f973474ddb8677c463877e38f49a9ae688751f291613491cfb6148c0e1f66a5f0208d5b2e798eb9711c51fbe4c5e0257e3310dafeaae347ce9e3e9696f32d9ca7d0", 0xd6)
pipe(&(0x7f0000000200)={<r34=>0xffffffffffffffff})
vmsplice(r34, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

23:37:51 executing program 3:
add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x6100)
r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f3)
r3 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r3, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r1, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:52 executing program 0:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x6100)
r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f3)
r3 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r3, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r1, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:52 executing program 2:
r0 = add_key$user(0x0, &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:52 executing program 3:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:52 executing program 4:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x8, r2, 0x8)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
syz_open_dev$admmidi(&(0x7f00000014c0)='/dev/admmidi#\x00', 0xffffffff, 0x800080)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
r5 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setownex(r6, 0xf, &(0x7f0000000180)={0x0, r5})
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r8}, 0x10)
r9 = getpid()
sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r10 = getpgrp(0x0)
setpriority(0x0, r10, 0x0)
r11 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x1)
r12 = gettid()
process_vm_writev(r12, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/240, 0xf0}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/224, 0xe0}], 0x1, 0x0)
r13 = getpgid(0x0)
r14 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5)
r15 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1)
r16 = dup2(r15, r14)
writev(r16, &(0x7f0000000040)=[{&(0x7f00000002c0)='3', 0x1}], 0x1)
ppoll(&(0x7f0000000200)=[{r16}], 0x1, &(0x7f0000000280), 0x0, 0x0)
r17 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r18 = inotify_init1(0x0)
fcntl$setown(r18, 0x8, 0xffffffffffffffff)
fcntl$getownex(r18, 0x10, &(0x7f00000000c0)={0x0, <r19=>0x0})
r20 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r20, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="020000000100eb0000000000020001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYBLOB='\b\x00\x00', @ANYRES32, @ANYBLOB="080005115951c076757a2164ca8343141a694359b9c301bf24d95441febf5a16ae429194cf41f9773a21df3fbefdfd920f68e5e58ca390181d9c686c6f0806797ac4b7731b7f6de976e4e0d345ac1f83f37848b5967ec0775d6b112c47c6e95551477839c728d326f78e5d0799b1c02c3418b1a48e41d54f698cc38b60", @ANYBLOB="74b24e1f0ef01479f571f55b37d7089c077e74b1bd50a45834473f982e6fd1fd97f815af9ca38040c073a4e24e033248357bfb5ab67092f29f0b1a66e443cc9e9ef2a93a80607607e3231fc4077092a7af7f95cd0ac29c703cc271896016d7b31ca22f3b0b56e5fec2690ec778d14906d776e06d1e11235fee66cd668482429cbe849c5b"], 0x8, 0x1)
r21 = socket(0xa, 0x3, 0x8)
r22 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000)
ioctl$sock_inet_SIOCSIFFLAGS(r21, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r22, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r23=>0xffffffffffffffff}}}, 0x20)
sendmsg$key(r21, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
r24 = gettid()
waitid(0x83b895581628fca4, r24, &(0x7f0000000040), 0x2, &(0x7f0000000480))
sendmsg$key(r21, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r23, @ANYRESDEC=r24]], 0xfffffffffffffe56}}, 0x20004850)
r25 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r26 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0)
r27 = dup2(r26, r25)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r27, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r28 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r28)
r29 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x101405)
writev(r29, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2)
ioctl$SG_GET_REQUEST_TABLE(r29, 0x227d, &(0x7f0000000780))
kcmp(r28, r24, 0x0, 0xffffffffffffffff, r29)
ptrace$setopts(0x4206, r28, 0x0, 0x0)
r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r31=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0x2}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r28, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r27, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r19, r20, 0x0, 0x1, &(0x7f0000000080)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r17, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r13, r16, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r12, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)='/dev/ptmx\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r10, r11, 0x0, 0x8, &(0x7f0000000100)='syz_tun\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r9, r8, 0x0, 0x5, &(0x7f0000000340)=',em1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r32=>r5, r7, 0x0, 0xd, &(0x7f0000000240)='/selinux/mls\x00', r31}, 0x30)
fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, <r33=>0x0})
rt_tgsigqueueinfo(r32, r33, 0x0, &(0x7f0000000300)={0x5, 0x10000})
write(r4, &(0x7f0000000340), 0x41395527)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001500)={0x10000}, 0x4)
setsockopt$inet6_tcp_buf(r2, 0x6, 0xe, &(0x7f0000000140)="1e5da9bc7793999e848025a58b324ebec78eb457fc22a9e91a841566ddc30961db08bd91ad5ea2a218f05f3fb06130c4093e900401dd01a04f3fd0af6bb6fd28b48b72da1eacd8692603b2498782d70f20177ea068104186eafb3993141dbff6b01ebca167692945705816bda6fced47f1e92eeca8bac413dc06c5da1b61cf2ba6be8142491c9231dc1bdeb25d4b32ffc985c8639f973474ddb8677c463877e38f49a9ae688751f291613491cfb6148c0e1f66a5f0208d5b2e798eb9711c51fbe4c5e0257e3310dafeaae347ce9e3e9696f32d9ca7d0", 0xd6)
pipe(&(0x7f0000000200)={<r34=>0xffffffffffffffff})
vmsplice(r34, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

23:37:52 executing program 2:
r0 = add_key$user(0x0, &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:52 executing program 2:
r0 = add_key$user(&(0x7f0000000600)='user\x00', 0x0, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:52 executing program 3:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:52 executing program 1:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$P9_RVERSION(r1, &(0x7f0000000240)=ANY=[], 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, r2, 0x8)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
syz_open_dev$admmidi(&(0x7f00000014c0)='/dev/admmidi#\x00', 0xffffffff, 0x800080)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
r5 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setownex(r6, 0xf, &(0x7f0000000180)={0x0, r5})
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r8}, 0x10)
r9 = getpid()
sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r10 = getpgrp(0x0)
setpriority(0x0, r10, 0x0)
r11 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x1)
r12 = gettid()
process_vm_writev(r12, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/240, 0xf0}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/224, 0xe0}], 0x1, 0x0)
r13 = getpgid(0x0)
r14 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5)
r15 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1)
r16 = dup2(r15, r14)
writev(r16, &(0x7f0000000040)=[{&(0x7f00000002c0)='3', 0x1}], 0x1)
ppoll(&(0x7f0000000200)=[{r16}], 0x1, &(0x7f0000000280), 0x0, 0x0)
r17 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r18 = inotify_init1(0x0)
fcntl$setown(r18, 0x8, 0xffffffffffffffff)
fcntl$getownex(r18, 0x10, &(0x7f00000000c0)={0x0, <r19=>0x0})
r20 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r20, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="020000000100eb0000000000020001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYBLOB='\b\x00\x00', @ANYRES32, @ANYBLOB="080005115951c076757a2164ca8343141a694359b9c301bf24d95441febf5a16ae429194cf41f9773a21df3fbefdfd920f68e5e58ca390181d9c686c6f0806797ac4b7731b7f6de976e4e0d345ac1f83f37848b5967ec0775d6b112c47c6e95551477839c728d326f78e5d0799b1c02c3418b1a48e41d54f698cc38b60", @ANYBLOB="74b24e1f0ef01479f571f55b37d7089c077e74b1bd50a45834473f982e6fd1fd97f815af9ca38040c073a4e24e033248357bfb5ab67092f29f0b1a66e443cc9e9ef2a93a80607607e3231fc4077092a7af7f95cd0ac29c703cc271896016d7b31ca22f3b0b56e5fec2690ec778d14906d776e06d1e11235fee66cd668482429cbe849c5b"], 0x8, 0x1)
r21 = socket(0xa, 0x3, 0x8)
r22 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000)
ioctl$sock_inet_SIOCSIFFLAGS(r21, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r22, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r23=>0xffffffffffffffff}}}, 0x20)
sendmsg$key(r21, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
r24 = gettid()
waitid(0x83b895581628fca4, r24, &(0x7f0000000040), 0x2, &(0x7f0000000480))
sendmsg$key(r21, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r23, @ANYRESDEC=r24]], 0xfffffffffffffe56}}, 0x20004850)
r25 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r26 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0)
r27 = dup2(r26, r25)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r27, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r28 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r28)
r29 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x101405)
writev(r29, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2)
ioctl$SG_GET_REQUEST_TABLE(r29, 0x227d, &(0x7f0000000780))
kcmp(r28, r24, 0x0, 0xffffffffffffffff, r29)
ptrace$setopts(0x4206, r28, 0x0, 0x0)
r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r31=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0x2}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r28, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r27, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r19, r20, 0x0, 0x1, &(0x7f0000000080)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r17, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r13, r16, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r12, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)='/dev/ptmx\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r10, r11, 0x0, 0x8, &(0x7f0000000100)='syz_tun\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r9, r8, 0x0, 0x5, &(0x7f0000000340)=',em1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r32=>r5, r7, 0x0, 0xd, &(0x7f0000000240)='/selinux/mls\x00', r31}, 0x30)
fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, <r33=>0x0})
rt_tgsigqueueinfo(r32, r33, 0x0, &(0x7f0000000300)={0x5, 0x10000})
write(r4, &(0x7f0000000340), 0x41395527)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001500)={0x10000}, 0x4)
pipe(&(0x7f0000000200)={<r34=>0xffffffffffffffff})
vmsplice(r34, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

23:37:52 executing program 5:
socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
r4 = perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000180)='/contrf\xe9\xd8\\\xfa\xff\x00', 0x0, 0x0)
openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, &(0x7f0000000700))
r5 = socket$inet(0x2, 0x6000000000000003, 0x6)
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10)
sendto$inet(r5, 0x0, 0x0, 0x404c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10)
sendto$inet(r5, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
syz_genetlink_get_family_id$team(&(0x7f00000003c0)='team\x00')
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00'})
socket(0x10, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002280)=ANY=[@ANYBLOB="380000000004000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32], 0x4}}, 0x0)

23:37:52 executing program 0:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x6100)
r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f3)
r3 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r3, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r1, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:53 executing program 4:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x8, r2, 0x8)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
syz_open_dev$admmidi(&(0x7f00000014c0)='/dev/admmidi#\x00', 0xffffffff, 0x800080)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
r5 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setownex(r6, 0xf, &(0x7f0000000180)={0x0, r5})
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r8}, 0x10)
r9 = getpid()
sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r10 = getpgrp(0x0)
setpriority(0x0, r10, 0x0)
r11 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x1)
r12 = gettid()
process_vm_writev(r12, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/240, 0xf0}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/224, 0xe0}], 0x1, 0x0)
r13 = getpgid(0x0)
r14 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5)
r15 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1)
r16 = dup2(r15, r14)
writev(r16, &(0x7f0000000040)=[{&(0x7f00000002c0)='3', 0x1}], 0x1)
ppoll(&(0x7f0000000200)=[{r16}], 0x1, &(0x7f0000000280), 0x0, 0x0)
r17 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r18 = inotify_init1(0x0)
fcntl$setown(r18, 0x8, 0xffffffffffffffff)
fcntl$getownex(r18, 0x10, &(0x7f00000000c0)={0x0, <r19=>0x0})
r20 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r20, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="020000000100eb0000000000020001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYBLOB='\b\x00\x00', @ANYRES32, @ANYBLOB="080005115951c076757a2164ca8343141a694359b9c301bf24d95441febf5a16ae429194cf41f9773a21df3fbefdfd920f68e5e58ca390181d9c686c6f0806797ac4b7731b7f6de976e4e0d345ac1f83f37848b5967ec0775d6b112c47c6e95551477839c728d326f78e5d0799b1c02c3418b1a48e41d54f698cc38b60a6a0375079bff305c0f0bbeddd3edfffcfdc456e464d8c1a7da7b7b2d8a43ac3491716431f09760a1563fe6d0296d3c466fe2c062668338b9185831dd35125", @ANYBLOB="74b24e1f0ef01479f571f55b37d7089c077e74b1bd50a45834473f982e6fd1fd97f815af9ca38040c073a4e24e033248357bfb5ab67092f29f0b1a66e443cc9e9ef2a93a80607607e3231fc4077092a7af7f95cd0ac29c703cc271896016d7b31ca22f3b0b56e5fec2690ec778d14906d776e06d1e11235fee66cd668482429cbe849c5b"], 0x8, 0x1)
r21 = socket(0xa, 0x3, 0x8)
r22 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000)
ioctl$sock_inet_SIOCSIFFLAGS(r21, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r22, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r23=>0xffffffffffffffff}}}, 0x20)
sendmsg$key(r21, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
r24 = gettid()
waitid(0x83b895581628fca4, r24, &(0x7f0000000040), 0x2, &(0x7f0000000480))
sendmsg$key(r21, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r23, @ANYRESDEC=r24]], 0xfffffffffffffe56}}, 0x20004850)
r25 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r26 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0)
r27 = dup2(r26, r25)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r27, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r28 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r28)
r29 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x101405)
writev(r29, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2)
ioctl$SG_GET_REQUEST_TABLE(r29, 0x227d, &(0x7f0000000780))
kcmp(r28, r24, 0x0, 0xffffffffffffffff, r29)
ptrace$setopts(0x4206, r28, 0x0, 0x0)
r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r31=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0x2}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r28, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r27, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r19, r20, 0x0, 0x1, &(0x7f0000000080)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r17, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r13, r16, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r12, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)='/dev/ptmx\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r10, r11, 0x0, 0x8, &(0x7f0000000100)='syz_tun\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r9, r8, 0x0, 0x5, &(0x7f0000000340)=',em1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r32=>r5, r7, 0x0, 0xd, &(0x7f0000000240)='/selinux/mls\x00', r31}, 0x30)
fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, <r33=>0x0})
rt_tgsigqueueinfo(r32, r33, 0x0, &(0x7f0000000300)={0x5, 0x10000})
write(r4, &(0x7f0000000340), 0x41395527)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001500)={0x10000}, 0x4)
setsockopt$inet6_tcp_buf(r2, 0x6, 0xe, &(0x7f0000000140)="1e5da9bc7793999e848025a58b324ebec78eb457fc22a9e91a841566ddc30961db08bd91ad5ea2a218f05f3fb06130c4093e900401dd01a04f3fd0af6bb6fd28b48b72da1eacd8692603b2498782d70f20177ea068104186eafb3993141dbff6b01ebca167692945705816bda6fced47f1e92eeca8bac413dc06c5da1b61cf2ba6be8142491c9231dc1bdeb25d4b32ffc985c8639f973474ddb8677c463877e38f49a9ae688751f291613491cfb6148c0e1f66a5f0208d5b2e798eb9711c51fbe4c5e0257e3310dafeaae347ce9e3e9696f32d9ca7d0", 0xd6)
pipe(&(0x7f0000000200)={<r34=>0xffffffffffffffff})
vmsplice(r34, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

23:37:53 executing program 2:
r0 = add_key$user(&(0x7f0000000600)='user\x00', 0x0, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:53 executing program 3:
r0 = add_key$user(&(0x7f0000000600)='user\x00', 0x0, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:53 executing program 5:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:53 executing program 1:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$P9_RVERSION(r1, &(0x7f0000000240)=ANY=[], 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, r2, 0x8)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
syz_open_dev$admmidi(&(0x7f00000014c0)='/dev/admmidi#\x00', 0xffffffff, 0x800080)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
r5 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setownex(r6, 0xf, &(0x7f0000000180)={0x0, r5})
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r8}, 0x10)
r9 = getpid()
sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r10 = getpgrp(0x0)
setpriority(0x0, r10, 0x0)
r11 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x1)
r12 = gettid()
process_vm_writev(r12, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/240, 0xf0}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/224, 0xe0}], 0x1, 0x0)
r13 = getpgid(0x0)
r14 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5)
r15 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1)
r16 = dup2(r15, r14)
writev(r16, &(0x7f0000000040)=[{&(0x7f00000002c0)='3', 0x1}], 0x1)
ppoll(&(0x7f0000000200)=[{r16}], 0x1, &(0x7f0000000280), 0x0, 0x0)
r17 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r18 = inotify_init1(0x0)
fcntl$setown(r18, 0x8, 0xffffffffffffffff)
fcntl$getownex(r18, 0x10, &(0x7f00000000c0)={0x0, <r19=>0x0})
r20 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r20, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="020000000100eb0000000000020001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYBLOB='\b\x00\x00', @ANYRES32, @ANYBLOB="080005115951c076757a2164ca8343141a694359b9c301bf24d95441febf5a16ae429194cf41f9773a21df3fbefdfd920f68e5e58ca390181d9c686c6f0806797ac4b7731b7f6de976e4e0d345ac1f83f37848b5967ec0775d6b112c47c6e95551477839c728d326f78e5d0799b1c02c3418b1a48e41d54f698cc38b60", @ANYBLOB="74b24e1f0ef01479f571f55b37d7089c077e74b1bd50a45834473f982e6fd1fd97f815af9ca38040c073a4e24e033248357bfb5ab67092f29f0b1a66e443cc9e9ef2a93a80607607e3231fc4077092a7af7f95cd0ac29c703cc271896016d7b31ca22f3b0b56e5fec2690ec778d14906d776e06d1e11235fee66cd668482429cbe849c5b"], 0x8, 0x1)
r21 = socket(0xa, 0x3, 0x8)
r22 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000)
ioctl$sock_inet_SIOCSIFFLAGS(r21, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r22, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r23=>0xffffffffffffffff}}}, 0x20)
sendmsg$key(r21, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
r24 = gettid()
waitid(0x83b895581628fca4, r24, &(0x7f0000000040), 0x2, &(0x7f0000000480))
sendmsg$key(r21, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r23, @ANYRESDEC=r24]], 0xfffffffffffffe56}}, 0x20004850)
r25 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r26 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0)
r27 = dup2(r26, r25)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r27, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r28 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r28)
r29 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x101405)
writev(r29, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2)
ioctl$SG_GET_REQUEST_TABLE(r29, 0x227d, &(0x7f0000000780))
kcmp(r28, r24, 0x0, 0xffffffffffffffff, r29)
ptrace$setopts(0x4206, r28, 0x0, 0x0)
r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r31=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0x2}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r28, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r27, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r19, r20, 0x0, 0x1, &(0x7f0000000080)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r17, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r13, r16, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r12, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)='/dev/ptmx\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r10, r11, 0x0, 0x8, &(0x7f0000000100)='syz_tun\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r9, r8, 0x0, 0x5, &(0x7f0000000340)=',em1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r32=>r5, r7, 0x0, 0xd, &(0x7f0000000240)='/selinux/mls\x00', r31}, 0x30)
fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, <r33=>0x0})
rt_tgsigqueueinfo(r32, r33, 0x0, &(0x7f0000000300)={0x5, 0x10000})
write(r4, &(0x7f0000000340), 0x41395527)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001500)={0x10000}, 0x4)
pipe(&(0x7f0000000200)={<r34=>0xffffffffffffffff})
vmsplice(r34, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

23:37:53 executing program 2:
r0 = add_key$user(&(0x7f0000000600)='user\x00', 0x0, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:53 executing program 3:
r0 = add_key$user(&(0x7f0000000600)='user\x00', 0x0, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

[  769.582189] WARNING: kernel stack frame pointer at ffff8880aec077d0 in syz-executor.0:3863 has bad value 1ffff11015d80f06
[  769.582198] unwind stack type:0 next_sp:          (null) mask:0x6 graph_idx:0
[  769.582209] ffff8880aec077d0: 1ffff11015d80f06 (0x1ffff11015d80f06)
[  769.582310] ffff8880aec077d8: ffffffff85219cff (sk_filter_trim_cap+0x20f/0x7f0)
[  769.582316] ffff8880aec077e0: 0000000000000010 (0x10)
[  769.582320] ffff8880aec077e8: 0000000000000a06 (0xa06)
[  769.582325] ffff8880aec077f0: ffff8880aec07808 (0xffff8880aec07808)
[  769.582330] ffff8880aec077f8: ffff8880aec078b8 (0xffff8880aec078b8)
[  769.582337] ffff8880aec07800: ffffffff85219d45 (sk_filter_trim_cap+0x255/0x7f0)
[  769.582340] ffff8880aec07808: 0000000000000000 ...
[  769.582345] ffff8880aec07810: ffffc900018fe002 (0xffffc900018fe002)
[  769.582350] ffff8880aec07818: ffff888093e0f2d8 (0xffff888093e0f2d8)
[  769.582355] ffff8880aec07820: 000000018187a876 (0x18187a876)
[  769.582360] ffff8880aec07828: ffff8880a484a940 (0xffff8880a484a940)
[  769.582365] ffff8880aec07830: 0000000041b58ab3 (0x41b58ab3)
[  769.582405] ffff8880aec07838: ffffffff87ad6aca (ORMASK+0xf84a/0x13d810)
[  769.582412] ffff8880aec07840: ffffffff85219af0 (sock_ops_is_valid_access+0x70/0x70)
[  769.582465] ffff8880aec07848: ffffffff851677fe (__copy_skb_header+0x2be/0x3e0)
[  769.582470] ffff8880aec07850: ffff888093e0f180 (0xffff888093e0f180)
[  769.582475] ffff8880aec07858: ffff888093e0f2c0 (0xffff888093e0f2c0)
[  769.582480] ffff8880aec07860: ffff888093e0f2c0 (0xffff888093e0f2c0)
[  769.582485] ffff8880aec07868: ffff8880a48c6ac0 (0xffff8880a48c6ac0)
[  769.582489] ffff8880aec07870: ffff888093e0f2ea (0xffff888093e0f2ea)
[  769.582493] ffff8880aec07878: 0000000000000004 (0x4)
[  769.582498] ffff8880aec07880: ffff888093e0f2ea (0xffff888093e0f2ea)
[  769.582503] ffff8880aec07888: ffff8880aec078b0 (0xffff8880aec078b0)
[  769.582507] ffff8880aec07890: 0000000000000008 (0x8)
[  769.582512] ffff8880aec07898: ffff888093e0f2c0 (0xffff888093e0f2c0)
[  769.582517] ffff8880aec078a0: ffff8880a48c6ac0 (0xffff8880a48c6ac0)
[  769.582522] ffff8880aec078a8: ffff888093e0f2c0 (0xffff888093e0f2c0)
[  769.582525] ffff8880aec078b0: 0000000000000000 ...
23:37:54 executing program 0:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x6100)
r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f3)
r3 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r3, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r1, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

[  769.582530] ffff8880aec078b8: ffff8880aec078e0 (0xffff8880aec078e0)
[  769.582538] ffff8880aec078c0: ffffffff8515a795 (sock_queue_rcv_skb+0x25/0x50)
[  769.582543] ffff8880aec078c8: ffff888093e0f2c0 (0xffff888093e0f2c0)
[  769.582548] ffff8880aec078d0: ffff8880a1a00200 (0xffff8880a1a00200)
[  769.582553] ffff8880aec078d8: ffff8880a48c6ac0 (0xffff8880a48c6ac0)
[  769.582558] ffff8880aec078e0: ffff8880aec07920 (0xffff8880aec07920)
[  769.582588] ffff8880aec078e8: ffffffff85a829f5 (packet_rcv_spkt+0x405/0x560)
[  769.582623] ffff8880aec078f0: ffffffff814e1c02 (rcu_lockdep_current_cpu_online+0xf2/0x140)
[  769.582632] ffff8880aec078f8: ffffffff88b3b820 (inet_af_ops+0x60/0x60)
[  769.582638] ffff8880aec07900: ffffffff88b3b820 (inet_af_ops+0x60/0x60)
[  769.582643] ffff8880aec07908: dffffc0000000000 (0xdffffc0000000000)
[  769.582651] ffff8880aec07910: ffffffff88b2ac80 (ptype_all+0x10/0x10)
[  769.582657] ffff8880aec07918: ffff888093e0f180 (0xffff888093e0f180)
[  769.582661] ffff8880aec07920: ffff8880aec07a70 (0xffff8880aec07a70)
[  769.582688] ffff8880aec07928: ffffffff851bbaf5 (__netif_receive_skb_core+0x9f5/0x2cb0)
[  769.582713] ffff8880aec07930: ffffffff81481ce0 (trace_hardirqs_on+0x10/0x10)
[  769.582719] ffff8880aec07938: ffff88808990ca38 (0xffff88808990ca38)
[  769.582726] ffff8880aec07940: ffffffff851c7c3e (netif_receive_skb_internal+0x35e/0x5a0)
[  769.582767] ffff8880aec07948: ffffffff87f95dc8 (tk_core+0x8/0x800)
[  769.582772] ffff8880aec07950: ffffed10127c1e49 (0xffffed10127c1e49)
[  769.582776] ffff8880aec07958: 1ffff11015d80f30 (0x1ffff11015d80f30)
[  769.582781] ffff8880aec07960: ffff888093e0f24c (0xffff888093e0f24c)
[  769.582785] ffff8880aec07968: ffff8880aec07900 (0xffff8880aec07900)
[  769.582790] ffff8880aec07970: 1ffff11000000008 (0x1ffff11000000008)
[  769.582794] ffff8880aec07978: ffff8880a1a00200 (0xffff8880a1a00200)
[  769.582799] ffff8880aec07980: 0000000041b58ab3 (0x41b58ab3)
[  769.582806] ffff8880aec07988: ffffffff87bc4038 (ORMASK+0xfcdb8/0x13d810)
[  769.582812] ffff8880aec07990: ffffffff851bb100 (enqueue_to_backlog+0xd00/0xd00)
[  769.582816] ffff8880aec07998: ffff8880aec07a40 (0xffff8880aec07a40)
[  769.582821] ffff8880aec079a0: 0000000000000082 (0x82)
[  769.582825] ffff8880aec079a8: 0000000000000002 (0x2)
[  769.582830] ffff8880aec079b0: ffff888093e0f180 (0xffff888093e0f180)
[  769.582834] ffff8880aec079b8: 0000000000000002 (0x2)
[  769.582839] ffff8880aec079c0: ffff88808990c140 (0xffff88808990c140)
[  769.582843] ffff8880aec079c8: dffffc0000000000 (0xdffffc0000000000)
[  769.582848] ffff8880aec079d0: ffff88821fff7017 (0xffff88821fff7017)
[  769.582852] ffff8880aec079d8: ffff88821fff700f (0xffff88821fff700f)
[  769.582857] ffff8880aec079e0: ffffed1043ffee03 (0xffffed1043ffee03)
23:37:54 executing program 4:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x8, r2, 0x8)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
syz_open_dev$admmidi(&(0x7f00000014c0)='/dev/admmidi#\x00', 0xffffffff, 0x800080)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
r5 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setownex(r6, 0xf, &(0x7f0000000180)={0x0, r5})
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r8}, 0x10)
r9 = getpid()
sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r10 = getpgrp(0x0)
setpriority(0x0, r10, 0x0)
r11 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x1)
r12 = gettid()
process_vm_writev(r12, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/240, 0xf0}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/224, 0xe0}], 0x1, 0x0)
r13 = getpgid(0x0)
r14 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5)
r15 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1)
r16 = dup2(r15, r14)
writev(r16, &(0x7f0000000040)=[{&(0x7f00000002c0)='3', 0x1}], 0x1)
ppoll(&(0x7f0000000200)=[{r16}], 0x1, &(0x7f0000000280), 0x0, 0x0)
r17 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r18 = inotify_init1(0x0)
fcntl$setown(r18, 0x8, 0xffffffffffffffff)
fcntl$getownex(r18, 0x10, &(0x7f00000000c0)={0x0, <r19=>0x0})
r20 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r20, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="020000000100eb0000000000020001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYBLOB='\b\x00\x00', @ANYRES32, @ANYBLOB="080005115951c076757a2164ca8343141a694359b9c301bf24d95441febf5a16ae429194cf41f9773a21df3fbefdfd920f68e5e58ca390181d9c686c6f0806797ac4b7731b7f6de976e4e0d345ac1f83f37848b5967ec0775d6b112c47c6e95551477839c728d326f78e5d0799b1c02c3418b1a48e41d54f698cc38b60a6a0375079bff305c0f0bbeddd3edfffcfdc456e464d8c1a7da7b7b2d8a43ac3491716431f09760a1563fe6d0296d3c466fe2c062668338b9185831dd35125", @ANYBLOB="74b24e1f0ef01479f571f55b37d7089c077e74b1bd50a45834473f982e6fd1fd97f815af9ca38040c073a4e24e033248357bfb5ab67092f29f0b1a66e443cc9e9ef2a93a80607607e3231fc4077092a7af7f95cd0ac29c703cc271896016d7b31ca22f3b0b56e5fec2690ec778d14906d776e06d1e11235fee66cd668482429cbe849c5b"], 0x8, 0x1)
r21 = socket(0xa, 0x3, 0x8)
r22 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000)
ioctl$sock_inet_SIOCSIFFLAGS(r21, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r22, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r23=>0xffffffffffffffff}}}, 0x20)
sendmsg$key(r21, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
r24 = gettid()
waitid(0x83b895581628fca4, r24, &(0x7f0000000040), 0x2, &(0x7f0000000480))
sendmsg$key(r21, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r23, @ANYRESDEC=r24]], 0xfffffffffffffe56}}, 0x20004850)
r25 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r26 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0)
r27 = dup2(r26, r25)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r27, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r28 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r28)
r29 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x101405)
writev(r29, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2)
ioctl$SG_GET_REQUEST_TABLE(r29, 0x227d, &(0x7f0000000780))
kcmp(r28, r24, 0x0, 0xffffffffffffffff, r29)
ptrace$setopts(0x4206, r28, 0x0, 0x0)
r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r31=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0x2}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r28, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r27, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r19, r20, 0x0, 0x1, &(0x7f0000000080)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r17, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r13, r16, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r12, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)='/dev/ptmx\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r10, r11, 0x0, 0x8, &(0x7f0000000100)='syz_tun\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r9, r8, 0x0, 0x5, &(0x7f0000000340)=',em1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r32=>r5, r7, 0x0, 0xd, &(0x7f0000000240)='/selinux/mls\x00', r31}, 0x30)
fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, <r33=>0x0})
rt_tgsigqueueinfo(r32, r33, 0x0, &(0x7f0000000300)={0x5, 0x10000})
write(r4, &(0x7f0000000340), 0x41395527)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001500)={0x10000}, 0x4)
setsockopt$inet6_tcp_buf(r2, 0x6, 0xe, &(0x7f0000000140)="1e5da9bc7793999e848025a58b324ebec78eb457fc22a9e91a841566ddc30961db08bd91ad5ea2a218f05f3fb06130c4093e900401dd01a04f3fd0af6bb6fd28b48b72da1eacd8692603b2498782d70f20177ea068104186eafb3993141dbff6b01ebca167692945705816bda6fced47f1e92eeca8bac413dc06c5da1b61cf2ba6be8142491c9231dc1bdeb25d4b32ffc985c8639f973474ddb8677c463877e38f49a9ae688751f291613491cfb6148c0e1f66a5f0208d5b2e798eb9711c51fbe4c5e0257e3310dafeaae347ce9e3e9696f32d9ca7d0", 0xd6)
pipe(&(0x7f0000000200)={<r34=>0xffffffffffffffff})
vmsplice(r34, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

[  769.582861] ffff8880aec079e8: ffff88821fff7018 (0xffff88821fff7018)
[  769.582866] ffff8880aec079f0: 1fffffff0000000a (0x1fffffff0000000a)
[  769.582870] ffff8880aec079f8: ffff88821fff701b (0xffff88821fff701b)
[  769.582874] ffff8880aec07a00: 1ffffffff0fe2d18 (0x1ffffffff0fe2d18)
[  769.582879] ffff8880aec07a08: ffff88808990c140 (0xffff88808990c140)
[  769.582886] ffff8880aec07a10: ffffffff87f87320 (rcu_bh_lock_map+0x40/0x40)
[  769.582889] ffff8880aec07a18: 0000000000000000 ...
[  769.582893] ffff8880aec07a28: 0000000000000002 (0x2)
[  769.582898] ffff8880aec07a30: ffff8880aec07aa8 (0xffff8880aec07aa8)
[  769.582905] ffff8880aec07a38: ffffffff81487f4f (lock_acquire+0x16f/0x430)
[  769.582909] ffff8880aec07a40: 1ffff11015d80f59 (0x1ffff11015d80f59)
[  769.582913] ffff8880aec07a48: ffff8880aec07a90 (0xffff8880aec07a90)
[  769.582917] ffff8880aec07a50: ffff888093e0f180 (0xffff888093e0f180)
[  769.582921] ffff8880aec07a58: ffff8880aec07b28 (0xffff8880aec07b28)
[  769.582925] ffff8880aec07a60: ffff888093e0f1a0 (0xffff888093e0f1a0)
[  769.582930] ffff8880aec07a68: ffff888093e0f240 (0xffff888093e0f240)
[  769.582935] ffff8880aec07a70: ffff8880aec07ab0 (0xffff8880aec07ab0)
[  769.582942] ffff8880aec07a78: ffffffff851bdddc (__netif_receive_skb+0x2c/0x1b0)
[  769.582946] ffff8880aec07a80: ffff8880aec07a90 (0xffff8880aec07a90)
[  769.582952] ffff8880aec07a88: ffffffff851bdddc (__netif_receive_skb+0x2c/0x1b0)
[  769.582957] ffff8880aec07a90: 1ffff11015d80f59 (0x1ffff11015d80f59)
[  769.582962] ffff8880aec07a98: ffff888093e0f180 (0xffff888093e0f180)
[  769.582967] ffff8880aec07aa0: ffff8880aec07b28 (0xffff8880aec07b28)
[  769.582972] ffff8880aec07aa8: ffff888093e0f1a0 (0xffff888093e0f1a0)
[  769.582977] ffff8880aec07ab0: ffff8880aec07b50 (0xffff8880aec07b50)
[  769.582984] ffff8880aec07ab8: ffffffff851c79c4 (netif_receive_skb_internal+0xe4/0x5a0)
[  769.582988] ffff8880aec07ac0: ffff8881fe0e92c0 (0xffff8881fe0e92c0)
[  769.582992] ffff8880aec07ac8: 0000000041b58ab3 (0x41b58ab3)
[  769.582998] ffff8880aec07ad0: ffffffff87bc4108 (ORMASK+0xfce88/0x13d810)
[  769.583004] ffff8880aec07ad8: ffffffff851c78e0 (dev_cpu_dead+0x8f0/0x8f0)
[  769.583009] ffff8880aec07ae0: ffff888218bb4dc0 (0xffff888218bb4dc0)
[  769.583015] ffff8880aec07ae8: ffffffff87f872a0 (rcu_callback_map+0x40/0x40)
[  769.583020] ffff8880aec07af0: ffff88808990c140 (0xffff88808990c140)
[  769.583025] ffff8880aec07af8: ffff888218bb4d88 (0xffff888218bb4d88)
[  769.583030] ffff8880aec07b00: ffff888093e0f240 (0xffff888093e0f240)
[  769.583035] ffff8880aec07b08: 000e000800000000 (0xe000800000000)
[  769.583040] ffff8880aec07b10: ffff888093e0f190 (0xffff888093e0f190)
[  769.583048] ffff8880aec07b18: ffffffff814e1c02 (rcu_lockdep_current_cpu_online+0xf2/0x140)
[  769.583053] ffff8880aec07b20: ffff888218bb4d88 (0xffff888218bb4d88)
[  769.583058] ffff8880aec07b28: 0000000000000041 (0x41)
[  769.583063] ffff8880aec07b30: ffff888093e0f180 (0xffff888093e0f180)
[  769.583067] ffff8880aec07b38: 0000000000000003 (0x3)
[  769.583072] ffff8880aec07b40: ffff888218bb4d88 (0xffff888218bb4d88)
[  769.583077] ffff8880aec07b48: ffff888093e0f240 (0xffff888093e0f240)
[  769.583081] ffff8880aec07b50: ffff8880aec07b88 (0xffff8880aec07b88)
[  769.583088] ffff8880aec07b58: ffffffff851cb5e8 (napi_gro_receive+0x2f8/0x410)
[  769.583091] ffff8880aec07b60: 0000000000000000 ...
[  769.583095] ffff8880aec07b68: 0000000000000042 (0x42)
[  769.583100] ffff8880aec07b70: ffff888093e0f200 (0xffff888093e0f200)
[  769.583105] ffff8880aec07b78: ffff888093e0f180 (0xffff888093e0f180)
[  769.583111] ffff8880aec07b80: ffff888093e0f240 (0xffff888093e0f240)
[  769.583116] ffff8880aec07b88: ffff8880aec07d30 (0xffff8880aec07d30)
[  769.583177] ffff8880aec07b90: ffffffff83f034b4 (receive_buf+0x534/0x4770)
[  769.583183] ffff8880aec07b98: ffff8880aec07bf0 (0xffff8880aec07bf0)
[  769.583209] ffff8880aec07ba0: ffffffff815047f7 (hrtimer_forward+0x147/0x1f0)
[  769.583214] ffff8880aec07ba8: 000000b32ea430c6 (0xb32ea430c6)
[  769.583219] ffff8880aec07bb0: 0000000041b58ab3 (0x41b58ab3)
[  769.583225] ffff8880aec07bb8: ffffffff87acc28c (ORMASK+0x500c/0x13d810)
[  769.583229] ffff8880aec07bc0: ffff8880aec07c48 (0xffff8880aec07c48)
[  769.583233] ffff8880aec07bc8: 0000000000000600 (0x600)
[  769.583238] ffff8880aec07bd0: 0000000000005400 (0x5400)
[  769.583243] ffff8880aec07bd8: ffff8880aec07c38 (0xffff8880aec07c38)
[  769.583247] ffff8880aec07be0: 0000000000000042 (0x42)
[  769.583252] ffff8880aec07be8: ffff888093e0f180 (0xffff888093e0f180)
[  769.583256] ffff8880aec07bf0: 1ffff11015d80f81 (0x1ffff11015d80f81)
[  769.583261] ffff8880aec07bf8: ffff8880a1a00200 (0xffff8880a1a00200)
[  769.583265] ffff8880aec07c00: ffff888218bb4d80 (0xffff888218bb4d80)
[  769.583269] ffff8880aec07c08: 0000000041b58ab3 (0x41b58ab3)
[  769.583275] ffff8880aec07c10: ffffffff87b7d6e0 (ORMASK+0xb6460/0x13d810)
[  769.583281] ffff8880aec07c18: ffffffff83f02f80 (virtnet_xdp_xmit.isra.0+0x760/0x760)
[  769.583311] ffff8880aec07c20: ffffffff8340e41b (vring_unmap_one+0x4b/0x3f0)
[  769.583316] ffff8880aec07c28: ffff8880aec00000 (0xffff8880aec00000)
[  769.583321] ffff8880aec07c30: ffff888218bc0040 (0xffff888218bc0040)
[  769.583326] ffff8880aec07c38: ffff88820000004e (0xffff88820000004e)
[  769.583331] ffff8880aec07c40: ffff888218bc0040 (0xffff888218bc0040)
[  769.583335] ffff8880aec07c48: 0000000000000600 (0x600)
[  769.583340] ffff8880aec07c50: ffff8880aec07cd0 (0xffff8880aec07cd0)
[  769.583346] ffff8880aec07c58: ffffffff8340ebc8 (detach_buf+0x408/0x590)
[  769.583351] ffff8880aec07c60: 00000a7641b58ab3 (0xa7641b58ab3)
[  769.583355] ffff8880aec07c68: ffff888218bc006c (0xffff888218bc006c)
[  769.583359] ffff8880aec07c70: ffff888218bca7a0 (0xffff888218bca7a0)
[  769.583363] ffff8880aec07c78: ffff8880aec07dc0 (0xffff8880aec07dc0)
[  769.583367] ffff8880aec07c80: 0000000000000a76 (0xa76)
[  769.583372] ffff8880aec07c88: ffff888218bc0080 (0xffff888218bc0080)
[  769.583376] ffff8880aec07c90: 000000000000a760 (0xa760)
[  769.583379] ffff8880aec07c98: 0000000000000000 ...
[  769.583383] ffff8880aec07ca0: ffff8880a1a032c0 (0xffff8880a1a032c0)
[  769.583387] ffff8880aec07ca8: 000000000000a760 (0xa760)
[  769.583392] ffff8880aec07cb0: ffff888218bc00a4 (0xffff888218bc00a4)
[  769.583396] ffff8880aec07cb8: ffff888218bc0040 (0xffff888218bc0040)
[  769.583400] ffff8880aec07cc0: ffff888218bc0099 (0xffff888218bc0099)
[  769.583405] ffff8880aec07cc8: ffff888211305400 (0xffff888211305400)
[  769.583409] ffff8880aec07cd0: ffff8880aec07d30 (0xffff8880aec07d30)
[  769.583416] ffff8880aec07cd8: ffffffff8340f080 (virtqueue_get_buf_ctx+0x330/0x6c0)
23:37:54 executing program 1:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$P9_RVERSION(r1, &(0x7f0000000240)=ANY=[], 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, r2, 0x8)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
syz_open_dev$admmidi(&(0x7f00000014c0)='/dev/admmidi#\x00', 0xffffffff, 0x800080)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
r5 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setownex(r6, 0xf, &(0x7f0000000180)={0x0, r5})
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r8}, 0x10)
r9 = getpid()
sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r10 = getpgrp(0x0)
setpriority(0x0, r10, 0x0)
r11 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x1)
r12 = gettid()
process_vm_writev(r12, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/240, 0xf0}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/224, 0xe0}], 0x1, 0x0)
r13 = getpgid(0x0)
r14 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5)
r15 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1)
r16 = dup2(r15, r14)
writev(r16, &(0x7f0000000040)=[{&(0x7f00000002c0)='3', 0x1}], 0x1)
ppoll(&(0x7f0000000200)=[{r16}], 0x1, &(0x7f0000000280), 0x0, 0x0)
r17 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r18 = inotify_init1(0x0)
fcntl$setown(r18, 0x8, 0xffffffffffffffff)
fcntl$getownex(r18, 0x10, &(0x7f00000000c0)={0x0, <r19=>0x0})
r20 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r20, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="020000000100eb0000000000020001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYBLOB='\b\x00\x00', @ANYRES32, @ANYBLOB="080005115951c076757a2164ca8343141a694359b9c301bf24d95441febf5a16ae429194cf41f9773a21df3fbefdfd920f68e5e58ca390181d9c686c6f0806797ac4b7731b7f6de976e4e0d345ac1f83f37848b5967ec0775d6b112c47c6e95551477839c728d326f78e5d0799b1c02c3418b1a48e41d54f698cc38b60a6a0375079bff305c0f0bbeddd3edfffcfdc456e464d8c1a7da7b7b2d8a43ac3491716431f09760a1563fe6d0296d3c466fe2c062668338b9185831dd35125", @ANYBLOB="74b24e1f0ef01479f571f55b37d7089c077e74b1bd50a45834473f982e6fd1fd97f815af9ca38040c073a4e24e033248357bfb5ab67092f29f0b1a66e443cc9e9ef2a93a80607607e3231fc4077092a7af7f95cd0ac29c703cc271896016d7b31ca22f3b0b56e5fec2690ec778d14906d776e06d1e11235fee66cd668482429cbe849c5b"], 0x8, 0x1)
r21 = socket(0xa, 0x3, 0x8)
r22 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000)
ioctl$sock_inet_SIOCSIFFLAGS(r21, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r22, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r23=>0xffffffffffffffff}}}, 0x20)
sendmsg$key(r21, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
r24 = gettid()
waitid(0x83b895581628fca4, r24, &(0x7f0000000040), 0x2, &(0x7f0000000480))
sendmsg$key(r21, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r23, @ANYRESDEC=r24]], 0xfffffffffffffe56}}, 0x20004850)
r25 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r26 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0)
r27 = dup2(r26, r25)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r27, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r28 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r28)
r29 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x101405)
writev(r29, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2)
ioctl$SG_GET_REQUEST_TABLE(r29, 0x227d, &(0x7f0000000780))
kcmp(r28, r24, 0x0, 0xffffffffffffffff, r29)
ptrace$setopts(0x4206, r28, 0x0, 0x0)
r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r31=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0x2}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r28, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r27, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r19, r20, 0x0, 0x1, &(0x7f0000000080)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r17, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r13, r16, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r12, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)='/dev/ptmx\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r10, r11, 0x0, 0x8, &(0x7f0000000100)='syz_tun\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r9, r8, 0x0, 0x5, &(0x7f0000000340)=',em1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r32=>r5, r7, 0x0, 0xd, &(0x7f0000000240)='/selinux/mls\x00', r31}, 0x30)
fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, <r33=>0x0})
rt_tgsigqueueinfo(r32, r33, 0x0, &(0x7f0000000300)={0x5, 0x10000})
write(r4, &(0x7f0000000340), 0x41395527)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001500)={0x10000}, 0x4)
pipe(&(0x7f0000000200)={<r34=>0xffffffffffffffff})
vmsplice(r34, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

[  769.583420] ffff8880aec07ce0: ffff88808990c9b8 (0xffff88808990c9b8)
[  769.583425] ffff8880aec07ce8: ffff888218bc0098 (0xffff888218bc0098)
[  769.583429] ffff8880aec07cf0: ffff888218bc0078 (0xffff888218bc0078)
[  769.583434] ffff8880aec07cf8: ffff888000000a76 (0xffff888000000a76)
[  769.583446] ffff8880aec07d00: ffff8880aec07dc0 (0xffff8880aec07dc0)
[  769.583451] ffff8880aec07d08: ffff8880a1a00cc0 (0xffff8880a1a00cc0)
[  769.583453] ffff8880aec07d10: 0000000000000000 ...
[  769.583457] ffff8880aec07d18: ffff8880aec07de0 (0xffff8880aec07de0)
[  769.583461] ffff8880aec07d20: 0000000000000001 (0x1)
[  769.583466] ffff8880aec07d28: ffffe8ffffc39ec0 (0xffffe8ffffc39ec0)
[  769.583470] ffff8880aec07d30: ffff8880aec07e08 (0xffff8880aec07e08)
[  769.583476] ffff8880aec07d38: ffffffff83f07c05 (virtnet_poll+0x515/0xa6e)
[  769.583481] ffff8880aec07d40: ffff8880aec07dc0 (0xffff8880aec07dc0)
[  769.583486] ffff8880aec07d48: ffffed10431769b0 (0xffffed10431769b0)
[  769.583490] ffff8880aec07d50: ffff888211305400 (0xffff888211305400)
[  769.583495] ffff8880aec07d58: 1ffff11015d80fb0 (0x1ffff11015d80fb0)
[  769.583500] ffff8880aec07d60: ffff8880aec07db0 (0xffff8880aec07db0)
[  769.583505] ffff8880aec07d68: ffff888218bb4d88 (0xffff888218bb4d88)
[  769.583510] ffff8880aec07d70: 000000408990c9c0 (0x408990c9c0)
[  769.583515] ffff8880aec07d78: ffff888218bb4d80 (0xffff888218bb4d80)
[  769.583519] ffff8880aec07d80: 0000000041b58ab3 (0x41b58ab3)
[  769.583525] ffff8880aec07d88: ffffffff87b7d738 (ORMASK+0xb64b8/0x13d810)
[  769.583531] ffff8880aec07d90: ffffffff83f076f0 (receive_buf+0x4770/0x4770)
[  769.583538] ffff8880aec07d98: ffffffff814816f1 (mark_held_locks+0xb1/0x100)
[  769.583543] ffff8880aec07da0: ffff88808990ca10 (0xffff88808990ca10)
[  769.583548] ffff8880aec07da8: 00000003aec07df8 (0x3aec07df8)
[  769.583553] ffff8880aec07db0: ffff88800000004e (0xffff88800000004e)
[  769.583560] ffff8880aec07db8: ffffffff851c8e2a (net_rx_action+0x25a/0xf80)
[  769.583564] ffff8880aec07dc0: 0000000000000600 (0x600)
[  769.583569] ffff8880aec07dc8: ffff888218bb4d88 (0xffff888218bb4d88)
[  769.583574] ffff8880aec07dd0: dffffc0000000000 (0xdffffc0000000000)
[  769.583579] ffff8880aec07dd8: ffff8880aec07df8 (0xffff8880aec07df8)
[  769.583581] ffff8880aec07de0: 0000000000000000 ...
[  769.583587] ffff8880aec07de8: ffff888218bb4d88 (0xffff888218bb4d88)
[  769.583591] ffff8880aec07df0: 0000000000000040 (0x40)
[  769.583594] ffff8880aec07df8: 0000000000000000 ...
[  769.583598] ffff8880aec07e00: dffffc0000000000 (0xdffffc0000000000)
[  769.583603] ffff8880aec07e08: ffff8880aec07f00 (0xffff8880aec07f00)
[  769.583610] ffff8880aec07e10: ffffffff851c9060 (net_rx_action+0x490/0xf80)
[  769.583615] ffff8880aec07e18: ffff88800000000a (0xffff88800000000a)
[  769.583620] ffff8880aec07e20: fffffbfff115f609 (0xfffffbfff115f609)
[  769.583625] ffff8880aec07e28: 1ffff11015d80fcf (0x1ffff11015d80fcf)
[  769.583630] ffff8880aec07e30: ffff8880aec07eb8 (0xffff8880aec07eb8)
[  769.583634] ffff8880aec07e38: 0000000000000091 (0x91)
[  769.583639] ffff8880aec07e40: ffff888218bb4db8 (0xffff888218bb4db8)
[  769.583644] ffff8880aec07e48: ffff888218bb4d98 (0xffff888218bb4d98)
[  769.583649] ffff8880aec07e50: 000000010000b76f (0x10000b76f)
[  769.583652] ffff8880aec07e58: 0000012c00000002 (0x12c00000002)
[  769.583657] ffff8880aec07e60: ffff8880aec07e98 (0xffff8880aec07e98)
[  769.583661] ffff8880aec07e68: ffff888218bb4d90 (0xffff888218bb4d90)
[  769.583665] ffff8880aec07e70: ffff8880aec2c680 (0xffff8880aec2c680)
[  769.583668] ffff8880aec07e78: 0000000041b58ab3 (0x41b58ab3)
[  769.583674] ffff8880aec07e80: ffffffff87bc4138 (ORMASK+0xfceb8/0x13d810)
[  769.583681] ffff8880aec07e88: ffffffff851c8bd0 (napi_complete_done+0x4f0/0x4f0)
[  769.583685] ffff8880aec07e90: 0000000000000282 (0x282)
23:37:55 executing program 0:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x6100)
r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f3)
r3 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r3, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r1, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

[  769.583690] ffff8880aec07e98: ffff8880aec07e98 (0xffff8880aec07e98)
[  769.583695] ffff8880aec07ea0: ffff8880aec07e98 (0xffff8880aec07e98)
[  769.583699] ffff8880aec07ea8: 0000000000000003 (0x3)
[  769.583705] ffff8880aec07eb0: dffffc0000000000 (0xdffffc0000000000)
[  769.583709] ffff8880aec07eb8: ffff8880aec07eb8 (0xffff8880aec07eb8)
[  769.583714] ffff8880aec07ec0: ffff8880aec07eb8 (0xffff8880aec07eb8)
[  769.583721] ffff8880aec07ec8: ffffffff814e1c02 (rcu_lockdep_current_cpu_online+0xf2/0x140)
[  769.583725] ffff8880aec07ed0: 0000000000000003 (0x3)
[  769.583775] ffff8880aec07ed8: ffffffff87e09118 (softirq_vec+0x18/0x80)
[  769.583779] ffff8880aec07ee0: 0000000000000004 (0x4)
[  769.583783] ffff8880aec07ee8: 0000000000000003 (0x3)
[  769.583787] ffff8880aec07ef0: 0000000000000003 (0x3)
[  769.583793] ffff8880aec07ef8: dffffc0000000000 (0xdffffc0000000000)
[  769.583798] ffff8880aec07f00: ffff8880aec07f98 (0xffff8880aec07f98)
[  769.583830] ffff8880aec07f08: ffffffff86a00244 (__do_softirq+0x244/0x9a0)
[  769.583839] ffff8880aec07f10: ffffffff81218c4e (sched_clock+0x2e/0x50)
[  769.583843] ffff8880aec07f18: 01ff888000404140 (0x1ff888000404140)
[  769.583849] ffff8880aec07f20: ffffed1011321828 (0xffffed1011321828)
[  769.583853] ffff8880aec07f28: ffff88808990c140 (0xffff88808990c140)
[  769.583858] ffff8880aec07f30: 000000010000b76f (0x10000b76f)
[  769.583863] ffff8880aec07f38: 0000000000000008 (0x8)
[  769.583867] ffff8880aec07f40: 0000000000000003 (0x3)
[  769.583871] ffff8880aec07f48: 0000000000000003 (0x3)
[  769.583876] ffff8880aec07f50: 0000000000000020 (0x20)
[  769.583881] ffff8880aec07f58: 000001000000000a (0x1000000000a)
23:37:55 executing program 5:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:55 executing program 4:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x8, r2, 0x8)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
syz_open_dev$admmidi(&(0x7f00000014c0)='/dev/admmidi#\x00', 0xffffffff, 0x800080)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
r5 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setownex(r6, 0xf, &(0x7f0000000180)={0x0, r5})
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r8}, 0x10)
r9 = getpid()
sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r10 = getpgrp(0x0)
setpriority(0x0, r10, 0x0)
r11 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x1)
r12 = gettid()
process_vm_writev(r12, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/240, 0xf0}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/224, 0xe0}], 0x1, 0x0)
r13 = getpgid(0x0)
r14 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5)
r15 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1)
r16 = dup2(r15, r14)
writev(r16, &(0x7f0000000040)=[{&(0x7f00000002c0)='3', 0x1}], 0x1)
ppoll(&(0x7f0000000200)=[{r16}], 0x1, &(0x7f0000000280), 0x0, 0x0)
r17 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r18 = inotify_init1(0x0)
fcntl$setown(r18, 0x8, 0xffffffffffffffff)
fcntl$getownex(r18, 0x10, &(0x7f00000000c0)={0x0, <r19=>0x0})
r20 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r20, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="020000000100eb0000000000020001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYBLOB='\b\x00\x00', @ANYRES32, @ANYBLOB="080005115951c076757a2164ca8343141a694359b9c301bf24d95441febf5a16ae429194cf41f9773a21df3fbefdfd920f68e5e58ca390181d9c686c6f0806797ac4b7731b7f6de976e4e0d345ac1f83f37848b5967ec0775d6b112c47c6e95551477839c728d326f78e5d0799b1c02c3418b1a48e41d54f698cc38b60a6a0375079bff305c0f0bbeddd3edfffcfdc456e464d8c1a7da7b7b2d8a43ac3491716431f09760a1563fe6d0296d3c466fe2c062668338b9185831dd35125", @ANYBLOB="74b24e1f0ef01479f571f55b37d7089c077e74b1bd50a45834473f982e6fd1fd97f815af9ca38040c073a4e24e033248357bfb5ab67092f29f0b1a66e443cc9e9ef2a93a80607607e3231fc4077092a7af7f95cd0ac29c703cc271896016d7b31ca22f3b0b56e5fec2690ec778d14906d776e06d1e11235fee66cd668482429cbe849c5b"], 0x8, 0x1)
r21 = socket(0xa, 0x3, 0x8)
r22 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000)
ioctl$sock_inet_SIOCSIFFLAGS(r21, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r22, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r23=>0xffffffffffffffff}}}, 0x20)
sendmsg$key(r21, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
r24 = gettid()
waitid(0x83b895581628fca4, r24, &(0x7f0000000040), 0x2, &(0x7f0000000480))
sendmsg$key(r21, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r23, @ANYRESDEC=r24]], 0xfffffffffffffe56}}, 0x20004850)
r25 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r26 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0)
r27 = dup2(r26, r25)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r27, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r28 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r28)
r29 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x101405)
writev(r29, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2)
ioctl$SG_GET_REQUEST_TABLE(r29, 0x227d, &(0x7f0000000780))
kcmp(r28, r24, 0x0, 0xffffffffffffffff, r29)
ptrace$setopts(0x4206, r28, 0x0, 0x0)
r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r31=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0x2}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r28, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r27, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r19, r20, 0x0, 0x1, &(0x7f0000000080)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r17, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r13, r16, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r12, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)='/dev/ptmx\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r10, r11, 0x0, 0x8, &(0x7f0000000100)='syz_tun\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r9, r8, 0x0, 0x5, &(0x7f0000000340)=',em1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r32=>r5, r7, 0x0, 0xd, &(0x7f0000000240)='/selinux/mls\x00', r31}, 0x30)
fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, <r33=>0x0})
rt_tgsigqueueinfo(r32, r33, 0x0, &(0x7f0000000300)={0x5, 0x10000})
write(r4, &(0x7f0000000340), 0x41395527)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001500)={0x10000}, 0x4)
setsockopt$inet6_tcp_buf(r2, 0x6, 0xe, &(0x7f0000000140)="1e5da9bc7793999e848025a58b324ebec78eb457fc22a9e91a841566ddc30961db08bd91ad5ea2a218f05f3fb06130c4093e900401dd01a04f3fd0af6bb6fd28b48b72da1eacd8692603b2498782d70f20177ea068104186eafb3993141dbff6b01ebca167692945705816bda6fced47f1e92eeca8bac413dc06c5da1b61cf2ba6be8142491c9231dc1bdeb25d4b32ffc985c8639f973474ddb8677c463877e38f49a9ae688751f291613491cfb6148c0e1f66a5f0208d5b2e798eb9711c51fbe4c5e0257e3310dafeaae347ce9e3e9696f32d9ca7d0", 0xd6)
pipe(&(0x7f0000000200)={<r34=>0xffffffffffffffff})
vmsplice(r34, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

[  769.583887] ffff8880aec07f60: ffffffff87e09100 (tasklist_lock+0x40/0x40)
[  769.583892] ffff8880aec07f68: 0000000800000004 (0x800000004)
[  769.583897] ffff8880aec07f70: ffff8880a1a03200 (0xffff8880a1a03200)
[  769.583902] ffff8880aec07f78: ffff8881fc6574f8 (0xffff8881fc6574f8)
[  769.583907] ffff8880aec07f80: 0000000000000091 (0x91)
[  769.583911] ffff8880aec07f88: 0000000000000091 (0x91)
[  769.583914] ffff8880aec07f90: 0000000000000000 ...
[  769.583919] ffff8880aec07f98: ffff8880aec07fb0 (0xffff8880aec07fb0)
[  769.583945] ffff8880aec07fa0: ffffffff813907c0 (irq_exit+0x160/0x1b0)
[  769.583950] ffff8880aec07fa8: ffff8880a1a03200 (0xffff8880a1a03200)
[  769.583955] ffff8880aec07fb0: ffff8880aec07fe8 (0xffff8880aec07fe8)
[  769.583979] ffff8880aec07fb8: ffffffff8680226b (do_IRQ+0x11b/0x1d0)
[  769.583982] ffff8880aec07fc0: 0000000000000000 ...
[  769.583987] ffff8880aec07fe8: ffff8881fc6574f9 (0xffff8881fc6574f9)
[  769.583995] ffff8880aec07ff0: ffffffff868008d6 (common_interrupt+0x96/0x96)
[  769.584000] ffff8880aec07ff8: ffff8881fc6574f8 (0xffff8881fc6574f8)
[  769.584004] ffff8881fc6574f8: 0000000000000002 (0x2)
[  769.584048] ffff8881fc657500: ffffffff81715f9e (mempool_free_slab+0x1e/0x30)
[  769.584053] ffff8881fc657508: 0000000000000282 (0x282)
[  769.584058] ffff8881fc657510: ffff8880a8090940 (0xffff8880a8090940)
[  769.584063] ffff8881fc657518: ffff8881fc6575c8 (0xffff8881fc6575c8)
[  769.584068] ffff8881fc657520: ffff88804f9795c0 (0xffff88804f9795c0)
[  769.584071] ffff8881fc657528: 0000000000000000 ...
[  769.584076] ffff8881fc657538: ffff88808990ca30 (0xffff88808990ca30)
[  769.584081] ffff8881fc657540: 00000000290ed6ee (0x290ed6ee)
[  769.584085] ffff8881fc657548: 0000000000000007 (0x7)
[  769.584091] ffff8881fc657550: 1ffff11011321946 (0x1ffff11011321946)
[  769.584093] ffff8881fc657558: 0000000000000000 ...
[  769.584099] ffff8881fc657560: ffff88808990ca10 (0xffff88808990ca10)
[  769.584103] ffff8881fc657568: 0000000000000282 (0x282)
[  769.584108] ffff8881fc657570: ffffffffffffff6e (0xffffffffffffff6e)
[  769.584134] ffff8881fc657578: ffffffff81877e10 (kmem_cache_free+0xb0/0x2b0)
[  769.584139] ffff8881fc657580: 0000000000000010 (0x10)
[  769.584143] ffff8881fc657588: 0000000000000282 (0x282)
[  769.584148] ffff8881fc657590: ffff8881fc6575a8 (0xffff8881fc6575a8)
[  769.584152] ffff8881fc657598: 0000000000000018 (0x18)
[  769.584156] ffff8881fc6575a0: 0000000000000282 (0x282)
[  769.584161] ffff8881fc6575a8: ffff8880a8092200 (0xffff8880a8092200)
[  769.584166] ffff8881fc6575b0: ffff8880a8090940 (0xffff8880a8090940)
[  769.584171] ffff8881fc6575b8: ffff88804f9795c0 (0xffff88804f9795c0)
[  769.584176] ffff8881fc6575c0: ffff8880a8092238 (0xffff8880a8092238)
[  769.584181] ffff8881fc6575c8: ffff8881fc6575e8 (0xffff8881fc6575e8)
[  769.584187] ffff8881fc6575d0: ffffffff81715f9e (mempool_free_slab+0x1e/0x30)
[  769.584193] ffff8881fc6575d8: ffff88804f9795c0 (0xffff88804f9795c0)
[  769.584199] ffff8881fc6575e0: ffffffff81715f80 (mempool_kfree+0x20/0x20)
[  769.584204] ffff8881fc6575e8: ffff8881fc657620 (0xffff8881fc657620)
[  769.584211] ffff8881fc6575f0: ffffffff81716974 (mempool_free+0xd4/0x1d0)
[  769.584215] ffff8881fc6575f8: 0000000000000005 (0x5)
[  769.584220] ffff8881fc657600: ffff88804f9795c0 (0xffff88804f9795c0)
[  769.584225] ffff8881fc657608: ffff8880a8092200 (0xffff8880a8092200)
[  769.584230] ffff8881fc657610: 0000000000000200 (0x200)
[  769.584235] ffff8881fc657618: ffffea0001e9801c (0xffffea0001e9801c)
[  769.584239] ffff8881fc657620: ffff8881fc657648 (0xffff8881fc657648)
[  769.584284] ffff8881fc657628: ffffffff82f64485 (bvec_free+0x85/0xa0)
[  769.584290] ffff8881fc657630: ffff88821aff3d00 (0xffff88821aff3d00)
[  769.584295] ffff8881fc657638: ffff888096611040 (0xffff888096611040)
[  769.584300] ffff8881fc657640: ffff88804f97b5c0 (0xffff88804f97b5c0)
[  769.584305] ffff8881fc657648: ffff8881fc657678 (0xffff8881fc657678)
[  769.584311] ffff8881fc657650: ffffffff82f654bd (bio_free+0xdd/0x1a0)
[  769.584316] ffff8881fc657658: 0000000000040000 (0x40000)
[  769.584357] ffff8881fc657660: ffffffff819d05f0 (dio_bio_complete+0x280/0x5d0)
[  769.584362] ffff8881fc657668: dffffc0000000000 (0xdffffc0000000000)
[  769.584367] ffff8881fc657670: ffff888096611040 (0xffff888096611040)
[  769.584372] ffff8881fc657678: ffff8881fc657690 (0xffff8881fc657690)
[  769.584379] ffff8881fc657680: ffffffff82f6561d (bio_put+0x9d/0xc0)
[  769.584384] ffff8881fc657688: ffffea0001e98000 (0xffffea0001e98000)
[  769.584389] ffff8881fc657690: ffff8881fc657700 (0xffff8881fc657700)
[  769.584396] ffff8881fc657698: ffffffff819d06a9 (dio_bio_complete+0x339/0x5d0)
[  769.584401] ffff8881fc6576a0: ffff8880462532c4 (0xffff8880462532c4)
[  769.584406] ffff8881fc6576a8: ffff888046253339 (0xffff888046253339)
[  769.584411] ffff8881fc6576b0: ffff8880966110b0 (0xffff8880966110b0)
[  769.584416] ffff8881fc6576b8: 0700ffff81481b40 (0x700ffff81481b40)
[  769.584421] ffff8881fc6576c0: ffffed1008c4a658 (0xffffed1008c4a658)
[  769.584426] ffff8881fc6576c8: ffff8880462532c0 (0xffff8880462532c0)
[  769.584430] ffff8881fc6576d0: ffff888096611040 (0xffff888096611040)
[  769.584435] ffff8881fc6576d8: ffff8880a9d99940 (0xffff8880a9d99940)
[  769.584446] ffff8881fc6576e0: 0000000000000282 (0x282)
[  769.584451] ffff8881fc6576e8: ffff888096611040 (0xffff888096611040)
[  769.584456] ffff8881fc6576f0: ffff8880462532f8 (0xffff8880462532f8)
[  769.584461] ffff8881fc6576f8: ffff8880462532c0 (0xffff8880462532c0)
[  769.584466] ffff8881fc657700: ffff8881fc657a28 (0xffff8881fc657a28)
[  769.584473] ffff8881fc657708: ffffffff819ddb2c (do_blockdev_direct_IO+0x53bc/0x9130)
[  769.584478] ffff8881fc657710: ffff8881fc6577a0 (0xffff8881fc6577a0)
[  769.584483] ffff8881fc657718: 000000000019084f (0x19084f)
[  769.584491] ffff8881fc657720: ffffffff87f87320 (rcu_bh_lock_map+0x40/0x40)
[  769.584496] ffff8881fc657728: ffff88808990d1a8 (0xffff88808990d1a8)
[  769.584501] ffff8881fc657730: ffff8881fc657840 (0xffff8881fc657840)
[  769.584506] ffff8881fc657738: 1ffff11011321a35 (0x1ffff11011321a35)
[  769.584511] ffff8881fc657740: ffff88808990c140 (0xffff88808990c140)
[  769.584516] ffff8881fc657748: ffff888046253339 (0xffff888046253339)
[  769.584521] ffff8881fc657750: ffff888008e82000 (0xffff888008e82000)
[  769.584526] ffff8881fc657758: 0000000000000200 (0x200)
[  769.584530] ffff8881fc657760: 0000000000000009 (0x9)
[  769.584535] ffff8881fc657768: ffff8881fc657920 (0xffff8881fc657920)
[  769.584540] ffff8881fc657770: ffff8881fc657890 (0xffff8881fc657890)
[  769.584545] ffff8881fc657778: ffff888000000000 (0xffff888000000000)
[  769.584549] ffff8881fc657780: 000002000000000c (0x2000000000c)
[  769.584554] ffff8881fc657788: 00000000000001ff (0x1ff)
[  769.584559] ffff8881fc657790: fffffffffffffe00 (0xfffffffffffffe00)
[  769.584564] ffff8881fc657798: 1ffff1103f8caf04 (0x1ffff1103f8caf04)
[  769.584568] ffff8881fc6577a0: 0000000000000200 (0x200)
[  769.584573] ffff8881fc6577a8: ffff88808990c140 (0xffff88808990c140)
[  769.584578] ffff8881fc6577b0: 0000000008800000 (0x8800000)
[  769.584583] ffff8881fc6577b8: ffff888046253334 (0xffff888046253334)
[  769.584588] ffff8881fc6577c0: ffff8880462532d8 (0xffff8880462532d8)
[  769.584593] ffff8881fc6577c8: 0000000000191807 (0x191807)
[  769.584597] ffff8881fc6577d0: 0000000900000200 (0x900000200)
[  769.584602] ffff8881fc6577d8: 0000000000000001 (0x1)
[  769.584607] ffff8881fc6577e0: ffff8880462532f8 (0xffff8880462532f8)
[  769.584612] ffff8881fc6577e8: ffff88808990d448 (0xffff88808990d448)
[  769.584617] ffff8881fc6577f0: fffffffffffffff2 (0xfffffffffffffff2)
[  769.584622] ffff8881fc6577f8: 1ffff11011321a89 (0x1ffff11011321a89)
23:37:56 executing program 1:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$P9_RVERSION(r1, &(0x7f0000000240)=ANY=[], 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, r2, 0x8)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
syz_open_dev$admmidi(&(0x7f00000014c0)='/dev/admmidi#\x00', 0xffffffff, 0x800080)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
r5 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setownex(r6, 0xf, &(0x7f0000000180)={0x0, r5})
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r8}, 0x10)
r9 = getpid()
sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r10 = getpgrp(0x0)
setpriority(0x0, r10, 0x0)
r11 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x1)
r12 = gettid()
process_vm_writev(r12, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/240, 0xf0}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/224, 0xe0}], 0x1, 0x0)
r13 = getpgid(0x0)
r14 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5)
r15 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1)
r16 = dup2(r15, r14)
writev(r16, &(0x7f0000000040)=[{&(0x7f00000002c0)='3', 0x1}], 0x1)
ppoll(&(0x7f0000000200)=[{r16}], 0x1, &(0x7f0000000280), 0x0, 0x0)
r17 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r18 = inotify_init1(0x0)
fcntl$setown(r18, 0x8, 0xffffffffffffffff)
fcntl$getownex(r18, 0x10, &(0x7f00000000c0)={0x0, <r19=>0x0})
r20 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r20, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="020000000100eb0000000000020001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYBLOB='\b\x00\x00', @ANYRES32, @ANYBLOB="080005115951c076757a2164ca8343141a694359b9c301bf24d95441febf5a16ae429194cf41f9773a21df3fbefdfd920f68e5e58ca390181d9c686c6f0806797ac4b7731b7f6de976e4e0d345ac1f83f37848b5967ec0775d6b112c47c6e95551477839c728d326f78e5d0799b1c02c3418b1a48e41d54f698cc38b60a6a0375079bff305c0f0bbeddd3edfffcfdc456e464d8c1a7da7b7b2d8a43ac3491716431f09760a1563fe6d0296d3c466fe2c062668338b9185831dd35125", @ANYBLOB="74b24e1f0ef01479f571f55b37d7089c077e74b1bd50a45834473f982e6fd1fd97f815af9ca38040c073a4e24e033248357bfb5ab67092f29f0b1a66e443cc9e9ef2a93a80607607e3231fc4077092a7af7f95cd0ac29c703cc271896016d7b31ca22f3b0b56e5fec2690ec778d14906d776e06d1e11235fee66cd668482429cbe849c5b"], 0x8, 0x1)
r21 = socket(0xa, 0x3, 0x8)
r22 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000)
ioctl$sock_inet_SIOCSIFFLAGS(r21, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r22, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r23=>0xffffffffffffffff}}}, 0x20)
sendmsg$key(r21, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
r24 = gettid()
waitid(0x83b895581628fca4, r24, &(0x7f0000000040), 0x2, &(0x7f0000000480))
sendmsg$key(r21, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r23, @ANYRESDEC=r24]], 0xfffffffffffffe56}}, 0x20004850)
r25 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r26 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0)
r27 = dup2(r26, r25)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r27, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r28 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r28)
r29 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x101405)
writev(r29, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2)
ioctl$SG_GET_REQUEST_TABLE(r29, 0x227d, &(0x7f0000000780))
kcmp(r28, r24, 0x0, 0xffffffffffffffff, r29)
ptrace$setopts(0x4206, r28, 0x0, 0x0)
r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r31=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0x2}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r28, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r27, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r19, r20, 0x0, 0x1, &(0x7f0000000080)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r17, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r13, r16, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r12, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)='/dev/ptmx\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r10, r11, 0x0, 0x8, &(0x7f0000000100)='syz_tun\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r9, r8, 0x0, 0x5, &(0x7f0000000340)=',em1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r32=>r5, r7, 0x0, 0xd, &(0x7f0000000240)='/selinux/mls\x00', r31}, 0x30)
fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, <r33=>0x0})
rt_tgsigqueueinfo(r32, r33, 0x0, &(0x7f0000000300)={0x5, 0x10000})
write(r4, &(0x7f0000000340), 0x41395527)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001500)={0x10000}, 0x4)
pipe(&(0x7f0000000200)={<r34=>0xffffffffffffffff})
vmsplice(r34, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

[  769.584627] ffff8881fc657800: ffff888046253358 (0xffff888046253358)
[  769.584632] ffff8881fc657808: ffff888046253340 (0xffff888046253340)
[  769.584637] ffff8881fc657810: ffff888046253348 (0xffff888046253348)
[  769.584642] ffff8881fc657818: ffff88808990c140 (0xffff88808990c140)
[  769.584646] ffff8881fc657820: 0000000041b58ab3 (0x41b58ab3)
[  769.584653] ffff8881fc657828: ffffffff87ae2c30 (ORMASK+0x1b9b0/0x13d810)
[  769.584659] ffff8881fc657830: ffffffff819d8770 (sb_init_dio_done_wq+0x80/0x80)
[  769.584666] ffff8881fc657838: ffffffff814822d7 (__lock_acquire+0x5f7/0x4620)
23:37:56 executing program 3:
r0 = add_key$user(&(0x7f0000000600)='user\x00', 0x0, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

[  769.584671] ffff8881fc657840: ffff8881fc657840 (0xffff8881fc657840)
[  769.584676] ffff8881fc657848: ffff8881fc657840 (0xffff8881fc657840)
[  769.584681] ffff8881fc657850: ffff8881fc657850 (0xffff8881fc657850)
[  769.584686] ffff8881fc657858: ffff8881fc657850 (0xffff8881fc657850)
[  769.584691] ffff8881fc657860: ffff8881fc657860 (0xffff8881fc657860)
[  769.584696] ffff8881fc657868: ffff8881fc657860 (0xffff8881fc657860)
[  769.584700] ffff8881fc657870: 0000000000000009 (0x9)
[  769.584705] ffff8881fc657878: ffffffff00000282 (0xffffffff00000282)
[  769.584711] ffff8881fc657880: ffff88808990c9b8 (0xffff88808990c9b8)
[  769.584715] ffff8881fc657888: ffff88808990c9c0 (0xffff88808990c9c0)
[  769.584720] ffff8881fc657890: 0000000000001060 (0x1060)
[  769.584723] ffff8881fc657898: 0000000000000000 ...
[  769.584727] ffff8881fc6578a8: 0000000000031b01 (0x31b01)
[  769.584732] ffff8881fc6578b0: 0000000000800000 (0x800000)
[  769.584735] ffff8881fc6578b8: 0000000000000000 ...
[  769.584740] ffff8881fc6578c0: ffff8880a6e57140 (0xffff8880a6e57140)
[  769.584743] ffff8881fc6578c8: 0000000000000000 ...
[  769.584748] ffff8881fc6578f8: ffff88808990c9c0 (0xffff88808990c9c0)
[  769.584753] ffff8881fc657900: 000000078990c140 (0x78990c140)
[  769.584758] ffff8881fc657908: ffff88808990c140 (0xffff88808990c140)
[  769.584765] ffff8881fc657910: ffffffff86800979 (retint_kernel+0x2d/0x2d)
[  769.584767] ffff8881fc657918: 0000000000000000 ...
[  769.584772] ffff8881fc657928: 0000000300000009 (0x300000009)
[  769.584777] ffff8881fc657930: 0000780300000001 (0x780300000001)
[  769.584781] ffff8881fc657938: 0000000000008000 (0x8000)
[  769.584786] ffff8881fc657940: 0000000900000000 (0x900000000)
[  769.584791] ffff8881fc657948: 0000000000044000 (0x44000)
[  769.584793] ffff8881fc657950: 0000000000000000 ...
[  769.584836] ffff8881fc657958: ffffffff81c4a270 (ext4_dio_get_block_unwritten_async+0x1c0/0x1c0)
[  769.584839] ffff8881fc657960: 0000000000000000 ...
[  769.584844] ffff8881fc657970: 0000000000191808 (0x191808)
[  769.584848] ffff8881fc657978: 0000000000191808 (0x191808)
[  769.584851] ffff8881fc657980: 0000000000000000 ...
[  769.584856] ffff8881fc657988: 0000020000000000 (0x20000000000)
[  769.584861] ffff8881fc657990: 0000000000191807 (0x191807)
[  769.584865] ffff8881fc657998: 0000000000fffe00 (0xfffe00)
[  769.584870] ffff8881fc6579a0: ffff8881fc657d98 (0xffff8881fc657d98)
[  769.584875] ffff8881fc6579a8: 0000000100000001 (0x100000001)
[  769.584878] ffff8881fc6579b0: 0000000000000000 ...
[  769.584882] ffff8881fc6579b8: 0000000000001000 (0x1000)
[  769.584887] ffff8881fc6579c0: 0000000000000e43 (0xe43)
[  769.584911] ffff8881fc6579c8: ffffffff86d82200 (__func__.67567+0x40/0x40)
[  769.584914] ffff8881fc6579d0: 0000000000000000 ...
[  769.584919] ffff8881fc6579d8: ffff8881fc657a88 (0xffff8881fc657a88)
[  769.584924] ffff8881fc6579e0: ffff888053b878b0 (0xffff888053b878b0)
[  769.584929] ffff8881fc6579e8: ffff88808990c140 (0xffff88808990c140)
[  769.584931] ffff8881fc6579f0: 0000000000000000 ...
[  769.584936] ffff8881fc6579f8: 0000000000000003 (0x3)
[  769.584943] ffff8881fc657a00: ffffffff81c4a270 (ext4_dio_get_block_unwritten_async+0x1c0/0x1c0)
[  769.584948] ffff8881fc657a08: ffff8880a6e57140 (0xffff8880a6e57140)
23:37:56 executing program 4:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x8, r2, 0x8)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
syz_open_dev$admmidi(&(0x7f00000014c0)='/dev/admmidi#\x00', 0xffffffff, 0x800080)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
r5 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setownex(r6, 0xf, &(0x7f0000000180)={0x0, r5})
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r8}, 0x10)
r9 = getpid()
sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r10 = getpgrp(0x0)
setpriority(0x0, r10, 0x0)
r11 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x1)
r12 = gettid()
process_vm_writev(r12, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/240, 0xf0}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/224, 0xe0}], 0x1, 0x0)
r13 = getpgid(0x0)
r14 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5)
r15 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1)
r16 = dup2(r15, r14)
writev(r16, &(0x7f0000000040)=[{&(0x7f00000002c0)='3', 0x1}], 0x1)
ppoll(&(0x7f0000000200)=[{r16}], 0x1, &(0x7f0000000280), 0x0, 0x0)
r17 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r18 = inotify_init1(0x0)
fcntl$setown(r18, 0x8, 0xffffffffffffffff)
fcntl$getownex(r18, 0x10, &(0x7f00000000c0)={0x0, <r19=>0x0})
r20 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r20, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="020000000100eb0000000000020001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYBLOB='\b\x00\x00', @ANYRES32, @ANYBLOB="080005115951c076757a2164ca8343141a694359b9c301bf24d95441febf5a16ae429194cf41f9773a21df3fbefdfd920f68e5e58ca390181d9c686c6f0806797ac4b7731b7f6de976e4e0d345ac1f83f37848b5967ec0775d6b112c47c6e95551477839c728d326f78e5d0799b1c02c3418b1a48e41d54f698cc38b60a6a0375079bff305c0f0bbeddd3edfffcfdc456e464d8c1a7da7b7b2d8a43ac3491716431f09760a1563fe6d0296d3c466fe2c062668338b9185831dd35125bdd22378d3cf071a878b7a063b2d46a938629ac3291d146d87e0fe731694a7", @ANYBLOB="74b24e1f0ef01479f571f55b37d7089c077e74b1bd50a45834473f982e6fd1fd97f815af9ca38040c073a4e24e033248357bfb5ab67092f29f0b1a66e443cc9e9ef2a93a80607607e3231fc4077092a7af7f95cd0ac29c703cc271896016d7b31ca22f3b0b56e5fec2690ec778d14906d776e06d1e11235fee66cd668482429cbe849c5b"], 0x8, 0x1)
r21 = socket(0xa, 0x3, 0x8)
r22 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000)
ioctl$sock_inet_SIOCSIFFLAGS(r21, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r22, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r23=>0xffffffffffffffff}}}, 0x20)
sendmsg$key(r21, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
r24 = gettid()
waitid(0x83b895581628fca4, r24, &(0x7f0000000040), 0x2, &(0x7f0000000480))
sendmsg$key(r21, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r23, @ANYRESDEC=r24]], 0xfffffffffffffe56}}, 0x20004850)
r25 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r26 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0)
r27 = dup2(r26, r25)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r27, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r28 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r28)
r29 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x101405)
writev(r29, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2)
ioctl$SG_GET_REQUEST_TABLE(r29, 0x227d, &(0x7f0000000780))
kcmp(r28, r24, 0x0, 0xffffffffffffffff, r29)
ptrace$setopts(0x4206, r28, 0x0, 0x0)
r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r31=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0x2}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r28, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r27, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r19, r20, 0x0, 0x1, &(0x7f0000000080)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r17, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r13, r16, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r12, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)='/dev/ptmx\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r10, r11, 0x0, 0x8, &(0x7f0000000100)='syz_tun\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r9, r8, 0x0, 0x5, &(0x7f0000000340)=',em1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r32=>r5, r7, 0x0, 0xd, &(0x7f0000000240)='/selinux/mls\x00', r31}, 0x30)
fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, <r33=>0x0})
rt_tgsigqueueinfo(r32, r33, 0x0, &(0x7f0000000300)={0x5, 0x10000})
write(r4, &(0x7f0000000340), 0x41395527)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001500)={0x10000}, 0x4)
setsockopt$inet6_tcp_buf(r2, 0x6, 0xe, &(0x7f0000000140)="1e5da9bc7793999e848025a58b324ebec78eb457fc22a9e91a841566ddc30961db08bd91ad5ea2a218f05f3fb06130c4093e900401dd01a04f3fd0af6bb6fd28b48b72da1eacd8692603b2498782d70f20177ea068104186eafb3993141dbff6b01ebca167692945705816bda6fced47f1e92eeca8bac413dc06c5da1b61cf2ba6be8142491c9231dc1bdeb25d4b32ffc985c8639f973474ddb8677c463877e38f49a9ae688751f291613491cfb6148c0e1f66a5f0208d5b2e798eb9711c51fbe4c5e0257e3310dafeaae347ce9e3e9696f32d9ca7d0", 0xd6)
pipe(&(0x7f0000000200)={<r34=>0xffffffffffffffff})
vmsplice(r34, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

[  769.584953] ffff8881fc657a10: ffff8881fc657d48 (0xffff8881fc657d48)
[  769.584958] ffff8881fc657a18: ffff888053b878b0 (0xffff888053b878b0)
[  769.584963] ffff8881fc657a20: ffff8881fc657d98 (0xffff8881fc657d98)
[  769.584968] ffff8881fc657a28: ffff8881fc657a78 (0xffff8881fc657a78)
[  769.584975] ffff8881fc657a30: ffffffff819e1941 (__blockdev_direct_IO+0xa1/0xca)
[  769.584978] ffff8881fc657a38: 0000000000000000 ...
[  769.584982] ffff8881fc657a40: 0000000000000001 (0x1)
[  769.584989] ffff8881fc657a48: ffffffff81c40660 (write_end_fn+0xa0/0xa0)
[  769.584993] ffff8881fc657a50: ffff888053b878b0 (0xffff888053b878b0)
[  769.584998] ffff8881fc657a58: ffff888053b87710 (0xffff888053b87710)
[  769.585003] ffff8881fc657a60: ffff88809a94c2c0 (0xffff88809a94c2c0)
[  769.585008] ffff8881fc657a68: ffff888053b878b0 (0xffff888053b878b0)
[  769.585013] ffff8881fc657a70: ffff8881fc657d48 (0xffff8881fc657d48)
[  769.585018] ffff8881fc657a78: ffff8881fc657b18 (0xffff8881fc657b18)
[  769.585024] ffff8881fc657a80: ffffffff81c5f9fd (ext4_direct_IO+0x70d/0x1890)
[  769.585026] ffff8881fc657a88: 0000000000000000 ...
[  769.585030] ffff8881fc657a90: 0000000000000001 (0x1)
[  769.585038] ffff8881fc657a98: ffffffff81c4a270 (ext4_dio_get_block_unwritten_async+0x1c0/0x1c0)
[  769.585043] ffff8881fc657aa0: ffff888053b878d8 (0xffff888053b878d8)
[  769.585046] ffff8881fc657aa8: 0000000000000000 ...
[  769.585051] ffff8881fc657ab0: ffff888000000000 (0xffff888000000000)
[  769.585055] ffff8881fc657ab8: 0000000000000001 (0x1)
[  769.585060] ffff8881fc657ac0: ffff888053b87900 (0xffff888053b87900)
[  769.585065] ffff8881fc657ac8: 0000000008800000 (0x8800000)
[  769.585070] ffff8881fc657ad0: ffffc90000000001 (0xffffc90000000001)
[  769.585074] ffff8881fc657ad8: 0000000008800000 (0x8800000)
[  769.585077] ffff8881fc657ae0: 0000000000000000 ...
[  769.585082] ffff8881fc657ae8: ffff8881fc657d98 (0xffff8881fc657d98)
[  769.585087] ffff8881fc657af0: ffff8881fc657d48 (0xffff8881fc657d48)
[  769.585093] ffff8881fc657af8: ffffffff86d82480 (__func__.67242+0x40/0x40)
[  769.585098] ffff8881fc657b00: ffff8881fc657d98 (0xffff8881fc657d98)
[  769.585103] ffff8881fc657b08: ffff888053b87ab8 (0xffff888053b87ab8)
[  769.585106] ffff8881fc657b10: 0000000000000000 ...
[  769.585111] ffff8881fc657b18: ffff8881fc657b80 (0xffff8881fc657b80)
[  769.585118] ffff8881fc657b20: ffffffff81715107 (generic_file_direct_write+0x1e7/0x430)
[  769.585123] ffff8881fc657b28: ffff8881fc657d50 (0xffff8881fc657d50)
[  769.585128] ffff8881fc657b30: ffff8881fc657da8 (0xffff8881fc657da8)
[  769.585131] ffff8881fc657b38: 0000000000000000 ...
[  769.585135] ffff8881fc657b40: 0000000008800000 (0x8800000)
[  769.585140] ffff8881fc657b48: 00000000000087ff (0x87ff)
[  769.585145] ffff8881fc657b50: ffff888053b878b0 (0xffff888053b878b0)
[  769.585150] ffff8881fc657b58: ffff8881fc657d48 (0xffff8881fc657d48)
[  769.585155] ffff8881fc657b60: ffff888090512300 (0xffff888090512300)
[  769.585160] ffff8881fc657b68: ffff888053b878b0 (0xffff888053b878b0)
[  769.585165] ffff8881fc657b70: ffff888053b87ab8 (0xffff888053b87ab8)
[  769.585168] ffff8881fc657b78: 0000000000000000 ...
[  769.585172] ffff8881fc657b80: ffff8881fc657bd8 (0xffff8881fc657bd8)
[  769.585180] ffff8881fc657b88: ffffffff8171560c (__generic_file_write_iter+0x2bc/0x5b0)
[  769.585185] ffff8881fc657b90: ffff8881fc657d98 (0xffff8881fc657d98)
[  769.585190] ffff8881fc657b98: ffff888053b878b0 (0xffff888053b878b0)
[  769.585195] ffff8881fc657ba0: ffff8881fc657d98 (0xffff8881fc657d98)
[  769.585200] ffff8881fc657ba8: ffff8880a18af480 (0xffff8880a18af480)
[  769.585205] ffff8881fc657bb0: ffff8881fc657d48 (0xffff8881fc657d48)
[  769.585210] ffff8881fc657bb8: ffff888053b878b0 (0xffff888053b878b0)
[  769.585215] ffff8881fc657bc0: ffff8881fc657ca8 (0xffff8881fc657ca8)
[  769.585220] ffff8881fc657bc8: ffff888053b87990 (0xffff888053b87990)
[  769.585222] ffff8881fc657bd0: 0000000000000000 ...
[  769.585227] ffff8881fc657bd8: ffff8881fc657cd0 (0xffff8881fc657cd0)
[  769.585235] ffff8881fc657be0: ffffffff81c19f2c (ext4_file_write_iter+0x2ac/0xe90)
[  769.585240] ffff8881fc657be8: ffff8881fc657bf9 (0xffff8881fc657bf9)
[  769.585246] ffff8881fc657bf0: ffffffff86800979 (retint_kernel+0x2d/0x2d)
[  769.585251] ffff8881fc657bf8: ffff888053b87900 (0xffff888053b87900)
[  769.585255] ffff8881fc657c00: ffff888053b878d8 (0xffff888053b878d8)
[  769.585260] ffff8881fc657c08: ffff888053b87710 (0xffff888053b87710)
[  769.585265] ffff8881fc657c10: ffff8881fc657d68 (0xffff8881fc657d68)
[  769.585269] ffff8881fc657c18: 1ffff1103f8caf85 (0x1ffff1103f8caf85)
[  769.585274] ffff8881fc657c20: ffff8881fc657d98 (0xffff8881fc657d98)
[  769.585279] ffff8881fc657c28: 0000000041b58ab3 (0x41b58ab3)
[  769.585285] ffff8881fc657c30: ffffffff87aea490 (ORMASK+0x23210/0x13d810)
[  769.585292] ffff8881fc657c38: ffffffff81c19c80 (ext4_file_mmap+0x2c0/0x2c0)
[  769.585296] ffff8881fc657c40: 00000000175d900f (0x175d900f)
[  769.585300] ffff8881fc657c48: dffffc0000000000 (0xdffffc0000000000)
[  769.585304] ffff8881fc657c50: ffffc9000742b000 (0xffffc9000742b000)
[  769.585308] ffff8881fc657c58: ffff888100000000 (0xffff888100000000)
[  769.585350] ffff8881fc657c60: ffffffff8307fca3 (iov_iter_init+0x63/0x1d0)
[  769.585355] ffff8881fc657c68: ffff88808990d518 (0xffff88808990d518)
[  769.585360] ffff8881fc657c70: ffffffffffffff10 (0xffffffffffffff10)
[  769.585366] ffff8881fc657c78: ffffffff8307fcb0 (iov_iter_init+0x70/0x1d0)
[  769.585370] ffff8881fc657c80: 0000000000000010 (0x10)
[  769.585375] ffff8881fc657c88: 0000000000000216 (0x216)
23:37:56 executing program 2:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r2, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

23:37:57 executing program 0:
r0 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="49e6a9aa233e88df67d345ff2ab533ac8769d0aca8d5a6c45d304bdbc2a2b63120d97da028be2f94b9df4ae6a2a3f64bcdd417907ea68de2893b98b639489183026892d92a4e04c79537118a42dec7e8575e5002226f53ae753d68966013652a4e677a131072e8c611f9c8c1e473", 0x6e, 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x6100)
r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f3)
r3 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r3, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9fd7b08814990480c3078fa838a9d85780335b0161b04898a40a2c9cd6a", 0x24}], 0x1}}, {{&(0x7f00000012c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}], 0x18}}], 0x2, 0x0)
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0x81}})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1bcd401aebc732f}, 0xc, &(0x7f00000003c0), 0x1, 0x0, 0x0, 0x40015}, 0x8)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e}})
ftruncate(r1, 0x8200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)

[  769.585379] ffff8881fc657c90: ffff8881fc657cd0 (0xffff8881fc657cd0)
[  769.585386] ffff8881fc657c98: ffffffff8307fcef (iov_iter_init+0xaf/0x1d0)
[  769.585435] ffff8881fc657ca0: ffffffff86fd28c0 (securityfs_super_operations+0x4b00/0x67a0)
[  769.585444] ffff8881fc657ca8: ffff8881fc657de8 (0xffff8881fc657de8)
[  769.585467] ffff8881fc657cb0: ffffffff86d7ef60 (ext4_file_inode_operations+0xe0/0xe0)
[  769.585472] ffff8881fc657cb8: ffff8881fc657ea0 (0xffff8881fc657ea0)
[  769.585477] ffff8881fc657cc0: 00000000175d900f (0x175d900f)
[  769.585481] ffff8881fc657cc8: ffff8881fc657d98 (0xffff8881fc657d98)
[  769.585485] ffff8881fc657cd0: ffff8881fc657e10 (0xffff8881fc657e10)
[  769.585509] ffff8881fc657cd8: ffffffff818f9d27 (__vfs_write+0x4a7/0x6b0)
[  769.585514] ffff8881fc657ce0: ffff8881fc657d30 (0xffff8881fc657d30)
[  769.585518] ffff8881fc657ce8: ffff888053b878b0 (0xffff888053b878b0)
[  769.585523] ffff8881fc657cf0: ffff888090512328 (0xffff888090512328)
[  769.585528] ffff8881fc657cf8: ffffffff00000000 (0xffffffff00000000)
[  769.585532] ffff8881fc657d00: 1ffff1103f8cafa1 (0x1ffff1103f8cafa1)
[  769.585537] ffff8881fc657d08: 0000000041b58ab3 (0x41b58ab3)
[  769.585543] ffff8881fc657d10: ffffffff87adfc68 (ORMASK+0x189e8/0x13d810)
[  769.585549] ffff8881fc657d18: ffffffff818f9880 (kernel_read+0x120/0x120)
[  769.585554] ffff8881fc657d20: ffff88808990c9e8 (0xffff88808990c9e8)
[  769.585558] ffff8881fc657d28: 0000000020000200 (0x20000200)
[  769.585562] ffff8881fc657d30: 00000000175d900f (0x175d900f)
[  769.585585] ffff8881fc657d38: ffffffff830ac32c (check_preemption_disabled+0x3c/0x250)
[  769.585590] ffff8881fc657d40: ffff88808990c9b8 (0xffff88808990c9b8)
23:37:57 executing program 1:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$P9_RVERSION(r1, &(0x7f0000000240)=ANY=[], 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, r2, 0x8)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
syz_open_dev$admmidi(&(0x7f00000014c0)='/dev/admmidi#\x00', 0xffffffff, 0x800080)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
r5 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setownex(r6, 0xf, &(0x7f0000000180)={0x0, r5})
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r8}, 0x10)
r9 = getpid()
sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r10 = getpgrp(0x0)
setpriority(0x0, r10, 0x0)
r11 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x1)
r12 = gettid()
process_vm_writev(r12, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/240, 0xf0}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/224, 0xe0}], 0x1, 0x0)
r13 = getpgid(0x0)
r14 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5)
r15 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1)
r16 = dup2(r15, r14)
writev(r16, &(0x7f0000000040)=[{&(0x7f00000002c0)='3', 0x1}], 0x1)
ppoll(&(0x7f0000000200)=[{r16}], 0x1, &(0x7f0000000280), 0x0, 0x0)
r17 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r18 = inotify_init1(0x0)
fcntl$setown(r18, 0x8, 0xffffffffffffffff)
fcntl$getownex(r18, 0x10, &(0x7f00000000c0)={0x0, <r19=>0x0})
r20 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r20, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="020000000100eb0000000000020001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYBLOB='\b\x00\x00', @ANYRES32, @ANYBLOB="080005115951c076757a2164ca8343141a694359b9c301bf24d95441febf5a16ae429194cf41f9773a21df3fbefdfd920f68e5e58ca390181d9c686c6f0806797ac4b7731b7f6de976e4e0d345ac1f83f37848b5967ec0775d6b112c47c6e95551477839c728d326f78e5d0799b1c02c3418b1a48e41d54f698cc38b60a6a0375079bff305c0f0bbeddd3edfffcfdc456e464d8c1a7da7b7b2d8a43ac3491716431f09760a1563fe6d0296d3c466fe2c062668338b9185831dd35125", @ANYBLOB="74b24e1f0ef01479f571f55b37d7089c077e74b1bd50a45834473f982e6fd1fd97f815af9ca38040c073a4e24e033248357bfb5ab67092f29f0b1a66e443cc9e9ef2a93a80607607e3231fc4077092a7af7f95cd0ac29c703cc271896016d7b31ca22f3b0b56e5fec2690ec778d14906d776e06d1e11235fee66cd668482429cbe849c5b"], 0x8, 0x1)
r21 = socket(0xa, 0x3, 0x8)
r22 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000)
ioctl$sock_inet_SIOCSIFFLAGS(r21, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r22, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r23=>0xffffffffffffffff}}}, 0x20)
sendmsg$key(r21, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
r24 = gettid()
waitid(0x83b895581628fca4, r24, &(0x7f0000000040), 0x2, &(0x7f0000000480))
sendmsg$key(r21, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r23, @ANYRESDEC=r24]], 0xfffffffffffffe56}}, 0x20004850)
r25 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r26 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0)
r27 = dup2(r26, r25)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r27, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r28 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r28)
r29 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x101405)
writev(r29, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2)
ioctl$SG_GET_REQUEST_TABLE(r29, 0x227d, &(0x7f0000000780))
kcmp(r28, r24, 0x0, 0xffffffffffffffff, r29)
ptrace$setopts(0x4206, r28, 0x0, 0x0)
r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r31=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0x2}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r28, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r27, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r19, r20, 0x0, 0x1, &(0x7f0000000080)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r17, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r13, r16, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r12, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)='/dev/ptmx\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r10, r11, 0x0, 0x8, &(0x7f0000000100)='syz_tun\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r9, r8, 0x0, 0x5, &(0x7f0000000340)=',em1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r32=>r5, r7, 0x0, 0xd, &(0x7f0000000240)='/selinux/mls\x00', r31}, 0x30)
fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, <r33=>0x0})
rt_tgsigqueueinfo(r32, r33, 0x0, &(0x7f0000000300)={0x5, 0x10000})
write(r4, &(0x7f0000000340), 0x41395527)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001500)={0x10000}, 0x4)
pipe(&(0x7f0000000200)={<r34=>0xffffffffffffffff})
vmsplice(r34, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

[  769.585594] ffff8881fc657d48: ffff888090512300 (0xffff888090512300)
[  769.585596] ffff8881fc657d50: 0000000000000000 ...
[  769.585601] ffff8881fc657d68: 0000000000000004 (0x4)
[  769.585605] ffff8881fc657d70: 0000000000000001 (0x1)
[  769.585609] ffff8881fc657d78: ffff8881fc657da8 (0xffff8881fc657da8)
[  769.585613] ffff8881fc657d80: 0000000000000282 (0x282)
[  769.585620] ffff8881fc657d88: ffffffff814e1c02 (rcu_lockdep_current_cpu_online+0xf2/0x140)
[  769.585624] ffff8881fc657d90: 0000000000000003 (0x3)
[  769.585630] ffff8881fc657d98: ffff888000000001 (0xffff888000000001)
[  769.585634] ffff8881fc657da0: 0000000000fffe00 (0xfffe00)
[  769.585638] ffff8881fc657da8: 0000000007800200 (0x7800200)
[  769.585643] ffff8881fc657db0: ffff8881fc657d28 (0xffff8881fc657d28)
[  769.585647] ffff8881fc657db8: 0000000000000001 (0x1)
[  769.585651] ffff8881fc657dc0: ffff8881fc657dd8 (0xffff8881fc657dd8)
[  769.585678] ffff8881fc657dc8: ffffffff814d7b3d (rcu_sync_lockdep_assert+0x6d/0xb0)
[  769.585682] ffff8881fc657dd0: 0000000000000001 (0x1)
[  769.585687] ffff8881fc657dd8: ffff8881fc657e10 (0xffff8881fc657e10)
[  769.585694] ffff8881fc657de0: ffffffff81900423 (__sb_start_write+0x153/0x2f0)
[  769.585699] ffff8881fc657de8: ffff888090512300 (0xffff888090512300)
[  769.585704] ffff8881fc657df0: ffff888090512320 (0xffff888090512320)
[  769.585708] ffff8881fc657df8: 00000000175d900f (0x175d900f)
[  769.585713] ffff8881fc657e00: ffff8881fc657ea0 (0xffff8881fc657ea0)
[  769.585717] ffff8881fc657e08: ffff88809051237c (0xffff88809051237c)
[  769.585722] ffff8881fc657e10: ffff8881fc657e58 (0xffff8881fc657e58)
[  769.585728] ffff8881fc657e18: ffffffff818fa438 (vfs_write+0x198/0x500)
[  769.585733] ffff8881fc657e20: ffff888053b878b0 (0xffff888053b878b0)
[  769.585736] ffff8881fc657e28: 0000000020000200 (0x20000200)
[  769.585741] ffff8881fc657e30: ffff888090512303 (0xffff888090512303)
[  769.585746] ffff8881fc657e38: ffff888090512300 (0xffff888090512300)
[  769.585748] ffff8881fc657e40: 0000000000000000 ...
[  769.585753] ffff8881fc657e48: ffff88809051237c (0xffff88809051237c)
[  769.585758] ffff8881fc657e50: ffff8881fc657ec0 (0xffff8881fc657ec0)
[  769.585763] ffff8881fc657e58: ffff8881fc657ee8 (0xffff8881fc657ee8)
[  769.585769] ffff8881fc657e60: ffffffff818fabed (SyS_write+0xfd/0x230)
[  769.585774] ffff8881fc657e68: 00000000175d900f (0x175d900f)
[  769.585778] ffff8881fc657e70: 0000000020000200 (0x20000200)
[  769.585783] ffff8881fc657e78: 1ffff1103f8cafd0 (0x1ffff1103f8cafd0)
[  769.585788] ffff8881fc657e80: 0000000041b58ab3 (0x41b58ab3)
[  769.585794] ffff8881fc657e88: ffffffff87adfa63 (ORMASK+0x187e3/0x13d810)
[  769.585800] ffff8881fc657e90: ffffffff818faaf0 (SyS_read+0x230/0x230)
[  769.585807] ffff8881fc657e98: ffffffff810075e3 (do_syscall_64+0x53/0x640)
[  769.585810] ffff8881fc657ea0: 0000000000000000 ...
[  769.585815] ffff8881fc657ea8: ffff8881fc657fd0 (0xffff8881fc657fd0)
[  769.585819] ffff8881fc657eb0: ffff88808990c140 (0xffff88808990c140)
[  769.585824] ffff8881fc657eb8: ffff8881fc657ed8 (0xffff8881fc657ed8)
[  769.585830] ffff8881fc657ec0: ffffffff818faaf0 (SyS_read+0x230/0x230)
[  769.585835] ffff8881fc657ec8: ffff8881fc657f58 (0xffff8881fc657f58)
[  769.585852] ffff8881fc657ed0: ffffffff87f168d8 (pv_irq_ops+0x18/0x30)
[  769.585857] ffff8881fc657ed8: ffff8881fc657fd0 (0xffff8881fc657fd0)
[  769.585862] ffff8881fc657ee0: ffff88808990c140 (0xffff88808990c140)
[  769.585867] ffff8881fc657ee8: ffff8881fc657f48 (0xffff8881fc657f48)
[  769.585874] ffff8881fc657ef0: ffffffff81007778 (do_syscall_64+0x1e8/0x640)
[  769.585882] ffff8881fc657ef8: ffffffff81004252 (trace_hardirqs_off_thunk+0x1a/0x1c)
[  769.585885] ffff8881fc657f00: 0000000000000000 ...
[  769.585893] ffff8881fc657f50: ffffffff86800086 (entry_SYSCALL_64_after_hwframe+0x42/0xb7)
[  769.585897] ffff8881fc657f58: 00000000ffffffff (0xffffffff)
[  769.585901] ffff8881fc657f60: 00000000004e5760 (0x4e5760)
[  769.585905] ffff8881fc657f68: 00000000004cbb1d (0x4cbb1d)
[  769.585909] ffff8881fc657f70: 00007f59851a16d4 (0x7f59851a16d4)
[  769.585913] ffff8881fc657f78: 000000000075bf20 (0x75bf20)
[  769.585917] ffff8881fc657f80: 0000000000000003 (0x3)
[  769.585921] ffff8881fc657f88: 0000000000000246 (0x246)
[  769.585924] ffff8881fc657f90: 0000000000000000 ...
[  769.585928] ffff8881fc657fa8: ffffffffffffffda (0xffffffffffffffda)
[  769.585932] ffff8881fc657fb0: 000000000045a679 (0x45a679)
23:37:57 executing program 4:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x8, r2, 0x8)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
syz_open_dev$admmidi(&(0x7f00000014c0)='/dev/admmidi#\x00', 0xffffffff, 0x800080)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
r5 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setownex(r6, 0xf, &(0x7f0000000180)={0x0, r5})
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r8}, 0x10)
r9 = getpid()
sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r10 = getpgrp(0x0)
setpriority(0x0, r10, 0x0)
r11 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x1)
r12 = gettid()
process_vm_writev(r12, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/240, 0xf0}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/224, 0xe0}], 0x1, 0x0)
r13 = getpgid(0x0)
r14 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5)
r15 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1)
r16 = dup2(r15, r14)
writev(r16, &(0x7f0000000040)=[{&(0x7f00000002c0)='3', 0x1}], 0x1)
ppoll(&(0x7f0000000200)=[{r16}], 0x1, &(0x7f0000000280), 0x0, 0x0)
r17 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r18 = inotify_init1(0x0)
fcntl$setown(r18, 0x8, 0xffffffffffffffff)
fcntl$getownex(r18, 0x10, &(0x7f00000000c0)={0x0, <r19=>0x0})
r20 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r20, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="020000000100eb0000000000020001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYBLOB='\b\x00\x00', @ANYRES32, @ANYBLOB="080005115951c076757a2164ca8343141a694359b9c301bf24d95441febf5a16ae429194cf41f9773a21df3fbefdfd920f68e5e58ca390181d9c686c6f0806797ac4b7731b7f6de976e4e0d345ac1f83f37848b5967ec0775d6b112c47c6e95551477839c728d326f78e5d0799b1c02c3418b1a48e41d54f698cc38b60a6a0375079bff305c0f0bbeddd3edfffcfdc456e464d8c1a7da7b7b2d8a43ac3491716431f09760a1563fe6d0296d3c466fe2c062668338b9185831dd35125bdd22378d3cf071a878b7a063b2d46a938629ac3291d146d87e0fe731694a7", @ANYBLOB="74b24e1f0ef01479f571f55b37d7089c077e74b1bd50a45834473f982e6fd1fd97f815af9ca38040c073a4e24e033248357bfb5ab67092f29f0b1a66e443cc9e9ef2a93a80607607e3231fc4077092a7af7f95cd0ac29c703cc271896016d7b31ca22f3b0b56e5fec2690ec778d14906d776e06d1e11235fee66cd668482429cbe849c5b"], 0x8, 0x1)
r21 = socket(0xa, 0x3, 0x8)
r22 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000)
ioctl$sock_inet_SIOCSIFFLAGS(r21, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r22, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r23=>0xffffffffffffffff}}}, 0x20)
sendmsg$key(r21, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
r24 = gettid()
waitid(0x83b895581628fca4, r24, &(0x7f0000000040), 0x2, &(0x7f0000000480))
sendmsg$key(r21, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r23, @ANYRESDEC=r24]], 0xfffffffffffffe56}}, 0x20004850)
r25 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r26 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0)
r27 = dup2(r26, r25)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r27, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r28 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r28)
r29 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x101405)
writev(r29, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2)
ioctl$SG_GET_REQUEST_TABLE(r29, 0x227d, &(0x7f0000000780))
kcmp(r28, r24, 0x0, 0xffffffffffffffff, r29)
ptrace$setopts(0x4206, r28, 0x0, 0x0)
r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r31=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0x2}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r28, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r27, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r19, r20, 0x0, 0x1, &(0x7f0000000080)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r17, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r13, r16, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r12, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)='/dev/ptmx\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r10, r11, 0x0, 0x8, &(0x7f0000000100)='syz_tun\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r9, r8, 0x0, 0x5, &(0x7f0000000340)=',em1\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r32=>r5, r7, 0x0, 0xd, &(0x7f0000000240)='/selinux/mls\x00', r31}, 0x30)
fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, <r33=>0x0})
rt_tgsigqueueinfo(r32, r33, 0x0, &(0x7f0000000300)={0x5, 0x10000})
write(r4, &(0x7f0000000340), 0x41395527)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001500)={0x10000}, 0x4)
setsockopt$inet6_tcp_buf(r2, 0x6, 0xe, &(0x7f0000000140)="1e5da9bc7793999e848025a58b324ebec78eb457fc22a9e91a841566ddc30961db08bd91ad5ea2a218f05f3fb06130c4093e900401dd01a04f3fd0af6bb6fd28b48b72da1eacd8692603b2498782d70f20177ea068104186eafb3993141dbff6b01ebca167692945705816bda6fced47f1e92eeca8bac413dc06c5da1b61cf2ba6be8142491c9231dc1bdeb25d4b32ffc985c8639f973474ddb8677c463877e38f49a9ae688751f291613491cfb6148c0e1f66a5f0208d5b2e798eb9711c51fbe4c5e0257e3310dafeaae347ce9e3e9696f32d9ca7d0", 0xd6)
pipe(&(0x7f0000000200)={<r34=>0xffffffffffffffff})
vmsplice(r34, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

[  769.585936] ffff8881fc657fb8: 00000000175d900f (0x175d900f)
[  769.585940] ffff8881fc657fc0: 0000000020000200 (0x20000200)
[  769.585944] ffff8881fc657fc8: 0000000000000004 (0x4)
[  769.585948] ffff8881fc657fd0: 0000000000000001 (0x1)
[  769.585952] ffff8881fc657fd8: 000000000045a679 (0x45a679)
[  769.585956] ffff8881fc657fe0: 0000000000000033 (0x33)
[  769.585960] ffff8881fc657fe8: 0000000000000246 (0x246)
[  769.585965] ffff8881fc657ff0: 00007f59851a0c78 (0x7f59851a0c78)
[  769.585969] ffff8881fc657ff8: 000000000000002b (0x2b)
23:37:57 executing program 3:
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$P9_RVERSION(r1, &(0x7f0000000240)=ANY=[], 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, r2, 0x8)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
syz_open_dev$admmidi(&(0x7f00000014c0)='/dev/admmidi#\x00', 0xffffffff, 0x800080)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
r5 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setownex(r6, 0xf, &(0x7f0000000180)={0x0, r5})
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r8}, 0x10)
r9 = getpid()
sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r10 = getpgrp(0x0)
setpriority(0x0, r10, 0x0)
r11 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x1)
r12 = gettid()
process_vm_writev(r12, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/240, 0xf0}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/224, 0xe0}], 0x1, 0x0)
r13 = getpgid(0x0)
r14 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5)
r15 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1)
r16 = dup2(r15, r14)
writev(r16, &(0x7f0000000040)=[{&(0x7f00000002c0)='3', 0x1}], 0x1)
ppoll(&(0x7f0000000200)=[{r16}], 0x1, &(0x7f0000000280), 0x0, 0x0)
r17 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r18 = inotify_init1(0x0)
fcntl$setown(r18, 0x8, 0xffffffffffffffff)
fcntl$getownex(r18, 0x10, &(0x7f00000000c0)={0x0, <r19=>0x0})
r20 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r20, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="020000000100eb0000000000020001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYBLOB='\b\x00\x00', @ANYRES32, @ANYBLOB="080005115951c076757a2164ca8343141a694359b9c301bf24d95441febf5a16ae429194cf41f9773a21df3fbefdfd920f68e5e58ca390181d9c686c6f0806797ac4b7731b7f6de976e4e0d345ac1f83f37848b5967ec0775d6b112c47c6e95551477839c728d326f78e5d0799b1c02c3418b1a48e41d54f698cc38b60a6a0375079bff305c0f0bbeddd3edfffcfdc456e464d8c1a7da7b7b2d8a43ac3491716431f09760a1563fe6d0296d3c466fe2c062668338b9185831dd35125", @ANYBLOB="74b24e1f0ef01479f571f55b37d7089c077e74b1bd50a45834473f982e6fd1fd97f815af9ca38040c073a4e24e033248357bfb5ab67092f29f0b1a66e443cc9e9ef2a93a80607607e3231fc4077092a7af7f95cd0ac29c703cc271896016d7b31ca22f3b0b56e5fec2690ec778d14906d776e06d1e11235fee66cd668482429cbe849c5b"], 0x8, 0x1)
r21 = socket(0xa, 0x3, 0x8)
r22 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000)
ioctl$sock_inet_SIOCSIFFLAGS(r21, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4})
write$RDMA_USER_CM_CMD_CREATE_ID(r22, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r23=>0xffffffffffffffff}}}, 0x20)
sendmsg$key(r21, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0)
r24 = gettid()
waitid(0x83b895581628fca4, r24, &(0x7f0000000040), 0x2, &(0x7f0000000480))
sendmsg$key(r21, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r23, @ANYRESDEC=r24]], 0xfffffffffffffe56}}, 0x20004850)
r25 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r26 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0)
r27 = dup2(r26, r25)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r27, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r28 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r28)
r29 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x101405)
writev(r29, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2)
ioctl$SG_GET_REQUEST_TABLE(r29, 0x227d, &(0x7f0000000780))
kcmp(r28, r24, 0x0, 0xffffffffffffffff, r29)
ptrace$setopts(0x4206, r28, 0x0, 0x0)
r30 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r31=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0x2}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r28, r30, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r24, r27, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r31}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r31}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r19, r20, 0x0, 0x1, &(0x7f0000000080)='\x00', r31}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r17, 0x0, 0x4, &(0x7f0000000180)='em1\x00