5:57 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x97ffffff00000000}, 'syz1\x00'})

[  759.922685] input: syz1 as /devices/virtual/input/input4086
[  760.035975] input: syz1 as /devices/virtual/input/input4087
10:45:57 executing program 1:
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0x0, 0x0, &(0x7f0000002240)={0x2, 0x1, @rand_addr}, 0x10)
socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000001140)={<r0=>0xffffffffffffffff})
recvmmsg(0xffffffffffffff9c, &(0x7f0000001f40)=[{{&(0x7f0000001180)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000001640)=[{&(0x7f0000001200)=""/190, 0xbe}, {&(0x7f00000012c0)=""/38, 0x26}, {&(0x7f0000001300)=""/249, 0xf9}, {&(0x7f0000001400)=""/60, 0x3c}, {&(0x7f0000001440)}, {&(0x7f0000001480)=""/219, 0xdb}, {&(0x7f0000001580)=""/106, 0x6a}, {&(0x7f0000001600)=""/57, 0x39}], 0x8, 0x0, 0x0, 0x200}, 0x3}, {{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000016c0)=""/249, 0xf9}, {&(0x7f00000017c0)=""/50, 0x32}, {&(0x7f0000001800)=""/188, 0xbc}, {&(0x7f00000018c0)=""/155, 0x9b}], 0x4, &(0x7f00000019c0)=""/181, 0xb5, 0x4}, 0x2}, {{&(0x7f0000001a80)=@llc, 0x80, &(0x7f0000001b80)=[{&(0x7f0000001b00)=""/98, 0x62}], 0x1, &(0x7f0000001bc0)=""/211, 0xd3, 0x7f}, 0x2}, {{&(0x7f0000001cc0)=@can={0x1d, <r1=>0x0}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001d40)=""/126, 0x7e}, {&(0x7f0000001dc0)=""/198, 0xc6}], 0x2, &(0x7f0000001f00)=""/32, 0x20, 0x401}, 0x2}], 0x4, 0x40010001, &(0x7f0000002040)={0x77359400})
stat(&(0x7f0000002080)='./file0\x00', &(0x7f00000020c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
r3 = syz_open_dev$dspn(&(0x7f0000001440)='/dev/dsp#\x00', 0x80, 0x80000)
ioctl$TUNSETNOCSUM(r3, 0x400454c8, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000002140)={{{@in=@local, @in=@remote, 0x4e21, 0x800, 0x4e24, 0xffffffffffffffff, 0x0, 0x80, 0x80, 0x2f, r1, r2}, {0x100000000, 0xdf79, 0xfffffffffffffff9, 0x6b, 0x7, 0x3, 0x4, 0x8}, {0x8000, 0xfffffffffffffeff, 0x8, 0x7fff}, 0x1, 0x0, 0x0, 0x1, 0x2}, {{@in=@multicast1, 0x4d5, 0x7f}, 0xa, @in=@rand_addr=0x2, 0x3502, 0x3, 0x3, 0x5ff8, 0x8000, 0x0, 0xfffffffffffff204}}, 0xe8)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/zero\x00', 0x6dfd28b5035a595d, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r4, 0xc0045520, &(0x7f0000001100)=0x8)
mincore(&(0x7f0000174000/0x1000)=nil, 0x1000, &(0x7f00000000c0)=""/4096)

10:45:57 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0xfe79}, 'syz1\x00'})

10:45:57 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:45:57 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0xde01}}}}, 0xf8}}, 0x0)

[  760.179797] input: syz1 as /devices/virtual/input/input4088
[  760.225122] input: syz1 as /devices/virtual/input/input4089
[  760.323978] input: syz1 as /devices/virtual/input/input4090
10:45:57 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xf4c20000}, 'syz1\x00'})

10:45:57 executing program 7:
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2040001, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)
socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f00000000c0))

10:45:57 executing program 1:
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
r0 = shmget$private(0x0, 0x1000, 0x40, &(0x7f00004ff000/0x1000)=nil)
shmctl$IPC_RMID(r0, 0x0)
mmap(&(0x7f0000b04000/0x4000)=nil, 0x4000, 0x2000000, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x1e1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

10:45:57 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0xff02}}}}, 0xf8}}, 0x0)

10:45:57 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:45:57 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0xfe47}, 'syz1\x00'})

10:45:57 executing program 6:
r0 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000280), 0x4)
r1 = syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x0, 0x180)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000180)={0x0, 0x40}, 0xfffffffffffffec7)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = open(&(0x7f00000000c0)='./file0\x00', 0x2000, 0x100)
mkdirat(r2, &(0x7f0000000100)='./file0\x00', 0x4)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

10:45:57 executing program 4:
socketpair$inet(0x2, 0xb, 0xffffffffffff85e4, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendto$inet(r0, &(0x7f0000000140)="3b05f5", 0x3, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

[  760.477015] input: syz1 as /devices/virtual/input/input4091
10:45:57 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0xf0ffffff}}}}, 0xf8}}, 0x0)

10:45:57 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

[  760.535799] input: syz1 as /devices/virtual/input/input4093
[  760.545795] input: syz1 as /devices/virtual/input/input4092
10:45:58 executing program 1:
openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x1, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000000, 0x10, r0, 0x0)

[  760.704099] input: syz1 as /devices/virtual/input/input4094
10:45:58 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x2000000}}}}, 0xf8}}, 0x0)

10:45:58 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x6000000}, 'syz1\x00'})

10:45:58 executing program 7:
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x8000, 0x0)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0xffffffffffff1d2f, 0x2, 0xcacf})
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

10:45:58 executing program 4:
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x4010, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

10:45:58 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:45:58 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x500000000000000}, 'syz1\x00'})

10:45:58 executing program 1:
r0 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c)
sendto$inet(r0, &(0x7f0000000780)="9a114791e22b12b39e0a1b2d1767d70d067abc393ebf09f0ab318fa21020215f92c2d3f1db65923120f2c0ebfa1dc55e8f16038630e68db6a58dacc853d82390627a9670555bb190b2ab2c563dea2d472ade1a3aa54233370d35615ea3ad93017b2218efc34649c86cd83539b9f6b0709ffa0d6b5f9df88cba07af9a0dff6fc26f282d2d1d01d096371b3a5cbdcaa9ba7f98ec5ac6e974534f64d293f3cf548e6b239b060d81a876ac5d17c95f8108c3897fd2c9d43cdcfdf23e8635a7c5fe6728d93da874503073874087c85c46", 0xce, 0x8000, &(0x7f0000000880)={0x2, 0x4e24, @multicast1}, 0x10)
sendto$inet(0xffffffffffffffff, &(0x7f0000000780), 0x10066, 0x81, &(0x7f0000fd9ff0)={0x2, 0x3, @remote}, 0x0)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x277d335b, 0x3, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe2(&(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x84000)
recvmsg(r1, &(0x7f0000000740)={&(0x7f0000000100)=@pptp, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000180)=""/153, 0x99}, {&(0x7f0000000240)=""/202, 0xca}, {&(0x7f0000000340)=""/64, 0x40}, {&(0x7f0000000380)=""/187, 0xbb}, {&(0x7f0000000440)=""/83, 0x53}, {&(0x7f00000004c0)=""/155, 0x9b}, {&(0x7f0000000580)=""/64, 0x40}, {&(0x7f0000002280)=""/4096, 0x1000}], 0x8, &(0x7f0000000640)=""/227, 0xe3, 0xfee0}, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

[  760.912682] input: syz1 as /devices/virtual/input/input4095
10:45:58 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0xff020000}}}}, 0xf8}}, 0x0)

10:45:58 executing program 6:
r0 = socket$inet(0x2, 0x0, 0x0)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000280), 0x4)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4)
r1 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x0, 0x80040)
ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000)
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
ioctl$BLKROTATIONAL(r1, 0x127e, &(0x7f0000000100))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

10:45:58 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

[  760.994336] input: syz1 as /devices/virtual/input/input4097
[  761.054829] input: syz1 as /devices/virtual/input/input4096
[  761.111811] input: syz1 as /devices/virtual/input/input4098
10:45:58 executing program 4:
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x200, 0x0)
write$tun(r0, &(0x7f0000000100)={@void, @void, @mpls={[{0x6, 0x2, 0x401, 0x5}], @ipv4={{0x12, 0x4, 0x4, 0x2b, 0xc9, 0x64, 0x6d9, 0x6, 0x11, 0x0, @local, @loopback, {[@lsrr={0x83, 0x1f, 0x20, [@multicast2, @multicast1, @rand_addr, @local, @dev={0xac, 0x14, 0x14, 0x11}, @local, @remote]}, @timestamp={0x44, 0x14, 0x100000001, 0x0, 0x3f, [{[@broadcast], 0x7}, {[@multicast1], 0xfffffffffffffff7}]}]}}, @igmp={0x11, 0xfff, 0x0, @local, "e5b44b5c77e0d5cd47689653aa949caf99203812a211c3f2140ab73b127359d983bd1d163d5ddfa03b6324e77296c170a254587189040973a669e134fd39912ecb66a7fed7a30a06838e4c5b6b4254b0bbbda052885c89a15e9bfecfca4adf9003973697b8a75d0e5855eddef05d184cf794d0483427e945fe"}}}}, 0xcd)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

10:45:58 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0xf0ffffffffffff}}}}, 0xf8}}, 0x0)

10:45:58 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xe8c20000}, 'syz1\x00'})

10:45:58 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x4bfe}, 'syz1\x00'})

10:45:58 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:45:58 executing program 1:
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair(0xb, 0x4, 0x9, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000100)=r0, 0x4)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @rand_addr=0x9}, 0x10)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000001c0)={<r2=>0x0, 0x20}, &(0x7f0000000200)=0x8)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000240)={0x3f9c3eeb, 0x1000, 0x0, 0x7, 0x9, 0x8, 0x9, 0x9, r2}, &(0x7f0000000280)=0x20)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)
syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xffffffffffffffe0, 0x400)
personality(0x4100005)
ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000340)="f71c5696b3d8077a73c397dc52dc8440041fd2d29477b5efb5c9eee62b3141081e3247f0472fb048051b7dd46da512185991ee578aaf5ac6b87792efbe54999bf120be86c700a04041053fc7db1890a64cc3d8383958614cc0415986f2c0fd0e75eb91d65b")
ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000300)={0x5, {0x28, 0x8, 0x6, 0x0, 0xffffffffffffff7a, 0x4080}})

10:45:58 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0xf00}}}}, 0xf8}}, 0x0)

[  761.351558] input: syz1 as /devices/virtual/input/input4099
[  761.359488] input: syz1 as /devices/virtual/input/input4100
10:45:58 executing program 6:
r0 = socket$inet(0x2, 0x0, 0x0)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000280), 0x4)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4)
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @rand_addr}, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2000, 0x0)
ioctl$KVM_PPC_GET_PVINFO(r1, 0x4080aea1, &(0x7f0000000180)=""/108)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)
r2 = shmget(0x2, 0x3000, 0x5, &(0x7f0000d15000/0x3000)=nil)
setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f00000000c0), 0x4)
shmctl$SHM_INFO(r2, 0xe, &(0x7f00000002c0)=""/76)

[  761.439696] input: syz1 as /devices/virtual/input/input4101
[  761.450256] input: syz1 as /devices/virtual/input/input4102
10:45:59 executing program 7:
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
pipe2(&(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80000)
r1 = mmap$binder(&(0x7f0000038000/0x3000)=nil, 0x3000, 0x2, 0x11, 0xffffffffffffff9c, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000100)={r1})
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

10:45:59 executing program 1:
r0 = syz_open_dev$audion(&(0x7f00000010c0)='/dev/audio#\x00', 0x1, 0x50100)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000002, 0x31, r0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f00000000c0)=""/4096)

10:45:59 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:45:59 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x7f00}, 'syz1\x00'})

10:45:59 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xfe3f}, 'syz1\x00'})

10:45:59 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0xff02}}}}, 0xf8}}, 0x0)

10:45:59 executing program 4:
socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x3, 0x0)
ioctl$SG_GET_SG_TABLESIZE(r1, 0x227f, &(0x7f00000001c0))
sendto$inet(r0, &(0x7f0000865000), 0x0, 0x40000000000, &(0x7f0000000180)={0x2, 0x4e20, @rand_addr}, 0xffffff7c)
r2 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r2, 0x9, &(0x7f0000000280)="025cc83d6d345f8f762070")
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x3, &(0x7f00000000c0)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2a, 0x27}}, &(0x7f00000002c0)='syzkaller\x00', 0x9, 0x4ae, &(0x7f0000000340)=""/207}, 0x48)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

[  761.738689] input: syz1 as /devices/virtual/input/input4103
[  761.767733] input: syz1 as /devices/virtual/input/input4104
10:45:59 executing program 6:
r0 = socket$inet(0x2, 0x0, 0x0)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000280)=0x200000, 0x338)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x2, 0x0)
mq_timedsend(r1, &(0x7f0000000100), 0x0, 0x800, &(0x7f0000000140)={0x77359400})
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4)
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @rand_addr}, 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x80, @dev={0xfe, 0x80, [], 0x20}, 0xffffffff80000000}], 0x1c)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)
getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180), &(0x7f00000001c0)=0xb)

[  761.835908] input: syz1 as /devices/virtual/input/input4105
10:45:59 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0xa}}}}, 0xf8}}, 0x0)

10:45:59 executing program 1:
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
mlock(&(0x7f0000642000/0x4000)=nil, 0x4000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

10:45:59 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:45:59 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xfbc2000000000000}, 'syz1\x00'})

[  761.952636] input: syz1 as /devices/virtual/input/input4106
10:45:59 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x79fe000000000000}, 'syz1\x00'})

10:45:59 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:45:59 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x34000}}}}, 0xf8}}, 0x0)

[  762.104362] input: syz1 as /devices/virtual/input/input4107
[  762.192683] input: syz1 as /devices/virtual/input/input4109
[  762.203996] input: syz1 as /devices/virtual/input/input4108
10:45:59 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0xc88d642b4e000000}}}}, 0xf8}}, 0x0)

[  762.300455] input: syz1 as /devices/virtual/input/input4110
10:45:59 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xc2f7}, 'syz1\x00'})

10:45:59 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:45:59 executing program 7:
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x2040, 0x0)
ioctl$TIOCCONS(r0, 0x541d)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

10:45:59 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x4000000}, 'syz1\x00'})

10:45:59 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0xa00000000000000}}}}, 0xf8}}, 0x0)

10:45:59 executing program 4:
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x2, 0x0)
setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000140)=0x3, 0x4)
ioctl$KVM_SET_CLOCK(r0, 0x4030ae7b, &(0x7f0000000100)={0x1, 0x3})
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0x0, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e21, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

[  762.401346] input: syz1 as /devices/virtual/input/input4111
10:45:59 executing program 6:
r0 = socket$inet(0x2, 0x0, 0x0)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000280), 0x4)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4)
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
times(&(0x7f00000000c0))
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x400800, 0x0)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x7, 0x7, 0x8000}, 0x4)

[  762.466626] input: syz1 as /devices/virtual/input/input4112
10:45:59 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

[  762.564323] input: syz1 as /devices/virtual/input/input4113
10:46:00 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0xf0ffffff00000000}}}}, 0xf8}}, 0x0)

[  762.649630] input: syz1 as /devices/virtual/input/input4114
10:46:00 executing program 4:
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x40000, 0x0)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x200, 0x7, 0x0, <r1=>0x0}, &(0x7f0000000140)=0x10)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={r1, @in={{0x2, 0x4e20, @rand_addr=0x17}}, 0xff, 0xff, 0x2, 0x7b, 0x81}, 0x98)

10:46:00 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x3}, 'syz1\x00'})

10:46:00 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x6000000000000000}, 'syz1\x00'})

10:46:00 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:00 executing program 1:
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
mmap(&(0x7f00003cd000/0x4000)=nil, 0x4000, 0x2000006, 0x30, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00006e0000/0x2000)=nil, 0x2000, &(0x7f00000000c0)=""/4096)

10:46:00 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0xffffff7f00000000}}}}, 0xf8}}, 0x0)

[  762.824584] input: syz1 as /devices/virtual/input/input4115
[  762.864282] input: syz1 as /devices/virtual/input/input4116
10:46:00 executing program 7:
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
mmap(&(0x7f0000482000/0x3000)=nil, 0x3000, 0x82000002, 0x31, 0xffffffffffffffff, 0xffffffffffffffff)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x101000, 0x0)
getsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4)
shmget$private(0x0, 0xb000, 0x78000095, &(0x7f0000ff3000/0xb000)=nil)
ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f0000000180))
open_by_handle_at(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="7e00020019000000b4587f96965c78d72ce8b9b80994fab8f8fde767b4a6ff70eacfb5ca363d12468002a4ca136f5c41ae28880be2c1ccdec10aafed1aaf7969f0a29cabd9b321531eddd2a84826572727eee2898fcecca57a188be0c14644268c22f6333d65665abe321a211f677e350d29ecbbeea55d997131f408b688df8162dcb8ce4998e664fc90272a485d145c8484e210dd129616d2d85b2863f5c971168d792a8bd61b7bdb5c98be602b177da91b4e46ec7a9f12c9a5ba372bf2f6335c720ddc555027ea16acbc14a174bfd1a235974480ef7a2327c39d346830322387d6785a6f0fc508522dddef6c195fec94ae34091bbc6b4102c84924867da95d23c8a6d1b6f8cc930000000000000000000000000000000000000000ba68763ccb19373b"], 0x41)

10:46:00 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

[  762.915573] input: syz1 as /devices/virtual/input/input4117
10:46:00 executing program 4:
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0x0, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @local}, 0x10)
r0 = open(&(0x7f0000000140)='./file0\x00', 0x480000, 0x0)
bind$bt_sco(r0, &(0x7f0000000180)={0x1f, {0x2, 0x1fcf, 0x3f, 0x20d4, 0xdf2, 0xec}}, 0x8)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = dup2(0xffffffffffffffff, r1)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f00000000c0), &(0x7f0000000100)=0x4)

[  762.964742] input: syz1 as /devices/virtual/input/input4118
10:46:00 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0xf0ffffff}}}}, 0xf8}}, 0x0)

10:46:00 executing program 1:
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=<r0=>0x0)
ptrace$pokeuser(0x6, r0, 0x8001, 0x6)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

10:46:00 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x3afe000000000000}, 'syz1\x00'})

10:46:00 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x600000000000000}, 'syz1\x00'})

10:46:00 executing program 6:
r0 = socket$inet(0x2, 0x0, 0x0)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000280), 0x4)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4)
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)
r1 = socket$inet6_dccp(0xa, 0x6, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000000c0)={{{@in=@remote, @in=@local}}, {{@in=@rand_addr}, 0x0, @in6=@local}}, &(0x7f00000001c0)=0xe8)

10:46:00 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:00 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x1000000}}}}, 0xf8}}, 0x0)

[  763.240250] input: syz1 as /devices/virtual/input/input4119
[  763.254134] input: syz1 as /devices/virtual/input/input4120
10:46:00 executing program 4:
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x9, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0xa15f2164266091a0, 0x0)
ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000100)={0x4, 0x7f, 0x1})

10:46:00 executing program 7:
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x0, 0x0)
write$P9_RWSTAT(r1, &(0x7f0000000100)={0x15a, 0x7f, 0x1}, 0x7)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)
ftruncate(r0, 0x8)

10:46:00 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

[  763.420910] input: syz1 as /devices/virtual/input/input4121
10:46:00 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x32fe0000}, 'syz1\x00'})

10:46:00 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0xfffffffffffff000}}}}, 0xf8}}, 0x0)

10:46:00 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x4000000}, 'syz1\x00'})

[  763.602472] input: syz1 as /devices/virtual/input/input4123
[  763.657117] input: syz1 as /devices/virtual/input/input4124
[  763.675051] input: syz1 as /devices/virtual/input/input4125
10:46:01 executing program 1:
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000240)=0x8)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x1, 0x0)
getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000180), &(0x7f00000001c0)=0x4)
pipe2(&(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x4000)
bind$rds(r2, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)

10:46:01 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:01 executing program 6:
r0 = socket$inet(0x2, 0x0, 0x0)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000280), 0x4)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4)
recvfrom$inet(r0, &(0x7f0000002280)=""/4096, 0x1000, 0x40000100, &(0x7f00000000c0)={0x2, 0x4e22, @multicast2}, 0x10)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x100, 0x0)
ioctl$ASHMEM_SET_PROT_MASK(r1, 0x40087705, &(0x7f0000000180)={0x4, 0x40})
ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000140))
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpeername$llc(r1, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000200)=0x10)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

10:46:01 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0xfffffff0}}}}, 0xf8}}, 0x0)

[  763.780416] input: syz1 as /devices/virtual/input/input4126
10:46:01 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x78fe0000}, 'syz1\x00'})

10:46:01 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:01 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xf0c20000}, 'syz1\x00'})

10:46:01 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x9effffff00000000}}}}, 0xf8}}, 0x0)

[  763.952611] input: syz1 as /devices/virtual/input/input4127
10:46:01 executing program 7:
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0xb, 0x7ff)
getsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000240), &(0x7f0000000280)=0x4)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer\x00', 0x200, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000300)={'eql\x00', {0x2, 0x4e21, @remote}})
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000100)={<r2=>0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1d}}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000180)={r2, 0x80}, &(0x7f00000001c0)=0x8)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)
setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f00000002c0)={0x9, 0x8, 0x20, 0x4}, 0x10)
write$FUSE_WRITE(r1, &(0x7f0000000340)={0x18, 0xfffffffffffffff5, 0x3, {0x3}}, 0x18)

[  764.034549] input: syz1 as /devices/virtual/input/input4128
10:46:01 executing program 1:
sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="cf8134349f0985859f7472ccd286e4a8f6c365f03bffa3174ee5d08c027e63b317bbf63ed9b42449c3b1e3f1f72814eb8afc6bced2e2393d5d35e917289a38e8b1686ea845671bd50b87c50f43a7ba53e7b63086", 0x54, 0x0, &(0x7f0000000140)={0x2, 0x0, @rand_addr}, 0x5)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

10:46:01 executing program 4:
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)
r0 = memfd_create(&(0x7f00000002c0)='[bdevmime_type\\%\\$\\vmnet1/md5sumGPLcpuset{\'\x00', 0x3)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffff9c, 0x84, 0x6c, &(0x7f0000000340)=ANY=[@ANYRES32=<r1=>0x0, @ANYBLOB="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"], &(0x7f0000000200)=0x100)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000000c0)={r1, 0x7}, &(0x7f0000000300)=0x8)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000240)={r1, 0x81, 0x5, 0x4, 0x8001, 0xb}, &(0x7f0000000280)=0x14)

10:46:01 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x3000000}}}}, 0xf8}}, 0x0)

[  764.157744] input: syz1 as /devices/virtual/input/input4129
10:46:01 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x45fe0000}, 'syz1\x00'})

10:46:01 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

[  764.252238] input: syz1 as /devices/virtual/input/input4130
10:46:01 executing program 1:
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
r0 = syz_open_dev$rtc(&(0x7f00000000c0)='/dev/rtc#\x00', 0x4, 0x4000)
syncfs(r0)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

[  764.317424] input: syz1 as /devices/virtual/input/input4131
10:46:01 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x3}}}}, 0xf8}}, 0x0)

10:46:01 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x7c30000}, 'syz1\x00'})

[  764.372320] input: syz1 as /devices/virtual/input/input4132
10:46:01 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:01 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xfe43}, 'syz1\x00'})

10:46:01 executing program 6:
r0 = socket$inet(0x2, 0x0, 0x0)
setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000180)={@broadcast, @rand_addr=0x4}, 0x8)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000280), 0x4)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000140)={0x0, 'ipddp0\x00'}, 0x18)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4)
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x801)
ioctl$KVM_S390_VCPU_FAULT(r1, 0x4008ae52, &(0x7f0000000100)=0x80000000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

[  764.509960] input: syz1 as /devices/virtual/input/input4133
10:46:01 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0xff02000000000000}}}}, 0xf8}}, 0x0)

10:46:02 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

[  764.589459] input: syz1 as /devices/virtual/input/input4134
10:46:02 executing program 1:
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/133)
socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
readv(r0, &(0x7f0000000300)=[{&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/128, 0x80}], 0x2)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x10400, 0x0)
ioctl$TIOCMBIS(r1, 0x5416, &(0x7f0000000100)=0x200)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

[  764.663761] input: syz1 as /devices/virtual/input/input4135
10:46:02 executing program 7:
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
syz_genetlink_get_family_id$team(&(0x7f0000000200)='team\x00')
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='\x00', 0xffffffffffffff9c}, 0x10)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snapshot\x00', 0xfffffffffffffffe, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000140)={0x4, 0xb4, 0x32a, 'queue1\x00', 0x101})
accept4$packet(r0, &(0x7f0000000380)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14, 0x80000)
connect$packet(r0, &(0x7f0000000400)={0x11, 0x16, r1, 0x1, 0x2}, 0x14)
openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x100, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

[  764.733108] input: syz1 as /devices/virtual/input/input4136
10:46:02 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xfdc20000}, 'syz1\x00'})

10:46:02 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x400300}}}}, 0xf8}}, 0x0)

10:46:02 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:02 executing program 4:
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x800, 0x200)
getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={<r1=>0x0}, &(0x7f0000000180)=0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x8, 0x0, 0x0, 0x2, 0xe2c, 0x8, 0x4, 0x2b, r1}, &(0x7f0000000200)=0x20)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x82)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

10:46:02 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xfe48}, 'syz1\x00'})

10:46:02 executing program 1:
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x200, 0x0)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, r0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)
socket$nl_crypto(0x10, 0x3, 0x15)

10:46:02 executing program 6:
r0 = socket$inet(0x2, 0x0, 0x0)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000280), 0x4)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4)
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000240)=0x14, 0x80000)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000002c0)={@broadcast, @local, r1}, 0xc)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

[  764.969420] input: syz1 as /devices/virtual/input/input4138
10:46:02 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x2000000}}}}, 0xf8}}, 0x0)

[  765.057158] input: syz1 as /devices/virtual/input/input4139
10:46:02 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:02 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xc2f8}, 'syz1\x00'})

[  765.131037] input: syz1 as /devices/virtual/input/input4140
10:46:02 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x68}, 'syz1\x00'})

10:46:02 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:02 executing program 7:
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x8, 0x80)
ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000100))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

[  765.262865] input: syz1 as /devices/virtual/input/input4141
[  765.301786] input: syz1 as /devices/virtual/input/input4142
10:46:02 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0xff020000}}}}, 0xf8}}, 0x0)

10:46:02 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:02 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xf}, 'syz1\x00'})

10:46:02 executing program 6:
r0 = socket$inet(0x2, 0x0, 0x0)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000100), 0xfffffffffffffecb)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4)
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0xb0f, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

[  765.487732] input: syz1 as /devices/virtual/input/input4143
10:46:02 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x9effffff}}}}, 0xf8}}, 0x0)

[  765.532365] input: syz1 as /devices/virtual/input/input4144
[  765.569987] input: syz1 as /devices/virtual/input/input4145
10:46:03 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:03 executing program 4:
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0xef4c0257fab786cc, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e22}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$UI_SET_RELBIT(r1, 0x40045566, 0x6)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)
ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000180)=""/105)

[  765.629520] input: syz1 as /devices/virtual/input/input4146
10:46:03 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xe4c2000000000000}, 'syz1\x00'})

10:46:03 executing program 1:
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001180)='/proc/self/net/pfkey\x00', 0x400000, 0x0)
ioctl$BLKROSET(r0, 0x125d, &(0x7f00000011c0)=0xffffffff)
fstat(r0, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0})
setgid(r1)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001100)='/dev/vcs\x00', 0x400, 0x0)
ioctl$TIOCLINUX2(r2, 0x541c, &(0x7f0000001140)={0x2, 0xca, 0x1, 0x123, 0x1, 0x8})
r3 = syz_open_dev$sndtimer(&(0x7f00000010c0)='/dev/snd/timer\x00', 0x0, 0x1)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x10050, r3, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f00000000c0)=""/4096)

10:46:03 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x75fe000000000000}, 'syz1\x00'})

10:46:03 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:03 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0xf0ffff}}}}, 0xf8}}, 0x0)

[  765.866047] input: syz1 as /devices/virtual/input/input4147
[  765.924011] input: syz1 as /devices/virtual/input/input4148
[  765.939368] input: syz1 as /devices/virtual/input/input4149
10:46:03 executing program 1:
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x2)
r1 = syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0xa, 0x402100)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f0000000400)={{0x10001, 0xffffffff}, {0x3, 0xfffffffffffff435}, 0xff, 0x1, 0xa})
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200)={<r2=>0x0}, &(0x7f00000003c0)=0xc)
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x2, 0x6, 0x7fff, 0x6419, 0x0, 0x7fff, 0x1000, 0x4, 0x0, 0x3, 0x1, 0x10001, 0x2, 0x6, 0x0, 0x5, 0x81, 0x1, 0x1, 0x7, 0x5, 0x80000000, 0x80, 0x401, 0x40, 0x9, 0xae6, 0x3ff, 0x6, 0x6, 0x7, 0x67, 0x6, 0xfffffffffffffff9, 0xffffffff, 0x5, 0x0, 0x3f, 0x3, @perf_bp={&(0x7f0000000140), 0x8}, 0x4000, 0x9dcc, 0x0, 0x0, 0xec73, 0x7fff, 0x4c}, r2, 0x9, r1, 0x8)
sendmsg$nl_netfilter(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="38000000110f080028bd7000fcdbdf250303050000005e00fe8010000000000000000000000000bb55379eb0f87fc0395c5b6b37beb1078642a364ea928c855c3bda94fef8735965b343dc71c30c7b69766733b4a65fe6f211"], 0x28}, 0x1, 0x0, 0x0, 0x20000001}, 0x8845)
syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x9, 0x0)

[  766.004770] input: syz1 as /devices/virtual/input/input4150
10:46:03 executing program 7:
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xeb1c, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000c83000/0x1000)=nil, 0x1000, 0x7e)
socketpair(0x1a, 0x7, 0x7, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000180)={0x0, 0x6, 0x101, 0x7fff, 0x94})
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)
getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4)

10:46:03 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xec0, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:03 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x800000000000000}, 'syz1\x00'})

10:46:03 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0xf000}}}}, 0xf8}}, 0x0)

10:46:03 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xeac2000000000000}, 'syz1\x00'})

10:46:03 executing program 6:
r0 = socket$inet(0x2, 0x0, 0x0)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000280), 0x4)
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x40300, 0x0)
ioctl$BLKIOMIN(r1, 0x1278, &(0x7f0000000100))
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4)
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0xfffffdf9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)
mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1)

10:46:03 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xfffffdef, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:03 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x300000000000000}}}}, 0xf8}}, 0x0)

10:46:03 executing program 1:
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)
r0 = socket$inet6_dccp(0xa, 0x6, 0x0)
ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00000000c0))

[  766.256362] input: syz1 as /devices/virtual/input/input4151
[  766.284830] input: syz1 as /devices/virtual/input/input4152
[  766.337728] input: syz1 as /devices/virtual/input/input4153
[  766.361190] input: syz1 as /devices/virtual/input/input4154
10:46:03 executing program 7:
r0 = dup(0xffffffffffffff9c)
sendto$inet(r0, &(0x7f00000000c0)="1d27e39cdd789396c4a3e250c63cf95afd2aa7f40241a0bf20f5a86e64040b194d46eb178f9bd4305323df613ebf6c28d66ebc4ace226994aafaee088faa77f981f45d6452b61823ee54db80b2cb1c1dae5be2a4dac906438adadd5a38116d48262898ed1c05f733a75c1571587c6031fea0bc40f9cefdc03849c0ef8ab8d47fc2a1178666eb2034f30031bd5bd6b43f528d3cf31dca9caa53a0e13ce97bf218a3", 0xa1, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)
mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x100000005)

10:46:03 executing program 4:
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
r0 = openat$null(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/null\x00', 0x0, 0x0)
ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000000500))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)
pipe2(&(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x800)
ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f0000000100)=""/162)
setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f00000001c0)={0x3, [0x0, 0x5, 0x1]}, 0xa)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000400)={<r3=>0xffffffffffffffff}, 0x2, 0xb}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000480)={0x13, 0x10, 0xfa00, {&(0x7f0000000200), r3}}, 0x18)

10:46:03 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0x20000938, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:03 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x74fe0000}, 'syz1\x00'})

10:46:03 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xc2fa}, 'syz1\x00'})

10:46:04 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0xde01000000000000}}}}, 0xf8}}, 0x0)

10:46:04 executing program 1:
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x1a1)
connect$bt_sco(r0, &(0x7f0000000100)={0x1f, {0x8, 0x401, 0x83d, 0x100, 0x4, 0x100000000}}, 0x8)
getsockopt$packet_int(r0, 0x107, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

[  766.608682] input: syz1 as /devices/virtual/input/input4155
10:46:04 executing program 6:
r0 = socket$inet(0x2, 0x0, 0x0)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000280), 0x4)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4)
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

10:46:04 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0x33fe0, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

[  766.664728] input: syz1 as /devices/virtual/input/input4156
[  766.750693] input: syz1 as /devices/virtual/input/input4157
10:46:04 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x300}}}}, 0xf8}}, 0x0)

10:46:04 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x38fe000000000000}, 'syz1\x00'})

10:46:04 executing program 4:
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x408100, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={<r1=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x1, @empty, 0x7}, {0xa, 0x4e23, 0x3, @remote, 0x8}, r1, 0x3}}, 0x48)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

10:46:04 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0x7ffff000, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:04 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xc2ec}, 'syz1\x00'})

10:46:04 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0xa00}}}}, 0xf8}}, 0x0)

[  766.966306] input: syz1 as /devices/virtual/input/input4159
[  767.014023] input: syz1 as /devices/virtual/input/input4160
[  767.046333] input: syz1 as /devices/virtual/input/input4161
10:46:04 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0x2c0, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

[  767.081232] input: syz1 as /devices/virtual/input/input4162
10:46:04 executing program 7:
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f00000000c0)={0x2, 0x0, @rand_addr}, 0x2d9)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

10:46:04 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x30fe000000000000}, 'syz1\x00'})

10:46:04 executing program 6:
r0 = syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x20040)
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x101000, 0x0)
ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000240))
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r2, r0, &(0x7f0000000200)=0xfffffffffffffffb, 0x1)
r3 = socket$inet(0x2, 0xffffffffffffffff, 0xff)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000280), 0x4)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCSABS2F(r4, 0x401845ef, &(0x7f0000000100)={0x0, 0x9, 0x9d2f, 0x22e453e5, 0x3, 0x6})
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4)
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000180)={r3, r4})
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

10:46:04 executing program 4:
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffff9c)
r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x7ff, 0x0)
sendto$inet(r0, &(0x7f0000865000), 0x0, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

10:46:04 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0xf}}}}, 0xf8}}, 0x0)

10:46:04 executing program 1:
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x80000, 0x0)
ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000180)=0x7)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure\x00', 0x0, 0x0)
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000100)={{&(0x7f000030d000/0x3000)=nil, 0x3000}, 0x1})

10:46:04 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xeec20000}, 'syz1\x00'})

10:46:04 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0xf, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

[  767.297630] input: syz1 as /devices/virtual/input/input4163
[  767.309012] QAT: Invalid ioctl
10:46:04 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x4e2b648dc8}}}}, 0xf8}}, 0x0)

[  767.412454] input: syz1 as /devices/virtual/input/input4164
[  767.431000] input: syz1 as /devices/virtual/input/input4165
[  767.439234] Unknown ioctl 1074021792
[  767.473715] input: syz1 as /devices/virtual/input/input4166
[  767.488844] Unknown ioctl 1074021792
10:46:04 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x26, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:04 executing program 4:
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)
fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f00000000c0))

10:46:04 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x74fe000000000000}, 'syz1\x00'})

10:46:05 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xe6c20000}, 'syz1\x00'})

10:46:05 executing program 1:
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)
socket(0x0, 0x80007, 0x0)
r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x100, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000100)={0x0, 0x1, 0x1f000, 0x1000, &(0x7f0000fff000/0x1000)=nil})

[  767.616057] netlink: 232 bytes leftover after parsing attributes in process `syz-executor2'.
10:46:05 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0xfffff000}}}}, 0xf8}}, 0x0)

10:46:05 executing program 7:
sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="c0d947b5f6777daa69509480c47d3613a883bd907d35b62e1dc5f98923d20c7e832f25740154117a9b32a78a3f3d88952543a65c668fd240e5d672d9715ef7e3ad657bc361f621ac496dc093921736aa3d014f5811b1a8857888e466c8f96eb7e6aa4661f432492daac8218c5b3121582b61ae83a7ab33af4b31404cb508aa0ad5916a75c6b8033030ee3eeeb90e4746b4ca6a48fe3995d77625ad1e396fd27c69fe15846215b016c77bba72357ac3e14adb5472d49bb36c13eb17c066963eac318fb62b233f9bc8408f5e970a8aeee63e6b7904084a", 0xd6, 0x2000000000, &(0x7f0000fd9ff0)={0x2, 0x0, @broadcast}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

[  767.680864] input: syz1 as /devices/virtual/input/input4167
10:46:05 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x200000000000000, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

[  767.747636] input: syz1 as /devices/virtual/input/input4168
[  767.782051] input: syz1 as /devices/virtual/input/input4169
[  767.813718] QAT: Invalid ioctl
10:46:05 executing program 4:
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000100), &(0x7f0000000140)=0xc)
r2 = syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x5, 0x80000)
ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f00000001c0))
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000000c0)=0x80000001)

[  767.848561] QAT: Invalid ioctl
[  767.887491] input: syz1 as /devices/virtual/input/input4170
10:46:05 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0xf000000}}}}, 0xf8}}, 0x0)

[  767.944769] QAT: Invalid ioctl
10:46:05 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x87}, 'syz1\x00'})

10:46:05 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x8000000}, 'syz1\x00'})

10:46:05 executing program 1:
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x48002, 0x0)
ioctl$TIOCCONS(r0, 0x541d)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

10:46:05 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0xff02000000000000, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:05 executing program 6:
r0 = socket$inet(0x2, 0x0, 0x0)
close(r0)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000280), 0x4)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4)
socketpair(0x8, 0x8080e, 0xa000000, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
getsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000300)={@broadcast, @multicast1, <r2=>0x0}, &(0x7f0000000340)=0x206)
socket$netlink(0x10, 0x3, 0x7)
rt_sigprocmask(0x1, &(0x7f0000000140)={0x6}, &(0x7f0000000180), 0x8)
connect$packet(r1, &(0x7f00000002c0)={0x11, 0xf5, r2, 0x1, 0x1}, 0x14)
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @rand_addr}, 0x10)
ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f00000000c0)={'ip6tnl0\x00', {0x2, 0x4e22, @broadcast}})
io_setup(0x9, &(0x7f00000001c0)=<r3=>0x0)
io_destroy(r3)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$gfs2(&(0x7f0000000200)='gfs2\x00', &(0x7f0000000240)='./file0\x00', 0x7, 0x3, &(0x7f00000004c0)=[{&(0x7f0000000380)="a78c3639ade3fb920d57f7807994ffd30246f501f80f502fdf128bb34336d9d66cdcde968ff95ff8e67ec423ce586f8de62f6d", 0x33, 0x80000000}, {&(0x7f00000003c0)="9d1550d7f50e44010719c647c57c0b39526b6f4cf23e1ffe412032435a2ce901250c7039605e1c5209cf72885d77b2fc060a2412406ab0b27b14bc7c1c29db948f765586b7d1cf219363747e87056364935278f472f31a5ec95d73ebb68402b7609258698f792652de2c4440e074ac3c2e2aec53dd780552a6f5062c12dd8fda48eb7622ee01be02db818dabd65c104618b87d605e94ae95e5c05d66163f4c95240f08efb776", 0xa6, 0x5a9e4530}, {&(0x7f0000000480)="6cedd97db8ebbd06f1a532cc2763b18c5b9391142764", 0x16, 0x4}], 0x10, &(0x7f0000000540)={[{@localflocks='localflocks'}, {@quota_off='quota=off'}]})
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

10:46:05 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0xde01}}}}, 0xf8}}, 0x0)

10:46:05 executing program 1:
r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x1000000000000000, 0x8000)
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000e82000/0x1000)=nil, &(0x7f00000d3000/0x1000)=nil, 0x1000, 0x1})
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

[  768.151032] input: syz1 as /devices/virtual/input/input4171
[  768.152066] input: syz1 as /devices/virtual/input/input4172
[  768.188092] input: syz1 as /devices/virtual/input/input4173
10:46:05 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0xf00000000000000, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:05 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x7f000000}, 'syz1\x00'})

[  768.279527] input: syz1 as /devices/virtual/input/input4174
10:46:05 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x1de}}}}, 0xf8}}, 0x0)

10:46:05 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x200b0000, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

[  768.422760] input: syz1 as /devices/virtual/input/input4175
10:46:05 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x4c000000}, 'syz1\x00'})

10:46:05 executing program 7:
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

10:46:05 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto$inet(r0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000140)={0x2, 0x4e21, @rand_addr}, 0xfffffffffffffe9b)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

[  768.483329] input: syz1 as /devices/virtual/input/input4176
[  768.533547] gfs2: not a GFS2 filesystem
[  768.617025] input: syz1 as /devices/virtual/input/input4177
10:46:06 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xfdffffff}, 'syz1\x00'})

10:46:06 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0xf00000000000000}}}}, 0xf8}}, 0x0)

10:46:06 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0xa, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:06 executing program 4:
get_mempolicy(&(0x7f00000000c0), &(0x7f0000000100), 0x1, &(0x7f0000a18000/0x3000)=nil, 0x2)
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

[  768.666069] input: syz1 as /devices/virtual/input/input4178
10:46:06 executing program 7:
r0 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0xfffffffffffffff9, 0x201)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x9)
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

10:46:06 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xc30c}, 'syz1\x00'})

[  768.825468] input: syz1 as /devices/virtual/input/input4179
[  768.892819] input: syz1 as /devices/virtual/input/input4180
10:46:06 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x3, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:06 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0xa000000}}}}, 0xf8}}, 0x0)

10:46:06 executing program 6:
r0 = socket$inet(0x2, 0x0, 0x0)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000280), 0x4)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4)
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f0000e40000/0x1000)=nil, 0x1000, &(0x7f0000004280)=""/4096)

[  768.965108] input: syz1 as /devices/virtual/input/input4181
10:46:06 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x6c00}, 'syz1\x00'})

10:46:06 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0xde010000}}}}, 0xf8}}, 0x0)

10:46:06 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0xf, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:06 executing program 4:
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x10c)
ioctl$KVM_SET_MP_STATE(r0, 0x4004ae99, &(0x7f0000000100)=0xc)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f0000fbd000/0x1000)=nil, 0x1000, &(0x7f0000003280)=""/4096)

[  769.074201] input: syz1 as /devices/virtual/input/input4182
10:46:06 executing program 1:
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x100000000, 0x10000)
setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000100), 0x4)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

10:46:06 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1000000000}, 'syz1\x00'})

10:46:06 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x400300, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

[  769.202201] input: syz1 as /devices/virtual/input/input4183
10:46:06 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0xffffff7f}}}}, 0xf8}}, 0x0)

[  769.306975] input: syz1 as /devices/virtual/input/input4184
[  769.339137] input: syz1 as /devices/virtual/input/input4185
10:46:06 executing program 4:
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x141200, 0x0)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x12, r0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

10:46:06 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0xa00, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:06 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x76fe}, 'syz1\x00'})

[  769.448027] input: syz1 as /devices/virtual/input/input4186
10:46:06 executing program 7:
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000100)={0x5ad, {{0xa, 0x4e24, 0xfffffffffffffffc, @loopback, 0x3}}}, 0x88)

10:46:06 executing program 1:
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

10:46:06 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0xffffff9e}}}}, 0xf8}}, 0x0)

10:46:06 executing program 6:
r0 = socket$inet(0x2, 0x0, 0x0)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000280), 0x4)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4)
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x0, 0x0)
ioctl$RTC_VL_READ(r1, 0x80047013, &(0x7f0000000100))

10:46:07 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xffffff7f}, 'syz1\x00'})

[  769.634173] input: syz1 as /devices/virtual/input/input4187
[  769.700745] input: syz1 as /devices/virtual/input/input4188
10:46:07 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x40030000000000}}}}, 0xf8}}, 0x0)

10:46:07 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0xf0ffff, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

[  769.772831] input: syz1 as /devices/virtual/input/input4190
[  769.790630] input: syz1 as /devices/virtual/input/input4189
10:46:07 executing program 4:
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/fuse\x00', 0x2, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/213}], 0x10000000000001c0, 0x3)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='/dev/fuse\x00', 0xffffffffffffff9c}, 0x10)
ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000180))
setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000300)={0x9, 0x80, 0x4, 0x5, 0x10000, 0x8000, 0xd073}, 0xc)

10:46:07 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x100000000000000}}}}, 0xf8}}, 0x0)

10:46:07 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x41fe000000000000}, 'syz1\x00'})

10:46:07 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xc2fe}, 'syz1\x00'})

10:46:07 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x200b, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:07 executing program 6:
r0 = socket$inet(0x2, 0x0, 0x0)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000280), 0x4)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4)
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @rand_addr}, 0x10)
mmap(&(0x7f0000de4000/0x1000)=nil, 0x1000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

10:46:07 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0xf0ffffff00000000, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

[  770.033678] input: syz1 as /devices/virtual/input/input4191
[  770.060031] input: syz1 as /devices/virtual/input/input4192
10:46:07 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x200000000000000}}}}, 0xf8}}, 0x0)

10:46:07 executing program 4:
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
r0 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x1, 0x4102)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, r0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

[  770.102814] input: syz1 as /devices/virtual/input/input4193
[  770.174499] input: syz1 as /devices/virtual/input/input4194
10:46:07 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x100000000000000, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:07 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0xf0}}}}, 0xf8}}, 0x0)

10:46:07 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xf7c20000}, 'syz1\x00'})

10:46:07 executing program 1:
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/autofs\x00', 0x8000, 0x0)
ioctl$KDSKBLED(r0, 0x4b65, 0x5ba)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
ioctl$KVM_GET_TSC_KHZ(r0, 0xaea3)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000006000000000000000900000000000000", @ANYRES32=r1, @ANYBLOB="00000000030000000000000000000000000000000000000000000000", @ANYRES32=r1, @ANYBLOB="00000000030000000000000000000000000000000000000000000000", @ANYRES32=r1, @ANYBLOB="00000000000400000000000000000000000000000000000000000000", @ANYRES32=r1, @ANYBLOB="00000000872b00000000000000000000000000000000000000000000", @ANYRES32=r1, @ANYBLOB="00000000020000000000000000000000000000000000000000000000", @ANYRES32=r1, @ANYBLOB="00000000030000000000000000000000000000000000000000000000", @ANYRES32=r1, @ANYBLOB="00000000050032ff11df8e6464390000000000000000000000000000", @ANYRES32=r1, @ANYBLOB="00000000000000800000000000000000000000000000000000000000", @ANYRES32=r1, @ANYBLOB="00000000000000000100000000000000000000000000000000000000"])
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

10:46:07 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x71fe0000}, 'syz1\x00'})

10:46:07 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x9effffff00000000, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:07 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0xf0ffffff, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:07 executing program 6:
r0 = socket$inet(0x2, 0x0, 0x0)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000280), 0x4)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4)
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00'}, &(0x7f0000000140)=0x44)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = memfd_create(&(0x7f0000000200)='cgroup[system,procppp0\'\x00', 0x1)
ioctl$UI_GET_SYSNAME(r1, 0x8040552c, &(0x7f0000000240))
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)
fallocate(r0, 0x22, 0x4, 0x8000)
r2 = syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x2, 0x400040)
write$P9_RFSYNC(r2, &(0x7f00000001c0)={0x7, 0x33, 0x1}, 0x7)

10:46:07 executing program 7:
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
r0 = syz_open_dev$adsp(&(0x7f0000000240)='/dev/adsp#\x00', 0x9, 0x400)
write$P9_RCLUNK(r0, &(0x7f0000000280)={0x7, 0x79, 0x1}, 0x7)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x40800, 0x0)
r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x103500, 0x0)
setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f00000000c0)={0x2}, 0x4)
ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000001180)={0x80, {0x3ff, 0x8001, 0x4, 0xacdd, 0x1a1, 0x4}})
sendto$inet(r1, &(0x7f0000000140)="790810a807cd1742db31f05bf2fd458302a9d49a2a197b55ee425e16501e43102e635b3f974b673f28875f4a8f006e2630", 0x31, 0x80, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000001100)=[@in={0x2, 0x4e22, @rand_addr=0x2}, @in6={0xa, 0x4e23, 0x0, @mcast1, 0x6}, @in={0x2, 0x4e22, @multicast1}, @in={0x2, 0x4e20, @multicast1}], 0x4c)
mmap(&(0x7f00008f8000/0x1000)=nil, 0x1000, 0x2000001, 0x31, r2, 0x1000000000000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001400)=""/4096)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r2, 0x80dc5521, &(0x7f00000001c0)=""/23)

[  770.509368] input: syz1 as /devices/virtual/input/input4195
[  770.523683] input: syz1 as /devices/virtual/input/input4196
10:46:07 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x2}}}}, 0xf8}}, 0x0)

10:46:08 executing program 1:
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00004e9000/0x1000)=nil, 0x1000, &(0x7f00000000c0)=""/4096)
r0 = syz_open_dev$audion(&(0x7f00000010c0)='/dev/audio#\x00', 0x5, 0x101000)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001100)={{{@in=@remote, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@mcast1}, 0x0, @in=@multicast2}}, &(0x7f0000001200)=0xe8)
sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001240)={0x1d0, 0x1a, 0x200, 0x70bd2b, 0x25dfdbff, "", [@generic="6fc998bd370b8cd8cf554893d94150b8bfa89baa5ab2e3b6db7e144d140dca03664247404f7c93a67a72b92f88c0f5066c8b87ca016977a0a5212c15c2b8e117781ca0ab85c4cb9cd1575a81a62d76", @typed={0x8, 0x66, @uid=r1}, @typed={0x8, 0x8c, @str='\x00'}, @nested={0x160, 0x7b, [@typed={0xc, 0x56, @u64=0x6bec}, @typed={0x8, 0x3ff, @ipv4=@remote}, @generic="5023ebe6fd2c7390066c9d6273b526dfce344c94c2bfd080d79cef192aea6b8cbb729216f3f1d0c64b05d9d39a70dfaf6615539ba78bb49788afe6331cdc07f0d8a68dce1e12cecd565f7790eb62d4e092967db498ac89a827334e39068027cc9821a22c9039b1f4a1f611574ba8dc2902420831f7dccd3a8290725fae54254c4709ba5a2b6854367a25baade91a8e72c94791e30937e3cccc085ff29d9cfe1d4ab21e81c49663242dca0f1723c8d3a762c3a4fbc0354a73bf11effecaca59293a763d700858b55d70f0b96e45db55262e7bb4b8146bf3e27c335f607d42da5ea0841d316617c59b48b8fe615a4c7398e2f9", @generic="47078954f80fc2fbcbaf2e75db018d28ac5840ee20eddf7498e7c11bd8060a7d9489dea3438a409c7aab5829ba0aaf48f59a3af100814cc67f5767e5fe71b66492271727d7bfc94a83d4d965f24055b5b07efcb0fe14"]}]}, 0x1d0}], 0x1, 0x0, 0x0, 0x40000}, 0x8000)

[  770.581346] input: syz1 as /devices/virtual/input/input4198
[  770.589891] input: syz1 as /devices/virtual/input/input4197
10:46:08 executing program 4:
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

10:46:08 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x1000000, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:08 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x34fe0000}, 'syz1\x00'})

10:46:08 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xc2fd}, 'syz1\x00'})

10:46:08 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x2ff}}}}, 0xf8}}, 0x0)

10:46:08 executing program 7:
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x3, 0x141000)
setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000100)=0x80000001, 0x4)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

10:46:08 executing program 4:
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x800, 0x8)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

10:46:08 executing program 1:
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000c00)=@broute={'broute\x00', 0x20, 0x7, 0xab0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000140], 0x0, &(0x7f0000000100), &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x0, 0x1, 0x4305, 'irlan0\x00', 'ip6gre0\x00', 'ip6_vti0\x00', 'teql0\x00', @remote, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @local, [0x0, 0xff, 0x0, 0xff, 0xff, 0xff], 0xb0, 0xe8, 0x120, [@quota={'quota\x00', 0x18, {{0x1, 0x0, 0xff, 0x8}}}]}, [@common=@mark={'mark\x00', 0x10, {{0xffffffd0}}}]}, @common=@dnat={'dnat\x00', 0x10, {{@empty, 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x2, [{{{0x9, 0x6, 0xf005, 'ip6tnl0\x00', 'veth1_to_bond\x00', 'veth1\x00', 'erspan0\x00', @dev={[], 0x14}, [0xff, 0x0, 0xff, 0xff], @remote, [0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 0x70, 0x70, 0xc0}}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x0, 0x34c2, 0x81}}}}, {{{0x0, 0x1, 0x805, 'team_slave_1\x00', 'bpq0\x00', 'veth0_to_bridge\x00', 'bridge0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0x0, 0xff, 0x0, 0x0, 0x0, 0xff], 0x108, 0x108, 0x238, [@physdev={'physdev\x00', 0x70, {{'bond_slave_0\x00', {0xff}, 'ip6_vti0\x00', {}, 0x10, 0x1}}}]}}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x800, 'system_u:object_r:kmsg_device_t:s0\x00'}}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffc, 0x2, [{{{0xf, 0xe, 0x6004, 'veth0_to_bond\x00', 'ip6gre0\x00', 'bond_slave_0\x00', 'veth0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0x0, 0xff], 0x2a8, 0x2d8, 0x328, [@bpf0={'bpf\x00', 0x210, {{0x32, [{0xffffffffffff63d6, 0x25811669, 0x3, 0x7fffffff}, {0x7f, 0x1, 0x2, 0x7fff}, {0x792c, 0xfff, 0x2, 0x4}, {0x7fff, 0x4, 0x80, 0x8}, {0x6, 0xffffffffffff80db, 0x7c7a145f, 0x4}, {0x8, 0x0, 0x4000000000, 0x2}, {0xffffffff, 0x2, 0x3, 0x8}, {0x3, 0x7fff, 0x1, 0x2}, {0x1, 0x5, 0x8001, 0xfffffffffffffffd}, {0x982, 0x4, 0xd1ee, 0x7}, {0x10000, 0x4, 0x9, 0x9}, {0x0, 0x5, 0x97, 0xc2}, {0x0, 0x9, 0x6}, {0x2, 0x772, 0x0, 0xbc}, {0xffffffff, 0x9, 0x20, 0x4}, {0x3, 0x9, 0x2, 0x5}, {0x9, 0x7, 0x3, 0x58}, {0x9, 0xb, 0x7fffffff, 0x5}, {0x4, 0x4000000, 0x38, 0x7ff}, {0x80, 0xe5, 0x8, 0xff}, {0x17, 0xffbb, 0x1, 0xc27b}, {0x800, 0x2, 0x4, 0x4}, {0xaa, 0x1ff, 0x3, 0x3}, {0x3, 0x2, 0x9, 0x8d09}, {0x81, 0xffffffff, 0x52a, 0x800}, {0xb9c, 0x3f, 0x10001, 0xe8b}, {0x8, 0x10001, 0x6e8a0138, 0x1}, {0x0, 0x7, 0x4, 0x1020}, {0x7fff, 0x2, 0x20, 0x1}, {0x3c7, 0x10001, 0x7f, 0xf0}, {0x1ff, 0x20, 0x100000000, 0x5}, {0x100000000, 0x5, 0x2}, {0x5, 0x6, 0x1, 0x1f}, {0x100000000, 0x2, 0x63, 0x8}, {0x200, 0xfffffffffffffffb, 0xffffffff9dc2aa35, 0x2}, {0x5, 0x4, 0x100000000000000, 0x3}, {0x3ff, 0x10000, 0x7, 0x5}, {0x1ff, 0xd9b, 0x9624, 0x7}, {0x0, 0xfffffffffffffff7, 0xeab, 0x7fff}, {0x4a, 0x1, 0x3, 0x40}, {0x0, 0x0, 0x6, 0x3}, {0x81, 0x9, 0x1ff, 0x9}, {0x40, 0x8, 0x1f, 0x9}, {0x10000, 0x8, 0x1000000, 0x6}, {0x8, 0x9, 0x8b, 0x3}, {0x10001, 0xeee, 0x1}, {0x1, 0x7, 0x4, 0x5}, {0x100000001, 0x1f, 0x400, 0x3f}, {0x1, 0x4, 0x9, 0x7fff}, {0x86, 0x1000, 0x4, 0xffffffff80000000}, {0xffff, 0xe81, 0x0, 0x3f}, {0x1b32000000000000, 0x20, 0x5, 0x1}, {0x67c, 0x3, 0x1, 0x7ff}, {0x20, 0x7, 0xffffffffffffffff, 0x2}, {0xffff, 0x6, 0xff, 0xfffffffeffffffff}, {0x1, 0xf5dc, 0x9, 0x9}, {0x8, 0x80, 0x5}, {0x8000000000000000, 0x3d3, 0x3, 0xffffffffffff8001}, {0x3ff, 0x0, 0x20000000000}, {0x87d, 0x800, 0x32, 0x7fff}, {0x80000001, 0x9, 0x2}, {0x4, 0x8, 0x5, 0x527}, {0x2, 0x1, 0x5, 0x10000}, {0x7, 0x9, 0x80000000, 0xf1}]}}}]}, [@common=@redirect={'redirect\x00', 0x8, {{0xffffffffffffffff}}}]}, @common=@log={'log\x00', 0x28, {{0x8, "bfdfba009d644aa6d5d4486a1d3b4d0071ab81fd6c18b0ada78903c31d97"}}}}, {{{0x11, 0x1, 0x4, 'sit0\x00', 'bridge_slave_1\x00', 'bridge0\x00', 'team_slave_1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, [0x0, 0x0, 0xff, 0xff, 0x0, 0xff], @random="96fac2d0d845", [0x0, 0xff, 0xb423ad7230c17495, 0xff, 0xff], 0xa0, 0xa0, 0xd0, [@state={'state\x00', 0x8, {{0xffff}}}]}}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x1}}}}]}, {0x0, '\x00', 0x5, 0xfffffffffffffffc, 0x2, [{{{0x1f, 0x1, 0x7, 'bridge0\x00', 'veth1_to_bond\x00', 'bpq0\x00', 'ip_vti0\x00', @remote, [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], @random="720277cb9d07", [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x70, 0xa0, 0xd0}, [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x3ff}}}]}, @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x3}}}}, {{{0x11, 0x8, 0x8100, 'gre0\x00', 'veth0_to_team\x00', 'erspan0\x00', 'gre0\x00', @empty, [0xff, 0x0, 0xff, 0xff, 0xff, 0xff], @random="1980933c5957", [0x0, 0x0, 0x0, 0xff, 0x0, 0xff], 0x70, 0xc0, 0x110}, [@common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x7b84, 'syz0\x00', 0x5}}}]}, @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x2, 0x12a1}}}}]}]}, 0xb28)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000c80)='/dev/ppp\x00', 0x4001, 0x0)
connect$nfc_llcp(r1, &(0x7f0000000cc0)={0x27, 0x1, 0x1, 0x2, 0xa607, 0x8000, "58e2ec800f6fc440fa254485b6ef1ed5466431d4ab5e5de21571c3daa30a612d8954eb59de570933baee5a0ccda3f3a80b46bb43f597b255efe70ce3e7616f", 0x1f}, 0x60)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

10:46:08 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x2000000, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

[  770.945880] input: syz1 as /devices/virtual/input/input4199
[  770.982456] input: syz1 as /devices/virtual/input/input4200
10:46:08 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x3}}}}, 0xf8}}, 0x0)

[  771.076454] input: syz1 as /devices/virtual/input/input4201
[  771.099134] input: syz1 as /devices/virtual/input/input4202
10:46:08 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0xa000000, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:08 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xc307}, 'syz1\x00'})

10:46:08 executing program 1:
pipe2(&(0x7f0000000280)={<r0=>0xffffffffffffffff}, 0x800)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00')
sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r1, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xc27}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x0, 0x101000)
r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00')
sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40001000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r3, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x8, 0x3, 0x3a}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e21}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e24}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0xc}, @FOU_ATTR_AF={0x8}, @FOU_ATTR_AF={0x8, 0x2, 0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0)
ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000400)={0x81, 0x0, [0x3, 0x8000, 0xffff, 0x7]})
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

10:46:08 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x6000}, 'syz1\x00'})

10:46:08 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0xde01000000000000}}}}, 0xf8}}, 0x0)

[  771.310255] input: syz1 as /devices/virtual/input/input4203
[  771.401559] input: syz1 as /devices/virtual/input/input4204
10:46:08 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0xff020000, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

[  771.443759] input: syz1 as /devices/virtual/input/input4205
10:46:08 executing program 7:
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

10:46:08 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x5c30000}, 'syz1\x00'})

[  771.523064] input: syz1 as /devices/virtual/input/input4206
10:46:09 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0xfffff000, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:09 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x9effffff}}}}, 0xf8}}, 0x0)

10:46:09 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x38fe0000}, 'syz1\x00'})

[  771.675868] input: syz1 as /devices/virtual/input/input4207
10:46:09 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0xf000000, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

[  771.740001] input: syz1 as /devices/virtual/input/input4208
[  771.757617] input: syz1 as /devices/virtual/input/input4209
10:46:09 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x400300}}}}, 0xf8}}, 0x0)

[  771.823123] input: syz1 as /devices/virtual/input/input4210
10:46:09 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x74}, 'syz1\x00'})

10:46:09 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x8000000}, 'syz1\x00'})

10:46:09 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x3000000}}}}, 0xf8}}, 0x0)

10:46:09 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0xffffff7f, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:09 executing program 6:
r0 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000280), 0x4)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4)
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @rand_addr}, 0x10)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x80000, 0x0)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480)='IPVS\x00')
sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x64, r2, 0x500, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x35}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1e}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xffff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x0, 0x2000)
getsockopt$XDP_MMAP_OFFSETS(r3, 0x11b, 0x1, &(0x7f0000000180), &(0x7f0000000200)=0x60)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f000046e000/0x3000)=nil, 0x3000, &(0x7f0000002280)=""/4096)
socketpair$inet6(0xa, 0x7, 0x4, &(0x7f00000000c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000240)={0x832, 0x2, 0xa000}, 0x4)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000002c0)={<r5=>0xffffffffffffffff}, 0x13f, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000340)={0x14, 0x88, 0xfa00, {r5, 0x0, 0x0, @in6={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, [], 0xe}, 0x9}}}, 0x90)
setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000100)=0x5, 0x4)

[  771.982717] input: syz1 as /devices/virtual/input/input4211
[  772.017207] input: syz1 as /devices/virtual/input/input4212
[  772.060325] input: syz1 as /devices/virtual/input/input4213
10:46:09 executing program 4:
socketpair(0x10, 0x7, 0x93, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000100)={0x0, 0x4ba3})
sendto$inet(r0, &(0x7f0000865000), 0x0, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='\x00', r0}, 0x10)

10:46:09 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x2}, 'syz1\x00'})

[  772.103501] input: syz1 as /devices/virtual/input/input4214
10:46:09 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x200b000000000000, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:09 executing program 7:
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)
r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x600080, 0x0)
ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000100)={0x6, 0x7, 0x583, 0x8, 0x1, 0x7})
write$P9_RLERROR(r0, &(0x7f00000000c0)={0xa, 0x7, 0x1, {0x1, '.'}}, 0xa)

10:46:09 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0xf}}}}, 0xf8}}, 0x0)

[  772.248053] input: syz1 as /devices/virtual/input/input4215
10:46:09 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x5}, 'syz1\x00'})

10:46:09 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x300000000000000, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

[  772.326861] input: syz1 as /devices/virtual/input/input4216
10:46:09 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x4e2b648dc8}}}}, 0xf8}}, 0x0)

[  772.412461] input: syz1 as /devices/virtual/input/input4217
[  772.451502] input: syz1 as /devices/virtual/input/input4218
10:46:09 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xc30b}, 'syz1\x00'})

10:46:09 executing program 1:
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x200000c, 0x31, r0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = open(&(0x7f00000000c0)='./file0\x00', 0x200, 0x80)
write$P9_RMKNOD(r1, &(0x7f0000000240)={0x14, 0x13, 0x10000000002, {0x6, 0x1, 0x5}}, 0x14)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000002c0)={<r2=>0xffffffffffffffff}, 0x13f, 0x100a}}, 0x20)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000340)={0x12, 0x10, 0xfa00, {&(0x7f0000000280), r2, r1}}, 0x18)
r3 = msgget$private(0x0, 0x420)
msgrcv(r3, &(0x7f0000000380)={0x0, ""/198}, 0xce, 0x3, 0x800)
ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000100)={0xffff, {0xfff, 0x4, 0xffffffffffffffe0, 0xffffffffffffffff, 0x3, 0x80}})
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x2cddd8a4c066c58c, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache='fscache'}, {@privport='privport'}]}})
msgrcv(r3, &(0x7f0000000480)={0x0, ""/51}, 0x3b, 0x2, 0x2000)
epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1)

10:46:09 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x112a4e46af000000, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:09 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xfe79}, 'syz1\x00'})

10:46:10 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0xff02}}}}, 0xf8}}, 0x0)

10:46:10 executing program 6:
r0 = socket$inet(0x2, 0x0, 0x0)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000280), 0x4)
io_setup(0x836d, &(0x7f00000000c0)=<r1=>0x0)
io_pgetevents(r1, 0x3f, 0x1, &(0x7f0000000100)=[{}], &(0x7f0000000140), &(0x7f00000001c0)={&(0x7f0000000180)={0x1}, 0x8})
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4)
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

[  772.640848] input: syz1 as /devices/virtual/input/input4219
10:46:10 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x9effffff, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

[  772.705006] input: syz1 as /devices/virtual/input/input4220
[  772.739167] input: syz1 as /devices/virtual/input/input4221
10:46:10 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x2ff}}}}, 0xf8}}, 0x0)

[  772.808303] input: syz1 as /devices/virtual/input/input4222
10:46:10 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x600}, 'syz1\x00'})

10:46:10 executing program 4:
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x34, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)
socket$alg(0x26, 0x5, 0x0)
mmap(&(0x7f0000cfe000/0x1000)=nil, 0x1000, 0x2000000, 0x810, r0, 0x0)

10:46:10 executing program 7:
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0xc1, 0x0)
fstatfs(r0, &(0x7f0000000100)=""/225)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)
r2 = fcntl$getown(r1, 0x9)
ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000200)=<r3=>0x0)
setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000240)=0x3f, 0x4)
kcmp(r2, r3, 0x0, r0, r0)

10:46:10 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x40030000000000}}}}, 0xf8}}, 0x0)

10:46:10 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xfe36}, 'syz1\x00'})

10:46:10 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x2, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

[  773.042060] input: syz1 as /devices/virtual/input/input4223
[  773.082023] input: syz1 as /devices/virtual/input/input4224
10:46:10 executing program 6:
r0 = socket$inet(0x2, 0x0, 0x0)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000280), 0x4)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4)
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x60000, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

10:46:10 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x2ff, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

[  773.142440] input: syz1 as /devices/virtual/input/input4225
[  773.169883] input: syz1 as /devices/virtual/input/input4226
10:46:10 executing program 4:
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f000030e000/0x1000)=nil, 0x1000, 0x2000005, 0x1, 0x100002)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

10:46:10 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x7a}, 'syz1\x00'})

10:46:10 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x300000000000000}}}}, 0xf8}}, 0x0)

10:46:10 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x42fe000000000000}, 'syz1\x00'})

10:46:10 executing program 7:
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
socket$inet6(0xa, 0x2, 0x10001)
r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x40000, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ashmem\x00', 0x2, 0x0)
open_by_handle_at(r0, &(0x7f0000000140)={0x88, 0x9, "52f58f0732faece355f3a6d957fac2f3418c96eefc9945b37911e2988b8d2beb5ed1a63ecfc45a1a21675d970d793f6236879ea2985ef0a40222d6fb5349a41d3ee5bdfc637627a2b28035dc3d7dbfd649d42152e2fe3ed976e613b27d658d117a4a3ea78798a5a5853dc82538ec0e326dd171d291f282957d0bada3c47e0e59"}, 0x109000)
mmap(&(0x7f00001e8000/0x4000)=nil, 0x4000, 0x6, 0x22110, r1, 0x23)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

10:46:10 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x34000, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:10 executing program 1:
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff)
ioctl$TIOCLINUX3(r1, 0x541c, &(0x7f00000000c0))
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

10:46:10 executing program 6:
r0 = socket$inet(0x2, 0x0, 0x0)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000280), 0x4)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4)
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)
r1 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x76, 0x42100)
setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000100)=0x1, 0x4)

10:46:10 executing program 4:
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)
r0 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0xc71, 0x0)
ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000100))

[  773.593148] input: syz1 as /devices/virtual/input/input4227
[  773.612148] input: syz1 as /devices/virtual/input/input4228
[  773.669530] input: syz1 as /devices/virtual/input/input4229
10:46:11 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0xffffff7f}}}}, 0xf8}}, 0x0)

10:46:11 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0xffffff7f00000000, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:11 executing program 7:
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

[  773.754545] input: syz1 as /devices/virtual/input/input4230
10:46:11 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xe4ffffff00000000}, 'syz1\x00'})

10:46:11 executing program 1:
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
r0 = socket(0xb, 0x6, 0x6)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000000c0)={<r1=>0x0, 0x7f, 0x1, [0x3ff]}, &(0x7f0000000100)=0xa)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000140)=r1, 0x4)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getsockopt$netlink(r0, 0x10e, 0x5, &(0x7f0000000180)=""/4, &(0x7f00000001c0)=0x4)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

10:46:11 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x48fe0000}, 'syz1\x00'})

10:46:11 executing program 6:
r0 = socket$inet(0x2, 0x0, 0x0)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000280), 0x4)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4)
sendto$inet(r0, &(0x7f0000865000), 0x0, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000002280)={<r1=>0x0, 0x1000, "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"}, &(0x7f00000000c0)=0x1008)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000100)={r1, 0x5a, "2566bc11badbef32d90fb00b977dd6608a56ecb5b087815749049698012fea3abe95278de69461a057712ea1a02a9657634eb25c0f39e4898a9405ca349fbf470806ed2d2af96e5f8369760b5857aa07d2ea121e789442b407b9"}, &(0x7f0000000180)=0x62)
fcntl$getflags(r0, 0x408)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

10:46:11 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x1000000}}}}, 0xf8}}, 0x0)

10:46:11 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x300, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

[  773.986098] input: syz1 as /devices/virtual/input/input4231
10:46:11 executing program 7:
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = accept(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00')
sendmsg$FOU_CMD_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r1, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@FOU_ATTR_AF={0x8, 0x2, 0x2}, @FOU_ATTR_IPPROTO={0x8}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e23}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x20004001)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

[  774.058873] input: syz1 as /devices/virtual/input/input4232
[  774.086875] input: syz1 as /devices/virtual/input/input4233
[  774.178699] input: syz1 as /devices/virtual/input/input4234
10:46:11 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xc30000}, 'syz1\x00'})

10:46:11 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0xb20, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:11 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x1de}}}}, 0xf8}}, 0x0)

10:46:11 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x20c80}, 'syz1\x00'})

10:46:11 executing program 6:
r0 = socket$inet(0x2, 0x0, 0x0)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000280)=0x5, 0xfffffffffffffe5e)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4)
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
signalfd4(r0, &(0x7f00000000c0)={0x9}, 0x8, 0x80800)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

[  774.326368] input: syz1 as /devices/virtual/input/input4235
[  774.412708] input: syz1 as /devices/virtual/input/input4236
[  774.432420] input: syz1 as /devices/virtual/input/input4237
[  774.544537] input: syz1 as /devices/virtual/input/input4238
10:46:12 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x2}}}}, 0xf8}}, 0x0)

10:46:12 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0xffffff9e, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:12 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x7000000}, 'syz1\x00'})

10:46:12 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xffffffff00000000}, 'syz1\x00'})

10:46:12 executing program 4:
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)
ioctl$KVM_GET_XSAVE(r0, 0x9000aea4, &(0x7f00000000c0))

10:46:12 executing program 1:
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_bt(r0, 0xdd17, &(0x7f0000000640)="df66c1220ebd7d5b60b9df34a79e84446319e5b42cffc5147cbf97f07035e80df77da65ab6ad1a0f0e382569d20696e0a54d6237885be5c580c4697661ba1c1c697a62e10821404397e4971cddb46ab2f30c0815aae3")
r1 = accept$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @dev}, &(0x7f0000000100)=0x10)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000140)={<r2=>0x0, @in={{0x2, 0x4e20, @local}}, 0x2000000000afb, 0xfffffffffffffffc, 0x6, 0xf, 0x2}, &(0x7f0000000200)=0xfffffffffffffe6f)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000240)=ANY=[@ANYRES32=r2, @ANYBLOB="001003dd160000040500"], &(0x7f0000000280)=0xe)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

[  774.708461] input: syz1 as /devices/virtual/input/input4239
[  774.718364] input: syz1 as /devices/virtual/input/input4240
10:46:12 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x34000}}}}, 0xf8}}, 0x0)

10:46:12 executing program 7:
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

10:46:12 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x40030000000000, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

[  774.806979] input: syz1 as /devices/virtual/input/input4242
[  774.822479] input: syz1 as /devices/virtual/input/input4241
10:46:12 executing program 6:
r0 = socket$inet(0x2, 0x0, 0x0)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000280), 0x4)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4)
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @rand_addr}, 0x10)
ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f00000000c0))
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

10:46:12 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x2efe0000}, 'syz1\x00'})

10:46:12 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0xf0ffffffffffff, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:12 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0xc88d642b4e000000}}}}, 0xf8}}, 0x0)

10:46:12 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f000000}, 'syz1\x00'})

[  775.075025] input: syz1 as /devices/virtual/input/input4243
10:46:12 executing program 7:
exit(0x1000)
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x100000000, 0x0)
utimensat(r0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={{0x77359400}, {0x77359400}}, 0x100)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

10:46:12 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0xf000, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

[  775.130618] input: syz1 as /devices/virtual/input/input4244
10:46:12 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0xff02000000000000}}}}, 0xf8}}, 0x0)

10:46:12 executing program 6:
r0 = socket$inet(0x2, 0x0, 0x0)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000280), 0x4)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4)
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @rand_addr}, 0x10)
mmap(&(0x7f000058a000/0x2000)=nil, 0x2000, 0x2000002, 0x10, r0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

10:46:12 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x2efe}, 'syz1\x00'})

[  775.259419] input: syz1 as /devices/virtual/input/input4246
10:46:12 executing program 4:
r0 = syz_open_dev$mice(&(0x7f00000003c0)='/dev/input/mice\x00', 0x0, 0x200000)
sendto$inet(r0, &(0x7f0000865000), 0x47, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x0, 0x0)
r2 = getpid()
write$FUSE_LK(r1, &(0x7f0000000180)={0x28, 0xfffffffffffffffe, 0x4, {{0x0, 0x10000, 0x0, r2}}}, 0x28)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
accept$alg(r0, 0x0, 0x0)
setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000240)=0x7, 0x4)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000001c0)=@assoc_value, &(0x7f0000000200)=0x8)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000000c0), &(0x7f00000002c0)=0x14)

10:46:12 executing program 1:
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x9, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)
r0 = syz_open_dev$admmidi(&(0x7f0000000200)='/dev/admmidi#\x00', 0x8, 0x10002)
ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f00000002c0)={&(0x7f0000ffc000/0x2000)=nil, 0x2000})
getsockopt$inet6_mreq(r0, 0x29, 0x1d, &(0x7f0000000300)={@dev}, &(0x7f0000000340)=0x14)
getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000240), &(0x7f0000000280)=0x8)

10:46:12 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x9effffff00000000}}}}, 0xf8}}, 0x0)

10:46:12 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0xf00, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:12 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xfbc20000}, 'syz1\x00'})

[  775.422453] input: syz1 as /devices/virtual/input/input4247
10:46:12 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xa00}, 'syz1\x00'})

[  775.545327] input: syz1 as /devices/virtual/input/input4248
10:46:13 executing program 4:
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f00000bc000/0x1000)=nil, 0x1000, 0x9, 0x10, r0, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

10:46:13 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0xde010000}}}}, 0xf8}}, 0x0)

10:46:13 executing program 6:
r0 = socket$inet(0x2, 0x0, 0x0)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000280), 0x4)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4)
sendto$inet(0xffffffffffffffff, &(0x7f0000000140)="b199c859778ca39fa56d9ee04be409b636e98002e78b1a755c5c82350269e142798e91395bae61f737ca9cf7c7d4fabd8e61bf65a2e992ff816162ea63486a48bdb1629ecb4da1e80289168c320c196f5645ffc5b900000000000000", 0x6d, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f00000000c0)=0x2, 0x4)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

[  775.625201] input: syz1 as /devices/virtual/input/input4250
10:46:13 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0xf0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

[  775.738843] input: syz1 as /devices/virtual/input/input4251
10:46:13 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x5c3}, 'syz1\x00'})

[  775.789829] input: syz1 as /devices/virtual/input/input4252
[  775.868173] input: syz1 as /devices/virtual/input/input4253
[  775.936055] input: syz1 as /devices/virtual/input/input4254
10:46:13 executing program 1:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x40030000000000, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:13 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0xde01}}}}, 0xf8}}, 0x0)

10:46:13 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x74}, 'syz1\x00'})

10:46:13 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xe7c2}, 'syz1\x00'})

10:46:13 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0xfffffff0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:13 executing program 4:
sendto$inet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

10:46:13 executing program 6:
r0 = socket$inet(0x2, 0x0, 0x0)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000280), 0x4)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4)
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x10000000}, 0x0, 0x0, r1, 0x0)
r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x2080, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000380)={{{@in=@dev, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000480)=0xe8)
fstat(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0})
mount$fuse(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='fuse\x00', 0x800, &(0x7f0000000540)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x5}}, {@blksize={'blksize', 0x3d, 0x600}}, {@blksize={'blksize', 0x3d, 0x1800}}, {@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x1200}}, {@max_read={'max_read', 0x3d, 0x3}}]}})
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={<r5=>0x0, 0x74, &(0x7f0000000100)=[@in6={0xa, 0x4e22, 0x3, @remote, 0x7fffffff}, @in6={0xa, 0x4e23, 0xfffffffffffffffb, @mcast2, 0x7}, @in6={0xa, 0x4e24, 0x0, @loopback, 0x7e8}, @in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e22, @rand_addr=0xb4ad}]}, &(0x7f00000001c0)=0x10)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000200)=ANY=[@ANYRES32=r5, @ANYBLOB="991a280a"], &(0x7f0000000240)=0x8)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)
setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000680)=@req={0x5, 0x1f, 0x1, 0x2}, 0x10)

10:46:13 executing program 7:
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001140)='/dev/vga_arbiter\x00', 0x802, 0x0)
ioctl$SCSI_IOCTL_TEST_UNIT_READY(r0, 0x2)
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f00000000c0)=""/4096)
r1 = syz_open_dev$vcsa(&(0x7f00000010c0)='/dev/vcsa#\x00', 0x10000, 0x0)
write$P9_RFLUSH(r1, &(0x7f0000001100)={0x7, 0x6d, 0x2}, 0x7)

10:46:13 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0xa00000000000000}}}}, 0xf8}}, 0x0)

[  776.178118] input: syz1 as /devices/virtual/input/input4255
[  776.213811] input: syz1 as /devices/virtual/input/input4256
10:46:13 executing program 1:
r0 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000280), 0x4)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4)
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @rand_addr}, 0x10)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x80000, 0x0)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480)='IPVS\x00')
sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x64, r2, 0x500, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x35}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1e}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xffff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x0, 0x2000)
getsockopt$XDP_MMAP_OFFSETS(r3, 0x11b, 0x1, &(0x7f0000000180), &(0x7f0000000200)=0x60)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f000046e000/0x3000)=nil, 0x3000, &(0x7f0000002280)=""/4096)
socketpair$inet6(0xa, 0x7, 0x4, &(0x7f00000000c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000240)={0x832, 0x2, 0xa000}, 0x4)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000002c0)={<r5=>0xffffffffffffffff}, 0x13f, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000340)={0x14, 0x88, 0xfa00, {r5, 0x0, 0x0, @in6={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, [], 0xe}, 0x9}}}, 0x90)
setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000100)=0x5, 0x4)

10:46:13 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0xfffffffffffff000, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

[  776.279409] input: syz1 as /devices/virtual/input/input4257
[  776.285133] input: syz1 as /devices/virtual/input/input4258
10:46:13 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x87ffffffff}, 'syz1\x00'})

10:46:13 executing program 7:
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x42000, 0x0)
setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f0000000100)=0x8, 0x4)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

10:46:13 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0xffffff7f00000000}}}}, 0xf8}}, 0x0)

10:46:13 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x44e}, 'syz1\x00'})

10:46:13 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0xa00000000000000, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

[  776.542222] input: syz1 as /devices/virtual/input/input4259
10:46:13 executing program 6:
r0 = socket$inet(0x2, 0x0, 0x0)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000280), 0x4)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4)
lseek(r0, 0x0, 0x1)
accept(r0, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f0000000300)=0x80)
setsockopt$inet6_tcp_int(r1, 0x6, 0x1, &(0x7f00000002c0)=0xffffffff, 0x4)
sendto$inet(0xffffffffffffffff, &(0x7f0000000140)="94d10ef3d221fd25876b4b8968221b2c98533642f9bdad7b1b9396045bd1ffe48860e180acb44f83f549e5e573c8798e05116f564a16b487295f18ce083d58a9d6442fb09eec2ef3cf980a03b5c47ba1f15b2b383eb07e9ff6e63a44d9", 0x90, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e22, @rand_addr=0x4}, 0x1000001a4)
r2 = syz_open_dev$adsp(&(0x7f0000000240)='/dev/adsp#\x00', 0xfff, 0x4082)
write$UHID_INPUT(r2, &(0x7f0000002280)={0x8, "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", 0x1000}, 0x1006)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, r2, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)
ioctl$KVM_GET_MP_STATE(r3, 0x8004ae98, &(0x7f0000000100))
ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f0000000340)={0x0, 0x0, {0x3, 0xc, 0x7f, 0x15, 0x1, 0xfffffffffffffffa, 0x0, 0x66}})
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)
fanotify_init(0x21, 0x1000)

10:46:14 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0xf0ffffff}}}}, 0xf8}}, 0x0)

[  776.642945] input: syz1 as /devices/virtual/input/input4260
[  776.667290] input: syz1 as /devices/virtual/input/input4261
10:46:14 executing program 4:
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xfffffffffffffe62, 0x0, &(0x7f0000fd9ff0)={0x2, 0x3, @remote}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

10:46:14 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto$inet(r0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000140)={0x2, 0x4e21, @rand_addr}, 0xfffffffffffffe9b)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

10:46:14 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0xaf464e2a11, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

[  776.700903] input: syz1 as /devices/virtual/input/input4262
10:46:14 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x39fe000000000000}, 'syz1\x00'})

10:46:14 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x6800000000000000}, 'syz1\x00'})

10:46:14 executing program 1:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x200000000000000, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:14 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0xf0ffff}}}}, 0xf8}}, 0x0)

10:46:14 executing program 4:
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)
r0 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0xca9, 0x0)
setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000100)=0x5, 0x4)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={<r1=>0x0, 0x400}, &(0x7f0000000180)=0x8)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f00000001c0)={r1, 0x0, 0x10, 0x9341, 0x7ff}, &(0x7f0000000200)=0x18)

10:46:14 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x3000000, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

[  776.992818] input: syz1 as /devices/virtual/input/input4263
[  777.004771] input: syz1 as /devices/virtual/input/input4264
10:46:14 executing program 1:
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
mmap(&(0x7f0000482000/0x3000)=nil, 0x3000, 0x82000002, 0x31, 0xffffffffffffffff, 0xffffffffffffffff)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x101000, 0x0)
getsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4)
shmget$private(0x0, 0xb000, 0x78000095, &(0x7f0000ff3000/0xb000)=nil)
ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f0000000180))
open_by_handle_at(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x41)

10:46:14 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0xa000000}}}}, 0xf8}}, 0x0)

10:46:14 executing program 7:
socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendto$inet(r0, &(0x7f0000865000), 0xc3aa, 0x40000, &(0x7f0000fd9ff0)={0x2, 0x4e20, @rand_addr}, 0xffffffffffffff98)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

[  777.085217] input: syz1 as /devices/virtual/input/input4266
[  777.109603] input: syz1 as /devices/virtual/input/input4265
10:46:14 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0xff02, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:14 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x87000000}, 'syz1\x00'})

[  777.367302] input: syz1 as /devices/virtual/input/input4267
10:46:14 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280)='veth1_to_bond\x00', 0x10)
sendto$inet(r0, &(0x7f00000001c0)="1b2377eb47cfca8429be9b58fcf785e79c5b897cf2350e9694a9adbaf0cdf5b98d7f5745b5d1bf9f6c49b606f5ebad104aad79a2273dc6159c4d7d3ef50ab2d5631e66661d7eeb2cb74e70d028dbcffda55ca9f966d4ca3189f327d12dd2ee14f09cb2a346", 0xfffffffffffffc21, 0x4, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0xffffffffffffff8f)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x3, 0x70, 0x0, 0xf1f4, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f00000000c0)=0x1e)
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x80040, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000e96000/0x4000)=nil, 0x4000}, &(0x7f0000000240)=0x10)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

10:46:14 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x7a000000}, 'syz1\x00'})

10:46:14 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0xa00}}}}, 0xf8}}, 0x0)

10:46:14 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x40030000000000, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:14 executing program 1:
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
mmap(&(0x7f0000482000/0x3000)=nil, 0x3000, 0x82000002, 0x31, 0xffffffffffffffff, 0xffffffffffffffff)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x101000, 0x0)
getsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4)
shmget$private(0x0, 0xb000, 0x78000095, &(0x7f0000ff3000/0xb000)=nil)
ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f0000000180))
open_by_handle_at(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="7e00020019000000b4587f96965c78d72ce8b9b80994fab8f8fde767b4a6ff70eacfb5ca363d12468002a4ca136f5c41ae28880be2c1ccdec10aafed1aaf7969f0a29cabd9b321531eddd2a84826572727eee2898fcecca57a188be0c14644268c22f6333d65665abe321a211f677e350d29ecbbeea55d997131f408b688df8162dcb8ce4998e664fc90272a485d145c8484e210dd129616d2d85b2863f5c971168d792a8bd61b7bdb5c98be602b177da91b4e46ec7a9f12c9a5ba372bf2f6335c720ddc555027ea16acbc14a174bfd1a235974480ef7a2327c39d346830322387d6785a6f0fc508522dddef6c195fec94ae34091bbc6b4102c84924867da95d23c8a6d1b6f8cc930000000000000000000000000000000000000000ba68763ccb19373b"], 0x41)

10:46:14 executing program 6:
r0 = socket$inet(0x2, 0x0, 0x0)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000280), 0x4)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x7a91ae10f610a0a3}, 0x4)
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0x105, 0x4, &(0x7f0000fd9ff0)={0x2, 0x4e20, @rand_addr}, 0x10)
ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000200)={0x6, 0x800, 0x589, 0x0, 0x100000001})
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)
r1 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x6, 0x400040)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x800, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="0f01c866b83dc600000f23c00f21f86635020007000f23f8baf80c66b80278e88066efbafc0cb809c1ef0f019c89e10f08260f01d10f221fd09700980f350f00980030", 0x43}], 0x1, 0x20, &(0x7f0000000200), 0x0)

[  777.425601] input: syz1 as /devices/virtual/input/input4268
10:46:14 executing program 7:
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0x0, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e22, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

[  777.500166] input: syz1 as /devices/virtual/input/input4269
10:46:14 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0xf0ffffff00000000, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:15 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x45fe000000000000}, 'syz1\x00'})

10:46:15 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x300}}}}, 0xf8}}, 0x0)

10:46:15 executing program 1:
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
mmap(&(0x7f0000482000/0x3000)=nil, 0x3000, 0x82000002, 0x31, 0xffffffffffffffff, 0xffffffffffffffff)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x101000, 0x0)
getsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4)
shmget$private(0x0, 0xb000, 0x78000095, &(0x7f0000ff3000/0xb000)=nil)
ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f0000000180))
open_by_handle_at(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="7e00020019000000b4587f96965c78d72ce8b9b80994fab8f8fde767b4a6ff70eacfb5ca363d12468002a4ca136f5c41ae28880be2c1ccdec10aafed1aaf7969f0a29cabd9b321531eddd2a84826572727eee2898fcecca57a188be0c14644268c22f6333d65665abe321a211f677e350d29ecbbeea55d997131f408b688df8162dcb8ce4998e664fc90272a485d145c8484e210dd129616d2d85b2863f5c971168d792a8bd61b7bdb5c98be602b177da91b4e46ec7a9f12c9a5ba372bf2f6335c720ddc555027ea16acbc14a174bfd1a235974480ef7a2327c39d346830322387d6785a6f0fc508522dddef6c195fec94ae34091bbc6b4102c84924867da95d23c8a6d1b6f8cc930000000000000000000000000000000000000000ba68763ccb19373b"], 0x41)

[  777.696003] input: syz1 as /devices/virtual/input/input4270
10:46:15 executing program 4:
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

[  777.747473] input: syz1 as /devices/virtual/input/input4271
10:46:15 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0xffffff9e}}}}, 0xf8}}, 0x0)

10:46:15 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x100000000000000, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

[  777.838701] input: syz1 as /devices/virtual/input/input4272
10:46:15 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xf5c20000}, 'syz1\x00'})

10:46:15 executing program 1:
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
mmap(&(0x7f0000482000/0x3000)=nil, 0x3000, 0x82000002, 0x31, 0xffffffffffffffff, 0xffffffffffffffff)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x101000, 0x0)
getsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4)
shmget$private(0x0, 0xb000, 0x78000095, &(0x7f0000ff3000/0xb000)=nil)
ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f0000000180))
open_by_handle_at(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x41)

10:46:15 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1000000}, 'syz1\x00'})

10:46:15 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0xfffffffffffff000}}}}, 0xf8}}, 0x0)

10:46:15 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x200b, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

[  778.009575] input: syz1 as /devices/virtual/input/input4273
10:46:15 executing program 7:
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x20100, 0x0)
fchdir(r0)
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

10:46:15 executing program 1:
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
mmap(&(0x7f0000482000/0x3000)=nil, 0x3000, 0x82000002, 0x31, 0xffffffffffffffff, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x101000, 0x0)
getsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4)
shmget$private(0x0, 0xb000, 0x78000095, &(0x7f0000ff3000/0xb000)=nil)
ioctl$KVM_GET_PIT(r0, 0xc048ae65, &(0x7f0000000180))

[  778.088508] input: syz1 as /devices/virtual/input/input4274
[  778.108510] input: syz1 as /devices/virtual/input/input4275
[  778.211589] input: syz1 as /devices/virtual/input/input4276
10:46:15 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0xf0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:15 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x100000000000000}}}}, 0xf8}}, 0x0)

10:46:15 executing program 6:
r0 = socket$inet(0x2, 0x0, 0x0)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000280), 0x4)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4)
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @rand_addr}, 0x10)
r1 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x180)
ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000100))
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

10:46:15 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x500}, 'syz1\x00'})

10:46:15 executing program 4:
openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x1, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000000, 0x10, r0, 0x0)

10:46:15 executing program 1:
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
mmap(&(0x7f0000482000/0x3000)=nil, 0x3000, 0x82000002, 0x31, 0xffffffffffffffff, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x101000, 0x0)
getsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4)
shmget$private(0x0, 0xb000, 0x78000095, &(0x7f0000ff3000/0xb000)=nil)

10:46:15 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x44fe0000}, 'syz1\x00'})

[  778.370563] input: syz1 as /devices/virtual/input/input4277
10:46:15 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x300, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:15 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0xf0ffffff00000000}}}}, 0xf8}}, 0x0)

[  778.512346] input: syz1 as /devices/virtual/input/input4278
[  778.563170] input: syz1 as /devices/virtual/input/input4279
10:46:16 executing program 1:
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
mmap(&(0x7f0000482000/0x3000)=nil, 0x3000, 0x82000002, 0x31, 0xffffffffffffffff, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x101000, 0x0)
getsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4)

10:46:16 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0xb20, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:16 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x4000}, 'syz1\x00'})

[  778.620234] input: syz1 as /devices/virtual/input/input4280
10:46:16 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x2000000}}}}, 0xf8}}, 0x0)

10:46:16 executing program 4:
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00')
ioctl$sock_netdev_private(r1, 0x89fd, &(0x7f0000000300)="a8b05195c1322753e678863c38a4bc32525cf67ade7399f3aa1cd7aaf5b66a66994261a71a92fc7a3c2843a9c927e690bd0a3294413730875c6d345440")
fsetxattr(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="6f73782e666f7500b2b86863ef15ea2e5be8189828b57d6a3266882500f9788d8af1cee7aaccfc4bc219b75da6a7a641f7e52709c0559c8c4572d687525a29c6423f5b832ad95e3c0800c7d496cedffeccd07365c79fab3759c2734dec4914408e32c2aa962853cb74d792d6a23951550d1f5ed907da8a6e9012409631ca35d345a302de5e5057e4f6cf851c3843aee194c6df1c599f15835c4ffa12d1a60e24405b38b7719097319b8df51467dad58983d865836e286323705e0222fbe8ec5f4ae51789b14c203b0799cf562093ff46269c703433b0e6aac768c5da"], &(0x7f00000002c0)='fou\x00', 0x4, 0x1)
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="20002bbd7000fcdbdf2501000000080001004e200000080004000300000004000500080001489175ebdb5959a7004e230000080004000000000004000500080003002f0000005c0e9645692bbb666235b6c4cf87488956fe506a3c5b27e87f7204b3760b80470d5ab3f65e22d2f0b467b981e85395745214d3d4f7d8e3ac273694b12f90461f"], 0x44}, 0x1, 0x0, 0x0, 0x48000}, 0x8004)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)
syz_mount_image$nfs4(&(0x7f0000000340)='nfs4\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000002280)="7d80818beb2bee09bb564789e69c06cefeed24aefaf886a7f244290750491da91b10be8c110959a74afe2141e4a5447dad4d0ad3cacf64911286ef6c647b48398a399f32191ceddb09887607f6ecf72701bfec3b017016af4a4eb4710f168283f349890bc49850a6e09d8d409c72252867ceb6dcb555fc76a6082d0b321420459a2eed46a4b9a885c935dd4353e3bdc65f17541d65aaed7c09d13dbd124408f1ac92a92334c9ad79eecc77eeb46324ef283e9a25f55327991766d36154735df936dcc643c09837f1c6ca069e16373e6306b271a3b3e8a42b2926e1868bb343e630209026e1397f1a45d9f406508f2134292f2091f5be018f79cb2e926638d9da1e4ba4ae5176f64bca1c3774c5b185d7fe8a629b9d97e78b566c80fd7bc7172f890c7fc235d31b945eae152f688b1403ed2a0899a7f9a672c5660184698aec5da8987a5950413db85c35619bc74f2751e6b0889c30e2515905d0e01e4527f32a2497c29ceb5a976b5846a06ed840274baecf8d1587bdeacba0ca1d1e233edd4730b1cf6db19c40850cb224a32217d7300d3e91e8b4f83681f228fcdb8da5439c502775dcc767bb86dcceeb0744b63c18aa4c02d22faea671227eb40183e7ff7fc22ab557dd3a3fb60e1efed625f139e3b927b597175b4254d30b6a9078248e9881f98bbc36bbe6b6b14e9a72201a469b4118efbeb2c7eb8025362b544d50e7975da80fbd05703b264e2e5a408833b42118c7fcf54412a91d9eb094bdb1fe56420a50e759167c0a807f018957a7717d8295234ee06a5065170e9bd659d832b2fb94aa353a2ee930d6fa21d435d8aa76b39dfaf098560e209f6c520ca1c6b7b8a5d1683b74c71eec0db04d59c7ba4cf6f2184945bc95720189b0824df0b8f6ea435b6c5c9f1fe06435c9c10b01c368bc8b953a859a3d152e530cfc1f881f6b51616aad71ab04a1d43f0a6930f2c884cc455c3d63764cdd1605d5913ffa1ec63a30613457c76a8054860fafbf5174a810674e79076aacd9b0e5bf3c2930eb4536d312a66d5a50c0e00c89b04ebe7435ebedb0d517f0672338f087ee0cacb7280bf32eea3b24875f40da4c9d25dfb7714010d5f8cd05102d09528d2190aeb4e52debfedf0bbc8e7b0370e7a54faaf5ef615cf57bf39a41baa734a66188140aeb58ada22649301ae96baaf102a126e9fa66dc2ab43c2bf83079aaa228b33a6eb28595ff41a9410f4c5aeabba3c7d1524b8eb6303404d90baeaa4379304ad48fd27b80fe970b7b8fb0066037c5b1b67cccfad76d64060398c5532a9cca46758bb0c664240f94d5db7bce8a896d98e7d746bc3811f349a18e55fbda10ea87751abbaff1dc1ed94ed0e3496f4b7500173b4512e800ef4ade84554bf4502ccee29051f040191ee6b907ed5fbd98e3df4c48c2764412a48e21538742d334858bdb63b7d23b1525b1de5822a914be73f65063f341b63f31bd6bd22ed16259019fa8c7b7f0023b8a4fab3f50e318708cf8b59fedc9e612b4762317d1cfd67b5236c7ce8388e25680382a562871598341d3a82e508799c692e5fcf8066990e11c57ee77d092c3843a71419b3357c7d8fc693c6e22d49d5dfb37ed54b86af89b4f6178d0a88d9807178d1a55152f2a440288f2460d5411a34d7875cbf5c815fb0d1f8ae92ec78f82a39e34ecc99c4e4b71001f1f0264635f14a8eae4fc1a3bdd950e5e9e90ec8ea14d6711c07a62ab2769b242c110aec83a22db6fc0d26cf9f29966b80e26896e555c8f69bfe98b14b65b2d924b4cdd867b9eb824cf35406bbab86bfeb89924e0f1834f93c327c74c3c6478546030fc2e79789cfebb6e277fa6fd6e14179d23a3ea97f827eb26b5e01218531450d71e3f7b43f5fb84ef36a2549abce4fbd6c1dc8d7f0ec7e3f8dd5986c910aafdba7138b86d719f4d8e19f9488fee8ad13a43b58402b66c5c38e0b62e06fb0e5fb7e167bc523f826ea585e4e969ab1d229b0dd27c68b8c5695729519eebfa566831058314fbb1cfd5fd4ad68bcd1792dd9ebbf738ed7e925f369fb9179c3408854f0bf244bece966565743f76ffac6ed2a49764a50956b8373fe6d6dea46761aa2d471cc2a52672c06bbddcdc723e41143d90ad5f459d6a1fc632a4bfa44fe28508fdf6d25c5f272f131328dffcd1b94211b101951074949f9dbfc9d9529f434575d136d33a25dee8be02d737c3da92100f21d94d53c66de204de73f5a615a9592a86249234767d7d361b050ce0fbe3654118385d62fcfce8e4adcf8533e705a7711ad3801ba1614e26cb12df12a57362d0f5865d6a4bc9c2f7a3d76c3ee0527e12f083e7416d889a2d9b39b8ceafc2c550ba1df10bfd7ed352bdf670e21f4b0aec811f87f28cd097392ea4a3d4b3c8d9f0145b034c2508f74756cd175e7546e3653881891dea7698c9c781d56e8babd91713902cb50069cabc2d4d3be03c1a90a641f45fdcf6ab70a13781253f1d370a38c54f3350bf7c88ef9502df6464844f694f34fad8bb6860e7db2db2de2e38114c97809970914cf1cc615e99df1cf0bba77510163efb5990bad89d5ee8b13ed3320372833a4ce6584b6a2940e9069ca2bed85bfb28c2863f4ffed00c5b5e23cfe398db80229e3566094bd1613a72463043c794d61586cb3129506787f1329f9ecb520b57d0af648915720876576606a35fff6ffefa680738e97749d5da52f8efa2b5da1adf6958af4f0dad510ce2ff9ae48f3660e707826e09f412902dc61a21cbc80e9f96b970c87492b46eb47eb0834b29ccc975eb739610409f5c06e94780271bbc833f8a46ae7980f587d17dea63ba7fcfe26b386e0f50a016b6e7fd5eb69e79be5d18a260029af3d66d1f9686680fbbd94ae51f9579d2c620cff6f742230a608722796b1a9fffa1f3c9e6e6b4881c3edb3e6807f6b2650bd85e454eee95520b1a196df632987790b742c6495b6b1b4fc618a9ad0c511627479b7e2b1ada326b37a19893e14d71f3bd745c3ee32ccdd96a37df4ace4979312ace32f3b557e1445da44baa2669f1f22aba27347814700126467dae97238becaacb51e97616c5384cc2c4674a0c165d6cefea84ac2276c6480f905ce78fcb551a8d4cf04841b21cec985de3ef671bd87a4677326d8c3c9f492a40f80896948672c71427e18179d28736153ead6b3ae8addd3d58675970aa02fdf1c8257449b239c33694433b1ed870dbe0e90bc0cd4611f8d532084a38be00b0e9e83999313e97aa20e870777d6bbf2670ee17dcd09fde7f453ddaa75c8beaa50cef04e4668077625592bfcb9cac6b913ed1d2b2dfb247b89a60de94d7476bf7101867d4d0f8b6f75ffd5493316a8317d82535fce71806ab00037a84296766105c01f3c9299ea59ba3954f30c44e73dbc82c3b9aaad8cb0aea23ae5cccf25a9b9fa43ae1428f51126b6508aa18e38461926307e38db52d94d2ed8b35ee213374844ba69a0ae76ac74e0e548fba51466aaec6c2f0da9db7540092208b0846f3021f281518b7835f6b7817d139df48f719d9a5811e099cfdc92e1acb4080e8d0819f1c7697e284be88303548090f4bc5e16649787582f70445a6362e28ca543857e2625815b5dfd73ebff054d313465d966a5ab1ae2ce5ad4b29d16bbba04a353412e385281c6ffce4688cbd02c3180f2a30539e7d645c0848e03ff57a4a6c8fd6caade12252f6692eb5f9167d0e95a4839a701b01c8a665d68de666644f0bb468376d9f07c207e8fda2422685e5b189e07b77a1f36a1c688c82571e6c6f9f8cdbe3bedfa1a682371158d8b80068e70bc792d23cb171f9d1175cc7d023f9dffb2e0e9fb51d0ad451acbfedc7bea125c2cc086698188dc85bc706323b2269258926b47c0f3c22056bea48b5ea02cf65eb3ead4591070be23d869ff12b423a058f74c871c80d0bb3684eb3a5309178cdaa95e8ea298df54e73a80cdc57becf575a563e4dd843cb9c845135ee77e145b7ec953bd2ca74ed2f254f712d7c90735c719e8f73f045349eadc1730a52e48d27804a72c04fbf11ca4d3a3ccfe62eacc51600f355c7e8309d203fdd237b1452bb476fc0d66eae6964ef3e61bd434e3b0e468e6bd30a4c405f5186bffe5de3d00e3125564e4a6fa7a0862d3a7dea8210cf5796cf7f5b0773e27fbd1e4223bb19da31cbadb571bf54ee3ad171376d9048d3de1ce0faa70caa28f13115b05b028d7cf6d454449b9c35118051af3a71f12507361fcefb2fc1b63364ff5d5663ff70dd005252f017ba14ee0f560ef611b6f42a008ae2e826d4965df4a9eca89b4426bf6722d8cf5556c338473a3c3fda1fb2ac422ee18f8434745f16c2b7606c121015c2091d013eb3e182f184e355797f2838ba0cbe50ea82f74c9b9d6643665bd96a764b441091fae23268dbdc3f4ad3cd5ea82067e9583143cf527d6f84d8f57972a77d4a6bcb49df35e2c6750c4b45688b132ad218eb238d40a3af2eb691579598a5b1e81c823632edab7a572bb9fd2e05424409db7767dea485efb9f87fad9b20f987e96efdc0637c2a5ffd14bc6e28a8b1fc798ed8c4b5bd1df0cb88b47b25ed56788cfbfb6fb310fe7f177c15aa0d42e52d41f34c5ea41d0e2394d6bf56a2afe8b1966fee9ade1fbfe6567bc2d39ffdb9e4113291be3d4bff672fc7f7799d00f2935d1f9a98ce67755070bccb952321ed75c18dec602b15e4072704fe7b4474794a9479a712fcd0271df5f283d5379a3b77862c3d61b84d6d3939ce5849e5137768515057f66434d33a8f9285a06168df3fbd0c1e9cae4a811c810cd0c3a077f4910b90764d80b7785e5ac743a84dd4c8e5cb23af96e6648617b4edee91fd55214ffc9c8cd853b28f14dcab4705b406373424d962b6d5dfaf1e85aa104725af4fb504589b88312bdec1be9f262c73b220ecddb1562e5d84bb088378280e2a6f1871d2e73d4128a5fc7eae0fd6ef8a6b7cc24c96473ccf0497bd7d7560e5b83f683c7c8b62f3ff2b4a49a07f59d025f945b731f277627c5edcdd287a37dcaed0c9669a82f1e5ac781d709e9c573f4d7c1cd28d042b45c0bf988a01cbbf59121af541b95d2a2271ac66934299f524837b944845c43b5e4561cf847358f2f3b238ec8e679de7524fc7a37b2f4b844c73e69e5a507824ee5358ddbfe32bd6ab5fc88ab80e1263e2d4f585bd5b5b2b826fe2a6d5218fc4ebad977a2fbfc6da53bd10dde5e60ad69019d7e86a6d2d6d16cab861dfa0e71e8325ee50f558420620702a527b45b5d344e93dbb8b5dd07ddda6cdcfb69e5c8adf5783a94e4697959f9e1a2f6b58a8fa3663404a3114cfbe90993e9aeb89be0bca82cb542a3440666b88301c65dececd7a2a7a7feee937738eeafb837118f4f24098841a0441202df4f11f802e262eb3dbdea7bedaf2e5e95f855fcc42f57246a7a3c968e8f853177c2da3f5a9ce8973df56bf3faf061675cd9cf848373406bbce3f80cffb6a02ef98d36c2c2bb7345f1a7d04472600352b91f06c1dfdc0f85b249e4e2fd34227c5224d6679fb79ea11f255c8a94e7caec0facd4d3e4b46fb728ff7b9fdacc259d770f7e92d3b4fc8a1c1bcd5b46f22429c12eef9876312246b8edd86112238c676522a4120b330f7dd82b8f929df87dee3688850690f886451828e6a593c982d941e549a5fda4715aa0a96d0e203168a3fe37467fffb8e073ee19ae958fe1e0360bce5bb8d968816975f7d12e031d67b451a72c064413e4085a259d9980598f97f983d39b088c9b47c246c7746d9a4674ca0a7120b5edf7c5c105f9aaf41521af313cf9dd0", 0x1000, 0x3ff}, {&(0x7f00000003c0)="17f7cf43a2e8a965413f16c542e3ed7dbd2566fb2e0c0435c4c396f9baf98aca707bc3d3159218235d1d2f96db785ae270a13711da62b9d2b780b1de089cbcbfce6f9967139f6939", 0x48, 0x3}, {&(0x7f0000003280)="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", 0x1000, 0x100}], 0x2000, &(0x7f00000004c0)='proc\x00')
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

[  778.749849] input: syz1 as /devices/virtual/input/input4281
10:46:16 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x7}, 'syz1\x00'})

10:46:16 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0xffffff9e, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:16 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0xfffffff0}}}}, 0xf8}}, 0x0)

10:46:16 executing program 7:
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
listen(r0, 0x2)

[  778.873977] input: syz1 as /devices/virtual/input/input4282
[  778.915723] input: syz1 as /devices/virtual/input/input4283
10:46:16 executing program 6:
r0 = socket$inet(0x2, 0x0, 0x0)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000280), 0x4)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0), 0xffffff16)
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

10:46:16 executing program 1:
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
mmap(&(0x7f0000482000/0x3000)=nil, 0x3000, 0x82000002, 0x31, 0xffffffffffffffff, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)
openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x101000, 0x0)

10:46:16 executing program 4:
r0 = socket$inet(0x2, 0x0, 0x0)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000280), 0x4)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4)
r1 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x2, 0x200)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00')
sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xbc, r2, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x54, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x2f}}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x9}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x25}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2d}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x9}}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}]}, 0xbc}, 0x1, 0x0, 0x0, 0x20008000}, 0x800)
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000004280)=""/4096)

10:46:16 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0xffffff7f, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

[  779.006230] input: syz1 as /devices/virtual/input/input4284
10:46:16 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0xf0ffffffffffff}}}}, 0xf8}}, 0x0)

10:46:16 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xc300}, 'syz1\x00'})

10:46:16 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x8f5}, 'syz1\x00'})

10:46:16 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x2ff, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:16 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0xff020000}}}}, 0xf8}}, 0x0)

[  779.228086] input: syz1 as /devices/virtual/input/input4285
10:46:16 executing program 1:
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
mmap(&(0x7f0000482000/0x3000)=nil, 0x3000, 0x82000002, 0x31, 0xffffffffffffffff, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

[  779.316754] input: syz1 as /devices/virtual/input/input4287
[  779.329829] input: syz1 as /devices/virtual/input/input4286
10:46:16 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0xa}}}}, 0xf8}}, 0x0)

10:46:16 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1000000000000000}, 'syz1\x00'})

[  779.376649] input: syz1 as /devices/virtual/input/input4288
10:46:16 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0xf0ffffffffffff, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:16 executing program 6:
r0 = socket$inet(0x2, 0x0, 0x0)
r1 = msgget$private(0x0, 0x411)
r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x400001, 0x0)
openat$cgroup_procs(r2, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0)
msgctl$MSG_STAT(r1, 0xb, &(0x7f0000000140)=""/193)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000280), 0x4)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4)
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @rand_addr}, 0x10)
fremovexattr(r0, &(0x7f0000000100)=@known='com.apple.system.Security\x00')
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

10:46:16 executing program 1:
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
mmap(&(0x7f0000482000/0x3000)=nil, 0x3000, 0x82000002, 0x31, 0xffffffffffffffff, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

[  779.526184] input: syz1 as /devices/virtual/input/input4289
10:46:16 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xfe44}, 'syz1\x00'})

10:46:17 executing program 7:
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)
r0 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x6, 0x4000)
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000100)={'bond0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}})

10:46:17 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0xf00000000000000}}}}, 0xf8}}, 0x0)

[  779.587607] input: syz1 as /devices/virtual/input/input4290
[  779.678021] input: syz1 as /devices/virtual/input/input4291
[  779.766591] input: syz1 as /devices/virtual/input/input4292
10:46:17 executing program 4:
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
mmap(&(0x7f0000482000/0x3000)=nil, 0x3000, 0x82000002, 0x31, 0xffffffffffffffff, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)
openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x101000, 0x0)

10:46:17 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x300000000000000, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:17 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xe8c2000000000000}, 'syz1\x00'})

10:46:17 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x200000000000000}}}}, 0xf8}}, 0x0)

10:46:17 executing program 1:
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
mmap(&(0x7f0000482000/0x3000)=nil, 0x3000, 0x82000002, 0x31, 0xffffffffffffffff, 0xffffffffffffffff)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

10:46:17 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1000000000000000}, 'syz1\x00'})

10:46:17 executing program 7:
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0x0, 0x2, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

[  779.942748] input: syz1 as /devices/virtual/input/input4293
10:46:17 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x200b000000000000, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:17 executing program 1:
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
mmap(&(0x7f0000482000/0x3000)=nil, 0x3000, 0x82000002, 0x31, 0xffffffffffffffff, 0xffffffffffffffff)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

10:46:17 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0xfffff000}}}}, 0xf8}}, 0x0)

[  779.987351] input: syz1 as /devices/virtual/input/input4294
[  780.024622] input: syz1 as /devices/virtual/input/input4295
10:46:17 executing program 4:
r0 = socket$inet(0x2, 0x0, 0x0)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000280), 0x4)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4)
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @rand_addr}, 0x10)
r1 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x180)
ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000100))
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

[  780.100721] input: syz1 as /devices/virtual/input/input4296
10:46:17 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x4bfe000000000000}, 'syz1\x00'})

10:46:17 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0xf00, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:17 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0xf000000}}}}, 0xf8}}, 0x0)

10:46:17 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xf508}, 'syz1\x00'})

10:46:17 executing program 1:
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
mmap(&(0x7f0000482000/0x3000)=nil, 0x3000, 0x82000002, 0x31, 0xffffffffffffffff, 0xffffffffffffffff)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

10:46:17 executing program 6:
r0 = socket$inet(0x2, 0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000280), 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'\x00', <r1=>0x0})
setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000001c0)={r1, @broadcast, @multicast2}, 0xc)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4)
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

10:46:17 executing program 7:
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300)='/dev/zero\x00', 0x10000, 0x0)
sendto$inet(r0, &(0x7f0000000100)="abc953377f2935bd7d69c41046d6f5195a861a8dc67f076eb7b4d22c66750b313a9669f05a7506f2cc888155b0b05ea0090f085b37a76295f8ac360b77f72d2a95c86ca298e632e398f77403a5df41d30752c42e5235313699112dc2818cb6f58a321294200a1b3d3b5e72dbd8db7f8ac4d211075da6397d1fb0e26c8e4456fd4b23f8bebe5de8fa1be902b9fa36b24065c2fdb0d43a3e461fb0411257c56b2b89b1ecaaa7f9721de132f23318595670b286dd952a5025119daa3d63227e804119cf8d6001cc43612f865afc62b33c6296a7", 0xd2, 0x800, &(0x7f0000000200)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000240), 0x4)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000280)=""/47, 0x2f}], 0x1, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

[  780.378089] input: syz1 as /devices/virtual/input/input4297
[  780.384309] input: syz1 as /devices/virtual/input/input4298
10:46:17 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0xa, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

[  780.468055] input: syz1 as /devices/virtual/input/input4299
[  780.476842] input: syz1 as /devices/virtual/input/input4300
10:46:17 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0xf000}}}}, 0xf8}}, 0x0)

10:46:17 executing program 1:
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

10:46:18 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xc301}, 'syz1\x00'})

10:46:18 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x4bfe}, 'syz1\x00'})

10:46:18 executing program 1:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

10:46:18 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0xfffff000, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:18 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0xf0}}}}, 0xf8}}, 0x0)

[  780.711095] input: syz1 as /devices/virtual/input/input4301
[  780.743304] input: syz1 as /devices/virtual/input/input4302
[  780.787109] input: syz1 as /devices/virtual/input/input4303
10:46:18 executing program 4:
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
r0 = accept(0xffffffffffffffff, &(0x7f00000004c0)=@l2, &(0x7f0000000540)=0x80)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0)='IPVS\x00')
sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8800005}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x48, r1, 0x0, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x59}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x8000}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1f}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x21}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8080}, 0x0)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1000000000000000, 0x0, 0x0, 0x8000000000, 0x0, 0x0, 0x0, 0x0, 0x87f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20, 0x80000000000007fc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
openat$urandom(0xffffffffffffff9c, &(0x7f0000000140)='/dev/urandom\x00', 0x103841, 0x0)
r3 = fcntl$dupfd(r2, 0x406, r0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {{0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x70, 0x28, &(0x7f0000000180)=[@fda={0x66646185, 0x2, 0x1, 0xf}, @ptr={0x70742a85, 0x1, &(0x7f00000000c0), 0x1, 0x3, 0x1c}, @ptr={0x70742a85, 0x1, &(0x7f0000000100), 0x1, 0x0, 0x21}], &(0x7f0000000200)=[0x38, 0x78, 0x0, 0x30, 0x48]}, 0x9}}], 0xc6, 0x0, &(0x7f00000002c0)="c9d26cabcf55051acb75bb3d1eeeaf395a2130a8dc1bc3233be90ec9bdedab8d64a6867847ee044abc0a984f5b7304418bc100b465c2554a87bad32977421a1405f7c468e27d9a9fc6251d01a50c9420bd71e8dde2d7cf9cb8c33d319985dfcaf8c88a8c30791abd37c01f3b668746ac8525bee652fa67cff1ca22a2b8880a8eac0eb80d10474545e99ed259dc9e6af557d86c0d2fa2d12d680b31b14d46f1175c1045380b9ba1811ac7c39d12c281fd4763087b270d5724cc14ec9e66a8b2dffd755c4d084d"})
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

10:46:18 executing program 1:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

10:46:18 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x9effffff, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

[  780.849621] input: syz1 as /devices/virtual/input/input4304
10:46:18 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x74fe}, 'syz1\x00'})

10:46:18 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0xf00}}}}, 0xf8}}, 0x0)

10:46:18 executing program 1:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

[  781.053755] input: syz1 as /devices/virtual/input/input4305
10:46:18 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x100000000000000}, 'syz1\x00'})

10:46:18 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0xfffffff0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:18 executing program 7:
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
link(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00')
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

10:46:18 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0xfffff000}}}}, 0xf8}}, 0x0)

10:46:18 executing program 6:
r0 = socket$inet(0x2, 0x0, 0x0)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000280), 0x4)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4)
setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000007c0)=ANY=[@ANYBLOB="66696c746572000000000000000000000000000000000000000000000000000007000000040000008004000000000000180100005802000098030000980300009803000004000000193ce55f4b81f4fc8d577bcaa20d77fb6df759377a72cb9b95b041", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="ac1414aa00002d9b00000000ffffff00000000000000000000000000000000000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000ff00ffffffff0000000000000000000000c80007000a03ff0007004a65716c0000000000000000000000000073797a6b616c6c65723000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000f0001801000000000000000000000000000000000000000000000000000028004e4651554555450000000000000000000000000000000000000000000000040000000000000000000080e0000001ffffff00ffffffffaaaaaaaaaaaa000000000000000000000000000000000000ffffffffffff00000000000000000000ffffffffffff000000000000000000000000000000000000ff00000000ff00000000000000000000000902000200000186480100626f6e645f736c6176655f310000000076657468305f746f5f6272696467650000000000000000000000ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000540000000000000000000000f0004001000000000000000000000000000000000000000000000000000050006d616e676c65000000000000000000000000000000000000000000000000aaaaaaaaaaaa0000000000000000000000000000000000000000000000000000e0000001000000000f000000ffffffffe0000002e0000001ffffffff00000000adaf278a0ef0000000000000000000000000000000000000ff0000ffffff0000000000000000000001e71029f58e000000000000000000000000000000000000ff0000ff0000000000000000000000000001000300190101fcdc000173797a5f74756e0000000000000000006272696467653000000000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000f0004001000000000000000000000000000000000000000000000000000050006d616e676c650000000000000000000000000000000000000000000000000180c200000e00000000000000000000000000000000000000000000000000007f0000017f00000104000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x4d0)
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x35, 0xffffffffffffffff, 0xaf1f)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000003280)=""/4096)

[  781.189763] input: syz1 as /devices/virtual/input/input4306
[  781.227411] input: syz1 as /devices/virtual/input/input4308
10:46:18 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x4000000000000000}, 'syz1\x00'})

10:46:18 executing program 1:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

10:46:18 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x112a4e46af000000, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:18 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x6c}, 'syz1\x00'})

10:46:18 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0xffffff7f}}}}, 0xf8}}, 0x0)

[  781.425535] input: syz1 as /devices/virtual/input/input4310
10:46:18 executing program 4:
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
r0 = accept(0xffffffffffffffff, &(0x7f00000004c0)=@l2, &(0x7f0000000540)=0x80)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0)='IPVS\x00')
sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8800005}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x48, r1, 0x0, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x59}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x8000}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1f}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x21}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8080}, 0x0)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1000000000000000, 0x0, 0x0, 0x8000000000, 0x0, 0x0, 0x0, 0x0, 0x87f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20, 0x80000000000007fc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
openat$urandom(0xffffffffffffff9c, &(0x7f0000000140)='/dev/urandom\x00', 0x103841, 0x0)
r3 = fcntl$dupfd(r2, 0x406, r0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x4c, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {{0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x70, 0x28, &(0x7f0000000180)=[@fda={0x66646185, 0x2, 0x1, 0xf}, @ptr={0x70742a85, 0x1, &(0x7f00000000c0), 0x1, 0x3, 0x1c}, @ptr={0x70742a85, 0x1, &(0x7f0000000100), 0x1, 0x0, 0x21}], &(0x7f0000000200)=[0x38, 0x78, 0x0, 0x30, 0x48]}, 0x9}}], 0xc6, 0x0, &(0x7f00000002c0)="c9d26cabcf55051acb75bb3d1eeeaf395a2130a8dc1bc3233be90ec9bdedab8d64a6867847ee044abc0a984f5b7304418bc100b465c2554a87bad32977421a1405f7c468e27d9a9fc6251d01a50c9420bd71e8dde2d7cf9cb8c33d319985dfcaf8c88a8c30791abd37c01f3b668746ac8525bee652fa67cff1ca22a2b8880a8eac0eb80d10474545e99ed259dc9e6af557d86c0d2fa2d12d680b31b14d46f1175c1045380b9ba1811ac7c39d12c281fd4763087b270d5724cc14ec9e66a8b2dffd755c4d084d"})
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

10:46:18 executing program 1:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

10:46:18 executing program 6:
r0 = socket$inet(0x2, 0x0, 0x0)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000280), 0x4)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4)
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @rand_addr}, 0x10)
pipe2(&(0x7f00000000c0)={<r1=>0xffffffffffffffff}, 0x80000)
ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000100)=""/13)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

[  781.472356] input: syz1 as /devices/virtual/input/input4312
[  781.504842] input: syz1 as /devices/virtual/input/input4311
10:46:18 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x1000000, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:19 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0xa000000}}}}, 0xf8}}, 0x0)

[  781.588297] input: syz1 as /devices/virtual/input/input4313
10:46:19 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x2}, 'syz1\x00'})

10:46:19 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x500000000000000}, 'syz1\x00'})

10:46:19 executing program 1:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

10:46:19 executing program 7:
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = dup2(r0, r0)
ioctl$TIOCSBRK(r1, 0x5427)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0)={<r2=>0x0}, &(0x7f0000000100)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000140)={0x2, r2})

10:46:19 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x3000000}}}}, 0xf8}}, 0x0)

10:46:19 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x3000000, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

[  781.826533] input: syz1 as /devices/virtual/input/input4314
[  781.843461] input: syz1 as /devices/virtual/input/input4315
10:46:19 executing program 1:
perf_event_open(&(0x7f0000000040)={0x1, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

[  781.915321] input: syz1 as /devices/virtual/input/input4316
10:46:19 executing program 6:
r0 = socket$inet(0x2, 0x1, 0xfffffffffffffffa)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000280), 0x4)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4)
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

10:46:19 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x2, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

[  781.956316] input: syz1 as /devices/virtual/input/input4317
10:46:19 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0xa00000000000000}}}}, 0xf8}}, 0x0)

10:46:19 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xf508000000000000}, 'syz1\x00'})

10:46:19 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000600)='keyring\x00', &(0x7f0000000640), 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080), 0x0, 0x0, r0)
r2 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000480), 0x0, 0x0, r1)
r3 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, r1)
r4 = add_key$user(&(0x7f0000000400)='user\x00', &(0x7f0000000180), &(0x7f0000000680)="009b43d57da49b7514ff944e", 0xc, r3)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000340), 0x12)
r5 = add_key$user(&(0x7f0000002cc0)='user\x00', &(0x7f00000000c0), &(0x7f0000000280), 0x10c, r2)
keyctl$dh_compute(0x17, &(0x7f0000000240)={r4, r5, r4}, &(0x7f0000000280)=""/132, 0x174, 0x0)

10:46:19 executing program 1:
perf_event_open(&(0x7f0000000040)={0x1, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

10:46:19 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0xc88d642b4e000000}}}}, 0xf8}}, 0x0)

10:46:19 executing program 7:
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
r0 = accept(0xffffffffffffffff, &(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @remote}}, &(0x7f0000000140)=0x80)
getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000180)={'broute\x00'}, &(0x7f0000000200)=0x78)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

10:46:19 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xfe4a}, 'syz1\x00'})

10:46:19 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x3, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

[  782.265549] input: syz1 as /devices/virtual/input/input4318
[  782.321292] input: syz1 as /devices/virtual/input/input4319
10:46:19 executing program 1:
perf_event_open(&(0x7f0000000040)={0x1, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

[  782.370485] input: syz1 as /devices/virtual/input/input4320
10:46:19 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0xde01000000000000}}}}, 0xf8}}, 0x0)

10:46:19 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xfac2000000000000}, 'syz1\x00'})

10:46:19 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x9effffff00000000, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

[  782.440847] input: syz1 as /devices/virtual/input/input4321
10:46:19 executing program 4:

10:46:20 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x30fe0000}, 'syz1\x00'})

10:46:20 executing program 6:
r0 = socket$inet(0x2, 0x0, 0x0)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000280), 0x4)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4)
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = open(&(0x7f00000000c0)='./file0\x00', 0x200003, 0x100)
setsockopt$inet6_buf(r1, 0x29, 0x3b, &(0x7f0000000100)="ef1bce040c91552e8746c231cc5bef1b22b95455c93b1dd5472e5e517b003e708912bd4a066fe8008cd9dbd0960d4fdad12dd64866537779a0050fa945144f7ae5266c936044a73c82a0d70f5aebaa35cae4a37959cd7a33de6ab304bfd9a1d040ffc35ff859b563c8f49eae73005afc7b91f0ad3ad74388350c2228cd561f5ba28d33fc1d33c562fa16e7c830c2314afc98d7ab4f4166bd5f08ca85878836b98357a849219ad4f9399497929ede27347b45d9cd2ba5e63e175375ab487f5c6923d972d16094004c67424f4be51d608e9cb6f5f44edae89427aac37a5fc373381f00766e4d056656", 0xe8)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

10:46:20 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x200000000000000, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:20 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x9effffff00000000}}}}, 0xf8}}, 0x0)

[  782.632975] input: syz1 as /devices/virtual/input/input4322
10:46:20 executing program 1:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

10:46:20 executing program 4:

[  782.676008] input: syz1 as /devices/virtual/input/input4323
10:46:20 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xfec20000}, 'syz1\x00'})

10:46:20 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0xf0ffffff, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

[  782.799602] input: syz1 as /devices/virtual/input/input4324
10:46:20 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0xf000000}}}}, 0xf8}}, 0x0)

10:46:20 executing program 4:

10:46:20 executing program 1:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

[  782.892621] input: syz1 as /devices/virtual/input/input4325
[  782.973861] input: syz1 as /devices/virtual/input/input4326
10:46:20 executing program 7:
pipe(&(0x7f0000000280)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000180)={'syz_tun\x00', {0x2, 0x4e23, @rand_addr=0x4}})
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0x0, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0xfffffffffffffe54)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
mknodat(r0, &(0x7f0000000200)='./file0\x00', 0xc001, 0x4)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003bd000/0x2000)=nil, 0x2000, &(0x7f0000001280)=""/4096)
futex(&(0x7f00000000c0), 0xec648e1fec52954f, 0x1, &(0x7f0000000100)={0x0, 0x989680}, &(0x7f0000000140)=0x1, 0x2)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)

10:46:20 executing program 6:
r0 = socket$inet(0x2, 0x0, 0x0)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000280), 0x4)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4)
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x12000, 0x0)
ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000100)={&(0x7f0000e5f000/0x4000)=nil, 0x4000})

10:46:20 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x2000000, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:20 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000001, 0x0)
ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070")
r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x1, 0x1100082)
r2 = memfd_create(&(0x7f0000000140)="c8a8707470", 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)="16", 0x1}], 0x1, 0x1081806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
read(r1, &(0x7f0000000000)=""/5, 0x5)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
getpid()
fcntl$setflags(r2, 0x2, 0x0)
sendfile(r1, r1, &(0x7f0000000100)=0x3f00, 0xffffffff)
ioctl$LOOP_CLR_FD(r1, 0x4c01)

10:46:20 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x31fe}, 'syz1\x00'})

10:46:20 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0xa00}}}}, 0xf8}}, 0x0)

[  783.109316] input: syz1 as /devices/virtual/input/input4327
10:46:20 executing program 1:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

10:46:20 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xf8c2}, 'syz1\x00'})

10:46:20 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0xa00, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

[  783.244122] input: syz1 as /devices/virtual/input/input4328
[  783.269117] print_req_error: I/O error, dev loop1, sector 168
[  783.275206] print_req_error: I/O error, dev loop1, sector 1192
10:46:20 executing program 7:
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
restart_syscall()
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

10:46:20 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0xf0ffffff}}}}, 0xf8}}, 0x0)

[  783.314211] input: syz1 as /devices/virtual/input/input4329
10:46:20 executing program 1:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000840)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000700)=@acquire={0x128, 0x17, 0x1, 0x0, 0x0, {{@in=@loopback}, @in6=@local, {@in=@multicast1, @in6}, {{@in=@broadcast, @in6=@local}}}}, 0x128}, 0x8}, 0x0)

[  783.427272] input: syz1 as /devices/virtual/input/input4330
10:46:20 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x400300}}}}, 0xf8}}, 0x0)

[  783.485326] input: syz1 as /devices/virtual/input/input4331
10:46:20 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xa00000000000000}, 'syz1\x00'})

10:46:20 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0xaf464e2a11, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:20 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000001, 0x0)
ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070")
r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x1, 0x1100082)
r2 = memfd_create(&(0x7f0000000140)="c8a8707470", 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)="16", 0x1}], 0x1, 0x1081806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
read(r1, &(0x7f0000000000)=""/5, 0x5)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
getpid()
fcntl$setflags(r2, 0x2, 0x0)
sendfile(r1, r1, &(0x7f0000000100)=0x3f00, 0xffffffff)
ioctl$LOOP_CLR_FD(r1, 0x4c01)

10:46:20 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x8f5}, 'syz1\x00'})

10:46:20 executing program 6:
r0 = socket$inet(0x2, 0x0, 0x0)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000280), 0x4)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4)
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000001, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

[  783.602505] input: syz1 as /devices/virtual/input/input4332
[  783.681508] input: syz1 as /devices/virtual/input/input4333
10:46:21 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0xf0}}}}, 0xf8}}, 0x0)

10:46:21 executing program 1:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r1, 0xfffffffffffffe14)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x14)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r2, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
socketpair$packet(0x11, 0x0, 0x300, &(0x7f0000000140)={<r3=>0xffffffffffffffff})
r4 = dup2(0xffffffffffffffff, r0)
ioctl$SNDRV_SEQ_IOCTL_PVERSION(r4, 0x80045300, &(0x7f0000000040))
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000002c0), 0x4)
r5 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x1, 0x837b91954f8c7c56)
ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000340)={r3, 0xffffffffffffffff, 0x6, 0x10001, &(0x7f0000000300)="359217aeb9f28b303f499d03a7c7ba5100872d246a07824d1e", 0x8c, 0x0, 0xffff, 0x0, 0x8, 0x1, 0xfffe000000000, "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"})
r6 = accept(r2, &(0x7f00000000c0)=@nl, &(0x7f0000000240)=0x80)
ioctl$sock_inet_sctp_SIOCINQ(r6, 0x541b, &(0x7f0000000280))

10:46:21 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0xfffffffffffff000, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

[  783.748425] input: syz1 as /devices/virtual/input/input4334
[  783.780006] print_req_error: I/O error, dev loop1, sector 168
[  783.786064] Buffer I/O error on dev loop1, logical block 21, lost async page write
10:46:21 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x77fe000000000000}, 'syz1\x00'})

[  783.864675] input: syz1 as /devices/virtual/input/input4335
10:46:21 executing program 7:
remap_file_pages(&(0x7f0000e1f000/0x3000)=nil, 0x3000, 0x2000000, 0x2, 0x80040)
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

[  783.945604] input: syz1 as /devices/virtual/input/input4336
10:46:21 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0xf000000, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:21 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0xf00}}}}, 0xf8}}, 0x0)

10:46:21 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000001, 0x0)
ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070")
r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x1, 0x1100082)
r2 = memfd_create(&(0x7f0000000140)="c8a8707470", 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)="16", 0x1}], 0x1, 0x1081806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
read(r1, &(0x7f0000000000)=""/5, 0x5)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
getpid()
fcntl$setflags(r2, 0x2, 0x0)
sendfile(r1, r1, &(0x7f0000000100)=0x3f00, 0xffffffff)
ioctl$LOOP_CLR_FD(r1, 0x4c01)

10:46:21 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x7400}, 'syz1\x00'})

[  784.087337] input: syz1 as /devices/virtual/input/input4337
10:46:21 executing program 6:
r0 = socket$inet(0x2, 0x0, 0x0)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000280), 0x4)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x101000, 0x0)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x7}, 0x4)
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f00000000c0)=""/65, &(0x7f0000000140)=0x41)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

[  784.213544] input: syz1 as /devices/virtual/input/input4338
10:46:21 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x400300, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:21 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f00000000000000}, 'syz1\x00'})

[  784.366447] input: syz1 as /devices/virtual/input/input4339
10:46:21 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x4e2b648dc8}}}}, 0xf8}}, 0x0)

10:46:21 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x4800}, 'syz1\x00'})

[  784.488273] input: syz1 as /devices/virtual/input/input4340
10:46:21 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x34000, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:22 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x34000}}}}, 0xf8}}, 0x0)

[  784.566531] input: syz1 as /devices/virtual/input/input4341
10:46:22 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x3bfe}, 'syz1\x00'})

[  784.626731] input: syz1 as /devices/virtual/input/input4342
[  784.691282] input: syz1 as /devices/virtual/input/input4343
[  784.776713] input: syz1 as /devices/virtual/input/input4344
[  784.856750] input: syz1 as /devices/virtual/input/input4345
10:46:22 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x4000000000000}, 'syz1\x00'})

10:46:22 executing program 7:
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
write$binfmt_elf32(r0, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0x8001, 0x7, 0x6, 0x0, 0x3, 0x3e, 0x3, 0x69, 0x38, 0x37e, 0x2, 0xffffffff, 0x20, 0x2, 0x40, 0x0, 0x100000000}, [{0x5, 0x80, 0xf65, 0x3, 0xffffffff, 0x8001, 0x7, 0x3}, {0x70000000, 0x7, 0x9, 0x0, 0x0, 0x4, 0x6, 0x9}], "cdf4bd9e348c72cea826ef5b1149048da6a4326d89551ad5b6bd1404e4d5437b9e0a1a8dd0cd3ad848d402e2a9c63d792ff6cf7c5a32df2c8a67d845feb4eb87087ed19167d5efbd754d9bba17568889c14e5acbaf85ac217e6c721849e7bac54f117a7eb1611d2bdc7c69ef684cc27c6d9cdd96bd5e6ca8fc45d23135a4b216473cbc186abf2cfa374a9aa575cd020a732cd74ea9d426fedd8f37d84080481cf243ce332a", [[], [], [], [], [], [], [], [], [], []]}, 0xb1d)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

10:46:22 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0xf, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:22 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x3}}}}, 0xf8}}, 0x0)

10:46:22 executing program 6:
setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000280), 0x4)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4)
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @rand_addr}, 0x10)
ioctl$RTC_RD_TIME(0xffffffffffffffff, 0x80247009, &(0x7f00000000c0))
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x610, 0x1d8, 0x1d8, 0x4b0, 0x0, 0x1d8, 0x578, 0x578, 0x578, 0x578, 0x578, 0x6, &(0x7f0000000100), {[{{@uncond, 0x0, 0xe8, 0x118, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x4}}, @inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xd}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x92, 0x4, @broadcast, 0x4e24}}}, {{@uncond, 0x0, 0x98, 0xc0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0x98, 0xc0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x13}}}, {{@uncond, 0x0, 0x1e8, 0x218, 0x0, {}, [@common=@inet=@hashlimit2={0x150, 'hashlimit\x00', 0x2, {'irlan0\x00', {0x0, 0x40, 0x0, 0x8, 0x6, 0x4, 0x3, 0x18, 0x8}}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3, 0x4, @multicast1, 0x4e24}}}, {{@uncond, 0x0, 0x98, 0xc8}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x401, 0x1, @local, 0x4e22}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x670)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

10:46:22 executing program 1:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r1, 0xfffffffffffffe14)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x14)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r2, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
socketpair$packet(0x11, 0x0, 0x300, &(0x7f0000000140)={<r3=>0xffffffffffffffff})
r4 = dup2(0xffffffffffffffff, r0)
ioctl$SNDRV_SEQ_IOCTL_PVERSION(r4, 0x80045300, &(0x7f0000000040))
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000002c0), 0x4)
r5 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x1, 0x837b91954f8c7c56)
ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000340)={r3, 0xffffffffffffffff, 0x6, 0x10001, &(0x7f0000000300)="359217aeb9f28b303f499d03a7c7ba5100872d246a07824d1e", 0x8c, 0x0, 0xffff, 0x0, 0x8, 0x1, 0xfffe000000000, "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"})
r6 = accept(r2, &(0x7f00000000c0)=@nl, &(0x7f0000000240)=0x80)
ioctl$sock_inet_sctp_SIOCINQ(r6, 0x541b, &(0x7f0000000280))

[  785.071088] input: syz1 as /devices/virtual/input/input4346
10:46:22 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000001, 0x0)
ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070")
r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x1, 0x1100082)
r2 = memfd_create(&(0x7f0000000140)="c8a8707470", 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)="16", 0x1}], 0x1, 0x1081806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
read(r1, &(0x7f0000000000)=""/5, 0x5)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
getpid()
fcntl$setflags(r2, 0x2, 0x0)
sendfile(r1, r1, &(0x7f0000000100)=0x3f00, 0xffffffff)
ioctl$LOOP_CLR_FD(r1, 0x4c01)

10:46:22 executing program 7:
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
r0 = syz_open_pts(0xffffffffffffff9c, 0x0)
ioctl$KDGKBENT(r0, 0x4b46, &(0x7f00000000c0)={0xff, 0x9, 0x4})
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

10:46:22 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x1000000}}}}, 0xf8}}, 0x0)

10:46:22 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x46fe}, 'syz1\x00'})

10:46:22 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0xf00000000000000, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

[  785.164191] input: syz1 as /devices/virtual/input/input4347
10:46:22 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xe5c20000}, 'syz1\x00'})

[  785.267287] input: syz1 as /devices/virtual/input/input4348
10:46:22 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0xffffff7f00000000, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:22 executing program 6:
r0 = socket$inet(0x2, 0x0, 0x0)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000280), 0x4)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4)
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x200, 0x0)
mmap$xdp(&(0x7f0000a5f000/0x4000)=nil, 0x4000, 0x1, 0x810, r1, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)
socket$inet_sctp(0x2, 0x5, 0x84)

10:46:22 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0xffffff9e}}}}, 0xf8}}, 0x0)

[  785.431842] input: syz1 as /devices/virtual/input/input4349
[  785.440635] input: syz1 as /devices/virtual/input/input4350
[  785.468481] print_req_error: I/O error, dev loop1, sector 400
[  785.474610] Buffer I/O error on dev loop1, logical block 50, lost async page write
[  785.501024] input: syz1 as /devices/virtual/input/input4351
10:46:23 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1408000000000000}, 'syz1\x00'})

[  785.799015] input: syz1 as /devices/virtual/input/input4352
[  785.824473] input: syz1 as /devices/virtual/input/input4353
10:46:23 executing program 1:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10)
r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000e40)='/dev/userio\x00', 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001300), &(0x7f0000001340)=0xc)
fcntl$getownex(r0, 0x10, &(0x7f0000001400))
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000001440))
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000014c0))
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000001500)=<r2=>0x0)
r3 = getpgrp(r2)
ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000010c0)={[], 0x3, 0x0, 0x0, 0xffff, 0x3ff})
ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000001140)={{0x2, 0x4e20, @rand_addr=0x20}, {0x1, @dev={[], 0xf}}, 0x0, {0x2, 0x4e23}, 'tunl0\x00'})
socketpair(0x9, 0x0, 0x3, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendto$inet(r0, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10)
madvise(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xf)
ioctl$sock_proto_private(0xffffffffffffffff, 0x89e0, &(0x7f0000000080)="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")
socket$inet_sctp(0x2, 0x5, 0x84)
ioprio_set$pid(0x2, r3, 0x8)
r5 = syz_open_dev$adsp(&(0x7f0000001040)='/dev/adsp#\x00', 0x79, 0x408100)
openat$cgroup_int(r5, &(0x7f00000012c0)='cpuset.cpus\x00', 0x2, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r4, 0xc0405519, &(0x7f0000001000)={0x9, 0x0, 0x400, 0x1, 'syz1\x00', 0x8000})
socket$inet6(0xa, 0x3, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000900)=0x6)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000000040)=ANY=[@ANYBLOB="1a27bc74f5a5d4"], &(0x7f0000001280)=0x1)
recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739ddb, 0x0, 0x0, 0xffffffffffffff39)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='gR'])
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040)

10:46:23 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x100000000000000}}}}, 0xf8}}, 0x0)

10:46:23 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0xa00000000000000, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:23 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1c30000}, 'syz1\x00'})

10:46:23 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000001, 0x0)
ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070")
r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x1, 0x1100082)
r2 = memfd_create(&(0x7f0000000140)="c8a8707470", 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)="16", 0x1}], 0x1, 0x1081806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
read(r1, &(0x7f0000000000)=""/5, 0x5)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
getpid()
fcntl$setflags(r2, 0x2, 0x0)
sendfile(r1, r1, &(0x7f0000000100)=0x3f00, 0xffffffff)

10:46:23 executing program 7:
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

10:46:23 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x76fe000000000000}, 'syz1\x00'})

10:46:23 executing program 6:
r0 = socket$inet(0x2, 0x0, 0x0)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000280), 0x4)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4)
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

10:46:23 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0xf000}}}}, 0xf8}}, 0x0)

[  785.988585] input: syz1 as /devices/virtual/input/input4354
[  786.021400] input: syz1 as /devices/virtual/input/input4355
[  786.062589] input: syz1 as /devices/virtual/input/input4356
10:46:23 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0xff02000000000000, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:23 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0xa}}}}, 0xf8}}, 0x0)

10:46:23 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xfdffffff00000000}, 'syz1\x00'})

10:46:23 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xc2e5}, 'syz1\x00'})

10:46:23 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0xff020000, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

[  786.374439] input: syz1 as /devices/virtual/input/input4358
[  786.398298] input: syz1 as /devices/virtual/input/input4359
10:46:23 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x2ff}}}}, 0xf8}}, 0x0)

[  786.456429] input: syz1 as /devices/virtual/input/input4361
[  786.487753] input: syz1 as /devices/virtual/input/input4360
10:46:23 executing program 7:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240)='/dev/rfkill\x00', 0x0, 0x0)
sendto$inet(r0, &(0x7f0000865000), 0x0, 0xfffffffffffffffe, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f00000000c0)={<r1=>0xffffffffffffff9c})
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000008, 0x30010, r1, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)
sendmsg$nl_route(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@ipv4_getnetconf={0x64, 0x52, 0x5, 0x70bd2a, 0x25dfdbfb, {}, [@NETCONFA_FORWARDING={0x8, 0x2, 0x84e}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x101}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x2}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x1}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x3000000}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x4}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x6}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x8000}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x627368e1}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x6}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008000}, 0xc5)

10:46:24 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000080)="0a4cc80700315f85715070")
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))
r1 = gettid()
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_ENABLE_CAP(r3, 0x4068aea3, &(0x7f0000000240)={0x79})
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000480), &(0x7f0000000580)}, 0x20)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
tkill(r1, 0x1000000000016)

10:46:24 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0xa000000, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:24 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x48}, 'syz1\x00'})

10:46:24 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x7bfe}, 'syz1\x00'})

10:46:24 executing program 6:
lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@known='system.posix_acl_default\x00', &(0x7f0000000140)='(%\x00', 0x3, 0x1)
r0 = socket$inet(0x2, 0x0, 0x0)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000280), 0x4)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4)
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @rand_addr}, 0x10)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x4, {{0x2, 0x4e22, @rand_addr=0xffffffff}}}, 0x88)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x200, 0x0)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0xcdd}, 0x1c)

10:46:24 executing program 7:
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
mmap(&(0x7f00003ea000/0x2000)=nil, 0x2000, 0x1000008, 0x31, 0xffffffffffffffff, 0x40)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

10:46:24 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x40030000000000}}}}, 0xf8}}, 0x0)

10:46:24 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000001, 0x0)
ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070")
r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x1, 0x1100082)
r2 = memfd_create(&(0x7f0000000140)="c8a8707470", 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)="16", 0x1}], 0x1, 0x1081806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
read(r1, &(0x7f0000000000)=""/5, 0x5)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
getpid()
sendfile(r1, r1, &(0x7f0000000100)=0x3f00, 0xffffffff)
ioctl$LOOP_CLR_FD(r1, 0x4c01)

[  786.999481] input: syz1 as /devices/virtual/input/input4363
[  787.000996] input: syz1 as /devices/virtual/input/input4362
10:46:24 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x200b0000, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:24 executing program 7:
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x1c1, 0x0)
ioctl$KDMKTONE(r0, 0x4b30, 0x3)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

[  787.053565] print_req_error: I/O error, dev loop1, sector 248
[  787.059650] Buffer I/O error on dev loop1, logical block 31, lost async page write
10:46:24 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x200000000000000}}}}, 0xf8}}, 0x0)

[  787.101067] input: syz1 as /devices/virtual/input/input4364
10:46:24 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000001, 0x0)
ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070")
r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x1, 0x1100082)
r2 = memfd_create(&(0x7f0000000140)="c8a8707470", 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)="16", 0x1}], 0x1, 0x1081806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
read(r1, &(0x7f0000000000)=""/5, 0x5)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
sendfile(r1, r1, &(0x7f0000000100)=0x3f00, 0xffffffff)
ioctl$LOOP_CLR_FD(r1, 0x4c01)

[  787.166112] input: syz1 as /devices/virtual/input/input4365
10:46:24 executing program 6:
r0 = socket$inet(0x2, 0x0, 0x0)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000280), 0x4)
r1 = fcntl$dupfd(r0, 0x406, r0)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, 0x20000000000000}, 0x4)
setsockopt$inet_tcp_buf(r0, 0x6, 0x1d, &(0x7f0000000700)="0d41326e2be22e44c6101943d59a697032593f57d0d0b9fed96abae9bd18b61aaeb06538d4bbef23e61eaa77eefbfc2f1cd822036cfb8ee04fb315f8d8b41e5075c02bf56ddb6ddffb60c68ea8bc98d997af298488f1fd8a39d9a7b918c5500acaa9fd6eb3acd3b8d4828dc23be194b656e6ff859dd7428b9a8d9bba53db8a934361f4e41718a9ba94bdb46f1546519111684f9f7528296712933e63d2d63cfe182c41a68b", 0xa5)
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @rand_addr}, 0x10)
fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, <r2=>0x0})
process_vm_writev(r2, &(0x7f00000004c0)=[{&(0x7f0000000100)=""/203, 0xcb}, {&(0x7f0000002280)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/176, 0xb0}, {&(0x7f0000000200)=""/13, 0xd}, {&(0x7f0000000380)=""/174, 0xae}, {&(0x7f0000000440)=""/113, 0x71}], 0x6, &(0x7f0000000240)=[{&(0x7f0000000540)=""/184, 0xb8}, {&(0x7f0000000600)=""/98, 0x62}, {&(0x7f0000000680)=""/117, 0x75}], 0x3, 0x0)
ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f00000007c0)={0xffffffff, 0xa, 0xe7, 0x1, "0612b92d40b5af39275a3f81b470f0ca01aee790b97e2cdecf80e33a4602ad79"})
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

10:46:24 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xcc3000000000000}, 'syz1\x00'})

10:46:24 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xfe37}, 'syz1\x00'})

10:46:24 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0xf0ffff, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

[  787.425327] print_req_error: I/O error, dev loop1, sector 0
[  787.465365] input: syz1 as /devices/virtual/input/input4366
10:46:24 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x2000000}}}}, 0xf8}}, 0x0)

10:46:24 executing program 1:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cgroup.max.depth\x00', 0x2, 0x0)
sendfile(r1, r1, 0x0, 0x7f)

10:46:24 executing program 7:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x0, 0x0)
ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000140)=""/200)
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x4000, 0x0)
sendto$inet(r1, &(0x7f0000865000), 0x0, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

[  787.479230] input: syz1 as /devices/virtual/input/input4367
10:46:24 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000001, 0x0)
ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070")
r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x1, 0x1100082)
r2 = memfd_create(&(0x7f0000000140)="c8a8707470", 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)="16", 0x1}], 0x1, 0x1081806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
read(r1, &(0x7f0000000000)=""/5, 0x5)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
sendfile(r1, r1, &(0x7f0000000100)=0x3f00, 0xffffffff)
ioctl$LOOP_CLR_FD(r1, 0x4c01)

10:46:25 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0xf000, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

[  787.545334] input: syz1 as /devices/virtual/input/input4369
[  787.572616] input: syz1 as /devices/virtual/input/input4368
10:46:25 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x300}}}}, 0xf8}}, 0x0)

10:46:25 executing program 6:
r0 = socket$inet(0x2, 0x0, 0x0)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000280), 0x4)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4)
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x2e, 0x0, 0x8db, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x410000, 0x0)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000100)={<r2=>0x0, 0x101}, &(0x7f0000000140)=0x8)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000180)={r2, 0x80000001, 0x4, [0xe2f2, 0x8000, 0x0, 0x3]}, &(0x7f00000001c0)=0x10)

10:46:25 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xfe7c}, 'syz1\x00'})

10:46:25 executing program 1:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x100000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14, 0x800)
ppoll(&(0x7f0000000200)=[{r1}, {r0, 0x4040}, {r1, 0x8000}, {0xffffffffffffffff, 0x200}], 0x4, &(0x7f0000000240), &(0x7f0000000300), 0x8)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f00000000c0)={0x8000000, [0x4000000]})
ppoll(&(0x7f0000000000), 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080)={0x9}, 0x8)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)

10:46:25 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xc304}, 'syz1\x00'})

[  787.795693] print_req_error: I/O error, dev loop1, sector 120
[  787.801789] Buffer I/O error on dev loop1, logical block 15, lost async page write
10:46:25 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0xff02, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:25 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000001, 0x0)
ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070")
r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x1, 0x1100082)
r2 = memfd_create(&(0x7f0000000140)="c8a8707470", 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)="16", 0x1}], 0x1, 0x1081806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
read(r1, &(0x7f0000000000)=""/5, 0x5)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
sendfile(r1, r1, &(0x7f0000000100)=0x3f00, 0xffffffff)
ioctl$LOOP_CLR_FD(r1, 0x4c01)

10:46:25 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000}}}}, 0xf8}}, 0x0)

[  787.897145] input: syz1 as /devices/virtual/input/input4370
[  787.971280] input: syz1 as /devices/virtual/input/input4371
[  787.986514] input: syz1 as /devices/virtual/input/input4372
10:46:25 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in=@empty=0xff02000000000000, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

[  788.056214] input: syz1 as /devices/virtual/input/input4373
10:46:25 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x1de}}}}, 0xf8}}, 0x0)

[  788.115125] print_req_error: I/O error, dev loop1, sector 0
10:46:25 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xffffffe4}, 'syz1\x00'})

10:46:25 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000001, 0x0)
ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070")
r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x1, 0x1100082)
r2 = memfd_create(&(0x7f0000000140)="c8a8707470", 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)="16", 0x1}], 0x1, 0x1081806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
read(r1, &(0x7f0000000000)=""/5, 0x5)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendfile(r1, r1, &(0x7f0000000100)=0x3f00, 0xffffffff)
ioctl$LOOP_CLR_FD(r1, 0x4c01)

10:46:25 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xf00000000000000}, 'syz1\x00'})

10:46:25 executing program 6:
r0 = socket$inet(0x2, 0x0, 0x0)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000280), 0x4)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4)
sendto$inet(r0, &(0x7f0000865000), 0xfffffffffffffd94, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

10:46:25 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in=@empty=0xf00000000000000, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:25 executing program 7:
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r0, r0, 0x80000)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

10:46:25 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x300000000000000}}}}, 0xf8}}, 0x0)

[  788.343781] input: syz1 as /devices/virtual/input/input4374
[  788.398297] input: syz1 as /devices/virtual/input/input4375
[  788.451585] print_req_error: I/O error, dev loop1, sector 504
[  788.457617] Buffer I/O error on dev loop1, logical block 63, lost async page write
[  788.487779] input: syz1 as /devices/virtual/input/input4376
[  788.494510] input: syz1 as /devices/virtual/input/input4377
10:46:25 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in=@empty=0x3000000, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:26 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0xf00000000000000}}}}, 0xf8}}, 0x0)

10:46:28 executing program 1:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x100000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14, 0x800)
ppoll(&(0x7f0000000200)=[{r1}, {r0, 0x4040}, {r1, 0x8000}, {0xffffffffffffffff, 0x200}], 0x4, &(0x7f0000000240), &(0x7f0000000300), 0x8)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f00000000c0)={0x8000000, [0x4000000]})
ppoll(&(0x7f0000000000), 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080)={0x9}, 0x8)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)

10:46:28 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x7c3000000000000}, 'syz1\x00'})

10:46:28 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in=@empty=0x400300, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:28 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x31fe000000000000}, 'syz1\x00'})

10:46:28 executing program 6:
r0 = socket$inet(0x2, 0x0, 0x0)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000280), 0x4)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4)
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @rand_addr}, 0x10)
tee(r0, r0, 0xfffffffffffff800, 0x0)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
keyctl$set_reqkey_keyring(0xe, 0x3)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

10:46:28 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000001, 0x0)
ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070")
r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x1, 0x1100082)
r2 = memfd_create(&(0x7f0000000140)="c8a8707470", 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)="16", 0x1}], 0x1, 0x1081806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
read(r1, &(0x7f0000000000)=""/5, 0x5)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
sendfile(r1, r1, &(0x7f0000000100)=0x3f00, 0xffffffff)
ioctl$LOOP_CLR_FD(r1, 0x4c01)

10:46:28 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0xff02}}}}, 0xf8}}, 0x0)

10:46:28 executing program 7:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mount(&(0x7f0000000640)='./file0//ile0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f0000000340)='cgroup2\x00', 0x0, 0x0)
mkdir(&(0x7f0000000680)='./file0//ile0\x00', 0x0)
rmdir(&(0x7f0000000300)='./file0\x00')
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0)
execveat(r0, &(0x7f0000000080)='./file0//ile0\x00', &(0x7f0000000140)=[&(0x7f00000000c0)=':--{ppp0,.vmnet0\\nodevppp0vboxnet0md5sum)\x00', &(0x7f0000000100)='\x00'], &(0x7f00000002c0)=[&(0x7f0000000200)='ppp0*\x00', &(0x7f0000000240)='%$\x00'], 0x0)

[  791.540104] input: syz1 as /devices/virtual/input/input4378
[  791.571841] input: syz1 as /devices/virtual/input/input4379
10:46:29 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in=@empty=0xf0ffffff, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:29 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0xf}}}}, 0xf8}}, 0x0)

[  791.626015] input: syz1 as /devices/virtual/input/input4380
10:46:29 executing program 7:
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000), 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000000), 0x4)

[  791.679274] input: syz1 as /devices/virtual/input/input4381
10:46:29 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x33fe000000000000}, 'syz1\x00'})

10:46:29 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x2c3000000000000}, 'syz1\x00'})

10:46:29 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in=@empty=0xff02, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:29 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0xfffffff0}}}}, 0xf8}}, 0x0)

10:46:29 executing program 6:
r0 = socket$inet(0x2, 0x0, 0x0)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000280), 0x4)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4)
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = dup(r1)
setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f00000000c0)=@fragment={0x0, 0x0, 0x6, 0x10000, 0x0, 0x8000, 0x66}, 0x8)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000002280)=""/4096)

[  791.905469] input: syz1 as /devices/virtual/input/input4382
[  792.003359] input: syz1 as /devices/virtual/input/input4383
[  792.009535] input: syz1 as /devices/virtual/input/input4384
[  792.082680] input: syz1 as /devices/virtual/input/input4385
10:46:31 executing program 1:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x100000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14, 0x800)
ppoll(&(0x7f0000000200)=[{r1}, {r0, 0x4040}, {r1, 0x8000}, {0xffffffffffffffff, 0x200}], 0x4, &(0x7f0000000240), &(0x7f0000000300), 0x8)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f00000000c0)={0x8000000, [0x4000000]})
ppoll(&(0x7f0000000000), 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080)={0x9}, 0x8)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)

10:46:31 executing program 7:
keyctl$update(0x2, 0x0, &(0x7f0000000180)="11", 0x1)

10:46:31 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in=@empty=0x1000000, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:31 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x9effffff}}}}, 0xf8}}, 0x0)

10:46:31 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xfe3c}, 'syz1\x00'})

10:46:31 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xe9c20000}, 'syz1\x00'})

10:46:31 executing program 6:
r0 = socket$inet(0x2, 0x0, 0x0)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000280), 0x4)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4)
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)
socket$rds(0x15, 0x5, 0x0)

10:46:31 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000001, 0x0)
ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070")
r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x1, 0x1100082)
r2 = memfd_create(&(0x7f0000000140)="c8a8707470", 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)="16", 0x1}], 0x1, 0x1081806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
read(r1, &(0x7f0000000000)=""/5, 0x5)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180))
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendfile(r1, r1, &(0x7f0000000100)=0x3f00, 0xffffffff)
ioctl$LOOP_CLR_FD(r1, 0x4c01)

[  793.887238] input: syz1 as /devices/virtual/input/input4386
[  793.919456] input: syz1 as /devices/virtual/input/input4388
[  793.941757] input: syz1 as /devices/virtual/input/input4387
10:46:31 executing program 7:
openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x0, 0x0)
ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37)
r0 = socket(0x1, 0x1, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000000), 0x4)

10:46:31 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0xde01}}}}, 0xf8}}, 0x0)

10:46:31 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in=@empty=0x34000, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

[  794.067821] print_req_error: I/O error, dev loop1, sector 0
10:46:31 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xfffffffd}, 'syz1\x00'})

[  794.123349] input: syz1 as /devices/virtual/input/input4389
10:46:31 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000001, 0x0)
ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070")
r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x1, 0x1100082)
r2 = memfd_create(&(0x7f0000000140)="c8a8707470", 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)="16", 0x1}], 0x1, 0x1081806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
read(r1, &(0x7f0000000000)=""/5, 0x5)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendfile(r1, r1, &(0x7f0000000100)=0x3f00, 0xffffffff)
ioctl$LOOP_CLR_FD(r1, 0x4c01)

10:46:31 executing program 7:
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000005200)=0xffffffff)

10:46:31 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xf8}}, 0x0)

10:46:31 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x6800}, 'syz1\x00'})

[  794.309818] input: syz1 as /devices/virtual/input/input4390
[  794.399431] input: syz1 as /devices/virtual/input/input4391
[  794.418488] input: syz1 as /devices/virtual/input/input4392
[  794.418617] print_req_error: I/O error, dev loop1, sector 336
[  794.430261] Buffer I/O error on dev loop1, logical block 42, lost async page write
[  794.514178] input: syz1 as /devices/virtual/input/input4393
10:46:33 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070")
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000b55000)={0x2, 0x2}, 0x10)
ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000580)=0xffffffffffffffff)
sendto$inet(r1, &(0x7f00005c9000), 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10)
ioctl$int_in(r1, 0x5452, &(0x7f00000003c0)=0x60)
sendto$inet(r1, &(0x7f0000000140)=':', 0x1, 0x1, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000040), &(0x7f00000000c0)=0x4)

10:46:33 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xc2f6}, 'syz1\x00'})

10:46:33 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in=@empty=0xfffffff0, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:33 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0xf0ffffffffffff}}}}, 0xf8}}, 0x0)

10:46:33 executing program 1:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x100000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14, 0x800)
ppoll(&(0x7f0000000200)=[{r1}, {r0, 0x4040}, {r1, 0x8000}, {0xffffffffffffffff, 0x200}], 0x4, &(0x7f0000000240), &(0x7f0000000300), 0x8)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f00000000c0)={0x8000000, [0x4000000]})
ppoll(&(0x7f0000000000), 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080)={0x9}, 0x8)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)

10:46:33 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000001, 0x0)
ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070")
r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x1, 0x1100082)
r2 = memfd_create(&(0x7f0000000140)="c8a8707470", 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)="16", 0x1}], 0x1, 0x1081806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendfile(r1, r1, &(0x7f0000000100)=0x3f00, 0xffffffff)
ioctl$LOOP_CLR_FD(r1, 0x4c01)

10:46:33 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x36fe000000000000}, 'syz1\x00'})

10:46:33 executing program 6:
r0 = socket$inet(0x2, 0x0, 0x0)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000280), 0x4)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4)
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f0000fa5000/0x3000)=nil, 0x3000, &(0x7f0000004280)=""/4096)

10:46:33 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in=@empty=0xaf464e2a11, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:33 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0xf0ffff}}}}, 0xf8}}, 0x0)

[  796.253832] input: syz1 as /devices/virtual/input/input4394
[  796.261871] input: syz1 as /devices/virtual/input/input4395
[  796.310373] print_req_error: I/O error, dev loop1, sector 376
[  796.316531] Buffer I/O error on dev loop1, logical block 47, lost async page write
[  796.320633] input: syz1 as /devices/virtual/input/input4396
[  796.345004] input: syz1 as /devices/virtual/input/input4397
10:46:33 executing program 7:

10:46:33 executing program 6:
r0 = socket$inet(0x2, 0x0, 0x0)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f00000000c0), 0x4)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x2, 0x0)
ioctl$EVIOCSABS3F(r1, 0x401845ff, &(0x7f0000000200)={0x6, 0x6, 0x7d, 0x8000, 0x6, 0xfffffffffffffffb})
setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000140)={{0x0, @dev={0xac, 0x14, 0x14, 0x14}, 0x4e23, 0x2, 'lc\x00', 0x20, 0xbda8, 0x49}, {@rand_addr=0x6e, 0x4e24, 0x2000, 0x2, 0xbe72, 0x8000000}}, 0x44)
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1000008, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000000240)=""/4096)

10:46:33 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x74000000}, 'syz1\x00'})

10:46:33 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000001, 0x0)
ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070")
r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x1, 0x1100082)
r2 = memfd_create(&(0x7f0000000140)="c8a8707470", 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)="16", 0x1}], 0x1, 0x1081806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendfile(r1, r1, &(0x7f0000000100)=0x3f00, 0xffffffff)
ioctl$LOOP_CLR_FD(r1, 0x4c01)

10:46:33 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xf8c2000000000000}, 'syz1\x00'})

10:46:33 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in=@empty=0xf0ffffff00000000, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

[  796.663718] input: syz1 as /devices/virtual/input/input4398
[  796.668282] input: syz1 as /devices/virtual/input/input4399
[  796.741746] input: syz1 as /devices/virtual/input/input4401
[  796.749887] input: syz1 as /devices/virtual/input/input4400
10:46:35 executing program 1:

10:46:35 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0xff020000}}}}, 0xf8}}, 0x0)

10:46:35 executing program 7:

10:46:35 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in=@empty=0x100000000000000, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:35 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xf5080000}, 'syz1\x00'})

10:46:35 executing program 6:
r0 = socket$inet(0x2, 0x0, 0x0)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000280), 0x4)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4)
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6a, 0x7}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

10:46:35 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xf0c2000000000000}, 'syz1\x00'})

10:46:35 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000001, 0x0)
ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070")
r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x1, 0x1100082)
r2 = memfd_create(&(0x7f0000000140)="c8a8707470", 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)="16", 0x1}], 0x1, 0x1081806)
read(r1, &(0x7f0000000000)=""/5, 0x5)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendfile(r1, r1, &(0x7f0000000100)=0x3f00, 0xffffffff)
ioctl$LOOP_CLR_FD(r1, 0x4c01)

10:46:36 executing program 7:

[  798.600082] input: syz1 as /devices/virtual/input/input4402
[  798.606003] input: syz1 as /devices/virtual/input/input4403
[  798.627799] input: syz1 as /devices/virtual/input/input4404
10:46:36 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000001, 0x0)
ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070")
r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x1, 0x1100082)
r2 = memfd_create(&(0x7f0000000140)="c8a8707470", 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)="16", 0x1}], 0x1, 0x1081806)
read(r1, &(0x7f0000000000)=""/5, 0x5)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendfile(r1, r1, &(0x7f0000000100)=0x3f00, 0xffffffff)
ioctl$LOOP_CLR_FD(r1, 0x4c01)

10:46:36 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in=@empty=0x200b0000, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:36 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0xf0ffffff00000000}}}}, 0xf8}}, 0x0)

10:46:36 executing program 1:

[  798.755600] input: syz1 as /devices/virtual/input/input4405
10:46:36 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x32fe000000000000}, 'syz1\x00'})

10:46:36 executing program 7:

10:46:36 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0xffffff7f00000000}}}}, 0xf8}}, 0x0)

10:46:36 executing program 1:

10:46:36 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x6c3000000000000}, 'syz1\x00'})

10:46:36 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000001, 0x0)
ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070")
r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x1, 0x1100082)
r2 = memfd_create(&(0x7f0000000140)="c8a8707470", 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)="16", 0x1}], 0x1, 0x1081806)
read(r1, &(0x7f0000000000)=""/5, 0x5)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendfile(r1, r1, &(0x7f0000000100)=0x3f00, 0xffffffff)
ioctl$LOOP_CLR_FD(r1, 0x4c01)

10:46:36 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in=@empty=0xa00, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:36 executing program 6:
r0 = socket$inet(0x2, 0x0, 0x0)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000280), 0x4)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4)
sendto$inet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

[  799.011994] input: syz1 as /devices/virtual/input/input4406
[  799.042063] input: syz1 as /devices/virtual/input/input4407
10:46:36 executing program 1:

10:46:36 executing program 7:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x0, 0x0)

[  799.117816] input: syz1 as /devices/virtual/input/input4408
10:46:36 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0xff02000000000000}}}}, 0xf8}}, 0x0)

10:46:36 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000001, 0x0)
ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070")
r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x1, 0x1100082)
r2 = memfd_create(&(0x7f0000000140)="c8a8707470", 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
read(r1, &(0x7f0000000000)=""/5, 0x5)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendfile(r1, r1, &(0x7f0000000100)=0x3f00, 0xffffffff)
ioctl$LOOP_CLR_FD(r1, 0x4c01)

10:46:36 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in=@empty=0x200b, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

[  799.240459] input: syz1 as /devices/virtual/input/input4409
10:46:36 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x4bfe0000}, 'syz1\x00'})

10:46:36 executing program 1:
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000380)='/dev/hwrng\x00', 0x141000, 0x0)
ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000600)=""/26)
prctl$intptr(0x3f, 0x20000000000001)
prctl$intptr(0x1c, 0xffffffffffffeffd)
getresgid(&(0x7f00000007c0)=<r2=>0x0, &(0x7f0000000800), &(0x7f0000000840))
keyctl$chown(0x4, 0x0, 0x0, r2)
r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x4000000004002)
mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1, 0x32, 0xffffffffffffffff, 0x0)
r4 = dup2(r3, r3)
exit(0x4)
getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000280)={{{@in=@local, @in6=@mcast2}}, {{@in6}, 0x0, @in=@dev}}, &(0x7f00000001c0)=0xe8)
close(r0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000500)={{{@in6=@mcast2, @in=@rand_addr}}, {{@in6=@ipv4={[], [], @rand_addr}}, 0x0, @in=@rand_addr}}, &(0x7f0000000080)=0xe8)
ioctl$LOOP_SET_STATUS(r4, 0x4c02, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "4134e475824fbfaeefb278580e4aedd886c0b629cd32c56ebff94329c3a32a4b8c171676b94083085709923fd77ead8ca0073183b09c62b90673944ded2f276e", "49710f29a576931228cd8c92a1b9375555874f087c556b616155647a2732f399", [0x0, 0x1f]})
clock_gettime(0x0, &(0x7f0000000200))
fcntl$setstatus(r4, 0x4, 0x6c00)

10:46:36 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0xde010000}}}}, 0xf8}}, 0x0)

10:46:36 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000001, 0x0)
ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070")
r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x1, 0x1100082)
r2 = memfd_create(&(0x7f0000000140)="c8a8707470", 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
read(r1, &(0x7f0000000000)=""/5, 0x5)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendfile(r1, r1, &(0x7f0000000100)=0x3f00, 0xffffffff)
ioctl$LOOP_CLR_FD(r1, 0x4c01)

10:46:36 executing program 7:
dup(0xffffffffffffffff)
bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10)
sendto$inet(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback}, 0x10)
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f00000000c0)="000000008c00000000000000000000", 0x0)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000002c0), 0x4)
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$int_in(r1, 0x40000000af01, &(0x7f0000000140))
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001740)=""/163, &(0x7f0000000540)=""/246, &(0x7f0000000640)=""/4096})
r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x61, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200)}, 0x20, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
close(r2)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a})
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[])
ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0)
ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000f1dff8)={0x0, r2})
statfs(&(0x7f0000000180)='./file0\x00', &(0x7f0000001800)=""/4096)

10:46:36 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xffc20000}, 'syz1\x00'})

[  799.419242] input: syz1 as /devices/virtual/input/input4410
10:46:36 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in=@empty=0x2, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:36 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffffff}}}}, 0xf8}}, 0x0)

[  799.517822] input: syz1 as /devices/virtual/input/input4411
10:46:37 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000001, 0x0)
ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070")
r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x1, 0x1100082)
r2 = memfd_create(&(0x7f0000000140)="c8a8707470", 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
read(r1, &(0x7f0000000000)=""/5, 0x5)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendfile(r1, r1, &(0x7f0000000100)=0x3f00, 0xffffffff)
ioctl$LOOP_CLR_FD(r1, 0x4c01)

[  799.588721] input: syz1 as /devices/virtual/input/input4412
10:46:37 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x37fe}, 'syz1\x00'})

[  799.682293] input: syz1 as /devices/virtual/input/input4413
10:46:37 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in=@empty=0x200000000000000, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:37 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0xa00}}}}, 0xf8}}, 0x0)

10:46:37 executing program 6:
r0 = socket$inet(0x2, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000001040)={<r1=>0x0, 0xc0}, &(0x7f0000001080)=0x8)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000010c0)={r1, @in6={{0xa, 0x4e21, 0x8, @empty, 0x6}}, 0x7, 0xc44f, 0xfffffffffffffff7, 0xfffffffffffffffe, 0x1}, &(0x7f0000001180)=0x98)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000005c0)={<r2=>0x0, 0x7}, &(0x7f0000000600)=0x8)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffff9c, 0x84, 0x7c, &(0x7f0000000880)={<r3=>0x0, 0x6, 0x1}, &(0x7f00000008c0)=0x8)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000900)=@assoc_value={<r4=>0x0}, &(0x7f0000000940)=0x8)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000980)={<r5=>0x0, @in={{0x2, 0x4e22, @rand_addr=0x1a3}}, 0x2, 0xeb, 0x100000001, 0x5, 0x9}, &(0x7f0000000a40)=0x98)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000a80)={<r6=>0x0, 0x1, 0xc651}, &(0x7f0000000ac0)=0x8)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000b00)={<r7=>0x0, @in6={{0xa, 0x4e24, 0xffffffff, @mcast1}}, 0x1, 0x7f}, &(0x7f0000000bc0)=0x90)
sendmmsg$inet_sctp(r0, &(0x7f0000000f00)=[{&(0x7f00000000c0)=@in6={0xa, 0x4e21, 0xf17, @remote, 0x20}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000100)="3f4f20f8aebbc8095fcf164ca119fdafc90f49cf7613cc310a48cc539d2af86d416f839080f5eee04db10439fce690f6b8ae85eb429a76a4a1b2bb181888045fbe6914da6bb78eec66c62523c3b6ce9996405c3d0e21588709ff0fef879df5df5d0d41155e5fbd3d005b90f38e99191f497aaabc17030bb5a49cb795b73023839bae630188b4", 0x86}], 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000c8400000005000000000000000000008018000001000000008400000007000000ac1414bb00000000"], 0x30, 0x40}, {&(0x7f0000000240)=@in6={0xa, 0x4e23, 0x80, @dev={0xfe, 0x80, [], 0x10}, 0x400}, 0x1c, &(0x7f0000000540)=[{&(0x7f00000002c0)="842680b85d4e3e96007f5e8cb97be3d4b3aa8f922829b63892341807a7e54df74d1944c7568205b855d48e42ba586a46c7e4920d88839f468929e92a8a314c31c62e52f35d68efef5bfcfd996f9bf685b7f945a9b87692c3c5e3d8d342b5392c9a172c14c28bb1ddac8ece0e1342e05e673841a7a6e4182dfe5a91a92fd16ca19a3e9f42af49344e2194a767f9ec59a29c4bde7d0fe5c0e20dfa7c9f0882dd586cd37ab7271a60c6b0a2b00736e2e5eb1f9fecac6ee745f7d4aa70615734bfc934fb38aa", 0xc4}, {&(0x7f00000003c0)="b0a791f5450ba48769c4", 0xa}, {&(0x7f0000000400)="be1cfd897fb5c2cdd01f58d888f9dae0b5af7c68b1adb1f758b9398b5ac5cc9ef096b237f2e690be7ea2f189a5a25cb5aa30094e5e0fcbb3974e7f1ce4c61364f252", 0x42}, {&(0x7f0000002280)="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", 0x1000}, {&(0x7f0000000480)="bb54f54bdcd29ca18996e06a1782a9ed9b376d29d073f36ffc66850ebf1a6868e7299d61a30de08f9a950ef75ada6f6216aca3b0f138cdef6021c5a6dcd18771e9a83c7ebb449ad96038", 0x4a}, {&(0x7f0000000500)="65bfad53485d85183ed5c39ae134ec215e8041d9a7cf9dbf2c0451c5996228771b782678fa9814ec3d2fb6c03c92d71469", 0x31}], 0x6, &(0x7f0000000640)=[@sndinfo={0x20, 0x84, 0x2, {0x7, 0x4, 0x2, 0x1f, r2}}, @dstaddrv6={0x20, 0x84, 0x8, @remote}, @dstaddrv4={0x18, 0x84, 0x7, @dev={0xac, 0x14, 0x14, 0x19}}, @prinfo={0x18, 0x84, 0x5, {0x20}}, @dstaddrv6={0x20, 0x84, 0x8, @mcast1}], 0x90, 0x8000}, {&(0x7f0000000700)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000840)=[{&(0x7f0000000740)="f589995804d3ca61c860359752c6519d44850380f36149c105069792bd0bba66b5f6b584b8709f16a34ea63c1c4c1972c8f9341c7af5eda0fab851bab6427a016d8744f487fc45df6de87660135463884901b09b856f140aa682659454e2971b9aaefd41ff518b8dc7a4665e5a590636b7f615df6111315e8e4f5a87c0f7814c10944629d336be4fd83d3adb2bae21d52cf2309f79929b29", 0x98}, {&(0x7f0000000800)="321315c80b7875e7331274220590b8142b53231f2bfee4143c365b8e05601ba9", 0x20}], 0x2, &(0x7f0000000c00)=[@authinfo={0x18, 0x84, 0x6, {0x8}}, @sndinfo={0x20, 0x84, 0x2, {0x9, 0x1, 0x9, 0x5, r3}}, @dstaddrv6={0x20, 0x84, 0x8, @mcast1}, @sndrcv={0x30, 0x84, 0x1, {0x3f, 0x7ff, 0x2, 0xff, 0xff, 0x7fffffff, 0x1, 0x100, r4}}, @init={0x18, 0x84, 0x0, {0x1, 0x3, 0x80000000, 0x80000001}}, @sndrcv={0x30, 0x84, 0x1, {0x1, 0xc1, 0x2, 0x1, 0x869, 0x3, 0x9, 0x0, r5}}, @sndinfo={0x20, 0x84, 0x2, {0x3f, 0x200, 0x100000000, 0x3, r6}}, @sndrcv={0x30, 0x84, 0x1, {0xffffffff, 0x2, 0x8, 0x0, 0x400, 0xd, 0x4, 0x8000, r7}}, @authinfo={0x18, 0x84, 0x6, {0x600}}], 0x138, 0x4000}, {&(0x7f0000000d40)=@in={0x2, 0x4e24, @rand_addr=0x7}, 0x10, &(0x7f0000000e80)=[{&(0x7f0000000d80)="b9c5e54a66a3bf63b6e2326321eeb9199d6397cf56cde2500cedbf57bb447dc1d4134163ddea49ecdfa8ace8e9b254c6bdf828e44c0ba08462716ccb54569bfc95995dc5f5343cfc1231d002dc0c756c5cc0d8fb23332532722397ad67eb3da3e08d0bc1c7db8e4129df5a20c2c0dda121eff8a784f911df1909892b12df25ca1bed10f5a5858a90cbbe27520d801e9bbbc77c8dab82d402d5ace6b44e0bacc104135efe9822bbfce401a35d0b5c5e14f7c51db916b6f6368d4b50c58c30d34a6099c763a91f5430cd5267418129a437ed328e4ccdd7ec764ca1f4", 0xdb}], 0x1, &(0x7f0000000ec0)=[@init={0x18, 0x84, 0x0, {0x8, 0x7}}], 0x18, 0x8800}], 0x4, 0x8000)
r8 = syz_open_dev$audion(&(0x7f00000011c0)='/dev/audio#\x00', 0x100000001, 0x722165092e182f57)
execveat(r8, &(0x7f0000001200)='./file0\x00', &(0x7f0000003280)=[&(0x7f0000001240)=')ppp0-)security-!cpuset]\x00'], &(0x7f0000003400)=[&(0x7f00000032c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', &(0x7f0000003300)=':self\x00', &(0x7f0000003340)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', &(0x7f0000003380)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', &(0x7f00000033c0)='\x00'], 0x1000)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000280), 0x4)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4)
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000001000)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

10:46:37 executing program 7:
dup(0xffffffffffffffff)
bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10)
sendto$inet(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback}, 0x10)
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f00000000c0)="000000008c00000000000000000000", 0x0)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000002c0), 0x4)
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$int_in(r1, 0x40000000af01, &(0x7f0000000140))
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001740)=""/163, &(0x7f0000000540)=""/246, &(0x7f0000000640)=""/4096})
r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x61, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200)}, 0x20, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
close(r2)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a})
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[])
ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0)
ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000f1dff8)={0x0, r2})
statfs(&(0x7f0000000180)='./file0\x00', &(0x7f0000001800)=""/4096)

10:46:37 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xdc3}, 'syz1\x00'})

[  799.830623] input: syz1 as /devices/virtual/input/input4414
10:46:37 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000001, 0x0)
ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070")
r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x1, 0x1100082)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)="16", 0x1}], 0x1, 0x1081806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, 0xffffffffffffffff)
read(r1, &(0x7f0000000000)=""/5, 0x5)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendfile(r1, r1, &(0x7f0000000100)=0x3f00, 0xffffffff)
ioctl$LOOP_CLR_FD(r1, 0x4c01)

[  799.945649] input: syz1 as /devices/virtual/input/input4415
10:46:37 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in=@empty=0x300000000000000, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

[  799.988276] input: syz1 as /devices/virtual/input/input4416
[  800.086519] input: syz1 as /devices/virtual/input/input4417
10:46:37 executing program 1:
r0 = perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1, 0x2)
write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0xffffffffffffffd3, 0x5, 0x350000000000401f}, 0xfffffefd)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
dup2(r0, r1)

10:46:37 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4e2b648dc8}}}}, 0xf8}}, 0x0)

10:46:37 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x97ffffff}, 'syz1\x00'})

10:46:37 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000001, 0x0)
ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070")
r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x1, 0x1100082)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)="16", 0x1}], 0x1, 0x1081806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, 0xffffffffffffffff)
read(r1, &(0x7f0000000000)=""/5, 0x5)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendfile(r1, r1, &(0x7f0000000100)=0x3f00, 0xffffffff)
ioctl$LOOP_CLR_FD(r1, 0x4c01)

10:46:37 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in=@empty=0xf0ffff, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:37 executing program 6:
r0 = socket$inet(0x2, 0x0, 0x0)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000280), 0x4)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x10000, 0x0)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0xd800000000000000, 0xffffffffffffffff, 0x1000000000000}, 0x4)
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @rand_addr}, 0x10)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

10:46:37 executing program 7:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1, {{}, 0x81}}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r2, &(0x7f0000000180)=""/8, 0x8)

10:46:37 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x3c3}, 'syz1\x00'})

[  800.330042] input: syz1 as /devices/virtual/input/input4418
[  800.349660] input: syz1 as /devices/virtual/input/input4419
10:46:37 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000001, 0x0)
ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070")
r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x1, 0x1100082)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)="16", 0x1}], 0x1, 0x1081806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, 0xffffffffffffffff)
read(r1, &(0x7f0000000000)=""/5, 0x5)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendfile(r1, r1, &(0x7f0000000100)=0x3f00, 0xffffffff)
ioctl$LOOP_CLR_FD(r1, 0x4c01)

10:46:37 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0xa}}}}, 0xf8}}, 0x0)

10:46:37 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in=@empty=0xf000, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

[  800.400098] input: syz1 as /devices/virtual/input/input4421
[  800.415631] input: syz1 as /devices/virtual/input/input4420
10:46:37 executing program 7:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1, {{}, 0x81}}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r2, &(0x7f0000000180)=""/8, 0x8)

10:46:38 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x127ac}, 'syz1\x00'})

10:46:38 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x36fe}, 'syz1\x00'})

10:46:38 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000}}}}, 0xf8}}, 0x0)

10:46:38 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in=@empty=0x300, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

[  800.747483] input: syz1 as /devices/virtual/input/input4422
[  800.757730] input: syz1 as /devices/virtual/input/input4423
[  800.817868] input: syz1 as /devices/virtual/input/input4425
[  800.833733] input: syz1 as /devices/virtual/input/input4424
10:46:38 executing program 1:
r0 = socket(0x10000000a, 0x3, 0x6)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={"6272696467653000000100"})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'bridge0\x00', 0xfffffffffffffff9})

10:46:38 executing program 6:
r0 = socket$inet(0x2, 0x0, 0x0)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000280), 0x4)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x20000, 0x0)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x2, 0x7, 0x1000}, 0x4)
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

10:46:38 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000001, 0x0)
ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070")
r1 = memfd_create(&(0x7f0000000140)="c8a8707470", 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)="16", 0x1}], 0x1, 0x1081806)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r1)
read(0xffffffffffffffff, &(0x7f0000000000)=""/5, 0x5)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100)=0x3f00, 0xffffffff)
ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01)

10:46:38 executing program 7:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1, {{}, 0x81}}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r2, &(0x7f0000000180)=""/8, 0x8)

10:46:38 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in=@empty=0x3, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:38 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc88d642b4e000000}}}}, 0xf8}}, 0x0)

10:46:38 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x68}, 'syz1\x00'})

10:46:38 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xfffffdfd}, 'syz1\x00'})

[  801.087859] input: syz1 as /devices/virtual/input/input4426
[  801.110475] input: syz1 as /devices/virtual/input/input4427
[  801.127497] bridge0: port 2(bridge_slave_1) entered disabled state
10:46:38 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff}}}}, 0xf8}}, 0x0)

[  801.134159] bridge0: port 1(bridge_slave_0) entered disabled state
10:46:38 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in=@empty=0xf, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

[  801.166374] input: syz1 as /devices/virtual/input/input4428
[  801.174686] input: syz1 as /devices/virtual/input/input4429
10:46:38 executing program 4:
socket$inet6(0xa, 0x1000000000001, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x1, 0x1100082)
r1 = memfd_create(&(0x7f0000000140)="c8a8707470", 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)="16", 0x1}], 0x1, 0x1081806)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
read(r0, &(0x7f0000000000)=""/5, 0x5)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendfile(r0, r0, &(0x7f0000000100)=0x3f00, 0xffffffff)
ioctl$LOOP_CLR_FD(r0, 0x4c01)

10:46:38 executing program 7:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1, {{}, 0x81}}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r2, &(0x7f0000000180)=""/8, 0x8)

10:46:38 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x7a}, 'syz1\x00'})

10:46:38 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xc306}, 'syz1\x00'})

10:46:38 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffff}}}}, 0xf8}}, 0x0)

[  801.369688] input: syz1 as /devices/virtual/input/input4430
10:46:38 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in=@empty=0x2ff, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

[  801.471343] print_req_error: I/O error, dev loop1, sector 248
[  801.477378] Buffer I/O error on dev loop1, logical block 31, lost async page write
[  801.501378] input: syz1 as /devices/virtual/input/input4431
[  801.568327] input: syz1 as /devices/virtual/input/input4432
[  801.662540] input: syz1 as /devices/virtual/input/input4433
[  801.870250] bridge0: port 2(bridge_slave_1) entered blocking state
[  801.876696] bridge0: port 2(bridge_slave_1) entered forwarding state
[  801.883426] bridge0: port 1(bridge_slave_0) entered blocking state
[  801.889869] bridge0: port 1(bridge_slave_0) entered forwarding state
[  801.897261] device bridge0 entered promiscuous mode
[  801.907564] bridge0: port 2(bridge_slave_1) entered disabled state
[  801.914059] bridge0: port 1(bridge_slave_0) entered disabled state
[  801.921204] device bridge0 left promiscuous mode
10:46:39 executing program 1:
keyctl$get_security(0x11, 0x0, &(0x7f0000000340)=""/4096, 0x1000)
gettid()
io_setup(0x0, &(0x7f0000000000)=<r0=>0x0)
io_getevents(r0, 0x0, 0x1, &(0x7f0000000040)=[{}], 0x0)

10:46:39 executing program 6:
r0 = socket$inet(0x2, 0x0, 0x0)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000280), 0x264)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4)
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

10:46:39 executing program 7:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1, {{}, 0x81}}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
getdents(0xffffffffffffffff, &(0x7f0000000180)=""/8, 0x8)

10:46:39 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}}}}, 0xf8}}, 0x0)

10:46:39 executing program 4:
socket$inet6(0xa, 0x1000000000001, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x1, 0x1100082)
r1 = memfd_create(&(0x7f0000000140)="c8a8707470", 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)="16", 0x1}], 0x1, 0x1081806)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
read(r0, &(0x7f0000000000)=""/5, 0x5)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendfile(r0, r0, &(0x7f0000000100)=0x3f00, 0xffffffff)
ioctl$LOOP_CLR_FD(r0, 0x4c01)

10:46:39 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in=@empty=0x40030000000000, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:39 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x44fe000000000000}, 'syz1\x00'})

10:46:39 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xc30e}, 'syz1\x00'})

[  802.117102] bridge0: port 2(bridge_slave_1) entered blocking state
[  802.123502] bridge0: port 2(bridge_slave_1) entered forwarding state
[  802.130223] bridge0: port 1(bridge_slave_0) entered blocking state
[  802.136595] bridge0: port 1(bridge_slave_0) entered forwarding state
[  802.143314] device bridge0 entered promiscuous mode
[  802.218462] input: syz1 as /devices/virtual/input/input4434
[  802.223789] input: syz1 as /devices/virtual/input/input4435
10:46:39 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in=@empty=0xffffff9e, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

[  802.280730] input: syz1 as /devices/virtual/input/input4436
10:46:39 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf000}}}}, 0xf8}}, 0x0)

10:46:39 executing program 1:
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r0, r0, 0x80000)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

[  802.363846] print_req_error: I/O error, dev loop1, sector 0
10:46:39 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x40000}, 'syz1\x00'})

10:46:39 executing program 7:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1, {{}, 0x81}}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
r2 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r2, &(0x7f0000000180)=""/8, 0x8)

[  802.417112] input: syz1 as /devices/virtual/input/input4437
10:46:39 executing program 4:
socket$inet6(0xa, 0x1000000000001, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x1, 0x1100082)
r1 = memfd_create(&(0x7f0000000140)="c8a8707470", 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)="16", 0x1}], 0x1, 0x1081806)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
read(r0, &(0x7f0000000000)=""/5, 0x5)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendfile(r0, r0, &(0x7f0000000100)=0x3f00, 0xffffffff)
ioctl$LOOP_CLR_FD(r0, 0x4c01)

10:46:39 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in=@empty=0xfffffffffffff000, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:39 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffffff00000000}}}}, 0xf8}}, 0x0)

10:46:39 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xc303}, 'syz1\x00'})

[  802.558470] input: syz1 as /devices/virtual/input/input4438
[  802.677567] input: syz1 as /devices/virtual/input/input4439
[  802.717748] input: syz1 as /devices/virtual/input/input4440
[  802.733077] print_req_error: I/O error, dev loop1, sector 200
[  802.739116] Buffer I/O error on dev loop1, logical block 25, lost async page write
[  802.824375] input: syz1 as /devices/virtual/input/input4441
10:46:40 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffffffffffff}}}}, 0xf8}}, 0x0)

10:46:40 executing program 7:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1, {{}, 0x81}}, 0x18)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r2, &(0x7f0000000180)=""/8, 0x8)

10:46:40 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in=@empty=0x112a4e46af000000, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:40 executing program 4:
ioctl(0xffffffffffffffff, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070")
r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x1, 0x1100082)
r1 = memfd_create(&(0x7f0000000140)="c8a8707470", 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)="16", 0x1}], 0x1, 0x1081806)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
read(r0, &(0x7f0000000000)=""/5, 0x5)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendfile(r0, r0, &(0x7f0000000100)=0x3f00, 0xffffffff)
ioctl$LOOP_CLR_FD(r0, 0x4c01)

10:46:40 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x77fe0000}, 'syz1\x00'})

10:46:40 executing program 6:
r0 = socket$inet(0x2, 0x0, 0x0)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000280), 0x4)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x40000, 0x0)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0xe8}, 0x4)
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

10:46:40 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xf1c2000000000000}, 'syz1\x00'})

10:46:40 executing program 1:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1, {{}, 0x81}}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
r2 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r2, &(0x7f0000000180)=""/8, 0x8)

[  802.996428] input: syz1 as /devices/virtual/input/input4442
[  802.999576] input: syz1 as /devices/virtual/input/input4443
10:46:40 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}}}}, 0xf8}}, 0x0)

10:46:40 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in=@empty=0xf0ffffffffffff, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

[  803.097052] input: syz1 as /devices/virtual/input/input4444
[  803.137982] print_req_error: I/O error, dev loop1, sector 0
10:46:40 executing program 7:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r2, &(0x7f0000000180)=""/8, 0x8)

10:46:40 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000001, 0x0)
ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070")
r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x1, 0x1100082)
r2 = memfd_create(&(0x7f0000000140)="c8a8707470", 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)="16", 0x1}], 0x1, 0x1081806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
read(r1, &(0x7f0000000000)=""/5, 0x5)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
sendfile(r1, r1, &(0x7f0000000100)=0x3f00, 0xffffffff)
ioctl$LOOP_CLR_FD(r1, 0x4c01)

[  803.194824] input: syz1 as /devices/virtual/input/input4445
10:46:40 executing program 4:
ioctl(0xffffffffffffffff, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070")
r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x1, 0x1100082)
r1 = memfd_create(&(0x7f0000000140)="c8a8707470", 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)="16", 0x1}], 0x1, 0x1081806)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
read(r0, &(0x7f0000000000)=""/5, 0x5)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendfile(r0, r0, &(0x7f0000000100)=0x3f00, 0xffffffff)
ioctl$LOOP_CLR_FD(r0, 0x4c01)

10:46:40 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40030000000000}}}}, 0xf8}}, 0x0)

10:46:40 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x7400000000000000}, 'syz1\x00'})

10:46:40 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in=@empty=0x2000000, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:40 executing program 7:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1, {{}, 0x81}}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r2, &(0x7f0000000180)=""/8, 0x8)

10:46:40 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x3bfe0000}, 'syz1\x00'})

10:46:40 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in=@empty=0xb20, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

[  803.438535] input: syz1 as /devices/virtual/input/input4446
10:46:40 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0xde01}}}}, 0xf8}}, 0x0)

10:46:40 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000001, 0x0)
ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070")
r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x1, 0x1100082)
r2 = memfd_create(&(0x7f0000000140)="c8a8707470", 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)="16", 0x1}], 0x1, 0x1081806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
read(r1, &(0x7f0000000000)=""/5, 0x5)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
sendfile(r1, r1, &(0x7f0000000100)=0x3f00, 0xffffffff)
ioctl$LOOP_CLR_FD(r1, 0x4c01)

[  803.529402] input: syz1 as /devices/virtual/input/input4447
[  803.550810] input: syz1 as /devices/virtual/input/input4448
10:46:41 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in=@empty=0xfffff000, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:41 executing program 6:
r0 = socket$inet(0x2, 0x0, 0x0)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000280), 0x4)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='memory.events\x00', 0x0, 0x0)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x5}, 0x4)
syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x2a8, 0x24040)
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xfffffffffffffec3, 0xfffffffffffffffe, &(0x7f0000fd9ff0)={0x2, 0x1000004e20, @remote}, 0x5)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
prctl$setmm(0x23, 0x7, &(0x7f00003df000/0x1000)=nil)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x10000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

[  803.670123] input: syz1 as /devices/virtual/input/input4449
10:46:41 executing program 7:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1, {{}, 0x81}}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r2, &(0x7f0000000180)=""/8, 0x8)

10:46:41 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000001, 0x0)
ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070")
r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x1, 0x1100082)
r2 = memfd_create(&(0x7f0000000140)="c8a8707470", 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)="16", 0x1}], 0x1, 0x1081806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
read(r1, &(0x7f0000000000)=""/5, 0x5)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
sendfile(r1, r1, &(0x7f0000000100)=0x3f00, 0xffffffff)
ioctl$LOOP_CLR_FD(r1, 0x4c01)

10:46:41 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0xff02000000000000}}}}, 0xf8}}, 0x0)

10:46:41 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xa00000000000000}, 'syz1\x00'})

10:46:41 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xf00}, 'syz1\x00'})

[  803.921976] input: syz1 as /devices/virtual/input/input4450
[  804.013569] input: syz1 as /devices/virtual/input/input4451
[  804.027970] input: syz1 as /devices/virtual/input/input4452
[  804.068334] input: syz1 as /devices/virtual/input/input4453
10:46:41 executing program 4:
r0 = socket$inet6(0xa, 0x0, 0x0)
ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070")
r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x1, 0x1100082)
r2 = memfd_create(&(0x7f0000000140)="c8a8707470", 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)="16", 0x1}], 0x1, 0x1081806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
read(r1, &(0x7f0000000000)=""/5, 0x5)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendfile(r1, r1, &(0x7f0000000100)=0x3f00, 0xffffffff)
ioctl$LOOP_CLR_FD(r1, 0x4c01)

10:46:41 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff00000000}}}}, 0xf8}}, 0x0)

10:46:41 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in=@empty=0x9effffff, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:41 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000001, 0x0)
ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070")
r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x1, 0x1100082)
r2 = memfd_create(&(0x7f0000000140)="c8a8707470", 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)="16", 0x1}], 0x1, 0x1081806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
read(r1, &(0x7f0000000000)=""/5, 0x5)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
getpid()
fcntl$setflags(r2, 0x2, 0x0)
sendfile(r1, r1, &(0x7f0000000100)=0x3f00, 0xffffffff)

10:46:41 executing program 7:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1, {{}, 0x81}}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r2, &(0x7f0000000180)=""/8, 0x8)

10:46:41 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xc302}, 'syz1\x00'})

10:46:41 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xfe71}, 'syz1\x00'})

10:46:41 executing program 6:
r0 = socket$inet(0x2, 0x0, 0x0)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000280), 0x4)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4)
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @rand_addr}, 0x10)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x2000, 0x0)
ioctl$BLKIOOPT(r1, 0x1279, &(0x7f0000000100))
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000140)={0xf4, 0x0, 0x8, "e9d17d14406cd0cfd5e8f86aaef9b0cb7435b05eb5e89745723eb97c9238b036c5ae9d8f0ea16d31cdec6b4e8a12e801a03c18e425500be603ce96ee96b3059dd2fbdff4d84ea05b7d6eef83d745daf85197367b7d8bf3996d71999382a60a9f236a39a4a660f8ef9235be47de2c3ab3a45a499a8e1ba164e402c924252fc7f1bccc8c85dae6433c2b805c6edc5cbcf37c7befea73a614bc139d3a55c1f696e2c5a42836123da53f9d951b440d8dc211023c7f198ac1c25cee23e9c5658f699544f57f6d7f4bcc06c41d63527691681afddca9652ba74c6f25f225e13a44630a80abf9618696f1a937b114f18bcc6c0639ca132b"})
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

[  804.330473] input: syz1 as /devices/virtual/input/input4454
[  804.348189] input: syz1 as /devices/virtual/input/input4455
10:46:41 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in=@empty=0xf00, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

[  804.411823] input: syz1 as /devices/virtual/input/input4456
10:46:41 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000}}}}, 0xf8}}, 0x0)

10:46:41 executing program 6:
r0 = socket$inet(0x2, 0x0, 0x0)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000280), 0x4)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x0, 0x200000000000000}, 0x4)
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

[  804.503531] input: syz1 as /devices/virtual/input/input4457
10:46:41 executing program 7:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1, {{}, 0x81}}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r2, &(0x7f0000000180)=""/8, 0x8)

10:46:41 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xfe39}, 'syz1\x00'})

10:46:41 executing program 4:
socket$inet6(0xa, 0x1000000000001, 0x0)
ioctl(0xffffffffffffffff, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070")
r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x1, 0x1100082)
r1 = memfd_create(&(0x7f0000000140)="c8a8707470", 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)="16", 0x1}], 0x1, 0x1081806)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
read(r0, &(0x7f0000000000)=""/5, 0x5)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendfile(r0, r0, &(0x7f0000000100)=0x3f00, 0xffffffff)
ioctl$LOOP_CLR_FD(r0, 0x4c01)

10:46:42 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in=@empty=0xf000000, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:42 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf00000000000000}}}}, 0xf8}}, 0x0)

10:46:42 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x7f000000}, 'syz1\x00'})

[  804.707554] input: syz1 as /devices/virtual/input/input4458
10:46:42 executing program 7:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1, {{}, 0x81}}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r2, &(0x7f0000000180)=""/8, 0x8)

10:46:42 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000001, 0x0)
ioctl(r0, 0x0, &(0x7f0000000080)="0a5cc80700315f85715070")
r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x1, 0x1100082)
r2 = memfd_create(&(0x7f0000000140)="c8a8707470", 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)="16", 0x1}], 0x1, 0x1081806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
read(r1, &(0x7f0000000000)=""/5, 0x5)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendfile(r1, r1, &(0x7f0000000100)=0x3f00, 0xffffffff)
ioctl$LOOP_CLR_FD(r1, 0x4c01)

[  804.840337] input: syz1 as /devices/virtual/input/input4459
[  804.869791] input: syz1 as /devices/virtual/input/input4460
[  804.970069] input: syz1 as /devices/virtual/input/input4461
10:46:42 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000001, 0x0)
ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070")
r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x1, 0x1100082)
r2 = memfd_create(&(0x7f0000000140)="c8a8707470", 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)="16", 0x1}], 0x1, 0x1081806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
read(r1, &(0x7f0000000000)=""/5, 0x5)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
getpid()
fcntl$setflags(r2, 0x2, 0x0)
sendfile(r1, r1, &(0x7f0000000100)=0x3f00, 0xffffffff)

10:46:42 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in=@empty=0xa000000, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:42 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34000}}}}, 0xf8}}, 0x0)

10:46:42 executing program 6:
r0 = socket$inet(0x2, 0x0, 0x6)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000280), 0x4)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4)
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)
r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x8001, 0x400000)
r2 = mmap$binder(&(0x7f000056d000/0x3000)=nil, 0x3000, 0x2000000, 0x10110, 0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000100)={r2})

10:46:42 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000001, 0x0)
ioctl(r0, 0x8000000008912, &(0x7f0000000080))
r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x1, 0x1100082)
r2 = memfd_create(&(0x7f0000000140)="c8a8707470", 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)="16", 0x1}], 0x1, 0x1081806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
read(r1, &(0x7f0000000000)=""/5, 0x5)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendfile(r1, r1, &(0x7f0000000100)=0x3f00, 0xffffffff)
ioctl$LOOP_CLR_FD(r1, 0x4c01)

10:46:42 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x3}, 'syz1\x00'})

10:46:42 executing program 7:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1, {{}, 0x81}}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r2, &(0x7f0000000180)=""/8, 0x8)

10:46:42 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xfcc20000}, 'syz1\x00'})

[  805.213339] input: syz1 as /devices/virtual/input/input4462
[  805.226122] input: syz1 as /devices/virtual/input/input4463
10:46:42 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}}}, 0xf8}}, 0x0)

10:46:42 executing program 7:
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x73, 0x1, {{}, 0x81}}, 0x18)
write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}})
r0 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r0, &(0x7f0000000180)=""/8, 0x8)

10:46:42 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in=@empty=0xa, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

[  805.288350] input: syz1 as /devices/virtual/input/input4464
[  805.318583] input: syz1 as /devices/virtual/input/input4465
[  805.378990] print_req_error: I/O error, dev loop1, sector 0
10:46:42 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x4c00}, 'syz1\x00'})

10:46:42 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xf8}}, 0x0)

10:46:42 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000001, 0x0)
ioctl(r0, 0x8000000008912, &(0x7f0000000080))
r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x1, 0x1100082)
r2 = memfd_create(&(0x7f0000000140)="c8a8707470", 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)="16", 0x1}], 0x1, 0x1081806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
read(r1, &(0x7f0000000000)=""/5, 0x5)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendfile(r1, r1, &(0x7f0000000100)=0x3f00, 0xffffffff)
ioctl$LOOP_CLR_FD(r1, 0x4c01)

[  805.502075] 9pnet: Insufficient options for proto=fd
10:46:42 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x6c000000}, 'syz1\x00'})

[  805.545051] 9pnet: Insufficient options for proto=fd
10:46:42 executing program 6:
r0 = memfd_create(&(0x7f0000000100)='\x00', 0x2)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x5)
r1 = socket$inet(0x2, 0x0, 0x0)
bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @remote}, 0x10)
setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000280), 0x4)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4)
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

[  805.616376] input: syz1 as /devices/virtual/input/input4466
[  805.684180] input: syz1 as /devices/virtual/input/input4467
[  805.705747] input: syz1 as /devices/virtual/input/input4468
[  805.771225] input: syz1 as /devices/virtual/input/input4469
10:46:43 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000001, 0x0)
ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070")
r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x1, 0x1100082)
r2 = memfd_create(&(0x7f0000000140)="c8a8707470", 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)="16", 0x1}], 0x1, 0x1081806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
read(r1, &(0x7f0000000000)=""/5, 0x5)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
getpid()
fcntl$setflags(r2, 0x2, 0x0)
sendfile(r1, r1, &(0x7f0000000100)=0x3f00, 0xffffffff)

10:46:43 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in=@empty=0xa00000000000000, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:43 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000001, 0x0)
ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc8070031")
r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x1, 0x1100082)
r2 = memfd_create(&(0x7f0000000140)="c8a8707470", 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)="16", 0x1}], 0x1, 0x1081806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
read(r1, &(0x7f0000000000)=""/5, 0x5)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendfile(r1, r1, &(0x7f0000000100)=0x3f00, 0xffffffff)
ioctl$LOOP_CLR_FD(r1, 0x4c01)

10:46:43 executing program 7:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1, {{}, 0x81}}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r2, &(0x7f0000000180)=""/8, 0x8)

10:46:43 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff9e}}}}, 0xf8}}, 0x0)

10:46:43 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xfe3d}, 'syz1\x00'})

10:46:43 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x7c3}, 'syz1\x00'})

10:46:43 executing program 6:
r0 = socket$inet(0x2, 0x0, 0x0)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000280), 0x4)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4)
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
r1 = dup2(r0, r0)
ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f00000000c0)={0x5, 0x6, 0x9138, 0x1})
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

[  806.289872] input: syz1 as /devices/virtual/input/input4470
[  806.329126] input: syz1 as /devices/virtual/input/input4471
10:46:43 executing program 7:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1, {{}, 0x81}}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r2, &(0x7f0000000180)=""/8, 0x8)

10:46:43 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in=@empty=0x200b000000000000, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:43 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400300}}}}, 0xf8}}, 0x0)

[  806.414021] input: syz1 as /devices/virtual/input/input4472
[  806.447026] input: syz1 as /devices/virtual/input/input4473
[  806.471851] 9pnet: Insufficient options for proto=fd
10:46:43 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1000000}, 'syz1\x00'})

10:46:43 executing program 7:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1, {{}, 0x81}}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r2, &(0x7f0000000180)=""/8, 0x8)

10:46:44 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x72fe0000}, 'syz1\x00'})

[  806.640501] input: syz1 as /devices/virtual/input/input4474
10:46:44 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in=@empty=0x9effffff00000000, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

[  806.683090] 9pnet: Insufficient options for proto=fd
10:46:44 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff0}}}}, 0xf8}}, 0x0)

[  806.710614] input: syz1 as /devices/virtual/input/input4475
10:46:44 executing program 1:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1, {{}, 0x81}}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r2, &(0x7f0000000180)=""/8, 0x8)

[  806.763091] input: syz1 as /devices/virtual/input/input4476
10:46:44 executing program 7:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1, {{}, 0x81}}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r2, &(0x7f0000000180)=""/8, 0x8)

[  806.862257] input: syz1 as /devices/virtual/input/input4477
10:46:44 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000001, 0x0)
ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f8571")
r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x1, 0x1100082)
r2 = memfd_create(&(0x7f0000000140)="c8a8707470", 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)="16", 0x1}], 0x1, 0x1081806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
read(r1, &(0x7f0000000000)=""/5, 0x5)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendfile(r1, r1, &(0x7f0000000100)=0x3f00, 0xffffffff)
ioctl$LOOP_CLR_FD(r1, 0x4c01)

10:46:44 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x4c}, 'syz1\x00'})

10:46:44 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in=@empty=0xffffff7f00000000, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:44 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f}}}}, 0xf8}}, 0x0)

10:46:44 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x77fe}, 'syz1\x00'})

10:46:44 executing program 7:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1, {{}, 0x81}}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r2, &(0x7f0000000180)=""/8, 0x8)

10:46:44 executing program 1:
setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000280), 0x4)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4)
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @rand_addr}, 0x10)
ioctl$RTC_RD_TIME(0xffffffffffffffff, 0x80247009, &(0x7f00000000c0))
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x610, 0x1d8, 0x1d8, 0x4b0, 0x0, 0x1d8, 0x578, 0x578, 0x578, 0x578, 0x578, 0x6, &(0x7f0000000100), {[{{@uncond, 0x0, 0xe8, 0x118, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x4}}, @inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xd}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x92, 0x4, @broadcast, 0x4e24}}}, {{@uncond, 0x0, 0x98, 0xc0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0x98, 0xc0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x13}}}, {{@uncond, 0x0, 0x1e8, 0x218, 0x0, {}, [@common=@inet=@hashlimit2={0x150, 'hashlimit\x00', 0x2, {'irlan0\x00', {0x0, 0x40, 0x0, 0x8, 0x6, 0x4, 0x3, 0x18, 0x8}}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3, 0x4, @multicast1, 0x4e24}}}, {{@uncond, 0x0, 0x98, 0xc8}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x401, 0x1, @local, 0x4e22}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x670)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

10:46:44 executing program 6:
r0 = socket$inet(0x2, 0x0, 0x0)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000280), 0x4)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4)
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
mincore(&(0x7f0000c7d000/0x3000)=nil, 0x3000, &(0x7f0000002280)=""/4096)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

[  807.181813] input: syz1 as /devices/virtual/input/input4478
[  807.194221] input: syz1 as /devices/virtual/input/input4479
10:46:44 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in=@empty=0xffffff7f, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:44 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0xde010000}}}}, 0xf8}}, 0x0)

[  807.237112] input: syz1 as /devices/virtual/input/input4480
[  807.283909] print_req_error: I/O error, dev loop1, sector 104
[  807.289995] Buffer I/O error on dev loop1, logical block 13, lost async page write
[  807.359566] input: syz1 as /devices/virtual/input/input4481
10:46:44 executing program 7:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[], 0x0)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1, {{}, 0x81}}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r2, &(0x7f0000000180)=""/8, 0x8)

10:46:44 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x35fe000000000000}, 'syz1\x00'})

10:46:44 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000001, 0x0)
ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f857150")
r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x1, 0x1100082)
r2 = memfd_create(&(0x7f0000000140)="c8a8707470", 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)="16", 0x1}], 0x1, 0x1081806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
read(r1, &(0x7f0000000000)=""/5, 0x5)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendfile(r1, r1, &(0x7f0000000100)=0x3f00, 0xffffffff)
ioctl$LOOP_CLR_FD(r1, 0x4c01)

10:46:44 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f00000000}}}}, 0xf8}}, 0x0)

10:46:44 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xc2e7}, 'syz1\x00'})

10:46:44 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in=@empty=0xff020000, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

[  807.583716] input: syz1 as /devices/virtual/input/input4482
[  807.598113] input: syz1 as /devices/virtual/input/input4483
10:46:45 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000}}}}, 0xf8}}, 0x0)

10:46:45 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in=@empty=0xf0, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

[  807.652375] input: syz1 as /devices/virtual/input/input4484
[  807.680145] input: syz1 as /devices/virtual/input/input4485
10:46:45 executing program 7:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1, {{}, 0x81}}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r2, &(0x7f0000000180)=""/8, 0x8)

10:46:45 executing program 1:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[], 0x0)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1, {{}, 0x81}}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r2, &(0x7f0000000180)=""/8, 0x8)

10:46:45 executing program 6:
r0 = socket$inet(0x2, 0x0, 0x0)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f00000001c0), 0xffffff7b)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x80, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @rand_addr}, 0x10)
getsockname$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, &(0x7f0000000140)=0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = gettid()
sched_getscheduler(r2)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000002280)=""/4096)

10:46:45 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x4c00000000000000}, 'syz1\x00'})

10:46:45 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x97ffffff00000000}, 'syz1\x00'})

10:46:45 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf}}}}, 0xf8}}, 0x0)

10:46:45 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast, 0xf000000}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:45 executing program 7:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0"], 0x15)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1, {{}, 0x81}}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r2, &(0x7f0000000180)=""/8, 0x8)

10:46:45 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x4c}, 'syz1\x00'})

[  808.040545] input: syz1 as /devices/virtual/input/input4486
[  808.049134] input: syz1 as /devices/virtual/input/input4487
10:46:45 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1de}}}}, 0xf8}}, 0x0)

[  808.141064] input: syz1 as /devices/virtual/input/input4488
[  808.156842] input: syz1 as /devices/virtual/input/input4489
[  808.240687] input: syz1 as /devices/virtual/input/input4490
10:46:45 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000001, 0x0)
ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070")
r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1100082)
r2 = memfd_create(&(0x7f0000000140)="c8a8707470", 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)="16", 0x1}], 0x1, 0x1081806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
read(r1, &(0x7f0000000000)=""/5, 0x5)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendfile(r1, r1, &(0x7f0000000100)=0x3f00, 0xffffffff)
ioctl$LOOP_CLR_FD(r1, 0x4c01)

10:46:45 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast, 0xa00000000000000}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:45 executing program 7:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e"], 0x20)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1, {{}, 0x81}}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r2, &(0x7f0000000180)=""/8, 0x8)

10:46:45 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x800c020000000000}, 'syz1\x00'})

10:46:45 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xac30000}, 'syz1\x00'})

10:46:45 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}}}}, 0xf8}}, 0x0)

10:46:45 executing program 6:
r0 = socket$inet(0x2, 0x0, 0x0)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000280), 0x4)
r1 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0xa4000)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x2be8, 0x3}, 0xfffffffffffffe69)
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x4)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

10:46:45 executing program 1:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0xa000000}}}}, 0xf8}}, 0x0)

[  808.497772] input: syz1 as /devices/virtual/input/input4491
[  808.517613] input: syz1 as /devices/virtual/input/input4492
10:46:45 executing program 1:
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x81, 0x3f}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

10:46:45 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0xde01000000000000}}}}, 0xf8}}, 0x0)

10:46:45 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000001, 0x0)
ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070")
r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x1, 0x0)
r2 = memfd_create(&(0x7f0000000140)="c8a8707470", 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)="16", 0x1}], 0x1, 0x1081806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
read(r1, &(0x7f0000000000)=""/5, 0x5)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendfile(r1, r1, &(0x7f0000000100)=0x3f00, 0xffffffff)
ioctl$LOOP_CLR_FD(r1, 0x4c01)

[  808.555455] input: syz1 as /devices/virtual/input/input4493
10:46:46 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast, 0xffffff7f00000000}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:46 executing program 7:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11"], 0x25)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1, {{}, 0x81}}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r2, &(0x7f0000000180)=""/8, 0x8)

[  808.611508] input: syz1 as /devices/virtual/input/input4494
10:46:46 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x14080000}, 'syz1\x00'})

10:46:46 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x97ffffff}, 'syz1\x00'})

10:46:46 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}}}}, 0xf8}}, 0x0)

10:46:46 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast, 0xf0ffffff}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

[  808.860858] input: syz1 as /devices/virtual/input/input4495
10:46:46 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000001, 0x0)
ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070")
r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x1, 0x1100082)
r2 = memfd_create(&(0x7f0000000140)="c8a8707470", 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)="16", 0x1}], 0x1, 0x1081806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
read(r1, &(0x7f0000000000)=""/5, 0x5)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendfile(r1, r1, &(0x7f0000000100)=0x3f00, 0xffffffff)
ioctl$LOOP_CLR_FD(r1, 0x4c01)

10:46:46 executing program 6:
r0 = socket$inet(0x2, 0x0, 0x0)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000280), 0x4)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4)
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @rand_addr}, 0x10)
mmap(&(0x7f0000fb6000/0x1000)=nil, 0x1000, 0x1000008, 0x10, r0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

[  808.906851] input: syz1 as /devices/virtual/input/input4496
10:46:46 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast, 0x9effffff}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

[  808.965101] input: syz1 as /devices/virtual/input/input4497
10:46:46 executing program 7:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f87"], 0x28)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1, {{}, 0x81}}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r2, &(0x7f0000000180)=""/8, 0x8)

[  809.017504] input: syz1 as /devices/virtual/input/input4498
10:46:46 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000001, 0x0)
ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070")
r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x1, 0x1100082)
r2 = memfd_create(&(0x7f0000000140)="c8a8707470", 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)="16", 0x1}], 0x1, 0x1081806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
read(r1, &(0x7f0000000000)=""/5, 0x5)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendfile(r1, r1, &(0x7f0000000100)=0x3f00, 0xffffffff)
ioctl$LOOP_CLR_FD(r1, 0x4c01)

10:46:46 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0xff02}}}}, 0xf8}}, 0x0)

10:46:46 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x39fe0000}, 'syz1\x00'})

10:46:46 executing program 1:
pipe2(&(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x4800)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000100)={0xe2, 0x4, 0xffffffffffff5d3e, 0x5, 0xf6, 0xfffffffffffffffd, 0x6}, 0xc)
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

10:46:46 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast, 0xa00}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:46 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x48000000}, 'syz1\x00'})

10:46:46 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000001, 0x0)
ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070")
r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x1, 0x1100082)
r2 = memfd_create(&(0x7f0000000140)="c8a8707470", 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)="16", 0x1}], 0x1, 0x1081806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
read(r1, &(0x7f0000000000)=""/5, 0x5)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendfile(r1, r1, &(0x7f0000000100)=0x3f00, 0xffffffff)
ioctl$LOOP_CLR_FD(r1, 0x4c01)

10:46:46 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000}}}}, 0xf8}}, 0x0)

[  809.327443] input: syz1 as /devices/virtual/input/input4499
[  809.358617] input: syz1 as /devices/virtual/input/input4500
10:46:46 executing program 7:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f8724"], 0x29)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1, {{}, 0x81}}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r2, &(0x7f0000000180)=""/8, 0x8)

10:46:46 executing program 6:
r0 = socket$inet(0x2, 0x0, 0x0)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000180)=0x20000000, 0x4)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4)
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

10:46:46 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast, 0x2ff}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

[  809.450029] input: syz1 as /devices/virtual/input/input4501
[  809.491265] input: syz1 as /devices/virtual/input/input4502
10:46:46 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000001, 0x0)
ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070")
r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x1, 0x1100082)
r2 = memfd_create(&(0x7f0000000140)="c8a8707470", 0x0)
pwritev(r2, &(0x7f0000000340), 0x0, 0x1081806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
read(r1, &(0x7f0000000000)=""/5, 0x5)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendfile(r1, r1, &(0x7f0000000100)=0x3f00, 0xffffffff)
ioctl$LOOP_CLR_FD(r1, 0x4c01)

10:46:47 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff000}}}}, 0xf8}}, 0x0)

10:46:47 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x9c3}, 'syz1\x00'})

10:46:47 executing program 7:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1, {{}, 0x81}}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r2, &(0x7f0000000180)=""/8, 0x8)

10:46:47 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x10}, 'syz1\x00'})

10:46:47 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast, 0x200000000000000}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

[  809.764788] input: syz1 as /devices/virtual/input/input4503
10:46:47 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x300}}}}, 0xf8}}, 0x0)

10:46:47 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000001, 0x0)
ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070")
r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x1, 0x1100082)
r2 = memfd_create(&(0x7f0000000140)="c8a8707470", 0x0)
pwritev(r2, &(0x7f0000000340), 0x0, 0x1081806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
read(r1, &(0x7f0000000000)=""/5, 0x5)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendfile(r1, r1, &(0x7f0000000100)=0x3f00, 0xffffffff)
ioctl$LOOP_CLR_FD(r1, 0x4c01)

[  809.854447] input: syz1 as /devices/virtual/input/input4505
[  809.872021] input: syz1 as /devices/virtual/input/input4504
[  809.981331] input: syz1 as /devices/virtual/input/input4506
10:46:47 executing program 1:
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
r0 = msgget(0x3, 0xc0)
msgsnd(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000000e4b0b4e890f4ca73e4da3e984431bb79b8039a115ca8d4a82e55cbe9d4ea1f17fbffb35ae4b709bd362a8c5e5a740abfb6989db36d62193a4e3a659b20933bcc6cfd6203ddeed0c872a714b7b31e994115adc561672cba9489cba247a12f94a2b3b89eb1012a62f63e5056f1294cb58ceee056db99f07ab52a8c9fd7d8ffb3dd79ca284c786a02488fd4eb8b6d4e00800000f804859ab285645cf857f88cebba837eef715be7950ce21912abbb9d4db029b6f2e07b29bb0d919d87d8220db7bcd005613bcae6430ff7db1be89c191d1b036328a6"], 0xe6, 0x800)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sync_file_range(r1, 0x0, 0x6, 0x7)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

10:46:47 executing program 7:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1, {{}, 0x81}}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r2, &(0x7f0000000180)=""/8, 0x8)

10:46:47 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast, 0x1000000}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:47 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xc2f5}, 'syz1\x00'})

10:46:47 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000001, 0x0)
ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070")
r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x1, 0x1100082)
r2 = memfd_create(&(0x7f0000000140)="c8a8707470", 0x0)
pwritev(r2, &(0x7f0000000340), 0x0, 0x1081806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
read(r1, &(0x7f0000000000)=""/5, 0x5)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendfile(r1, r1, &(0x7f0000000100)=0x3f00, 0xffffffff)
ioctl$LOOP_CLR_FD(r1, 0x4c01)

10:46:47 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0}}}}, 0xf8}}, 0x0)

[  810.175096] input: syz1 as /devices/virtual/input/input4507
10:46:47 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xfe3e}, 'syz1\x00'})

10:46:47 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf00}}}}, 0xf8}}, 0x0)

10:46:47 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast, 0xf0ffff}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:47 executing program 6:
r0 = socket$inet(0x2, 0x0, 0x0)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000280), 0x4)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4)
sendto$inet(r0, &(0x7f0000865000), 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)
r1 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x200, 0x0)
ioctl$KVM_SET_XSAVE(r1, 0x5000aea5, &(0x7f00000002c0)={"c5adf0f7ef2c9f500a7d31bfe9d35e715f2fce14d2e883752326245f81f79ab5cd63edb20ecacc3af60ac650b80edc559138ddd5e3d99334d55f0dd717c7c108fa4e2c309d1be01e037a41b52cae5d4ff0461e4e2f9f1cd25b30d7c806a17226d0607fc7c9cc687becc4f9ce683f812d878b137f8220f1fc2261810a66e5c0e728aa10ee92314c45c9e2de6597e623d7071809d408394926fed6e4fe8e2dc57919d7b087fdb8b3ee5eeca0bbb2e5e15cd8e2ba89a84ff0fb049b75ba43fc610e46c79b9a19f0c7803c02208cc94eb56be4d8b7bc223405b9bd58b47ce2ce98a6cca8d20f71472307f6d5b55e78c62dcdc01258cc2deffc67211ffb1e2755678e67d1eddd0213fa0e9cc63a1ccdb367179bbdbe24c7c92a21fce2e8f3d249e8f0bb6c89f26eb6b282c340b71ffe9ba9f729da36bbd43fcdd75bab210eb23f60e9d8bf74f638cc370b758fe7bcd3cc53ca529145693db86616719629606f44c4f28fe978a2eea3f81ed18beadea6f0e24f399c2b0c6883670465e1c1142e42e2cf97b65a2f0019bafb4903e26606cab8d8011ba1ec311b198379f14d7bc0aa57506c95854c02b8abb5993773f02cbf7eb87995d4772b5b4125719cecc53e03c30743b1196a56b24c7042ca9d51fb7f2aaa999d6723afaca5b8d2d52d0176d642a2a6a4a76c6bb5f5d5fe62ee1e7466603cfbcf9eafb37411507c7e4444cd0ac8403eac002f1bd452c89a5145190fc9ee3fc86803ebfebe35fbc770ce1aadff821e9d26553c8a668e93f133ce3bb686e616662ac9effbcb671370a8104cb86fb03a497635aae474dfbf6653a6124e655ce870d979a4a80925301538ee7a09f3eb197842893596dc087194a2551234ceb623215efe4b8a71191c44f6ea6cd541a5afb2274f3ad634be5e0f2c317a220b987308748b3e09934e905b57dafa2dc7d2b2262e4c3f08113a1cfdbba77a291efa48968ae4b5eb1e8b07e570ff79919ee64e18f95d9e4494d72eea6b6a5505bf304a9256319c8b47af6fd1c3d50337bb675354aa8bf954fbf26f9bb03bc4e799ae4abaaf79b0a5b5dcf3abe3617d4b39e07914ac579b676662703d1d39f729af67a122f836a87f0cd05763100b881571d8340663021ddcc63e72fde8fd9869626b66f755e37871901f4beca6afb00a4f2db2be39393a361fd25ee926068913e63d704da1426299e1dc01de6172cd67b6f4c4ba5eb67cb8a217c1f75054bc2d700b86d6376751fec1fd04547c95275c1cbf7190ab506c013df3dd5cfb15e8077e38cf8ae9e2247aa40c1909313be4b983f470337d6ac40a419fc31f4213aec6819224446c9789f76e28acb2271c17beed118a320e2dd259e43c5c92d04ea66974ed20ea4406c521ab983c0fac809997e78fc701ed8631b54542f972b429dbcdef94696ef697bd156d7e6c61e92bfc6f3fe91a"})

10:46:47 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000001, 0x0)
ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070")
r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x1, 0x1100082)
r2 = memfd_create(&(0x7f0000000140)="c8a8707470", 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)}], 0x1, 0x1081806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
read(r1, &(0x7f0000000000)=""/5, 0x5)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendfile(r1, r1, &(0x7f0000000100)=0x3f00, 0xffffffff)
ioctl$LOOP_CLR_FD(r1, 0x4c01)

[  810.292510] input: syz1 as /devices/virtual/input/input4508
10:46:47 executing program 1:
r0 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$reject(0x13, r0, 0x80, 0x9, r1)
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getrusage(0x1, &(0x7f00000000c0))
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

10:46:47 executing program 7:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1, {{}, 0x81}}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r2, &(0x7f0000000180)=""/8, 0x8)

[  810.350037] input: syz1 as /devices/virtual/input/input4509
10:46:47 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2ff}}}}, 0xf8}}, 0x0)

10:46:47 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast, 0x200b}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

[  810.432405] input: syz1 as /devices/virtual/input/input4510
10:46:47 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x5}, 'syz1\x00'})

10:46:47 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000001, 0x0)
ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070")
r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x1, 0x1100082)
r2 = memfd_create(&(0x7f0000000140)="c8a8707470", 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)}], 0x1, 0x1081806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
read(r1, &(0x7f0000000000)=""/5, 0x5)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendfile(r1, r1, &(0x7f0000000100)=0x3f00, 0xffffffff)
ioctl$LOOP_CLR_FD(r1, 0x4c01)

10:46:48 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x6800000000000000}, 'syz1\x00'})

10:46:48 executing program 7:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1, {{}, 0x81}}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r2, &(0x7f0000000180)=""/8, 0x8)

10:46:48 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0xff020000}}}}, 0xf8}}, 0x0)

10:46:48 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast, 0xf0}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

[  810.669563] input: syz1 as /devices/virtual/input/input4512
10:46:48 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000001, 0x0)
ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070")
r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x1, 0x1100082)
r2 = memfd_create(&(0x7f0000000140)="c8a8707470", 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)}], 0x1, 0x1081806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
read(r1, &(0x7f0000000000)=""/5, 0x5)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendfile(r1, r1, &(0x7f0000000100)=0x3f00, 0xffffffff)
ioctl$LOOP_CLR_FD(r1, 0x4c01)

10:46:48 executing program 6:
r0 = socket$inet(0x2, 0x4, 0x1004)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000280), 0xffffffffffffff71)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000180), 0x4)
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @rand_addr}, 0x10)
ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0))
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x8000, 0x0)
bind$bt_rfcomm(r1, &(0x7f0000000140)={0x1f, {0x100, 0x4, 0x3, 0xfffffffffffffff7, 0x6}, 0xfff}, 0xa)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

[  810.785632] input: syz1 as /devices/virtual/input/input4513
10:46:48 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}}}}, 0xf8}}, 0x0)

10:46:48 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xfdfdffff00000000}, 'syz1\x00'})

10:46:48 executing program 7:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x73, 0x1, {{}, 0x81}}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r2, &(0x7f0000000180)=""/8, 0x8)

[  810.881662] input: syz1 as /devices/virtual/input/input4514
10:46:48 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast, 0x34000}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

[  811.028881] input: syz1 as /devices/virtual/input/input4515
10:46:48 executing program 1:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:48 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000001, 0x0)
ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070")
r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x1, 0x1100082)
r2 = memfd_create(&(0x7f0000000140)="c8a8707470", 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)="16", 0x1}], 0x1, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
read(r1, &(0x7f0000000000)=""/5, 0x5)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendfile(r1, r1, &(0x7f0000000100)=0x3f00, 0xffffffff)
ioctl$LOOP_CLR_FD(r1, 0x4c01)

10:46:48 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}}}}, 0xf8}}, 0x0)

[  811.097061] input: syz1 as /devices/virtual/input/input4516
10:46:48 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xf508}, 'syz1\x00'})

10:46:48 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast, 0x40030000000000}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:48 executing program 7:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x0, {{}, 0x81}}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r2, &(0x7f0000000180)=""/8, 0x8)

10:46:48 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000001, 0x0)
ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070")
r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x1, 0x1100082)
r2 = memfd_create(&(0x7f0000000140)="c8a8707470", 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)="16", 0x1}], 0x1, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
read(r1, &(0x7f0000000000)=""/5, 0x5)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendfile(r1, r1, &(0x7f0000000100)=0x3f00, 0xffffffff)
ioctl$LOOP_CLR_FD(r1, 0x4c01)

10:46:48 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xe4ffffff}, 'syz1\x00'})

10:46:48 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00}}}}, 0xf8}}, 0x0)

[  811.279557] input: syz1 as /devices/virtual/input/input4517
10:46:48 executing program 1:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x40030000000000}}}}, 0xf8}}, 0x0)

[  811.396028] input: syz1 as /devices/virtual/input/input4518
10:46:48 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast, 0xa000000}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

[  811.445155] input: syz1 as /devices/virtual/input/input4519
10:46:48 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x600}, 'syz1\x00'})

10:46:48 executing program 7:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r2, &(0x7f0000000180)=""/8, 0x8)

10:46:48 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000001, 0x0)
ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070")
r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x1, 0x1100082)
r2 = memfd_create(&(0x7f0000000140)="c8a8707470", 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)="16", 0x1}], 0x1, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
read(r1, &(0x7f0000000000)=""/5, 0x5)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendfile(r1, r1, &(0x7f0000000100)=0x3f00, 0xffffffff)
ioctl$LOOP_CLR_FD(r1, 0x4c01)

10:46:48 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}}}}, 0xf8}}, 0x0)

10:46:48 executing program 6:
r0 = socket$inet(0x2, 0x0, 0x0)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000280), 0x4)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4)
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @rand_addr}, 0x10)
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x8000, 0x0)
write$UHID_INPUT(r1, &(0x7f00000002c0)={0x8, "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", 0x1000}, 0xfffffffffffffd4e)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
r2 = dup(r0)
getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x82, &(0x7f0000000140)={'broute\x00'}, &(0x7f00000001c0)=0x78)
getsockname$llc(r2, &(0x7f00000000c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000100)=0x10)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f0000ff0000/0x10000)=nil, 0x10000, &(0x7f0000002280)=""/4096)

[  811.539730] input: syz1 as /devices/virtual/input/input4520
10:46:48 executing program 1:
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}})
add_key(&(0x7f0000000100)='encrypted\x00', &(0x7f0000000140), &(0x7f0000000180), 0x0, 0xfffffffffffffffe)
epoll_create1(0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

10:46:49 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast, 0x2000000}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:49 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xf6c20000}, 'syz1\x00'})

[  811.703320] input: syz1 as /devices/virtual/input/input4521
10:46:49 executing program 7:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r2, &(0x7f0000000180)=""/8, 0x8)

10:46:49 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000001, 0x0)
ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070")
r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x1, 0x1100082)
r2 = memfd_create(&(0x7f0000000140)="c8a8707470", 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)="16", 0x1}], 0x1, 0x1081806)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r2)
read(r1, &(0x7f0000000000)=""/5, 0x5)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendfile(r1, r1, &(0x7f0000000100)=0x3f00, 0xffffffff)
ioctl$LOOP_CLR_FD(r1, 0x4c01)

10:46:49 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc88d642b4e000000}}}}, 0xf8}}, 0x0)

[  811.842864] input: syz1 as /devices/virtual/input/input4522
[  811.924340] input: syz1 as /devices/virtual/input/input4523
10:46:49 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffffff}}}}, 0xf8}}, 0x0)

10:46:49 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x10000000}, 'syz1\x00'})

10:46:49 executing program 7:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r2, &(0x7f0000000180)=""/8, 0x8)

10:46:49 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast, 0x300000000000000}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

[  812.002327] input: syz1 as /devices/virtual/input/input4524
10:46:49 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000001, 0x0)
ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070")
r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x1, 0x1100082)
r2 = memfd_create(&(0x7f0000000140)="c8a8707470", 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)="16", 0x1}], 0x1, 0x1081806)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r2)
read(r1, &(0x7f0000000000)=""/5, 0x5)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendfile(r1, r1, &(0x7f0000000100)=0x3f00, 0xffffffff)
ioctl$LOOP_CLR_FD(r1, 0x4c01)

10:46:49 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x8c30000}, 'syz1\x00'})

[  812.149480] input: syz1 as /devices/virtual/input/input4525
10:46:49 executing program 6:
r0 = socket$inet(0x2, 0x0, 0x0)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000180), 0xfb)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4)
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000575ff0)={&(0x7f0000333f88)={0x2, 0x3, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x40000000000006, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x20000000000005, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}]}, 0x50}}, 0x0)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000280)='/dev/vcs#\x00', 0x6f696294, 0xa0000)
ioctl$sock_bt_bnep_BNEPGETCONNINFO(r3, 0x800442d3, &(0x7f00000002c0)={0xfff, 0xceb, 0x8, @random="841853f66d97", 'ip6_vti0\x00'})
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)
setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000100)=0x1, 0x4)
r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x400, 0x0)
ioctl$EVIOCREVOKE(r4, 0x40044591, &(0x7f0000000300)=0x9d)
ioctl$SCSI_IOCTL_TEST_UNIT_READY(r4, 0x2)
ioctl$SG_SET_DEBUG(r4, 0x227e, &(0x7f0000000140))
sendfile(r1, r2, &(0x7f0000000340), 0x3f)
select(0x40, &(0x7f0000000380)={0xffffffffffffa447, 0x7fff, 0xf80b, 0x1ff, 0x9, 0x8, 0xfc1, 0x8000}, &(0x7f00000003c0)={0x4, 0x2, 0x1, 0xfffffffffffffffb, 0x4, 0x8000, 0x800, 0x40}, &(0x7f0000000400)={0x14, 0x8, 0x8, 0x9, 0x7fff, 0x5, 0x8, 0x401}, &(0x7f0000000440)={0x0, 0x7530})
ioctl$SG_SET_DEBUG(r4, 0x227e, &(0x7f0000000200)=0x1)
ioctl$UFFDIO_WAKE(r4, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000bb4000/0x4000)=nil, 0x4000})
ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000240))

10:46:49 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f}}}}, 0xf8}}, 0x0)

[  812.246078] input: syz1 as /devices/virtual/input/input4526
10:46:49 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast, 0xff020000}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:49 executing program 7:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1, {{}, 0x81}}, 0x18)
write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r2, &(0x7f0000000180)=""/8, 0x8)

10:46:49 executing program 1:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r2, &(0x7f0000000180)=""/8, 0x8)

10:46:49 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000001, 0x0)
ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070")
r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x1, 0x1100082)
r2 = memfd_create(&(0x7f0000000140)="c8a8707470", 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)="16", 0x1}], 0x1, 0x1081806)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r2)
read(r1, &(0x7f0000000000)=""/5, 0x5)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendfile(r1, r1, &(0x7f0000000100)=0x3f00, 0xffffffff)
ioctl$LOOP_CLR_FD(r1, 0x4c01)

[  812.347047] input: syz1 as /devices/virtual/input/input4527
10:46:49 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xfe4b}, 'syz1\x00'})

10:46:49 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf000}}}}, 0xf8}}, 0x0)

[  812.442406] input: syz1 as /devices/virtual/input/input4528
10:46:49 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000001, 0x0)
ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070")
r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x1, 0x1100082)
r2 = memfd_create(&(0x7f0000000140)="c8a8707470", 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)="16", 0x1}], 0x1, 0x1081806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, 0xffffffffffffffff)
read(r1, &(0x7f0000000000)=""/5, 0x5)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendfile(r1, r1, &(0x7f0000000100)=0x3f00, 0xffffffff)
ioctl$LOOP_CLR_FD(r1, 0x4c01)

10:46:49 executing program 1:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r2, &(0x7f0000000180)=""/8, 0x8)

10:46:49 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast, 0xf000}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:49 executing program 7:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1, {{}, 0x81}}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r2, &(0x7f0000000180)=""/8, 0x8)

[  812.572186] input: syz1 as /devices/virtual/input/input4529
10:46:50 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xf8c20000}, 'syz1\x00'})

10:46:50 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffff}}}}, 0xf8}}, 0x0)

[  812.707060] input: syz1 as /devices/virtual/input/input4530
[  812.748354] input: syz1 as /devices/virtual/input/input4531
10:46:50 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast, 0xff02}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:50 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000001, 0x0)
ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070")
r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x1, 0x1100082)
r2 = memfd_create(&(0x7f0000000140)="c8a8707470", 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)="16", 0x1}], 0x1, 0x1081806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, 0xffffffffffffffff)
read(r1, &(0x7f0000000000)=""/5, 0x5)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendfile(r1, r1, &(0x7f0000000100)=0x3f00, 0xffffffff)
ioctl$LOOP_CLR_FD(r1, 0x4c01)

[  812.812852] input: syz1 as /devices/virtual/input/input4532
10:46:50 executing program 1:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r2, &(0x7f0000000180)=""/8, 0x8)

10:46:50 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x6000000}, 'syz1\x00'})

10:46:50 executing program 7:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1, {{}, 0x81}}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r2, &(0x7f0000000180)=""/8, 0x8)

10:46:50 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xcc3}, 'syz1\x00'})

10:46:50 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}}}}, 0xf8}}, 0x0)

10:46:50 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000001, 0x0)
ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070")
r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x1, 0x1100082)
r2 = memfd_create(&(0x7f0000000140)="c8a8707470", 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)="16", 0x1}], 0x1, 0x1081806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, 0xffffffffffffffff)
read(r1, &(0x7f0000000000)=""/5, 0x5)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendfile(r1, r1, &(0x7f0000000100)=0x3f00, 0xffffffff)
ioctl$LOOP_CLR_FD(r1, 0x4c01)

10:46:50 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast, 0xa}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:50 executing program 6:
r0 = socket$inet(0x2, 0x0, 0x0)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000280), 0x4)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4)
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x41a3, {0x2, 0x4e24, @rand_addr=0x5}, {0x2, 0x4e20, @multicast2}, {0x2, 0x1f, @remote}, 0xc2, 0x138, 0x1, 0xcc2, 0x5, &(0x7f00000000c0)='bond0\x00', 0x1000000000000000, 0xffffffff, 0x2c})
mincore(&(0x7f0000c19000/0x2000)=nil, 0x2000, &(0x7f0000003280)=""/4096)

[  813.115661] input: syz1 as /devices/virtual/input/input4533
[  813.135273] input: syz1 as /devices/virtual/input/input4534
[  813.163585] 9pnet: Insufficient options for proto=fd
10:46:50 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}}}}, 0xf8}}, 0x0)

10:46:50 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast, 0x3}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:50 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000001, 0x0)
ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070")
r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x1, 0x1100082)
r2 = memfd_create(&(0x7f0000000140)="c8a8707470", 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)="16", 0x1}], 0x1, 0x1081806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
read(0xffffffffffffffff, &(0x7f0000000000)=""/5, 0x5)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendfile(r1, r1, &(0x7f0000000100)=0x3f00, 0xffffffff)
ioctl$LOOP_CLR_FD(r1, 0x4c01)

[  813.196150] input: syz1 as /devices/virtual/input/input4536
[  813.220376] input: syz1 as /devices/virtual/input/input4535
10:46:50 executing program 7:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1, {{}, 0x81}}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}})
r2 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r2, &(0x7f0000000180)=""/8, 0x8)

10:46:50 executing program 1:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
getdents(0xffffffffffffffff, &(0x7f0000000180)=""/8, 0x8)

10:46:50 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x34fe}, 'syz1\x00'})

10:46:50 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast, 0x100000000000000}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:50 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff9e}}}}, 0xf8}}, 0x0)

10:46:50 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xffffffe4}, 'syz1\x00'})

[  813.468500] 9pnet: Insufficient options for proto=fd
[  813.489210] print_req_error: I/O error, dev loop1, sector 376
[  813.492723] 9pnet: Insufficient options for proto=fd
[  813.495242] Buffer I/O error on dev loop1, logical block 47, lost async page write
10:46:50 executing program 6:
r0 = socket$inet(0x2, 0x0, 0x0)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000280), 0x4)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4)
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)
syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0xfff, 0x0)

10:46:51 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff02000000000000}}}}, 0xf8}}, 0x0)

[  813.571766] input: syz1 as /devices/virtual/input/input4537
[  813.580712] input: syz1 as /devices/virtual/input/input4538
10:46:51 executing program 1:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
r2 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r2, &(0x7f0000000180)=""/8, 0x8)

10:46:51 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000001, 0x0)
ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070")
r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x1, 0x1100082)
r2 = memfd_create(&(0x7f0000000140)="c8a8707470", 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)="16", 0x1}], 0x1, 0x1081806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
read(0xffffffffffffffff, &(0x7f0000000000)=""/5, 0x5)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendfile(r1, r1, &(0x7f0000000100)=0x3f00, 0xffffffff)
ioctl$LOOP_CLR_FD(r1, 0x4c01)

10:46:51 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast, 0x9effffff00000000}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:51 executing program 7:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1, {{}, 0x81}}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(0xffffffffffffffff, &(0x7f0000000180)=""/8, 0x8)

[  813.682791] input: syz1 as /devices/virtual/input/input4540
[  813.693501] input: syz1 as /devices/virtual/input/input4539
10:46:51 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f00000000}}}}, 0xf8}}, 0x0)

10:46:51 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast, 0x3000000}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:51 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x4afe}, 'syz1\x00'})

10:46:51 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xe5c2}, 'syz1\x00'})

10:46:51 executing program 1:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1}, 0x18)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r2, &(0x7f0000000180)=""/8, 0x8)

[  813.876220] print_req_error: I/O error, dev loop1, sector 280
[  813.882385] print_req_error: I/O error, dev loop1, sector 1304
10:46:51 executing program 7:
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x10000, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000100)={0x7f, @remote, 0x4e24, 0x0, 'lblcr\x00', 0xa, 0x1eb9, 0x3a}, 0x2c)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snapshot\x00', 0x12001, 0x0)
ioctl$sock_bt_bnep_BNEPCONNDEL(r1, 0x400442c9, &(0x7f00000003c0)={0x3, @dev={[], 0x12}})

10:46:51 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffffffffffff}}}}, 0xf8}}, 0x0)

[  813.993034] input: syz1 as /devices/virtual/input/input4541
10:46:51 executing program 6:
r0 = socket$inet(0x2, 0x0, 0x0)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000280), 0x4)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4)
r1 = dup(r0)
ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, [0x4, 0x5, 0x200, 0x100000000]})
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

[  814.069619] input: syz1 as /devices/virtual/input/input4542
10:46:51 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast, 0x300}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:51 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000001, 0x0)
ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070")
r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x1, 0x1100082)
r2 = memfd_create(&(0x7f0000000140)="c8a8707470", 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)="16", 0x1}], 0x1, 0x1081806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
read(0xffffffffffffffff, &(0x7f0000000000)=""/5, 0x5)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendfile(r1, r1, &(0x7f0000000100)=0x3f00, 0xffffffff)
ioctl$LOOP_CLR_FD(r1, 0x4c01)

[  814.138673] input: syz1 as /devices/virtual/input/input4543
[  814.164956] input: syz1 as /devices/virtual/input/input4544
10:46:51 executing program 1:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r2, &(0x7f0000000180)=""/8, 0x8)

10:46:51 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde01000000000000}}}}, 0xf8}}, 0x0)

10:46:51 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x7cfe000000000000}, 'syz1\x00'})

10:46:51 executing program 7:
r0 = socket$inet(0x2, 0x0, 0x0)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000280), 0x4)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4)
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00600, &(0x7f0000001280)=""/4096)

10:46:51 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xc305}, 'syz1\x00'})

10:46:51 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast, 0xfffffff0}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:51 executing program 1:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r2, &(0x7f0000000180)=""/8, 0x8)

[  814.446666] print_req_error: I/O error, dev loop1, sector 248
[  814.452742] Buffer I/O error on dev loop1, logical block 31, lost async page write
[  814.458270] input: syz1 as /devices/virtual/input/input4545
10:46:51 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}}}}, 0xf8}}, 0x0)

10:46:51 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast, 0x2}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:52 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000001, 0x0)
ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070")
r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x1, 0x1100082)
r2 = memfd_create(&(0x7f0000000140)="c8a8707470", 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)="16", 0x1}], 0x1, 0x1081806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
read(r1, &(0x7f0000000000)=""/5, 0x5)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendfile(0xffffffffffffffff, r1, &(0x7f0000000100)=0x3f00, 0xffffffff)
ioctl$LOOP_CLR_FD(r1, 0x4c01)

[  814.590873] input: syz1 as /devices/virtual/input/input4546
[  814.618802] input: syz1 as /devices/virtual/input/input4547
10:46:52 executing program 1:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r2, &(0x7f0000000180)=""/8, 0x8)

[  814.671550] input: syz1 as /devices/virtual/input/input4548
10:46:52 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x72fe000000000000}, 'syz1\x00'})

10:46:52 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast, 0xffffff9e}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:52 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0}}}}, 0xf8}}, 0x0)

10:46:52 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xac27010000000000}, 'syz1\x00'})

[  814.860455] input: syz1 as /devices/virtual/input/input4549
10:46:52 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000001, 0x0)
ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070")
r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x1, 0x1100082)
r2 = memfd_create(&(0x7f0000000140)="c8a8707470", 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)="16", 0x1}], 0x1, 0x1081806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
read(r1, &(0x7f0000000000)=""/5, 0x5)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendfile(r1, 0xffffffffffffffff, &(0x7f0000000100)=0x3f00, 0xffffffff)
ioctl$LOOP_CLR_FD(r1, 0x4c01)

10:46:52 executing program 6:
r0 = socket$inet(0x2, 0x0, 0x0)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000280), 0x4)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4)
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @rand_addr}, 0x10)
setsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f00000000c0)=0x2, 0x4)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

10:46:52 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast, 0xf}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

[  814.937985] input: syz1 as /devices/virtual/input/input4550
10:46:52 executing program 1:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r2, &(0x7f0000000180)=""/8, 0x8)

[  814.996141] input: syz1 as /devices/virtual/input/input4551
10:46:52 executing program 7:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r2, &(0x7f0000000180)=""/8, 0x8)

10:46:52 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000001, 0x0)
ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070")
r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x1, 0x1100082)
r2 = memfd_create(&(0x7f0000000140)="c8a8707470", 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)="16", 0x1}], 0x1, 0x1081806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
read(r1, &(0x7f0000000000)=""/5, 0x5)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendfile(r1, r1, &(0x7f0000000100), 0xffffffff)
ioctl$LOOP_CLR_FD(r1, 0x4c01)

10:46:52 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1de}}}}, 0xf8}}, 0x0)

10:46:52 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xf000000}, 'syz1\x00'})

10:46:52 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast, 0xb20}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:52 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x6c00000000000000}, 'syz1\x00'})

10:46:52 executing program 1:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r2, &(0x7f0000000180)=""/8, 0x8)

[  815.280318] input: syz1 as /devices/virtual/input/input4552
10:46:52 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2ff}}}}, 0xf8}}, 0x0)

[  815.355840] input: syz1 as /devices/virtual/input/input4553
[  815.375575] print_req_error: I/O error, dev loop1, sector 0
10:46:52 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast, 0x200b0000}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

[  815.404349] input: syz1 as /devices/virtual/input/input4554
10:46:52 executing program 7:
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
mmap(&(0x7f0000b86000/0x4000)=nil, 0x4000, 0x2000000, 0x31, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x800)
r1 = syz_open_dev$midi(&(0x7f0000000240)='/dev/midi#\x00', 0x1, 0x8000)
tee(r0, r1, 0x3, 0x1)
socketpair(0x10, 0x80003, 0x6, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
readlinkat(r2, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=""/159, 0x9f)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe2(&(0x7f0000000280), 0x84000)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

10:46:52 executing program 1:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r2, &(0x7f0000000180)=""/8, 0x8)

10:46:52 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000001, 0x0)
ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070")
r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x1, 0x1100082)
r2 = memfd_create(&(0x7f0000000140)="c8a8707470", 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)="16", 0x1}], 0x1, 0x1081806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
read(r1, &(0x7f0000000000)=""/5, 0x5)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendfile(r1, r1, &(0x7f0000000100), 0xffffffff)
ioctl$LOOP_CLR_FD(r1, 0x4c01)

[  815.504326] input: syz1 as /devices/virtual/input/input4555
10:46:52 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x7afe0000}, 'syz1\x00'})

[  815.679591] input: syz1 as /devices/virtual/input/input4556
10:46:53 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast, 0xaf464e2a11}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:53 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000}}}}, 0xf8}}, 0x0)

10:46:53 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xfdfdffff}, 'syz1\x00'})

10:46:53 executing program 1:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r2, &(0x7f0000000180)=""/8, 0x8)

10:46:53 executing program 7:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4)={0x10, 0x0, 0x0, 0xf0ffffff00000000}, 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:53 executing program 6:
r0 = socket$inet(0x2, 0x0, 0x0)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000280), 0x4)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4)
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)
r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x1, 0xd02217eeadfb046d)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f0000000100)={{0x100000001}, {0x40, 0xff}, 0x80000000, 0x4, 0x574b})

[  815.777043] input: syz1 as /devices/virtual/input/input4557
10:46:53 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff00000000}}}}, 0xf8}}, 0x0)

[  815.876879] input: syz1 as /devices/virtual/input/input4558
10:46:53 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast, 0xfffffffffffff000}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:53 executing program 1:
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x73, 0x1}, 0x18)
write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}})
r0 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r0, &(0x7f0000000180)=""/8, 0x8)

10:46:53 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x78fe000000000000}, 'syz1\x00'})

10:46:53 executing program 7:
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x0, 0x10482)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000140)=0x8)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

[  815.990002] input: syz1 as /devices/virtual/input/input4559
[  816.096782] 9pnet: Insufficient options for proto=fd
10:46:53 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xf0c2}, 'syz1\x00'})

10:46:53 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast, 0x112a4e46af000000}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

[  816.119788] input: syz1 as /devices/virtual/input/input4560
[  816.142762] 9pnet: Insufficient options for proto=fd
10:46:53 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000}}}}, 0xf8}}, 0x0)

[  816.252027] input: syz1 as /devices/virtual/input/input4561
[  816.281102] input: syz1 as /devices/virtual/input/input4562
[  816.352230] input: syz1 as /devices/virtual/input/input4563
10:46:53 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000001, 0x0)
ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070")
r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x1, 0x1100082)
r2 = memfd_create(&(0x7f0000000140)="c8a8707470", 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)="16", 0x1}], 0x1, 0x1081806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
read(r1, &(0x7f0000000000)=""/5, 0x5)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendfile(r1, r1, &(0x7f0000000100)=0x3f00, 0x0)
ioctl$LOOP_CLR_FD(r1, 0x4c01)

10:46:53 executing program 6:
r0 = socket$inet(0x2, 0x0, 0x0)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000280), 0x4)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4)
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @rand_addr}, 0x10)
r1 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x3, 0x44340)
ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000100))
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

10:46:53 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x2ffe0000}, 'syz1\x00'})

10:46:53 executing program 1:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r2, &(0x7f0000000180)=""/8, 0x8)

10:46:53 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast, 0x400300}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:53 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xfdc2}, 'syz1\x00'})

10:46:53 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffffff00000000}}}}, 0xf8}}, 0x0)

10:46:53 executing program 7 (fault-call:11 fault-nth:0):
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1, {{}, 0x81}}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r2, &(0x7f0000000180)=""/8, 0x8)

10:46:54 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff}}}}, 0xf8}}, 0x0)

[  816.567475] FAULT_INJECTION: forcing a failure.
[  816.567475] name failslab, interval 1, probability 0, space 0, times 0
[  816.579079] CPU: 1 PID: 19200 Comm: syz-executor7 Not tainted 4.18.0-next-20180824+ #47
[  816.587268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  816.596638] Call Trace:
[  816.599261]  dump_stack+0x1c9/0x2b4
[  816.602919]  ? dump_stack_print_info.cold.2+0x52/0x52
[  816.608147]  should_fail.cold.4+0xa/0x11
[  816.612239]  ? print_usage_bug+0xc0/0xc0
[  816.616333]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[  816.621465]  ? __lock_acquire+0x7fc/0x5020
[  816.625739]  ? graph_lock+0x170/0x170
[  816.629572]  ? find_held_lock+0x36/0x1c0
[  816.633665]  ? __lock_is_held+0xb5/0x140
[  816.637780]  ? check_same_owner+0x340/0x340
[  816.642160]  ? rcu_note_context_switch+0x680/0x680
[  816.647122]  __should_failslab+0x124/0x180
[  816.651394]  should_failslab+0x9/0x14
[  816.655240]  __kmalloc+0x2b2/0x720
[  816.658811]  ? __fget+0x4d5/0x740
[  816.662298]  ? graph_lock+0x170/0x170
[  816.666247]  ? v9fs_dir_readdir+0x8d1/0xbc0
[  816.670608]  v9fs_dir_readdir+0x8d1/0xbc0
[  816.671197] input: syz1 as /devices/virtual/input/input4564
[  816.674788]  ? lock_acquire+0x1e4/0x4f0
[  816.674817]  ? iterate_dir+0xce/0x5d0
[  816.674840]  ? v9fs_dir_release+0x60/0x60
[  816.674859]  ? lock_release+0x9f0/0x9f0
[  816.674889]  ? check_same_owner+0x340/0x340
[  816.684633] input: syz1 as /devices/virtual/input/input4565
[  816.688457]  ? fsnotify+0xbac/0x14e0
[  816.688487]  ? rcu_note_context_switch+0x680/0x680
[  816.688512]  ? down_read_killable+0xb4/0x200
[  816.719724]  ? iterate_dir+0xce/0x5d0
[  816.723540]  ? fsnotify+0x14e0/0x14e0
[  816.727361]  ? down_write+0x130/0x130
[  816.731194]  ? security_file_permission+0x1ba/0x230
[  816.736247]  iterate_dir+0x48b/0x5d0
[  816.739985]  __x64_sys_getdents+0x29f/0x510
[  816.744331]  ? __ia32_sys_old_readdir+0x2c0/0x2c0
[  816.750168]  ? fillonedir+0x2a0/0x2a0
[  816.754012]  do_syscall_64+0x1b9/0x820
[  816.757923]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[  816.763311]  ? syscall_return_slowpath+0x5e0/0x5e0
[  816.768263]  ? trace_hardirqs_on_caller+0x2b0/0x2b0
[  816.773301]  ? prepare_exit_to_usermode+0x3b0/0x3b0
[  816.778337]  ? recalc_sigpending_tsk+0x180/0x180
[  816.783113]  ? kasan_check_write+0x14/0x20
[  816.787370]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  816.792246]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  816.797457] RIP: 0033:0x457089
[  816.800665] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  816.819594] RSP: 002b:00007f6300294c78 EFLAGS: 00000246 ORIG_RAX: 000000000000004e
[  816.823811] input: syz1 as /devices/virtual/input/input4567
[  816.827326] RAX: ffffffffffffffda RBX: 00007f63002956d4 RCX: 0000000000457089
[  816.827336] RDX: 0000000000000008 RSI: 0000000020000180 RDI: 0000000000000005
[  816.827345] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000
[  816.827354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006
10:46:54 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast, 0xf00000000000000}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

[  816.827364] R13: 00000000004cbd10 R14: 00000000004c350f R15: 0000000000000000
10:46:54 executing program 7 (fault-call:11 fault-nth:1):
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1, {{}, 0x81}}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r2, &(0x7f0000000180)=""/8, 0x8)

[  816.892555] input: syz1 as /devices/virtual/input/input4566
10:46:54 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00}}}}, 0xf8}}, 0x0)

10:46:54 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000001, 0x0)
ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070")
r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x1, 0x1100082)
r2 = memfd_create(&(0x7f0000000140)="c8a8707470", 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)="16", 0x1}], 0x1, 0x1081806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
read(r1, &(0x7f0000000000)=""/5, 0x5)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendfile(r1, r1, &(0x7f0000000100)=0x3f00, 0x0)
ioctl$LOOP_CLR_FD(r1, 0x4c01)

10:46:54 executing program 1:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r2, &(0x7f0000000180)=""/8, 0x8)

10:46:54 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xc2fc}, 'syz1\x00'})

10:46:54 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast, 0xfffff000}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

[  817.099762] 9pnet: Insufficient options for proto=fd
10:46:54 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}}}}, 0xf8}}, 0x0)

[  817.122355] input: syz1 as /devices/virtual/input/input4568
[  817.196099] input: syz1 as /devices/virtual/input/input4569
10:46:54 executing program 7:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1, {{}, 0x81}}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r2, &(0x7f0000000180)=""/8, 0x8)

10:46:54 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000001, 0x0)
ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070")
r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x1, 0x1100082)
r2 = memfd_create(&(0x7f0000000140)="c8a8707470", 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)="16", 0x1}], 0x1, 0x1081806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
read(r1, &(0x7f0000000000)=""/5, 0x5)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendfile(r1, r1, &(0x7f0000000100)=0x3f00, 0x0)
ioctl$LOOP_CLR_FD(r1, 0x4c01)

10:46:54 executing program 1:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r2, &(0x7f0000000180)=""/8, 0x8)

10:46:54 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xc2ee}, 'syz1\x00'})

10:46:54 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast, 0xffffff7f}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:54 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00000000000000}}}}, 0xf8}}, 0x0)

10:46:54 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x4c00}, 'syz1\x00'})

10:46:54 executing program 6:
r0 = socket$inet(0x2, 0x0, 0x0)
socketpair(0x1b, 0x8000f, 0x20, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000180)={<r3=>0x0, 0xd3}, &(0x7f00000001c0)=0x8)
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000200)={r3, 0x7fff, 0x20, 0x942d, 0x1}, &(0x7f0000000240)=0x18)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000280), 0x4)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4)
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @rand_addr}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x4, &(0x7f00000000c0)=0x5, 0x4)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

[  817.417903] input: syz1 as /devices/virtual/input/input4570
[  817.427265] 9pnet: Insufficient options for proto=fd
[  817.470133] input: syz1 as /devices/virtual/input/input4571
10:46:54 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000001, 0x0)
ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070")
r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x1, 0x1100082)
r2 = memfd_create(&(0x7f0000000140)="c8a8707470", 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)="16", 0x1}], 0x1, 0x1081806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
read(r1, &(0x7f0000000000)=""/5, 0x5)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendfile(r1, r1, &(0x7f0000000100)=0x3f00, 0xffffffff)
ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01)

10:46:54 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast, 0xf00}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

[  817.514031] input: syz1 as /devices/virtual/input/input4572
[  817.541360] input: syz1 as /devices/virtual/input/input4573
10:46:55 executing program 1:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r2, &(0x7f0000000180)=""/8, 0x8)

10:46:55 executing program 7:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1, {{}, 0x81}}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r2, &(0x7f0000000180)=""/8, 0x20000188)

10:46:55 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff020000}}}}, 0xf8}}, 0x0)

10:46:55 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xc2e9}, 'syz1\x00'})

10:46:55 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x40fe}, 'syz1\x00'})

10:46:55 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast, 0x200b000000000000}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:55 executing program 1:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r2, &(0x7f0000000180)=""/8, 0x8)

[  817.801054] input: syz1 as /devices/virtual/input/input4574
[  817.830794] input: syz1 as /devices/virtual/input/input4575
10:46:55 executing program 6:
r0 = socket$inet(0x2, 0x0, 0x0)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000280), 0x4)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4)
sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="b9980f555a656534d66fef8eab3fbb83261344c912", 0x7, 0xfffffffffffffffd, &(0x7f0000fd9ff0)={0x2, 0x4e20, @rand_addr}, 0x31)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

10:46:55 executing program 7:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x3ff, 0x100)
ioctl$BLKIOOPT(r2, 0x1279, &(0x7f00000001c0))
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1, {{}, 0x81}}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
ioctl$int_out(r0, 0x2, &(0x7f00000002c0))
getdents(r3, &(0x7f0000000180)=""/8, 0x8)

10:46:55 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}}}, 0xf8}}, 0x0)

[  817.913574] input: syz1 as /devices/virtual/input/input4576
[  817.994030] input: syz1 as /devices/virtual/input/input4577
10:46:55 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast, 0xff02000000000000}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:55 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x60}, 'syz1\x00'})

10:46:55 executing program 1:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[], 0x0)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r2, &(0x7f0000000180)=""/8, 0x8)

10:46:55 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}}}}, 0xf8}}, 0x0)

[  818.273834] input: syz1 as /devices/virtual/input/input4578
[  818.353072] input: syz1 as /devices/virtual/input/input4579
10:46:55 executing program 7:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0x7, 0x4d, 0x2}, 0xbe)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
signalfd4(r1, &(0x7f0000000140)={0x80}, 0x8, 0x800)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="500000006f01000000"], 0x9)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcs\x00', 0x2000, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x101010, r2, 0x0)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1, {{}, 0x81}}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
r3 = open$dir(&(0x7f0000000340)='./file0\x00', 0x8000000000, 0xfffffffffffffdff)
getdents(r3, &(0x7f0000000180)=""/8, 0x8)

10:46:55 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x7cfe}, 'syz1\x00'})

10:46:55 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast, 0xf0ffffff00000000}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:55 executing program 1:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r2, &(0x7f0000000180)=""/8, 0x8)

10:46:55 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}}}}, 0xf8}}, 0x0)

10:46:55 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x10}, 'syz1\x00'})

10:46:55 executing program 6:
r0 = socket$inet(0x2, 0x0, 0x0)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000280), 0x4)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4)
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)
mincore(&(0x7f00007b2000/0x1000)=nil, 0x1000, &(0x7f0000002280)=""/4096)
read(r1, &(0x7f00000000c0)=""/217, 0xd9)

10:46:56 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff02}}}}, 0xf8}}, 0x0)

[  818.619699] input: syz1 as /devices/virtual/input/input4580
[  818.627336] input: syz1 as /devices/virtual/input/input4581
10:46:56 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast, 0xf0ffffffffffff}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:56 executing program 4:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[], 0x0)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r2, &(0x7f0000000180)=""/8, 0x8)

10:46:56 executing program 7:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
rt_sigpending(&(0x7f0000000000), 0x8)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
socketpair(0x11, 0xa, 0x2, &(0x7f00000001c0)={<r2=>0xffffffffffffffff})
mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x4851, r2, 0x0)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1, {{}, 0x81}}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r3, &(0x7f0000000180)=""/8, 0x8)
prctl$setfpexc(0xc, 0x0)

[  818.720386] input: syz1 as /devices/virtual/input/input4582
[  818.754444] input: syz1 as /devices/virtual/input/input4583
10:46:56 executing program 1:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0"], 0x15)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r2, &(0x7f0000000180)=""/8, 0x8)

10:46:56 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xf4c2000000000000}, 'syz1\x00'})

10:46:56 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast, 0x0, 0xf000000}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:56 executing program 4 (fault-call:8 fault-nth:0):
r0 = socket$inet6(0xa, 0x1000000000001, 0x0)
ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070")
r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x1, 0x1100082)
r2 = memfd_create(&(0x7f0000000140)="c8a8707470", 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)="16", 0x1}], 0x1, 0x1081806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
read(r1, &(0x7f0000000000)=""/5, 0x5)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendfile(r1, r1, &(0x7f0000000100)=0x3f00, 0xffffffff)
ioctl$LOOP_CLR_FD(r1, 0x4c01)

10:46:56 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xfe45}, 'syz1\x00'})

10:46:56 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}}}}, 0xf8}}, 0x0)

10:46:56 executing program 1:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e"], 0x20)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r2, &(0x7f0000000180)=""/8, 0x8)

[  819.017601] input: syz1 as /devices/virtual/input/input4584
10:46:56 executing program 7:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RWSTAT(r1, &(0x7f0000000400)={0x7, 0x7f, 0x2}, 0x7)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(r3, 0x800448d3, &(0x7f0000000540)={{0x3, 0x0, 0x100000000, 0x7, 0x3, 0x1ff}, 0x81, 0x9, 0x7, 0x6, 0x1, "9a722f037d2b13f0a6c7666583c4fecfdff248fc88851ace1b6afb38f461eb75cd559361e5f018e0e80ca16fdf009e2483b4f6bbbb9b355b3d2ee5920fa529d58b378bb2422e6e6a12b4259379ee47aab6616207a69ab70b91d021ab10c2b9fc361d26070385b5b1eda4fbd2f32e083ce6af77768e737063e76778e61fcc4f4d"})
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
r4 = socket$inet6(0xa, 0x3, 0x8)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x32, 0xffffffffffffffff, 0x0)
shutdown(r4, 0x1)
write$P9_RRENAMEAT(r2, &(0x7f00000003c0)={0x7, 0x4b, 0x1}, 0x7)
recvmmsg(r2, &(0x7f00000002c0)=[{{&(0x7f0000000040)=@sco, 0x80, &(0x7f0000000380), 0x1000000000000269, &(0x7f0000000180)=""/22, 0x16, 0x10000000}, 0x80000000}], 0x1, 0x0, 0x0)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1, {{}, 0x81}}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000380)=ANY=[], 0x1b8)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r5 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r5, &(0x7f00000001c0)=""/8, 0xffffffffffffffeb)
pipe2$9p(&(0x7f0000000380), 0x800)

10:46:56 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast, 0x0, 0xa00}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:56 executing program 6:
r0 = socket$inet(0x2, 0x0, 0x0)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000280), 0x4)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4)
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f00000000c0)={'mangle\x00', 0xd2, "07739e8a24de9e9d0b1b4dbe116d192ce8334517763ebd9accb62364f80ea7a0dded358e480eb7141f57223500c155160bbe582a2d461f36590ec7cf5e0d6e4b2c08b7433ad0401770e8ffa925de471e74c9fa94c166264eda47140bee5a15b41e201143562812ef3aa9d991473498abb5c81cdd8c76cacf4f4497ae8172ca049c5f0e8a9455db235a86f446dde7e6eb6d3e77bd2a9a3b86d06a7a3bc7e7bda7902735a2f0ef650b1f1f0d5c55f764caa3318ab811318c38c5d5d504b2a49457e99a5d8137c852ac00bf159bb7c97a167954"}, &(0x7f00000001c0)=0xf6)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)
syz_extract_tcp_res(&(0x7f0000000200), 0x3b, 0xe1)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000002c0)={<r1=>0x0, @in6={{0xa, 0x4e24, 0x348f, @mcast1, 0x6}}, 0x1c, 0xc0}, &(0x7f00000003c0)=0x90)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000240)=@assoc_value={r1, 0x3}, 0xfffffffffffffe9e)

[  819.075318] input: syz1 as /devices/virtual/input/input4585
[  819.094544] input: syz1 as /devices/virtual/input/input4586
[  819.152801] FAULT_INJECTION: forcing a failure.
[  819.152801] name failslab, interval 1, probability 0, space 0, times 0
[  819.161838] input: syz1 as /devices/virtual/input/input4587
[  819.164163] CPU: 0 PID: 19436 Comm: syz-executor4 Not tainted 4.18.0-next-20180824+ #47
[  819.177984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  819.187343] Call Trace:
[  819.189959]  dump_stack+0x1c9/0x2b4
[  819.193619]  ? dump_stack_print_info.cold.2+0x52/0x52
[  819.198824]  ? mark_held_locks+0x160/0x160
10:46:56 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast, 0x0, 0xf00000000000000}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

[  819.203079]  should_fail.cold.4+0xa/0x11
[  819.207155]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[  819.212267]  ? print_usage_bug+0xc0/0xc0
[  819.216345]  ? rcu_cleanup_dead_rnp+0x200/0x200
[  819.221042]  ? mark_held_locks+0x160/0x160
[  819.225316]  ? find_held_lock+0x36/0x1c0
[  819.229435]  ? check_same_owner+0x340/0x340
[  819.233773]  ? rcu_note_context_switch+0x680/0x680
[  819.238729]  ? refcount_inc_not_zero_checked+0x1e5/0x2f0
[  819.244206]  __should_failslab+0x124/0x180
[  819.248472]  should_failslab+0x9/0x14
[  819.252306]  kmem_cache_alloc_trace+0x2b5/0x730
[  819.256988]  ? kasan_check_read+0x11/0x20
[  819.261149]  ? rcu_is_watching+0x8c/0x150
[  819.265357]  alloc_pipe_info+0x16b/0x590
[  819.269443]  ? pipe_read+0x940/0x940
[  819.273183]  ? ksys_dup3+0x690/0x690
[  819.276921]  ? find_held_lock+0x36/0x1c0
[  819.281002]  splice_direct_to_actor+0x6fc/0x8f0
[  819.285702]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  819.291264]  ? pipe_to_sendpage+0x400/0x400
[  819.295599]  ? do_splice_to+0x190/0x190
10:46:56 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast, 0x0, 0x112a4e46af000000}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

[  819.299600]  ? security_file_permission+0x1c2/0x230
[  819.304638]  ? rw_verify_area+0x118/0x360
[  819.308809]  do_splice_direct+0x2d4/0x420
[  819.312990]  ? splice_direct_to_actor+0x8f0/0x8f0
[  819.317874]  ? rw_verify_area+0x118/0x360
[  819.322041]  do_sendfile+0x62a/0xe20
[  819.325787]  ? do_compat_pwritev64+0x1c0/0x1c0
[  819.330407]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  819.335960]  ? _copy_from_user+0xdf/0x150
[  819.340123]  __x64_sys_sendfile64+0x15d/0x250
[  819.344630]  ? __ia32_sys_sendfile+0x2a0/0x2a0
[  819.349228]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  819.354795]  ? ksys_ioctl+0x81/0xd0
[  819.358443]  do_syscall_64+0x1b9/0x820
[  819.362348]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[  819.367742]  ? syscall_return_slowpath+0x5e0/0x5e0
[  819.372772]  ? trace_hardirqs_on_caller+0x2b0/0x2b0
[  819.377806]  ? prepare_exit_to_usermode+0x3b0/0x3b0
[  819.382840]  ? recalc_sigpending_tsk+0x180/0x180
[  819.387615]  ? kasan_check_write+0x14/0x20
[  819.391876]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  819.396751]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
10:46:56 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40030000000000}}}}, 0xf8}}, 0x0)

[  819.401955] RIP: 0033:0x457089
[  819.405162] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  819.424072] RSP: 002b:00007f9d28837c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  819.431821] RAX: ffffffffffffffda RBX: 00007f9d288386d4 RCX: 0000000000457089
[  819.439101] RDX: 0000000020000100 RSI: 0000000000000004 RDI: 0000000000000004
[  819.446379] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000
[  819.453658] R10: 00000000ffffffff R11: 0000000000000246 R12: 0000000000000006
[  819.460966] R13: 00000000004d3d80 R14: 00000000004c87e4 R15: 0000000000000000
10:46:56 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast, 0x0, 0x200000000000000}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:56 executing program 4 (fault-call:8 fault-nth:1):
r0 = socket$inet6(0xa, 0x1000000000001, 0x0)
ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070")
r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x1, 0x1100082)
r2 = memfd_create(&(0x7f0000000140)="c8a8707470", 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)="16", 0x1}], 0x1, 0x1081806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
read(r1, &(0x7f0000000000)=""/5, 0x5)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendfile(r1, r1, &(0x7f0000000100)=0x3f00, 0xffffffff)
ioctl$LOOP_CLR_FD(r1, 0x4c01)

10:46:56 executing program 7:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1, {{}, 0x81}}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r2, &(0x7f0000000180)=""/8, 0x8)

10:46:57 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x43fe0000}, 'syz1\x00'})

10:46:57 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x8c3}, 'syz1\x00'})

10:46:57 executing program 1:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11"], 0x25)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r2, &(0x7f0000000180)=""/8, 0x8)

10:46:57 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde010000}}}}, 0xf8}}, 0x0)

[  819.711157] FAULT_INJECTION: forcing a failure.
[  819.711157] name failslab, interval 1, probability 0, space 0, times 0
[  819.722511] CPU: 1 PID: 19480 Comm: syz-executor4 Not tainted 4.18.0-next-20180824+ #47
[  819.730696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  819.740060] Call Trace:
[  819.742662]  dump_stack+0x1c9/0x2b4
[  819.746712]  ? dump_stack_print_info.cold.2+0x52/0x52
[  819.751949]  ? __kernel_text_address+0xd/0x40
[  819.756478]  should_fail.cold.4+0xa/0x11
[  819.760560]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[  819.765703]  ? save_stack+0x43/0xd0
[  819.769368]  ? kasan_kmalloc+0xc4/0xe0
[  819.770588] input: syz1 as /devices/virtual/input/input4588
[  819.773277]  ? kmem_cache_alloc_trace+0x152/0x730
[  819.773305]  ? alloc_pipe_info+0x16b/0x590
[  819.773336]  ? splice_direct_to_actor+0x6fc/0x8f0
[  819.773358]  ? do_sendfile+0x62a/0xe20
[  819.773382]  ? __x64_sys_sendfile64+0x15d/0x250
[  819.801537]  ? do_syscall_64+0x1b9/0x820
[  819.805623]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  819.811001]  ? mark_held_locks+0x160/0x160
[  819.815259]  ? find_held_lock+0x36/0x1c0
[  819.819376]  ? check_same_owner+0x340/0x340
[  819.823718]  ? rcu_is_watching+0x8c/0x150
[  819.827878]  ? trace_hardirqs_on+0xbd/0x2c0
[  819.832242]  ? rcu_note_context_switch+0x680/0x680
[  819.837190]  __should_failslab+0x124/0x180
[  819.841454]  should_failslab+0x9/0x14
[  819.845264]  __kmalloc+0x2b2/0x720
[  819.848817]  ? kmem_cache_alloc_trace+0x324/0x730
[  819.853674]  ? kasan_check_read+0x11/0x20
[  819.856186] input: syz1 as /devices/virtual/input/input4589
[  819.857862]  ? rcu_is_watching+0x8c/0x150
[  819.857880]  ? alloc_pipe_info+0x29e/0x590
[  819.857900]  alloc_pipe_info+0x29e/0x590
[  819.857918]  ? pipe_read+0x940/0x940
[  819.857940]  ? ksys_dup3+0x690/0x690
[  819.857960]  ? find_held_lock+0x36/0x1c0
[  819.887591]  splice_direct_to_actor+0x6fc/0x8f0
[  819.892275]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  819.897831]  ? pipe_to_sendpage+0x400/0x400
[  819.902179]  ? do_splice_to+0x190/0x190
[  819.906223]  ? security_file_permission+0x1c2/0x230
[  819.911266]  ? rw_verify_area+0x118/0x360
[  819.915429]  do_splice_direct+0x2d4/0x420
[  819.919604]  ? splice_direct_to_actor+0x8f0/0x8f0
[  819.924471]  ? rw_verify_area+0x118/0x360
[  819.928643]  do_sendfile+0x62a/0xe20
[  819.932397]  ? do_compat_pwritev64+0x1c0/0x1c0
[  819.937003]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  819.942555]  ? _copy_from_user+0xdf/0x150
[  819.946742]  __x64_sys_sendfile64+0x15d/0x250
[  819.951255]  ? __ia32_sys_sendfile+0x2a0/0x2a0
[  819.952449] input: syz1 as /devices/virtual/input/input4590
[  819.955867]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  819.955885]  ? ksys_ioctl+0x81/0xd0
[  819.955911]  do_syscall_64+0x1b9/0x820
[  819.955930]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[  819.955949]  ? syscall_return_slowpath+0x5e0/0x5e0
[  819.955966]  ? trace_hardirqs_on_caller+0x2b0/0x2b0
[  819.955989]  ? prepare_exit_to_usermode+0x3b0/0x3b0
[  819.995079]  ? recalc_sigpending_tsk+0x180/0x180
[  819.999857]  ? kasan_check_write+0x14/0x20
[  820.004116]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  820.008984]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  820.014181] RIP: 0033:0x457089
[  820.017412] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  820.036348] RSP: 002b:00007f9d28837c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  820.044092] RAX: ffffffffffffffda RBX: 00007f9d288386d4 RCX: 0000000000457089
[  820.051378] RDX: 0000000020000100 RSI: 0000000000000004 RDI: 0000000000000004
10:46:57 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast, 0x0, 0xa00000000000000}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:57 executing program 7:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RVERSION(r1, &(0x7f0000000000)={0x15, 0x65, 0xffff, 0xfff, 0x8, '9P2000.u'}, 0x15)
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1, {{}, 0x81}}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r2, &(0x7f0000000180)=""/8, 0x8)

10:46:57 executing program 6:
r0 = socket$inet(0x2, 0x0, 0x0)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000280), 0x4)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4)
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

10:46:57 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000}}}}, 0xf8}}, 0x0)

10:46:57 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast, 0x0, 0x400300}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:57 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff000}}}}, 0xf8}}, 0x0)

[  820.058665] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000
[  820.065955] R10: 00000000ffffffff R11: 0000000000000246 R12: 0000000000000006
[  820.073240] R13: 00000000004d3d80 R14: 00000000004c87e4 R15: 0000000000000001
10:46:57 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xf3c2}, 'syz1\x00'})

[  820.148592] input: syz1 as /devices/virtual/input/input4591
10:46:57 executing program 1:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f87"], 0x28)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r2, &(0x7f0000000180)=""/8, 0x8)

10:46:57 executing program 4 (fault-call:8 fault-nth:2):
r0 = socket$inet6(0xa, 0x1000000000001, 0x0)
ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070")
r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x1, 0x1100082)
r2 = memfd_create(&(0x7f0000000140)="c8a8707470", 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)="16", 0x1}], 0x1, 0x1081806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
read(r1, &(0x7f0000000000)=""/5, 0x5)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendfile(r1, r1, &(0x7f0000000100)=0x3f00, 0xffffffff)
ioctl$LOOP_CLR_FD(r1, 0x4c01)

10:46:57 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x60000000}, 'syz1\x00'})

10:46:57 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}}}}, 0xf8}}, 0x0)

[  820.286115] input: syz1 as /devices/virtual/input/input4592
[  820.369302] FAULT_INJECTION: forcing a failure.
[  820.369302] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  820.381358] CPU: 1 PID: 19542 Comm: syz-executor4 Not tainted 4.18.0-next-20180824+ #47
[  820.389530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  820.398899] Call Trace:
[  820.401522]  dump_stack+0x1c9/0x2b4
[  820.405171]  ? dump_stack_print_info.cold.2+0x52/0x52
[  820.410378]  ? graph_lock+0x170/0x170
[  820.414210]  should_fail.cold.4+0xa/0x11
[  820.418305]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[  820.423426]  ? __lock_is_held+0xb5/0x140
[  820.427505]  ? graph_lock+0x170/0x170
[  820.431329]  ? find_held_lock+0x36/0x1c0
[  820.435423]  ? find_held_lock+0x36/0x1c0
[  820.439533]  ? check_same_owner+0x340/0x340
[  820.443890]  ? find_get_entry+0xa96/0x1120
[  820.448160]  ? rcu_note_context_switch+0x680/0x680
[  820.453141]  ? graph_lock+0x170/0x170
[  820.456996]  __alloc_pages_nodemask+0x365/0xd10
[  820.461707]  ? __alloc_pages_slowpath+0x2cb0/0x2cb0
[  820.466772]  ? find_held_lock+0x36/0x1c0
[  820.470764] input: syz1 as /devices/virtual/input/input4593
[  820.470888]  ? lock_downgrade+0x8f0/0x8f0
[  820.480751]  ? kasan_check_read+0x11/0x20
[  820.484912]  ? rcu_is_watching+0x8c/0x150
[  820.489073]  ? rcu_is_watching+0x8c/0x150
[  820.493260]  ? __sanitizer_cov_trace_const_cmp2+0x18/0x20
[  820.495149] input: syz1 as /devices/virtual/input/input4594
[  820.498847]  alloc_pages_current+0x10c/0x210
[  820.498869]  __page_cache_alloc+0x398/0x5e0
[  820.498884]  ? xa_load+0x2b1/0x450
[  820.498904]  ? xa_clear_tag+0x40/0x40
[  820.520667]  ? kernel_text_address+0x79/0xf0
[  820.525099]  ? filemap_range_has_page+0x4c0/0x4c0
[  820.529959]  ? graph_lock+0x170/0x170
[  820.533783]  __do_page_cache_readahead+0x24e/0x690
[  820.538741]  ? read_pages+0x680/0x680
[  820.542567]  ? lock_downgrade+0x8f0/0x8f0
[  820.546739]  ? kasan_check_read+0x11/0x20
[  820.550911]  ondemand_readahead+0x550/0xcd0
[  820.555262]  page_cache_sync_readahead+0x3a0/0x6d0
[  820.560223]  ? force_page_cache_readahead+0x360/0x360
[  820.565427]  ? mark_held_locks+0x160/0x160
[  820.569681]  ? rcu_note_context_switch+0x680/0x680
[  820.574643]  ? check_same_owner+0x340/0x340
[  820.578987]  generic_file_read_iter+0x1a8a/0x2f10
[  820.584037]  ? filemap_write_and_wait_range+0xd0/0xd0
[  820.589245]  ? print_usage_bug+0xc0/0xc0
[  820.593325]  ? print_usage_bug+0xc0/0xc0
[  820.597398]  ? print_usage_bug+0xc0/0xc0
[  820.601485]  ? print_usage_bug+0xc0/0xc0
[  820.605563]  ? __lock_acquire+0x7fc/0x5020
[  820.609830]  ? mark_held_locks+0x160/0x160
[  820.614085]  ? graph_lock+0x170/0x170
[  820.616103] input: syz1 as /devices/virtual/input/input4595
[  820.617890]  ? graph_lock+0x170/0x170
[  820.617911]  ? mark_held_locks+0x160/0x160
[  820.617934]  ? find_held_lock+0x36/0x1c0
[  820.617961]  ? lock_downgrade+0x8f0/0x8f0
[  820.617983]  ? kasan_check_read+0x11/0x20
[  820.618005]  ? rcu_is_watching+0x8c/0x150
[  820.648283]  ? rcu_cleanup_dead_rnp+0x200/0x200
[  820.652967]  ? rcu_cleanup_dead_rnp+0x200/0x200
[  820.657660]  ? is_bpf_text_address+0xd7/0x170
[  820.662196]  ? kernel_text_address+0x79/0xf0
[  820.666626]  ? __kernel_text_address+0xd/0x40
[  820.671160]  ? unwind_get_return_address+0x61/0xa0
[  820.676239]  ? __save_stack_trace+0x8d/0xf0
[  820.680612]  ? save_stack+0xa9/0xd0
[  820.684274]  ? save_stack+0x43/0xd0
[  820.687912]  ? kasan_kmalloc+0xc4/0xe0
[  820.691814]  ? __kmalloc+0x14e/0x720
[  820.695540]  ? alloc_pipe_info+0x29e/0x590
[  820.699793]  ? splice_direct_to_actor+0x6fc/0x8f0
[  820.704649]  ? do_splice_direct+0x2d4/0x420
[  820.709002]  ? __x64_sys_sendfile64+0x15d/0x250
[  820.713700]  ? do_syscall_64+0x1b9/0x820
[  820.717779]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  820.723158]  ? mark_held_locks+0x160/0x160
[  820.727414]  ? find_held_lock+0x36/0x1c0
[  820.731499]  ? __lockdep_init_map+0x105/0x590
[  820.736012]  ? lockdep_init_map+0x9/0x10
[  820.740091]  ? debug_mutex_init+0x2d/0x60
[  820.744264]  ? __mutex_init+0x1f7/0x290
[  820.749243]  ? rcu_pm_notify+0xc0/0xc0
[  820.753153]  ? __ia32_sys_membarrier+0x150/0x150
[  820.757927]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  820.763487]  ? fsnotify+0xbac/0x14e0
[  820.767340]  blkdev_read_iter+0x120/0x190
[  820.771510]  generic_file_splice_read+0x5a5/0x9a0
[  820.776363]  ? alloc_pipe_info+0x29e/0x590
[  820.780616]  ? add_to_pipe+0x360/0x360
[  820.784534]  ? rw_verify_area+0x118/0x360
[  820.788714]  ? add_to_pipe+0x360/0x360
[  820.792619]  do_splice_to+0x12e/0x190
[  820.796440]  splice_direct_to_actor+0x270/0x8f0
[  820.801129]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  820.806701]  ? pipe_to_sendpage+0x400/0x400
[  820.811046]  ? do_splice_to+0x190/0x190
[  820.815038]  ? security_file_permission+0x1c2/0x230
[  820.820082]  ? rw_verify_area+0x118/0x360
[  820.824261]  do_splice_direct+0x2d4/0x420
[  820.828431]  ? splice_direct_to_actor+0x8f0/0x8f0
[  820.833301]  ? rw_verify_area+0x118/0x360
[  820.837464]  do_sendfile+0x62a/0xe20
[  820.841198]  ? do_compat_pwritev64+0x1c0/0x1c0
[  820.845814]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  820.851367]  ? _copy_from_user+0xdf/0x150
[  820.855545]  __x64_sys_sendfile64+0x15d/0x250
[  820.860067]  ? __ia32_sys_sendfile+0x2a0/0x2a0
[  820.864707]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  820.870265]  ? ksys_ioctl+0x81/0xd0
[  820.873923]  do_syscall_64+0x1b9/0x820
[  820.877830]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[  820.883227]  ? syscall_return_slowpath+0x5e0/0x5e0
[  820.888184]  ? trace_hardirqs_on_caller+0x2b0/0x2b0
[  820.893254]  ? prepare_exit_to_usermode+0x3b0/0x3b0
[  820.898309]  ? recalc_sigpending_tsk+0x180/0x180
[  820.903090]  ? kasan_check_write+0x14/0x20
[  820.907353]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  820.912225]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  820.917427] RIP: 0033:0x457089
[  820.920696] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  820.939622] RSP: 002b:00007f9d28837c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  820.947339] RAX: ffffffffffffffda RBX: 00007f9d288386d4 RCX: 0000000000457089
[  820.954638] RDX: 0000000020000100 RSI: 0000000000000004 RDI: 0000000000000004
[  820.961948] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000
10:46:57 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xf8}}, 0x0)

10:46:57 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast, 0x0, 0x2000000}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:57 executing program 6:
r0 = socket$inet(0x2, 0x0, 0x0)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000280), 0x4)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4)
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)
r1 = syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x0, 0x200180)
ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000000c0)={0x11, @local, 0x4e24, 0x0, 'sh\x00', 0x0, 0x6, 0x43}, 0x2c)

10:46:58 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast, 0x0, 0x300000000000000}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:58 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast, 0x0, 0xffffff7f00000000}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:58 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast, 0x0, 0x1000000}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:58 executing program 7:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000380)='./file0/../file0\x00', 0x0)
r2 = openat(0xffffffffffffffff, &(0x7f0000000880)='./file0\x00', 0x880, 0x101)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f00000008c0)={<r3=>0x0, @in={{0x2, 0x4e24, @remote}}, 0x401, 0x10000, 0xac, 0x80, 0x8}, &(0x7f0000000980)=0x98)
setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f00000009c0)={r3, 0x9}, 0x8)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="8000000000000000642c00ab4252cf4a25afe0a796ff5fe3043b71d4b8e988d7ace437cce0f7c2892d971458e08d99b94d3dba3527"])
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1, {{}, 0x81}}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000000)={0x0, 0x29, 0x2, {0x101}}, 0xfffffffffffffe93)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r4 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r4, &(0x7f0000000180)=""/8, 0x8)

10:46:58 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff0}}}}, 0xf8}}, 0x0)

[  820.969234] R10: 00000000ffffffff R11: 0000000000000246 R12: 0000000000000006
[  820.976511] R13: 00000000004d3d80 R14: 00000000004c87e4 R15: 0000000000000002
10:46:58 executing program 1:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f8724"], 0x29)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r2, &(0x7f0000000180)=""/8, 0x8)

10:46:58 executing program 6:
r0 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x2, 0x0)
ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000000200)={0x7, 0x9, 0x1, 0x0, 0x4, 0x8})
ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x8)
r1 = socket$inet(0x2, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000180)={{0x2, 0x3, 0x1000, 0x3}})
r3 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x10c00, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r3, 0x40045402, &(0x7f0000000100))
setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000280), 0x4)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4)
ioctl$KDENABIO(r0, 0x4b36)
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @rand_addr}, 0x10)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp\x00', 0x4009fd, 0x0)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

10:46:58 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x4}, 'syz1\x00'})

10:46:58 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x75fe0000}, 'syz1\x00'})

[  821.133234] print_req_error: I/O error, dev loop1, sector 0
10:46:58 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast, 0x0, 0xf0ffff}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:58 executing program 4 (fault-call:8 fault-nth:3):
r0 = socket$inet6(0xa, 0x1000000000001, 0x0)
ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070")
r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x1, 0x1100082)
r2 = memfd_create(&(0x7f0000000140)="c8a8707470", 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)="16", 0x1}], 0x1, 0x1081806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
read(r1, &(0x7f0000000000)=""/5, 0x5)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendfile(r1, r1, &(0x7f0000000100)=0x3f00, 0xffffffff)
ioctl$LOOP_CLR_FD(r1, 0x4c01)

10:46:58 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34000}}}}, 0xf8}}, 0x0)

[  821.213747] input: syz1 as /devices/virtual/input/input4596
[  821.287214] input: syz1 as /devices/virtual/input/input4597
[  821.337453] input: syz1 as /devices/virtual/input/input4598
[  821.354476] FAULT_INJECTION: forcing a failure.
[  821.354476] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  821.366430] CPU: 1 PID: 19612 Comm: syz-executor4 Not tainted 4.18.0-next-20180824+ #47
[  821.366661] input: syz1 as /devices/virtual/input/input4599
10:46:58 executing program 7:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3d877ab321cf54b70e4782d01bca1bf8bf7881", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',noextend,\x00'])
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="4b000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1, {{}, 0x81}}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x764, 0x400801)
getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f00000001c0)=@assoc_value={<r3=>0x0}, &(0x7f00000002c0)=0x8)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000400)={r3, 0x3}, 0x8)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r4 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r4, &(0x7f0000000180)=""/8, 0x8)

[  821.374614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  821.374647] Call Trace:
[  821.374718]  dump_stack+0x1c9/0x2b4
[  821.374774]  ? dump_stack_print_info.cold.2+0x52/0x52
[  821.374809]  ? graph_lock+0x170/0x170
[  821.405094]  should_fail.cold.4+0xa/0x11
[  821.409179]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[  821.414320]  ? __lock_is_held+0xb5/0x140
[  821.418425]  ? graph_lock+0x170/0x170
[  821.422262]  ? find_held_lock+0x36/0x1c0
[  821.426350]  ? find_held_lock+0x36/0x1c0
[  821.430448]  ? check_same_owner+0x340/0x340
[  821.434860]  ? rcu_note_context_switch+0x680/0x680
[  821.439836]  ? graph_lock+0x170/0x170
[  821.443682]  __alloc_pages_nodemask+0x365/0xd10
[  821.448387]  ? __alloc_pages_slowpath+0x2cb0/0x2cb0
[  821.453420]  ? find_held_lock+0x36/0x1c0
[  821.457514]  ? lock_downgrade+0x8f0/0x8f0
[  821.461782]  ? kasan_check_read+0x11/0x20
[  821.466022]  ? rcu_is_watching+0x8c/0x150
[  821.470183]  ? rcu_is_watching+0x8c/0x150
[  821.474402]  ? __sanitizer_cov_trace_const_cmp2+0x18/0x20
[  821.480015]  alloc_pages_current+0x10c/0x210
10:46:58 executing program 7:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000380)={{{@in=@local, @in6=@local}}, {{@in6=@remote}, 0x0, @in6=@remote}}, &(0x7f00000001c0)=0xe8)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1, {{}, 0x81}}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r3, &(0x7f0000000180)=""/8, 0x8)

[  821.482996] 9pnet: Insufficient options for proto=fd
[  821.484441]  __page_cache_alloc+0x398/0x5e0
[  821.484458]  ? xa_load+0x2b1/0x450
[  821.484475]  ? xa_clear_tag+0x40/0x40
[  821.484489]  ? kernel_text_address+0x79/0xf0
[  821.484505]  ? filemap_range_has_page+0x4c0/0x4c0
[  821.484528]  ? graph_lock+0x170/0x170
[  821.496655] 9pnet: Insufficient options for proto=fd
[  821.497519]  __do_page_cache_readahead+0x24e/0x690
[  821.497547]  ? read_pages+0x680/0x680
[  821.497575]  ? lock_downgrade+0x8f0/0x8f0
[  821.532856]  ? kasan_check_read+0x11/0x20
[  821.537029]  ondemand_readahead+0x550/0xcd0
[  821.541381]  page_cache_sync_readahead+0x3a0/0x6d0
[  821.546353]  ? force_page_cache_readahead+0x360/0x360
[  821.551560]  ? mark_held_locks+0x160/0x160
[  821.555829]  ? rcu_note_context_switch+0x680/0x680
[  821.560790]  ? check_same_owner+0x340/0x340
[  821.565145]  generic_file_read_iter+0x1a8a/0x2f10
[  821.569938] FS-Cache: Duplicate cookie detected
[  821.570013]  ? filemap_write_and_wait_range+0xd0/0xd0
[  821.574815] FS-Cache: O-cookie c=00000000cc16bdf3 [p=00000000df90309c fl=222 nc=0 na=1]
[  821.579863]  ? print_usage_bug+0xc0/0xc0
[  821.579889]  ? attach_entity_load_avg+0x860/0x860
[  821.579911]  ? update_load_avg+0x389/0x27d0
[  821.579935]  ? attach_entity_load_avg+0x860/0x860
[  821.579955]  ? mark_held_locks+0x160/0x160
[  821.588184] FS-Cache: O-cookie d=000000007e07db7a n=000000009bd51fb3
[  821.592258]  ? graph_lock+0x170/0x170
[  821.592277]  ? graph_lock+0x170/0x170
[  821.592310]  ? rb_erase+0x3550/0x3550
[  821.597213] FS-Cache: O-key=[10] '
[  821.601590]  ? mark_held_locks+0x160/0x160
[  821.601621]  ? find_held_lock+0x36/0x1c0
[  821.606485] 34
[  821.610717]  ? lock_downgrade+0x8f0/0x8f0
[  821.610757]  ? kasan_check_read+0x11/0x20
[  821.617263] 32
[  821.621027]  ? rcu_is_watching+0x8c/0x150
[  821.621044]  ? rcu_cleanup_dead_rnp+0x200/0x200
[  821.621062]  ? rcu_cleanup_dead_rnp+0x200/0x200
[  821.624877] 39
[  821.628657]  ? is_bpf_text_address+0xd7/0x170
[  821.628678]  ? kernel_text_address+0x79/0xf0
[  821.632244] 35
[  821.636487]  ? __kernel_text_address+0xd/0x40
[  821.636505]  ? unwind_get_return_address+0x61/0xa0
[  821.636546]  ? __save_stack_trace+0x8d/0xf0
[  821.641047] 34
[  821.642846]  ? save_stack+0xa9/0xd0
[  821.642864]  ? save_stack+0x43/0xd0
[  821.647017] 38
[  821.651291]  ? kasan_kmalloc+0xc4/0xe0
[  821.651304]  ? __kmalloc+0x14e/0x720
[  821.651322]  ? alloc_pipe_info+0x29e/0x590
[  821.653131] 37
[  821.657270]  ? splice_direct_to_actor+0x6fc/0x8f0
[  821.657285]  ? do_splice_direct+0x2d4/0x420
[  821.657304]  ? __x64_sys_sendfile64+0x15d/0x250
[  821.661978] 32
[  821.666656]  ? do_syscall_64+0x1b9/0x820
[  821.666728]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  821.668576] 30
[  821.673102]  ? find_held_lock+0x36/0x1c0
[  821.673167]  ? __lockdep_init_map+0x105/0x590
[  821.677577] 37
[  821.679360]  ? lockdep_init_map+0x9/0x10
[  821.679378]  ? debug_mutex_init+0x2d/0x60
[  821.679398]  ? __mutex_init+0x1f7/0x290
[  821.683917] '
[  821.688829]  ? rcu_pm_notify+0xc0/0xc0
[  821.688849]  ? __ia32_sys_membarrier+0x150/0x150
[  821.688879]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
10:46:59 executing program 7:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1, {{}, 0x81}}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c7766646e6f3d434c9c56c8070ca819fb0f3fbe40b9829deaa3f0ac6ee61cddd787d799ab0794b9076fdb829f7289ceb27f0000000000000000", @ANYRESHEX=r1, @ANYBLOB="019f"])
r2 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r2, &(0x7f0000000180)=""/8, 0x8)

10:46:59 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e2b648dc8}}}}, 0xf8}}, 0x0)

[  821.693228] FS-Cache: N-cookie c=00000000d7bf5d66 [p=00000000df90309c fl=2 nc=0 na=1]
[  821.695021]  ? fsnotify+0xbac/0x14e0
[  821.695050]  blkdev_read_iter+0x120/0x190
[  821.698679] FS-Cache: N-cookie d=000000007e07db7a n=00000000b70ca2e3
[  821.702292]  generic_file_splice_read+0x5a5/0x9a0
[  821.702310]  ? alloc_pipe_info+0x29e/0x590
[  821.702328]  ? add_to_pipe+0x360/0x360
[  821.704217] FS-Cache: N-key=[10] '
[  821.708120]  ? rw_verify_area+0x118/0x360
[  821.708139]  ? add_to_pipe+0x360/0x360
[  821.711946] 34
[  821.716115]  do_splice_to+0x12e/0x190
10:46:59 executing program 1:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r2, &(0x7f0000000180)=""/8, 0x8)

[  821.716137]  splice_direct_to_actor+0x270/0x8f0
[  821.716160]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  821.717967] 32
[  821.722792]  ? pipe_to_sendpage+0x400/0x400
[  821.722812]  ? do_splice_to+0x190/0x190
[  821.722854]  ? security_file_permission+0x1c2/0x230
[  821.727157] 39
[  821.731812]  ? rw_verify_area+0x118/0x360
[  821.731838]  do_splice_direct+0x2d4/0x420
[  821.733644] 35
[  821.737706]  ? splice_direct_to_actor+0x8f0/0x8f0
[  821.737737]  ? rw_verify_area+0x118/0x360
[  821.743130] 34
[  821.744949]  do_sendfile+0x62a/0xe20
[  821.745021]  ? do_compat_pwritev64+0x1c0/0x1c0
[  821.749429] 38
[  821.753859]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  821.753898]  ? _copy_from_user+0xdf/0x150
[  821.755705] 37
[  821.759750]  __x64_sys_sendfile64+0x15d/0x250
[  821.759767]  ? __ia32_sys_sendfile+0x2a0/0x2a0
[  821.759789]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  821.764377] 32
[  821.768343]  ? ksys_ioctl+0x81/0xd0
[  821.768373]  do_syscall_64+0x1b9/0x820
[  821.770093] 30
[  821.773994]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[  821.774041]  ? syscall_return_slowpath+0x5e0/0x5e0
[  821.774093]  ? trace_hardirqs_on_caller+0x2b0/0x2b0
[  821.778882] 37
[  821.784427]  ? prepare_exit_to_usermode+0x3b0/0x3b0
[  821.784442]  ? recalc_sigpending_tsk+0x180/0x180
[  821.784459]  ? kasan_check_write+0x14/0x20
[  821.784480]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  821.792624] '
[  821.796247]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  821.796262] RIP: 0033:0x457089
[  821.796280] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  821.970804] FS-Cache: Duplicate cookie detected
[  821.975233] RSP: 002b:00007f9d28837c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  821.975252] RAX: ffffffffffffffda RBX: 00007f9d288386d4 RCX: 0000000000457089
[  821.975261] RDX: 0000000020000100 RSI: 0000000000000004 RDI: 0000000000000004
[  821.975271] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000
[  821.975281] R10: 00000000ffffffff R11: 0000000000000246 R12: 0000000000000006
[  821.975291] R13: 00000000004d3d80 R14: 00000000004c87e4 R15: 0000000000000003
[  822.046887] FS-Cache: O-cookie c=00000000cc16bdf3 [p=00000000df90309c fl=222 nc=0 na=1]
[  822.055088] FS-Cache: O-cookie d=000000007e07db7a n=000000009bd51fb3
[  822.061621] FS-Cache: O-key=[10] '34323935343837323037'
[  822.067129] FS-Cache: N-cookie c=00000000d9cf2698 [p=00000000df90309c fl=2 nc=0 na=1]
[  822.075141] FS-Cache: N-cookie d=000000007e07db7a n=000000002354abc9
[  822.081668] FS-Cache: N-key=[10] '34323935343837323037'
10:46:59 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast, 0x0, 0x9effffff}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:46:59 executing program 6:
r0 = socket$inet(0x2, 0x0, 0x0)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000280), 0x4)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4)
sendto$inet(r0, &(0x7f00000000c0)="9ba6db", 0xfffffffffffffe9c, 0x0, &(0x7f0000000100)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

10:46:59 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000001, 0x0)
ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070")
r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x1, 0x1100082)
r2 = memfd_create(&(0x7f0000000140)="c8a8707470", 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)="16", 0x1}], 0x1, 0x1081806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
read(r1, &(0x7f0000000000)=""/5, 0x5)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendfile(r1, r1, &(0x7f0000000100)=0x3f00, 0xffffffff)
ioctl$LOOP_CLR_FD(r1, 0x4c01)

10:46:59 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000}}}}, 0xf8}}, 0x0)

10:46:59 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xac3}, 'syz1\x00'})

10:46:59 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x7400}, 'syz1\x00'})

10:46:59 executing program 1:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r2, &(0x7f0000000180)=""/8, 0x8)

[  822.310813] 9pnet: Insufficient options for proto=fd
[  822.356335] input: syz1 as /devices/virtual/input/input4600
[  822.386095] input: syz1 as /devices/virtual/input/input4601
10:46:59 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast, 0x0, 0xf}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

[  822.426750] 9pnet: Insufficient options for proto=fd
10:46:59 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400300}}}}, 0xf8}}, 0x0)

[  822.470516] input: syz1 as /devices/virtual/input/input4602
[  822.483202] input: syz1 as /devices/virtual/input/input4603
[  822.510655] print_req_error: I/O error, dev loop1, sector 0
10:46:59 executing program 7:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="0901f8ffff01000000"], 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1, {{}, 0x81}}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r2, &(0x7f0000000180)=""/8, 0x8)

10:47:00 executing program 1:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r2, &(0x7f0000000180)=""/8, 0x8)

10:47:00 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x3000000}, 'syz1\x00'})

10:47:00 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast, 0x0, 0x2ff}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:47:00 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x6}, 'syz1\x00'})

10:47:00 executing program 6:
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000280), 0x4)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4)
ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f00000000c0)={'dummy0\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1}}})
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000200)=0x4, 0x4)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000002280)=""/4096)
ioctl(r1, 0x8, &(0x7f0000000100)="7edad04a2f3b0594180091f2e6709fdf55b51627c789f0dbd033ba0a66700afde17441b4d21a0125541c6ae2edd399ec1ed62007bc737143d6e5d8a4d95406e48302784b92dd7c1bbafcbdcf85529a8095e6b89d107621d5487f254b63502a84cb015599565185795dd543aed1db760c79e8056ce3d0b852deb1aa444238c6cef4831cca22ee237e28392d5922d92fc806e6a141a64e659cfede66f6b47414948dc04e6c40a117d479e952a420f18a552029a47bc3a33727cb82b9ad4af3554e4acfed57be0ed9abd34a7a88d5a1c05bbea44c1a3b9f5a0f8e1709cc2ef2c30672f6c60204c270c425060929980d937bbd09")

10:47:00 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde01}}}}, 0xf8}}, 0x0)

10:47:00 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000001, 0x0)
ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070")
r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x1, 0x1100082)
r2 = memfd_create(&(0x7f0000000140)="c8a8707470", 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)="16", 0x1}], 0x1, 0x1081806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
read(r1, &(0x7f0000000000)=""/5, 0x5)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendfile(r1, r1, &(0x7f0000000100)=0x3f03, 0xffffffff)
ioctl$LOOP_CLR_FD(r1, 0x4c01)

[  822.737057] input: syz1 as /devices/virtual/input/input4604
10:47:00 executing program 7:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1, {{}, 0x81}}, 0x18)
fallocate(r1, 0x2, 0xfffffffffffffff9, 0xffffffffffffffff)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r2, &(0x7f0000000180)=""/8, 0x8)

[  822.827094] input: syz1 as /devices/virtual/input/input4606
[  822.841254] input: syz1 as /devices/virtual/input/input4605
10:47:00 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast, 0x0, 0x9effffff00000000}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:47:00 executing program 1:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r2, &(0x7f0000000180)=""/8, 0x8)

10:47:00 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff02}}}}, 0xf8}}, 0x0)

10:47:00 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x4c}, 'syz1\x00'})

[  823.058457] input: syz1 as /devices/virtual/input/input4607
10:47:00 executing program 7:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFBRDADDR(r2, 0x891a, &(0x7f0000000000)={'vlan0\x00', {0x2, 0x4e24, @rand_addr=0x40}})
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1, {{}, 0x81}}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r3, &(0x7f0000000180)=""/8, 0x8)

10:47:00 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast, 0x0, 0x40030000000000}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:47:00 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x5000000}, 'syz1\x00'})

10:47:00 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}}}}, 0xf8}}, 0x0)

[  823.194197] input: syz1 as /devices/virtual/input/input4608
10:47:00 executing program 1:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x73, 0x1}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r2, &(0x7f0000000180)=""/8, 0x8)

[  823.309208] input: syz1 as /devices/virtual/input/input4609
10:47:00 executing program 7:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1, {{}, 0x81}}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='9p\x00', 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}})
r2 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r2, &(0x7f0000000180)=""/8, 0x8)

[  823.359020] input: syz1 as /devices/virtual/input/input4610
10:47:00 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast, 0x0, 0xff02}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:47:00 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}}}}, 0xf8}}, 0x0)

[  823.441163] input: syz1 as /devices/virtual/input/input4611
10:47:01 executing program 1:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r2, &(0x7f0000000180)=""/8, 0x8)

10:47:01 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x37fe000000000000}, 'syz1\x00'})

[  823.716050] input: syz1 as /devices/virtual/input/input4612
[  823.759725] input: syz1 as /devices/virtual/input/input4613
10:47:01 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000001, 0x0)
ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070")
r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x1, 0x1100082)
r2 = memfd_create(&(0x7f0000000140)="c8a8707470", 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)="16", 0x1}], 0x1, 0x1081806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
read(r1, &(0x7f0000000000)=""/5, 0x5)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendfile(r1, r1, &(0x7f0000000100)=0x3f87, 0xffffffff)
ioctl$LOOP_CLR_FD(r1, 0x4c01)

10:47:01 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xebc20000}, 'syz1\x00'})

10:47:01 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast, 0x0, 0xf0ffffff}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:47:01 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff}}}}, 0xf8}}, 0x0)

10:47:01 executing program 6:
r0 = semget(0x0, 0x1, 0x82)
semctl$GETPID(r0, 0x7, 0xb, &(0x7f00000003c0)=""/147)
r1 = socket$inet(0x2, 0x0, 0x0)
setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000280), 0x4)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4)
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@mcast2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f00000001c0)=0xe8)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000006c0)={{{@in=@multicast2, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{}, 0x0, @in6=@ipv4={[], [], @multicast2}}}, &(0x7f0000000680)=0xfffffe80)
r4 = getuid()
setresuid(r2, r3, r4)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)
kexec_load(0xfffffffffffff799, 0x3, &(0x7f0000000200)=[{&(0x7f00000000c0)="42ef5a27cc3eacf716b9bd87930db471cef61d4ca3930180da386a3eba267659ff7bc81314f2429d5abf065d6e8318a10733ba85f5f8cee2c575d969cbe2712512c3f329e067da151d19584956642a47c7764904dca761b5303e10c295705707fd4171b946a79829bbde80a46fd6d9d68a40348b04ffcd299ca56a043d66d7c514c66ced9bd1b5303d51656b0b850d0041f5f3e7c3d81ae3f1619654aa51d3fce317440521d458e73b64c2cf46926333c1ee4ddbce21d0d1919719bd2ce193f277a46eeae498f1352944", 0xca, 0xffffffff, 0x6}, {&(0x7f00000001c0), 0x0, 0x0, 0xffff}, {&(0x7f00000002c0)="bec37a42cd58b06723fc8e17e294028346cf49ba067834940611833af367942ebc539454a7351bd4911aa9125652c95e95d57417398e4e977c658af352a001a3dc09c31d509ecaf5f63c88e7c3922d31d145e8d6bd62217bbd1488feeac8908315c57873d39f2cf4b1dffee3e30318f9349208351df03ce5a249242797e4522ee65302bd1ca36a035811e8e98dc1eaeb140ba5647eb9317852f2e745bcb27b64943b6f880245742f82e61ff86295949919066e30b76dcd4dc886405405334ca4451d6b8eda707d48b31cce072616aab4f2ba129bbd5e531e347b2224430e78042613aac2a5ed9bb3853c3b541bc1", 0xee, 0xffe0, 0x4b5b}], 0x2)

10:47:01 executing program 1:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1}, 0x18)
write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r2, &(0x7f0000000180)=""/8, 0x8)

10:47:01 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x7dfe000000000000}, 'syz1\x00'})

[  823.954565] input: syz1 as /devices/virtual/input/input4614
[  823.963006] input: syz1 as /devices/virtual/input/input4615
10:47:01 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast, 0x0, 0xa000000}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:47:01 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffffff}}}}, 0xf8}}, 0x0)

10:47:01 executing program 1:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r2, &(0x7f0000000180)=""/8, 0x8)

[  824.032278] print_req_error: I/O error, dev loop1, sector 376
[  824.038356] Buffer I/O error on dev loop1, logical block 47, lost async page write
[  824.089663] input: syz1 as /devices/virtual/input/input4617
[  824.112139] input: syz1 as /devices/virtual/input/input4616
10:47:01 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000001, 0x0)
ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070")
r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x1, 0x1100082)
r2 = memfd_create(&(0x7f0000000140)="c8a8707470", 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)="16", 0x1}], 0x1, 0x1081806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
read(r1, &(0x7f0000000000)=""/5, 0x5)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendfile(r1, r1, &(0x7f0000000100)=0x3f1a, 0xffffffff)
ioctl$LOOP_CLR_FD(r1, 0x4c01)

10:47:01 executing program 7:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname'}}, {@access_client='access=client'}, {@fscache='fscache'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe4bb7ef984c3e0000a73d11108f872400"], 0x2a)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x1b5964410b4406db, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000540)="30d199e761c00942618efa69d68e7adad5509a47a7aa6e5bb1ed743af1ded4d646877973212fdb9af3df915bd5c8d5f2be82fe55ddcb989fbbd22723edc7421319c449b63d741308393bd546a28336e7571f26f65c59ff2e9b8c83145d6f6edafef4c044e1024cec82d27f32463e8344bf1d32d09bf336af717cae23f973f9df13e5f9bec2cdface9f4e1401941ad13385a1386f3b0b261748ccf4322f97dac6b98e85ba591fdf8d")
sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$int_in(r3, 0x40000000af01, &(0x7f0000000300))
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000300)={'bctf0\x00\x00\x00\x00\x00\x00"\x00', 0x6})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000240)={0x1, 0x0, &(0x7f0000000100)=""/163, &(0x7f00000019c0)=""/246, &(0x7f00000004c0)=""/4096})
ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000007c0)=ANY=[])
ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000000)={0x200000000001, r4})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000400)={0x3, 0x1f, 0x202, 0xfffffffffffffffe, 0x7, 0xfffffffffffffff8, 0x1, 0x2, <r5=>0x0}, &(0x7f0000000440)=0x20)
setsockopt$inet_sctp_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f00000014c0)={r5, 0x400, 0x28}, 0x8)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0xffffffffffffffda)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1, {{}, 0x81}}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3dfc7825548faccbef77c7e2ac0b530c3006ca59c165a9139b3febb08c2f9935b48b4e6f6e417bec2a440ee66b7ba1a3bf57ac7b41b6ce24bbc527549c868e8498a50247f3cc8c510b528cc621b195f4d6ef389e575d8ee5bf79b77e396b0736e66b7862a124ef226bcbc936050324", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00'])
r6 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getsockopt$inet6_tcp_int(r2, 0x6, 0x1f, &(0x7f00000001c0), &(0x7f00000002c0)=0x4)
getdents(r6, &(0x7f0000000180)=""/8, 0x8)

10:47:01 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xc2f4}, 'syz1\x00'})

10:47:01 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast, 0x0, 0xffffff9e}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:47:01 executing program 6:
r0 = socket$inet(0x2, 0x0, 0x5)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000280), 0x4)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4)
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

10:47:01 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x4800000000000000}, 'syz1\x00'})

10:47:01 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2ff}}}}, 0xf8}}, 0x0)

10:47:01 executing program 1:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r2, &(0x7f0000000180)=""/8, 0x8)

[  824.448514] print_req_error: I/O error, dev loop1, sector 376
[  824.454526] Buffer I/O error on dev loop1, logical block 47, lost async page write
[  824.498186] 9pnet: Insufficient options for proto=fd
[  824.527992] input: syz1 as /devices/virtual/input/input4619
[  824.546860] input: syz1 as /devices/virtual/input/input4618
10:47:01 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}}}}, 0xf8}}, 0x0)

10:47:02 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast, 0x0, 0xb20}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:47:02 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000001, 0x0)
ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070")
r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x1, 0x1100082)
r2 = memfd_create(&(0x7f0000000140)="c8a8707470", 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)="16", 0x1}], 0x1, 0x1081806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
read(r1, &(0x7f0000000000)=""/5, 0x5)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendfile(r1, r1, &(0x7f0000000100)=0x3f5f, 0xffffffff)
ioctl$LOOP_CLR_FD(r1, 0x4c01)

10:47:02 executing program 1:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}})
r2 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r2, &(0x7f0000000180)=""/8, 0x8)

[  824.637708] input: syz1 as /devices/virtual/input/input4620
[  824.646151] 9pnet: Insufficient options for proto=fd
[  824.667961] input: syz1 as /devices/virtual/input/input4621
10:47:02 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x68000000}, 'syz1\x00'})

10:47:02 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xfdc2000000000000}, 'syz1\x00'})

[  824.849424] 9pnet: Insufficient options for proto=fd
10:47:02 executing program 6:
openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0)
r0 = socket$inet(0x2, 0x0, 0x0)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000280), 0x4)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4)
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

10:47:02 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}}}}, 0xf8}}, 0x0)

10:47:02 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast, 0x0, 0x2}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

[  824.993391] input: syz1 as /devices/virtual/input/input4622
[  825.010645] input: syz1 as /devices/virtual/input/input4623
[  825.096967] input: syz1 as /devices/virtual/input/input4624
[  825.143460] input: syz1 as /devices/virtual/input/input4625
[  825.218348] 9pnet: Insufficient options for proto=fd
10:47:02 executing program 7:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[], 0x1ad)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
r2 = socket(0x11, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={"6272696467653000000100"})
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000001c0)={<r3=>0x0, 0x4}, &(0x7f00000002c0)=0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000380)={r3, 0x9, 0x1ff}, 0x8)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00', 0xfffffffffffffffd})
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1, {{}, 0x81}}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r4 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r4, &(0x7f0000000180)=""/8, 0x8)

10:47:02 executing program 1:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(0xffffffffffffffff, &(0x7f0000000180)=""/8, 0x8)

10:47:02 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast, 0x0, 0xf0ffffffffffff}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:47:02 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f}}}}, 0xf8}}, 0x0)

10:47:02 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x3ffe}, 'syz1\x00'})

10:47:02 executing program 6:
r0 = socket$inet(0x2, 0x0, 0x0)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000280), 0x4)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4)
sendto$inet(0xffffffffffffffff, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @rand_addr}, 0x10)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f00000000c0), &(0x7f0000000100)=0xc)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

10:47:02 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x9c3000000000000}, 'syz1\x00'})

[  825.472880] bridge0: port 2(bridge_slave_1) entered disabled state
[  825.479574] bridge0: port 1(bridge_slave_0) entered disabled state
[  825.495620] input: syz1 as /devices/virtual/input/input4626
[  825.506018] input: syz1 as /devices/virtual/input/input4627
10:47:02 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast, 0x0, 0x200b000000000000}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:47:03 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff0}}}}, 0xf8}}, 0x0)

[  825.636811] input: syz1 as /devices/virtual/input/input4629
10:47:03 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000}}}}, 0xf8}}, 0x0)

10:47:03 executing program 1:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname'}}, {@access_client='access=client'}, {@fscache='fscache'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe4bb7ef984c3e0000a73d11108f872400"], 0x2a)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x1b5964410b4406db, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000540)="30d199e761c00942618efa69d68e7adad5509a47a7aa6e5bb1ed743af1ded4d646877973212fdb9af3df915bd5c8d5f2be82fe55ddcb989fbbd22723edc7421319c449b63d741308393bd546a28336e7571f26f65c59ff2e9b8c83145d6f6edafef4c044e1024cec82d27f32463e8344bf1d32d09bf336af717cae23f973f9df13e5f9bec2cdface9f4e1401941ad13385a1386f3b0b261748ccf4322f97dac6b98e85ba591fdf8d")
sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$int_in(r3, 0x40000000af01, &(0x7f0000000300))
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000300)={'bctf0\x00\x00\x00\x00\x00\x00"\x00', 0x6})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000240)={0x1, 0x0, &(0x7f0000000100)=""/163, &(0x7f00000019c0)=""/246, &(0x7f00000004c0)=""/4096})
ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000007c0)=ANY=[])
ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000000)={0x200000000001, r4})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000400)={0x3, 0x1f, 0x202, 0xfffffffffffffffe, 0x7, 0xfffffffffffffff8, 0x1, 0x2, <r5=>0x0}, &(0x7f0000000440)=0x20)
setsockopt$inet_sctp_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f00000014c0)={r5, 0x400, 0x28}, 0x8)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0xffffffffffffffda)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1, {{}, 0x81}}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3dfc7825548faccbef77c7e2ac0b530c3006ca59c165a9139b3febb08c2f9935b48b4e6f6e417bec2a440ee66b7ba1a3bf57ac7b41b6ce24bbc527549c868e8498a50247f3cc8c510b528cc621b195f4d6ef389e575d8ee5bf79b77e396b0736e66b7862a124ef226bcbc936050324", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00'])
r6 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getsockopt$inet6_tcp_int(r2, 0x6, 0x1f, &(0x7f00000001c0), &(0x7f00000002c0)=0x4)
getdents(r6, &(0x7f0000000180)=""/8, 0x8)

10:47:03 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x700}, 'syz1\x00'})

10:47:03 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast, 0x0, 0xff02000000000000}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:47:03 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x500}, 'syz1\x00'})

10:47:03 executing program 6:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname'}}, {@access_client='access=client'}, {@fscache='fscache'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe4bb7ef984c3e0000a73d11108f872400"], 0x2a)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x1b5964410b4406db, 0x0)
ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000540)="30d199e761c00942618efa69d68e7adad5509a47a7aa6e5bb1ed743af1ded4d646877973212fdb9af3df915bd5c8d5f2be82fe55ddcb989fbbd22723edc7421319c449b63d741308393bd546a28336e7571f26f65c59ff2e9b8c83145d6f6edafef4c044e1024cec82d27f32463e8344bf1d32d09bf336af717cae23f973f9df13e5f9bec2cdface9f4e1401941ad13385a1386f3b0b261748ccf4322f97dac6b98e85ba591fdf8d")
sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$int_in(r3, 0x40000000af01, &(0x7f0000000300))
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000300)={'bctf0\x00\x00\x00\x00\x00\x00"\x00', 0x6})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000240)={0x1, 0x0, &(0x7f0000000100)=""/163, &(0x7f00000019c0)=""/246, &(0x7f00000004c0)=""/4096})
ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000007c0)=ANY=[])
ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000000)={0x200000000001, r4})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000400)={0x3, 0x1f, 0x202, 0xfffffffffffffffe, 0x7, 0xfffffffffffffff8, 0x1, 0x2, <r5=>0x0}, &(0x7f0000000440)=0x20)
setsockopt$inet_sctp_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f00000014c0)={r5, 0x400, 0x28}, 0x8)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0xffffffffffffffda)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1, {{}, 0x81}}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3dfc7825548faccbef77c7e2ac0b530c3006ca59c165a9139b3febb08c2f9935b48b4e6f6e417bec2a440ee66b7ba1a3bf57ac7b41b6ce24bbc527549c868e8498a50247f3cc8c510b528cc621b195f4d6ef389e575d8ee5bf79b77e396b0736e66b7862a124ef226bcbc936050324", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00'])
r6 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getsockopt$inet6_tcp_int(r2, 0x6, 0x1f, &(0x7f00000001c0), &(0x7f00000002c0)=0x4)
getdents(r6, &(0x7f0000000180)=""/8, 0x8)

10:47:03 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000001, 0x0)
ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070")
r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x1, 0x1100082)
r2 = memfd_create(&(0x7f0000000140)="c8a8707470", 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)="16", 0x1}], 0x1, 0x1081806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
read(r1, &(0x7f0000000000)=""/5, 0x5)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendfile(r1, r1, &(0x7f0000000100)=0x3f19, 0xffffffff)
ioctl$LOOP_CLR_FD(r1, 0x4c01)

[  826.105683] bridge0: port 2(bridge_slave_1) entered blocking state
[  826.112136] bridge0: port 2(bridge_slave_1) entered forwarding state
[  826.119004] bridge0: port 1(bridge_slave_0) entered blocking state
[  826.125422] bridge0: port 1(bridge_slave_0) entered forwarding state
[  826.132167] device bridge0 entered promiscuous mode
[  826.187665] input: syz1 as /devices/virtual/input/input4630
[  826.211852] input: syz1 as /devices/virtual/input/input4631
[  826.265165] input: syz1 as /devices/virtual/input/input4633
[  826.281871] input: syz1 as /devices/virtual/input/input4632
[  826.287577] 9pnet: Insufficient options for proto=fd
[  826.374461] 9pnet: Insufficient options for proto=fd
[  826.478614] bridge0: port 2(bridge_slave_1) entered disabled state
[  826.485185] bridge0: port 1(bridge_slave_0) entered disabled state
[  826.493528] device bridge0 left promiscuous mode
[  826.499784] print_req_error: I/O error, dev loop1, sector 0
10:47:04 executing program 7:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x4000)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c776664143c3d", @ANYRESHEX=r1, @ANYBLOB=',noextend,\x00'])
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1, {{}, 0x81}}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r2, &(0x7f0000000180)=""/8, 0x8)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x4, 0x200000)

10:47:04 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast, 0x0, 0x3000000}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:47:04 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xf00}, 'syz1\x00'})

10:47:04 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff00000000}}}}, 0xf8}}, 0x0)

10:47:04 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x39fe}, 'syz1\x00'})

[  826.697974] bridge0: port 2(bridge_slave_1) entered blocking state
[  826.704433] bridge0: port 2(bridge_slave_1) entered forwarding state
[  826.711151] bridge0: port 1(bridge_slave_0) entered blocking state
[  826.717535] bridge0: port 1(bridge_slave_0) entered forwarding state
[  826.724278] device bridge0 entered promiscuous mode
[  826.811174] input: syz1 as /devices/virtual/input/input4634
[  826.814971] input: syz1 as /devices/virtual/input/input4635
[  826.830683] 9pnet: Insufficient options for proto=fd
10:47:04 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast, 0x0, 0xf000}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:47:04 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff02000000000000}}}}, 0xf8}}, 0x0)

[  826.866985] input: syz1 as /devices/virtual/input/input4637
[  826.887258] 9pnet: Insufficient options for proto=fd
[  826.909097] input: syz1 as /devices/virtual/input/input4636
10:47:04 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000001, 0x0)
ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070")
r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x1, 0x1100082)
r2 = memfd_create(&(0x7f0000000140)="c8a8707470", 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)="16", 0x1}], 0x1, 0x1081806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
read(r1, &(0x7f0000000000)=""/5, 0x5)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendfile(r1, r1, &(0x7f0000000100)=0x3f63, 0xffffffff)
ioctl$LOOP_CLR_FD(r1, 0x4c01)

10:47:04 executing program 7:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x3ff, 0x20000)
getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f00000002c0)={<r3=>0x0, @loopback, @multicast1}, &(0x7f00000004c0)=0xc)
getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000380)={{{@in=@loopback}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000006c0)={{{@in=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in6=@mcast1}, 0x0, @in=@dev}}, &(0x7f0000000540)=0xe8)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000940)={{{@in=@multicast1, @in=@dev={0xac, 0x14, 0x14, 0x1d}, 0x4e22, 0x8, 0x4e24, 0x40, 0x2, 0xa0, 0xa0, 0x0, r3, r4}, {0xe5d, 0x4, 0x0, 0x9, 0xffffffff80000001, 0x80, 0xffffffffffff0000, 0x9}, {0x2, 0x4bd, 0x0, 0x8}, 0x5, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in=@broadcast, 0x4d4, 0x6c}, 0x2, @in, 0x3504, 0x0, 0x2, 0x5, 0x0, 0x1b53, 0x1}}, 0xe8)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1, {{}, 0x81}}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r5 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r5, &(0x7f0000000180)=""/8, 0x8)

10:47:04 executing program 1 (fault-call:11 fault-nth:0):
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r2, &(0x7f0000000180)=""/8, 0x8)

10:47:04 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xfe49}, 'syz1\x00'})

10:47:04 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xf4c2}, 'syz1\x00'})

10:47:04 executing program 6 (fault-call:1 fault-nth:0):
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

10:47:04 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast, 0x0, 0xfffffffffffff000}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:47:04 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffffff00000000}}}}, 0xf8}}, 0x0)

[  827.157905] input: syz1 as /devices/virtual/input/input4638
[  827.198281] FAULT_INJECTION: forcing a failure.
[  827.198281] name failslab, interval 1, probability 0, space 0, times 0
[  827.209753] CPU: 0 PID: 20054 Comm: syz-executor1 Not tainted 4.18.0-next-20180824+ #47
[  827.217919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  827.227290] Call Trace:
[  827.229910]  dump_stack+0x1c9/0x2b4
[  827.233566]  ? dump_stack_print_info.cold.2+0x52/0x52
[  827.234017] input: syz1 as /devices/virtual/input/input4639
[  827.238787]  should_fail.cold.4+0xa/0x11
[  827.238809]  ? print_usage_bug+0xc0/0xc0
[  827.238831]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[  827.238851]  ? __lock_acquire+0x7fc/0x5020
[  827.238878]  ? graph_lock+0x170/0x170
[  827.247542] FAULT_INJECTION: forcing a failure.
[  827.247542] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  827.248657]  ? find_held_lock+0x36/0x1c0
[  827.248678]  ? __lock_is_held+0xb5/0x140
[  827.248728]  ? check_same_owner+0x340/0x340
[  827.248749]  ? rcu_note_context_switch+0x680/0x680
[  827.248773]  __should_failslab+0x124/0x180
[  827.299626]  should_failslab+0x9/0x14
[  827.303451]  __kmalloc+0x2b2/0x720
[  827.307015]  ? __fget+0x4d5/0x740
[  827.310480]  ? graph_lock+0x170/0x170
[  827.314316]  ? v9fs_dir_readdir+0x8d1/0xbc0
[  827.318650]  v9fs_dir_readdir+0x8d1/0xbc0
[  827.322817]  ? lock_acquire+0x1e4/0x4f0
[  827.326798]  ? iterate_dir+0xce/0x5d0
[  827.330609]  ? v9fs_dir_release+0x60/0x60
[  827.334761]  ? lock_release+0x9f0/0x9f0
[  827.338748]  ? check_same_owner+0x340/0x340
[  827.343076]  ? fsnotify+0xbac/0x14e0
[  827.346802]  ? rcu_note_context_switch+0x680/0x680
[  827.351757]  ? down_read_killable+0xb4/0x200
[  827.356175]  ? iterate_dir+0xce/0x5d0
[  827.359982]  ? fsnotify+0x14e0/0x14e0
[  827.363791]  ? down_write+0x130/0x130
[  827.367610]  ? security_file_permission+0x1ba/0x230
[  827.372639]  iterate_dir+0x48b/0x5d0
[  827.376369]  __x64_sys_getdents+0x29f/0x510
[  827.380712]  ? __ia32_sys_old_readdir+0x2c0/0x2c0
[  827.385572]  ? fillonedir+0x2a0/0x2a0
[  827.389396]  do_syscall_64+0x1b9/0x820
[  827.393293]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[  827.398666]  ? syscall_return_slowpath+0x5e0/0x5e0
[  827.403636]  ? trace_hardirqs_on_caller+0x2b0/0x2b0
[  827.408660]  ? prepare_exit_to_usermode+0x3b0/0x3b0
[  827.413701]  ? recalc_sigpending_tsk+0x180/0x180
[  827.418475]  ? kasan_check_write+0x14/0x20
[  827.422739]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  827.427600]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  827.432793] RIP: 0033:0x457089
[  827.435993] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  827.454896] RSP: 002b:00007f54e6260c78 EFLAGS: 00000246 ORIG_RAX: 000000000000004e
[  827.462612] RAX: ffffffffffffffda RBX: 00007f54e62616d4 RCX: 0000000000457089
[  827.469895] RDX: 0000000000000008 RSI: 0000000020000180 RDI: 0000000000000005
[  827.477167] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000
[  827.484440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006
[  827.491727] R13: 00000000004cbd10 R14: 00000000004c350f R15: 0000000000000000
[  827.499026] CPU: 1 PID: 20071 Comm: syz-executor6 Not tainted 4.18.0-next-20180824+ #47
[  827.507181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  827.516535] Call Trace:
[  827.519133]  dump_stack+0x1c9/0x2b4
[  827.522769]  ? dump_stack_print_info.cold.2+0x52/0x52
[  827.527981]  should_fail.cold.4+0xa/0x11
[  827.532054]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[  827.537163]  ? graph_lock+0x170/0x170
[  827.540972]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  827.546512]  ? _kstrtoull+0x188/0x250
[  827.550319]  ? _parse_integer+0x190/0x190
[  827.554470]  ? graph_lock+0x170/0x170
[  827.558279]  ? find_held_lock+0x36/0x1c0
[  827.562535]  ? check_same_owner+0x340/0x340
[  827.566868]  ? rcu_note_context_switch+0x680/0x680
[  827.571815]  __alloc_pages_nodemask+0x365/0xd10
[  827.576490]  ? proc_fail_nth_write+0x9e/0x210
[  827.581013]  ? __alloc_pages_slowpath+0x2cb0/0x2cb0
[  827.586037]  ? find_held_lock+0x36/0x1c0
[  827.590110]  ? kasan_check_write+0x14/0x20
[  827.594356]  ? __mutex_unlock_slowpath+0x197/0x8c0
[  827.599295]  ? wait_for_completion+0x8d0/0x8d0
[  827.603889]  ? __lock_is_held+0xb5/0x140
[  827.607967]  ? __sanitizer_cov_trace_const_cmp2+0x18/0x20
[  827.613522]  alloc_pages_current+0x10c/0x210
[  827.617941]  __get_free_pages+0xc/0x40
[  827.621837]  __x64_sys_mincore+0x286/0x930
[  827.626087]  ? fput+0x130/0x1a0
[  827.629376]  ? mincore_pte_range+0xd10/0xd10
[  827.633793]  ? trace_hardirqs_on+0xbd/0x2c0
[  827.638121]  ? __ia32_sys_read+0xb0/0xb0
[  827.642454]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  827.648000]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  827.653390]  ? trace_hardirqs_off_caller+0x2b0/0x2b0
[  827.658499]  ? ksys_ioctl+0x81/0xd0
[  827.662140]  do_syscall_64+0x1b9/0x820
[  827.666033]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[  827.671408]  ? syscall_return_slowpath+0x5e0/0x5e0
[  827.676344]  ? trace_hardirqs_on_caller+0x2b0/0x2b0
[  827.681365]  ? prepare_exit_to_usermode+0x3b0/0x3b0
[  827.686384]  ? recalc_sigpending_tsk+0x180/0x180
[  827.691146]  ? kasan_check_write+0x14/0x20
[  827.695396]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  827.700255]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  827.705448] RIP: 0033:0x457089
[  827.708644] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  827.727548] RSP: 002b:00007f3ab2d71c78 EFLAGS: 00000246 ORIG_RAX: 000000000000001b
[  827.735263] RAX: ffffffffffffffda RBX: 00007f3ab2d726d4 RCX: 0000000000457089
[  827.742537] RDX: 0000000020001280 RSI: 0000000000c00000 RDI: 00000000203fc000
[  827.749897] RBP: 0000000000930140 R08: 0000000000000000 R09: 0000000000000000
[  827.757181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  827.764473] R13: 00000000004d2670 R14: 00000000004c7b93 R15: 0000000000000000
10:47:05 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast, 0x0, 0x3}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

[  827.796095] input: syz1 as /devices/virtual/input/input4640
[  827.809194] print_req_error: I/O error, dev loop1, sector 144
[  827.815238] Buffer I/O error on dev loop1, logical block 18, lost async page write
10:47:05 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffff}}}}, 0xf8}}, 0x0)

10:47:05 executing program 7:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400, 0x0)
ioctl$KVM_SET_NR_MMU_PAGES(r2, 0xae44, 0x2)
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1, {{}, 0x81}}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r3, &(0x7f0000000180)=""/8, 0x8)

10:47:05 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xf00000000000000}, 'syz1\x00'})

[  827.887956] input: syz1 as /devices/virtual/input/input4641
10:47:05 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x7f00000000000000}, 'syz1\x00'})

10:47:05 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast, 0x0, 0x34000}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:47:05 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e2b648dc8}}}}, 0xf8}}, 0x0)

[  828.020811] input: syz1 as /devices/virtual/input/input4642
[  828.055631] input: syz1 as /devices/virtual/input/input4643
10:47:05 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000001, 0x0)
ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070")
r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x1, 0x1100082)
r2 = memfd_create(&(0x7f0000000140)="c8a8707470", 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)="16", 0x1}], 0x1, 0x1081806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
read(r1, &(0x7f0000000000)=""/5, 0x5)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendfile(r1, r1, &(0x7f0000000100)=0x3f98, 0xffffffff)
ioctl$LOOP_CLR_FD(r1, 0x4c01)

10:47:05 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1408}, 'syz1\x00'})

10:47:05 executing program 7:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="7472616e733d66642c726601006f3d", @ANYRESHEX=r0, @ANYBLOB="dce2", @ANYRESHEX=r1, @ANYBLOB=',noextend,\x00'])
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084f443b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000000)={0x18, 0x73, 0x1, {{}, 0x81}}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)=ANY=[@ANYBLOB="0b1c92ad5771d2943d0000"], 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x0, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f00000001c0)={<r4=>0x0, @in={{0x2, 0x4e23, @broadcast}}, [0x3, 0x7, 0x400, 0x7, 0x1, 0x6, 0x1, 0x5, 0xe4, 0x1f, 0x2, 0x2, 0x2, 0xa9db, 0x64]}, &(0x7f0000000080)=0x100)
getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000680)={{{@in6=@ipv4={[], [], @multicast1}, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@multicast2}, 0x0, @in=@multicast1}}, &(0x7f00000003c0)=0xe8)
getgroups(0x3, &(0x7f0000000400)=[0xffffffffffffffff, <r6=>0xee01, 0x0])
write$P9_RGETATTR(r0, &(0x7f0000000540)={0xa0, 0x19, 0x1, {0x404, {0x4, 0x1, 0x3}, 0x2, r5, r6, 0x6, 0x7, 0x7, 0x2, 0x100, 0x6, 0x100000000, 0x2, 0x401, 0x8, 0x7, 0x0, 0x7, 0x100000000, 0x1}}, 0xa0)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000440)={r4, 0x8000009}, &(0x7f00000004c0)=0xfffffffffffffed6)
getdents(r2, &(0x7f0000000180)=""/8, 0x8)

[  828.189449] input: syz1 as /devices/virtual/input/input4644
[  828.230076] input: syz1 as /devices/virtual/input/input4645
[  828.241185] input: syz1 as /devices/virtual/input/input4646
[  828.273906] print_req_error: I/O error, dev loop1, sector 120
[  828.279975] Buffer I/O error on dev loop1, logical block 30, lost async page write
[  828.287823] print_req_error: I/O error, dev loop1, sector 124
[  828.293784] Buffer I/O error on dev loop1, logical block 31, lost async page write
10:47:05 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000}}}}, 0xf8}}, 0x0)

10:47:05 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast, 0x0, 0xff020000}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:47:05 executing program 1:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r2, &(0x7f0000000180)=""/8, 0x8)

[  828.346111] input: syz1 as /devices/virtual/input/input4647
[  828.399231] 9pnet: Insufficient options for proto=fd
10:47:05 executing program 6:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

10:47:05 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xfffffdfd}, 'syz1\x00'})

10:47:05 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast, 0x0, 0xf0}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:47:05 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000001, 0x0)
ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070")
r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x1, 0x1100082)
r2 = memfd_create(&(0x7f0000000140)="c8a8707470", 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)="16", 0x1}], 0x1, 0x1081806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
read(r1, &(0x7f0000000000)=""/5, 0x5)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendfile(r1, r1, &(0x7f0000000100)=0x3f9e, 0xffffffff)
ioctl$LOOP_CLR_FD(r1, 0x4c01)

10:47:05 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x3cfe}, 'syz1\x00'})

10:47:05 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde01000000000000}}}}, 0xf8}}, 0x0)

10:47:05 executing program 1:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r2, &(0x7f0000000180)=""/8, 0x20000188)

[  828.538369] 9pnet: Insufficient options for proto=fd
10:47:06 executing program 7:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0xfffffffffffffe93}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1, {{}, 0x81}}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c093b40c6b2bae00c518f0052b0feef5c7da0f9a4"])
r2 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r2, &(0x7f0000000180)=""/8, 0x8)

[  828.617533] input: syz1 as /devices/virtual/input/input4648
[  828.634636] input: syz1 as /devices/virtual/input/input4649
[  828.698217] input: syz1 as /devices/virtual/input/input4650
10:47:06 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f00000000}}}}, 0xf8}}, 0x0)

[  828.743165] input: syz1 as /devices/virtual/input/input4651
10:47:06 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast, 0x0, 0xf0ffffff00000000}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:47:06 executing program 6:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0x20ffc000, &(0x7f0000001280)=""/4096)

[  828.788443] print_req_error: I/O error, dev loop1, sector 0
10:47:06 executing program 1:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="377684d9ee6f3d", @ANYRESHEX=r1, @ANYBLOB=',noextend,\x00'])
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000380)={0x61, 0x29, 0x1, {0x0, [{{0x80, 0x0, 0x2}, 0x6, 0x5}, {{0x4}, 0x7ff, 0xe000000000000000, 0x9e95f49e7b5dd3a2, './file0'}, {{0x80, 0x3, 0x7}, 0x1, 0x2, 0x7, './file0'}]}}, 0x61)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
write$P9_RLOPEN(r1, &(0x7f0000000000)={0x18, 0xd, 0x1, {{0x22, 0x3, 0x9}, 0x525}}, 0x18)
getdents(r2, &(0x7f0000000180)=""/8, 0x8)

10:47:06 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xc2f9}, 'syz1\x00'})

10:47:06 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000001, 0x0)
ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070")
r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x1, 0x1100082)
r2 = memfd_create(&(0x7f0000000140)="c8a8707470", 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)="16", 0x1}], 0x1, 0x1081806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
read(r1, &(0x7f0000000000)=""/5, 0x5)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendfile(r1, r1, &(0x7f0000000100)=0x3f11, 0xffffffff)
ioctl$LOOP_CLR_FD(r1, 0x4c01)

10:47:06 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x7f00}, 'syz1\x00'})

10:47:06 executing program 7:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYRES32=r1], 0x4)
write$P9_RREAD(r1, &(0x7f0000000380)={0x4a, 0x75, 0x2, {0x3f, "45450af9477ae2797890e5211fb682b246a6faa0352372b08dce70eba306be72e6574a487b1036ba065337ac6fa8d688344a20a0ed9031ed244a9870698f97"}}, 0x4a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
socket(0xa, 0x80006, 0x258)
write$P9_RWALK(r1, &(0x7f00000001c0)={0x9, 0x6f, 0x2, {0x0, [{0x3, 0x4, 0x7}, {0x86, 0x4, 0x6}, {0x10, 0x2, 0x1}]}}, 0xfe4c)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1, {{}, 0x81}}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)=ANY=[@ANYBLOB="0b24000029010000000000"], 0xb)
socketpair$packet(0x11, 0x3, 0x300, &(0x7f00000002c0))
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r2, &(0x7f0000000180)=""/8, 0x8)

10:47:06 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast, 0x0, 0xffffff7f}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:47:06 executing program 6:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00002, &(0x7f0000001280)=""/4096)

[  828.986447] 9pnet: Insufficient options for proto=fd
10:47:06 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}}}}, 0xf8}}, 0x0)

[  829.036991] input: syz1 as /devices/virtual/input/input4652
[  829.071034] input: syz1 as /devices/virtual/input/input4653
[  829.084419] 9pnet: Insufficient options for proto=fd
[  829.136356] input: syz1 as /devices/virtual/input/input4654
10:47:06 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf000}}}}, 0xf8}}, 0x0)

[  829.181679] input: syz1 as /devices/virtual/input/input4655
[  829.193514] print_req_error: I/O error, dev loop1, sector 128
[  829.199612] Buffer I/O error on dev loop1, logical block 16, lost async page write
10:47:06 executing program 1:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
open$dir(&(0x7f00000002c0)='./file0/file0\x00', 0x400c0, 0x2)
r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x2, 0x2000)
setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f00000001c0)="c7", 0x1)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0/file0\x00', &(0x7f00000004c0)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_client='access=client'}, {@debug={'debug', 0x3d, 0x2}}, {@nodevmap='nodevmap'}, {@mmap='mmap'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000380)={0x6e, 0x29, 0x1, {0x0, [{{0x1, 0x0, 0x2}, 0x80, 0x2, 0x7, './file0'}, {{0xc, 0x2, 0x7}, 0x4, 0x14af, 0xd, './file0/file0'}, {{0x37, 0x4, 0x4}, 0x7ff, 0x8, 0x7, './file0'}]}}, 0x6e)
write$P9_RSTAT(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="4e0000007d0200000047000200ffffffff8902000000080000000000000000000d100400000002000000000200000000000009007472616e733d66642c08006e6f657874656e6400000300395100"], 0x4e)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r3, &(0x7f0000000180)=""/8, 0x8)
write$P9_RCREATE(r1, &(0x7f0000000400)={0x18, 0x73, 0x1, {{0x4, 0x0, 0x2}, 0x40}}, 0x18)

10:47:06 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast, 0x0, 0xf00}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:47:06 executing program 6:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x400200, 0x0)
ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

10:47:06 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xfe47}, 'syz1\x00'})

10:47:06 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xf5080000}, 'syz1\x00'})

10:47:06 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000001, 0x0)
ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070")
r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x1, 0x1100082)
r2 = memfd_create(&(0x7f0000000140)="c8a8707470", 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)="16", 0x1}], 0x1, 0x1081806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
read(r1, &(0x7f0000000000)=""/5, 0x5)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendfile(r1, r1, &(0x7f0000000100)=0x3f30, 0xffffffff)
ioctl$LOOP_CLR_FD(r1, 0x4c01)

10:47:06 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}}}, 0xf8}}, 0x0)

10:47:06 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast, 0x0, 0xaf464e2a11}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

[  829.441382] input: syz1 as /devices/virtual/input/input4656
[  829.448112] 9pnet: Insufficient options for proto=fd
[  829.466366] input: syz1 as /devices/virtual/input/input4657
10:47:06 executing program 6:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$inet6_sctp(0xa, 0x1, 0x84, &(0x7f0000000480)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = accept4(r0, &(0x7f00000004c0)=@l2, &(0x7f0000000580)=0xfffffebf, 0x80803)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000180)={<r2=>0x0, 0x43}, &(0x7f0000000200)=0x59)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000300)={r2, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}}, 0x401, 0x3, 0x9, 0xb2, 0x108}, &(0x7f00000002c0)=0x98)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f00000003c0)={r2, @in6={{0xa, 0x4e20, 0x3, @local, 0x1ff}}, 0x2, 0x7f, 0x100000001, 0x100000000, 0x6}, &(0x7f00000001c0)=0x98)

[  829.546479] input: syz1 as /devices/virtual/input/input4658
[  829.571536] input: syz1 as /devices/virtual/input/input4659
10:47:07 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc88d642b4e000000}}}}, 0xf8}}, 0x0)

10:47:07 executing program 1:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
clone(0x40000000, &(0x7f0000000380)="25d7a78ff18cd6dabe6665ef736a7a2e197596f22c24bbb941e542e4b84fea69e163e2f4b19028be6b73e6dcb706c1f93da12a6d1d8ed42aceea9bec87c4186c1151473d84", &(0x7f0000000000), &(0x7f00000001c0), &(0x7f0000000540)="4d26f38da22ebfb02e95b4fe6a1d1692d9a50da7b5d34d83c59e8cb0f96a5f4f9dd021df30b837cb4858156341656f7ccbe8f90fc766a4e257a2971893277afa7ca5de274499c1b88674aa8f25db015687857a584e784ca8cfecc9011c8af23553d9231666af4061f7da262d04714e53805aec8cc36432fd9f98e8a5dfb146af8520e9ddf3135a83761b4076910319b9d2eb28f9afbbbe425428b5ee4388927ec2f5ca568d6900ec")
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x82, 0x0)
getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000007c0)={0x0, 0x9, 0x5, 0x4, 0x1, 0x2, 0x7fffffff, 0x2, {<r3=>0x0, @in={{0x2, 0x4e20, @multicast2}}, 0x4c1, 0x1, 0x3ff, 0xfff, 0x7b4}}, &(0x7f0000000400)=0xb0)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000440)={r3, 0x1000}, 0x8)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c7766646e6f3df40266e49d1ab0854090d7b10d2c7d1e218947285c664922d576f2865991baf24e7cacc619b2d664f9c4f9337c99cea9b2b04ac02cd7cfc4cc741359447f4c9dd43d512d07e53d92203665d13beda083e0677fd86ab8da47346224a0dfb76fcb23be6bb63b69e350be3e7a5889291647229a9bf13448f3a535acd4d886b4d6ca8537e13ed1e86cc7441da685746ece2b21252c1c22a40cd40fdfa4c05519250719123facbfc00e4642fdd258bc0982c3cf5bb2392a5307a238", @ANYRESHEX=r1, @ANYBLOB=',\x00'])
r4 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r4, &(0x7f00000004c0)=""/8, 0x8)

[  829.623887] print_req_error: I/O error, dev loop1, sector 392
[  829.629963] Buffer I/O error on dev loop1, logical block 49, lost async page write
[  829.877862] IPVS: ftp: loaded support on port[0] = 21
[  829.925080] 9pnet: Insufficient options for proto=fd
[  829.957054] 9pnet: Insufficient options for proto=fd
[  829.966979] IPVS: ftp: loaded support on port[0] = 21
10:47:07 executing program 7:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0x7}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1, {{}, 0x81}}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/hwrng\x00', 0x10080, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x6, 0x4200)
ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f00000001c0)={0x6, 0x5, 0x100})
r4 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r4, &(0x7f0000000180)=""/8, 0x8)

10:47:07 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast, 0x0, 0xfffffff0}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:47:07 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000}}}}, 0xf8}}, 0x0)

10:47:07 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xfe72}, 'syz1\x00'})

10:47:07 executing program 6:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)
r1 = fcntl$dupfd(r0, 0x406, r0)
ioctl$VHOST_SET_VRING_ENDIAN(r1, 0x4008af13, &(0x7f00000000c0)={0x3, 0x8})

10:47:07 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000001, 0x0)
ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070")
r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x1, 0x1100082)
r2 = memfd_create(&(0x7f0000000140)="c8a8707470", 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)="16", 0x1}], 0x1, 0x1081806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
read(r1, &(0x7f0000000000)=""/5, 0x5)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendfile(r1, r1, &(0x7f0000000100)=0x3f8f, 0xffffffff)
ioctl$LOOP_CLR_FD(r1, 0x4c01)

10:47:07 executing program 1:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="7472056e733d66642c72b63bf4813d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00'])
r2 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
write$P9_RXATTRCREATE(r1, &(0x7f0000000000)={0x7, 0x21, 0x1}, 0x7)
r3 = syz_open_dev$admmidi(&(0x7f00000001c0)='/dev/admmidi#\x00', 0x9, 0x400002)
r4 = msgget(0x0, 0x80)
msgrcv(r4, &(0x7f0000000380)={0x0, ""/43}, 0x33, 0x0, 0x3800)
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r3, 0x40405515, &(0x7f00000002c0)={0x7, 0x1, 0x8000, 0x2, 'syz1\x00', 0x2000000000000000})
getdents(r2, &(0x7f0000000180)=""/8, 0x8)

10:47:07 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xeac20000}, 'syz1\x00'})

[  830.098567] input: syz1 as /devices/virtual/input/input4660
[  830.118251] input: syz1 as /devices/virtual/input/input4661
10:47:07 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast, 0x0, 0x200b}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:47:07 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde010000}}}}, 0xf8}}, 0x0)

[  830.198863] input: syz1 as /devices/virtual/input/input4662
[  830.218286] input: syz1 as /devices/virtual/input/input4663
10:47:07 executing program 1:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x4582)
setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000380)={0x0, {{0xa, 0x4e20, 0x5, @loopback, 0x7}}}, 0x88)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r3, &(0x7f0000000180)=""/8, 0x8)
getsockopt$inet_sctp_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f00000004c0), &(0x7f0000000540)=0x4)
getpeername$packet(r2, &(0x7f00000001c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000002c0)=0x14)
connect$can_bcm(r2, &(0x7f0000000440)={0x1d, r4}, 0x10)

10:47:07 executing program 6:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)
fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, <r1=>0x0})
r2 = socket$rds(0x15, 0x5, 0x0)
r3 = accept4(r2, &(0x7f00000025c0)=@generic, &(0x7f0000002640)=0x80, 0x80000)
r4 = syz_open_procfs(r1, &(0x7f0000002380)='net/softnet_stat\x00')
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r4, 0x40485404, &(0x7f0000002400)={{0x3, 0x0, 0x4000800000, 0x3}, 0xffffffffffff7fff, 0x8})
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x400000, 0x0)
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000024c0)='IPVS\x00')
sendmsg$IPVS_CMD_GET_INFO(r5, &(0x7f0000002580)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x400800}, 0xc, &(0x7f0000002540)={&(0x7f0000002500)={0x3c, r6, 0x802, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x28, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xffff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x10)
ioctl$IOC_PR_PREEMPT_ABORT(r5, 0x401870cc, &(0x7f00000026c0)={0x81, 0x2, 0x3, 0xdeae})
sendmsg$kcm(r5, &(0x7f00000023c0)={&(0x7f00000001c0)=@nl=@kern={0x10, 0x0, 0x0, 0x2000000}, 0x80, &(0x7f0000002340)=[{&(0x7f0000000240)="86d5c9003e0b9a", 0x7}, {&(0x7f0000000280)="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", 0x1000}, {&(0x7f0000002280)="6b599219db75300f9e50646c960c6440eb4bdeffa0cab5ffa3bc2d5991d51e5ac967876b5552881d50839bbbfeea97073eca488a8aca88c1c5ee93ffac5fcc411d017cbbd8cbb1240d3a43f05128765cc694a74a041b9b447d51a82b81592388c3642c0437775c5684ab75a66f0673e1b94af1031df81fbe62ea4c2532cac3d7976d2f9419cd377d7c", 0x89}], 0x3, &(0x7f0000002380), 0x0, 0x20008010}, 0x40)
accept4$inet6(r3, 0x0, &(0x7f0000002680), 0x80800)
perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x30000, 0x7fffffff, 0x101, 0x3, 0x0, 0xa5c0, 0x8, 0x9, 0xfffffffffffffffb, 0x2, 0x1ff, 0x5, 0x1000, 0x1, 0x8000, 0x5, 0x7, 0x7, 0x4, 0x401, 0x7, 0x96, 0xffff, 0x371, 0x5, 0x6, 0x8, 0x2, 0x3ff, 0x9, 0x78a8, 0x0, 0x1, 0x7, 0x1, 0x3, 0x0, 0x7, 0x0, @perf_config_ext={0x800, 0x1000}, 0x1, 0x9, 0xa, 0x5, 0x3, 0x1, 0x4}, r1, 0x4, r0, 0x2)

[  830.255989] print_req_error: I/O error, dev loop1, sector 248
[  830.262139] Buffer I/O error on dev loop1, logical block 31, lost async page write
10:47:07 executing program 7:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x20202)
setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f00000007c0)={0x7f}, 0x4)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f00000001c0)={<r3=>0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x6c, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="04630440010000000763044000000000046304400200000011634840040000000000000004000000000000000000000001000000000000000000000018000000000000002800000000000000", @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB="852a62770b010000", @ANYRES64=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000380)=ANY=[@ANYBLOB='0\x00\x00\x00\x00\x00\x00\x00x\x00\x00\x00\x00\x00\x00\x00x\x00\x00\x00\x00\x00\x00\x00h\x00\x00\x00\x00\x00\x00\x00X\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00\vc\x00\x00\vc\x00\x00'], 0xda, 0x0, &(0x7f00000006c0)="971e5a306dc7552f0b5297ee64884caedb4b683ec09890d49586ced4afe5bc196a3d9bc26dc62166e424a69e36e5a8582b52eeddeb7236ae1e409f399dfd97635c9b8c8adad48f68d8a0442cb5081665c3bfab7b9a3c6a2a6c36e5d94f157ae25798ddfe26a73366b6ac3f8bff7d06373acdcd4c36ca3d54fe09de279576e7cc54e0202498110d52c85cb70252ebda0310a1f022a28d4c977bb75e00cd66f3fac30c30f51aad9df6a6465498745cbbdabf411257ee3fc59b5398e1fd549dfd9bf109a60fb9ad1b36a7b3f40bb0b95a350fb910aa22ba00413fe6"})
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1, {{}, 0x81}}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="e89bd9b93a4959e75ac81edd23fd087cb18deaa4acf79d3d448cf2f91fc0423516f24bc86aad697065cb3175463c38381d926464b4252d01f275363d2ce85cc18a0eb547b2d969fa7a0afcbef0d6cd2600000000000000"])
r4 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r4, &(0x7f0000000180)=""/8, 0x8)
mount$9p_fd(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='9p\x00', 0x80, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@privport='privport'}, {@cache_loose='cache=loose'}, {@cache_loose='cache=loose'}, {@posixacl='posixacl'}]}})

10:47:07 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x15080000}, 'syz1\x00'})

10:47:07 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000001, 0x0)
ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070")
r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x1, 0x1100082)
r2 = memfd_create(&(0x7f0000000140)="c8a8707470", 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)="16", 0x1}], 0x1, 0x1081806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
read(r1, &(0x7f0000000000)=""/5, 0x5)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendfile(r1, r1, &(0x7f0000000100)=0x3f21, 0xffffffff)
ioctl$LOOP_CLR_FD(r1, 0x4c01)

10:47:07 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x6c000000}, 'syz1\x00'})

10:47:07 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}}}}, 0xf8}}, 0x0)

10:47:07 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast, 0x0, 0xa}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

[  830.510788] input: syz1 as /devices/virtual/input/input4664
[  830.543364] 9pnet: Insufficient options for proto=fd
[  830.598195] 9pnet: Insufficient options for proto=fd
10:47:08 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast, 0x0, 0x100000000000000}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:47:08 executing program 1:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
fstat(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
fstat(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0})
fstat(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
write$P9_RSTATu(r1, &(0x7f0000000800)={0x66, 0x7d, 0x2, {{0x0, 0x4d, 0x7ff, 0x1000, {0x2, 0x3, 0x2}, 0x8000000, 0x2, 0x87c, 0x7fffffff, 0x0, "", 0x7, 'selinux', 0x5, 'rfdno', 0xe, '/dev/snapshot\x00'}, 0x4, 'self', r2, r3, r4}}, 0x66)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='tr{ns=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',noextend,\x00'])
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
r5 = socket$netlink(0x10, 0x3, 0x13)
r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/snapshot\x00', 0x200000, 0x0)
getdents(r6, &(0x7f0000001400)=""/4096, 0x1000)
setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000001c0)=r6, 0x4)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1}, 0x18)
ioctl$SG_SET_TIMEOUT(r6, 0x2201, &(0x7f00000002c0)=0x101)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="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"])
r7 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r7, &(0x7f0000000180)=""/8, 0x8)

[  830.637889] input: syz1 as /devices/virtual/input/input4666
[  830.665686] input: syz1 as /devices/virtual/input/input4665
10:47:08 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}}}}, 0xf8}}, 0x0)

10:47:08 executing program 7:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/snapshot\x00', 0x0, 0x0)
read$FUSE(r2, &(0x7f0000002400), 0x1000)
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
io_setup(0x200, &(0x7f0000000000)=<r3=>0x0)
socketpair(0x1a, 0x7, 0x5, &(0x7f00000002c0)={<r4=>0xffffffffffffffff})
r5 = syz_open_dev$mice(&(0x7f00000004c0)='/dev/input/mice\x00', 0x0, 0x1)
io_submit(r3, 0x3, &(0x7f0000000580)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x2, r1, &(0x7f0000001400)="8a244483f1a8cb0b93f11955d541847e73469a012043034ee3013afd8d08df76b904442187063b2ef910a8a7610c2610d80cdba981bb5aee43bd047c5bf5693255a3af352bcb7b702bf7c9d59a2bafc9df9181f07811317a2fc0f7a74b30e621e118ee85d632ef04f4faca57bed625bedaa33a476f6fcb6a6939b7d3462bd64a4d92a34bd4f38d5d5cc0a3e5c7ef7859d8c7830f4e165fd9fd02f203c44d2f9372bf7ffd2a13b0609cfa020172306c30dab976dcdd29fa2ba218f20a44f431af265cd7cad24a4117d05677c3d12b095538538a649ac57996370df34c75df43aeff8148dfaca3acef3763f49e74477f791988e11b0fb3e8b7aa4ba7b75e6dae99bf43b1f8cd48713b106662b64e2349c88c2a687039f9be30cf529d95f012abaeeaa92b735036bee5a57cde3924343b452d6644cf21050d7368c7ddf5dd2c497b0fe2ea033ff8a3274223de29146c02bcfbb15ab28717a67f80cce8eb772778474597f081bede042b3e3bf0edc1f9ceddc7276d86fa32eec9c3360d2146fd9cc0127384389c0d6d665c72dfc68cf3470cf10086affc8e4dc36d16d14d0782efba98bff19f2662c12edf0a380688bdb4339f61d3024dc24b1854dd53cb1f913505a886dd720e0af84ae2f696ef44739ba7bd50ee2bd0fccae22a7de5013e693a4b51902dcf8a5f21597ed2e7ac87be392a08c89f2602a9ab29a0c44e994b6be5bdbda67ada3bd0f61ece9c966f210bd61eff8a74273e0980a958a3cbc76a73504abb0260a69d215680bbdd08e447c97ba529f5a6ea632703e43e81835f9736699f80aa3f120f8083062b423ad86ec8cd4c8cce1135dd17ac6efd6e972de374208ce040354c5a522339709a21be2cfba5eb8ddf9811c5c12ce82d78387df5a16f88e20b49f58d3560e7d96cdd6e2d6d0e74cdee1d05f3f6fbb12461ef3abbf6259cb0a135b17b77ff78bb36eb6b79b74ccf4c19af6ab057ddf0efd7b284376fde954c8de6a9353cc640131e3511a2455010a8e2cd4de2d975628399c9dc1b1abde839619cc31e5e5a27a3cd62adf1b7c21312d4a07ce6ea391e5b71d6abf9b652acea87c6c939b20a4824a3c6c0c9b79bbf773383580336fb9936c1a6db6452bbfd7bd6544772802050ffd0669cf374c8899e4566fb6b16b88e8eae2a7ec48b777b2672d4538d10163b483320f7a617af832761c54fc6f7372e51d2f999451c628c903ec6de7d4e53bcd56024e6502c3dadb749b16e461883f28c0d2f12d1d7aa9095b953e94783a6d2650bb15db230e79cee26db6bfa9aa9c9afb762ba9b77e81d57b7f15cfd961e3ed5028a03a7beb2214e0b53bcc921f68045a3216392f1fe91663d9b6d48b5831b2be0c4747d054da6bdb914e0dc23068a76213f7c0f3e0662832c1a6a5a5040d1d5636056cf6327afe8c01098526b21c73d741a6a2fe1725ad20473c6dea818192994785f68adeaf20dbd8a138c85cb5e25776ee652ffbc434554a69163fb80de8fccb0ea4e00fa784d6a0225443d634acee5d1a5062dbf1a1acc15f05b8c6f3761755ab13dfdb58043c698d7fd3939b7ff96cc6b628bd46d2aa23b0120bc1606cae8421aa51b3b6116046604e8fdf8ac60a0278f59a077f8af18ef4e909c983ed095f277dc4d7dd3853ca3b7104a67e554e86b49931cd067462e39eaeb7ea1d40ce98fd08368c475eb68eccf74aa051bad6d306e78c84b93618357ad0fec5a671a67624d5f38dd8b71ff4e602f759eb094645eba15ec8d30b107afa1163d0bdff753906de91db3d350a0320e6156016432c49e1c4df500d8501e728c0f51e4dcfd29df94217bb0be74816e241ebc9808f1db18afcf4743367ff367bf5053c5df7d5b89112ca20f652613a1886ad95e047859a8cc050ce833dae92e20839e6406183092c25cc840d1efba48fcda95abcba93721546890a99f07098fd18a08815d5ac6579623fe4a4ba1adfb3f371b564cc770c4a66d6018b6386a4cd984094ef77cc63d1a032229163d15145b64482a27ecfa13b60253c8a4455a8f31c72685b01874e01261439ff8c90c7effe223acf2a70582d4ece5f454b4b2476a1dc866db7bd153809ab57602dd13f29ec692dee7744a7933250ac97245c5e895e3d64703bc46c110ebfc897c578d72aa3bbf07ba965a0e2be5d23b0a8a42fd30a57f95d767bdc846daff164ee4a3da3bad06d12a801e8c72861f0d17fb0fefb7d9a2d8c4e8b64f96b41ded01f094d444e356dd3c00bdd8985032059391417dfbd8abab3368d8b0772f2dbbd1f3eb82808ca465a17a329ac2a3cf2312d6638127a4f3aed45f219789025282b65d921c1b575567a7d4c9ada995e04290a0473e5f3bb8f9e518775b12a667d966203a909016e7541cdd4d6b4348c23d43e2530670e7d3808b9c47ac50b3b8d30b6ade318c6a00de8546e5df429e36b1c99a040d9ebcf82977dbea1f27f027470a591ab630681674c77ca360ad2112ad251bcd61823a5fd0af7c67c15581a3dd4fafe87cf9e04bbb9bec2890552cbb64cfaa90775e28dd9413a4252a9193a9472773771172daab9b4244972b400e259378d23c51ea27076dec91e36cecab63aa7e1649701e2c77526c2846706482424d9f08a035eb81ee35d58f902ac1b604055634c34fdf52da0fdef806f4fd6d30050bf0657791d2708163cb59c6bb3d538d989444879fe43cfb9faf78d067d0458902aac4516d6e1d35e4035ddbd94ca54568a341d0a93899bd713fc144611e8f9ab3504e5b132f7aed6c4d6f10c80c88942cfe2b4fe105939f29c3bd9b15e05d57db15fab0bb94ec5e384c9e7b0241e8825277964345b91245f0e79f918c8808de7f75a5f33b39b60ef08dbabe64d04b28eb3b3028c5cb6586bdaa8f1dc4a9494723a93e1a441f65fbd40fcc3af199ccb32ddc28905a82d5cf3c1826fa177787fdfbd9bbe22f3a418617149818c6f68528708cc4da177c06efe1370b1791f674d6ef43ffdf54f4747b0fb3ea565b610bbea42c7b4a71aa89a9cc2f9dbb1093f20f909832f4f55ee7b1779bc04ccffd847ee9afcaa12497a49b028158cc4ddb4b6b89a883fb6141bc00e455fe0e8584be477a967f0935c34c5935a1dbf62b0c5239d7a9203da954e3cc254af039748eda618e9ed2cfe7b8941c689fe831b397309b6a907f53f3d4b367fe4a5b479d676214b56d32160711fb933201fa4711e38379229ab5f57efdb3f85d6843b138f3616fffba053609238ed3eb3ef8fd06270d8f0b3f42a010994bf1230456e0d17c7d55b202dbcb8445feeb42b9ef0fd8284a954e32e9c64c53ab4cab26384eea3fbe92571590eb4a45af0803ba75453ad8a4ab443eed4715774cb56b48f9619834d4c385d8c0f8bf9fb0106737433f8316c6db6935a4da734e3f9d4df25a2f4fb9db1a8208aaa4cea0fa29f60fc7015bf591fd512601b5c82c04912ce5ee4477b085c981d318a228d99428292ac66391c8d25d4f1acb6a8a24f922e9c6cc9dac3011a86d9bf9008f8364c2c52b3feda6a494e551f41564a2583af8e7c266a46f0725c830af181f3730d05317771bc218e3f165bf79bf9f852547e09790ddd394b628eb1c636a5f2e18ba25381fada4d0c88e14bf4d1519658311fa215a4fc10a8fbb3a8e378e23a5a33875b5e09f6cc02fd4596aacb2966071a33638e035f250c1aa9d0de4752e805f989c344ab7c5d7f31e3e08fc09cc250153a095bd78d91586018fe67466b3137afd095ffb66bd0ae17cf76dc4f20418259b8420337235d84fcaf3b791c5fe5c491e7bb574ec71a6d6b7d6f43eeadadf1027113d8e288df7e01d018915001931cf1be6c838fc803bec86750d80b26c979c54a3db138121c49d867789cb653d1514cdc5518782dc319f3fa2419f8fef5e7635dc5d85780eeb2a227e951c9539fc46f33c7a3f8eb37fba73ae70b4ab7960f330b4a91686a146d62a6bfb3f82f462d17e7d81728708dfe6efff953da113b312e5df6f28582133aa291db3911dfcd1fa9f799a098c03583a2a26ca0d8b82f8590b37c010283dd3234389c69dc2baa85c05d638322847d5d33acd37c3daf42c3458f60577fcf0b938621df80d3213efb3d53fdf8ebb7f0022150dcf2915764c5f6c200eb6db373a88372ef94890774a1610de3e0f424a5d23e51825a15812520895c9a1eec3d7b165690eec8429351f8e182accb3d362669b8b613f765d15907e84862fc19994b50fb00c4ecd78710c47adbcdb1f5304378b79efac2da5d88c54b11bb8abb6d1950cb9c1aaeb445d8f59a02beb2487d3037c2773a497d15e6501d72021688406630584f4818956d352f51c5adf6f79176a19337a86c7a90d185bf368434e103438f18f5d9a8e3d309718d4aa0baf16ffc5c7907b12c8f6bf540bf2873b00adfb0b7d035bd6e22cc2b2c9ad22afdcd24021c5880303853c47dfef3c9c671505bdfefebe5730a222080de6599015b21ccdb8484d216b0d27989600aef6992e50c50ebc5da3445d4dba1a85d42101ae229c660fe1a2dbacdef1e8ee4c48bf7402920c07c0f2fd9bd0d971eaa5ca1459b39acacfa3710af5504f37732eaee8458ce8e8682b72d6a62970908e88e481957fa47631071dd140d29097a8cccdef4d542c53027e3081722c0221aad06790a51d5da84ce3adff95c6236db76adeb914b27eb4217eb189a4b0032d81e7a0581ee8bff3ea7a917534f6ed70a799f86e60903eb5f090bd46eb04bf22e62145efc52a41d37893d0fc2a7d9ca6cdf4322f83be012ae8452698a802f20648476cc7cab42cb67e2c730f815c8db6e37e5639357e19174c318442867a9f195e6cbe0fee1ee5a3eefe5494d1b5d61bf2c6c9b96ed34f78e16500b3880af892367a49ff2631a80039e227b1cfdf461425bd953229ecf6c0aa99a83f9e66874dedc4857be8bbd76647d4f7b5d890fc0ecae1aa4210496cd32cec9b7f3d0940030cb20d3da3c48d0bfe75fa9ceb1c76d0fcaf969a5dcdba2dae60016561b71ca6a8870adc3298b14f391aa4d2da847e0ab7747255537ccec3115bcf3229cbe5b286e236918d76181a4083be27e7ba4181b2071762f2b39ecfa3f7c85eeea603351d637417c164c8c92ee03debebc49014d301daf1a696c04e8c393ebc41870df547f8df57b757c27e525ceabd6a0767f3de6869d44bd118313a73aefd6555af82d33d5dc6b24ce8334ac7b84bec9492fb0dc6af0c1f2257d7324b99e3d1024deeef9cd179cf6e9917095d78c8a9485f0484beb649ad223c260394b90ade92910fc1486c71056a0dbb49ad9c2d7ce645768a8a2c9b81a5b9d6259e0599d7e19de2685af75c5ede01b4204e57a9a6d5a040b2024c3c8d68d24969a2ba58e9a637fca51eb044bdf933c90e503cad4452a00bf3f0467fdec5a5b9102b1840a2b4f669af8188cc09ed469d668366c582790259e034ca7c1d765f8046b2596451584acf099689ade1972acfd6c0c809317f3dab01eb53c26bedb8ca485e62af17ede53be43b917f0e043f0d313a39d48264f5c55f25b2f309350be3fc03e68f6e6d34e8db7ec188bd0bc402accbe8e2f353c6561bcbabbd57f101d9c3080da350abb7781d53b5753761f6cf6b0348c3616da91ae221cc5437d198815d2ff520ca9b4ea74cf18580fedad8ba5376a33a666c49748d1881a1ef1e815aedcdef23a81cffa3e349991bb96648a8d47932d74fadfc8fa931136630ae56e31a2001e0b39f67d6bbfb02726d36690c2c90548a382fba5cb93a50da30b3b9de62b690da13cba08ed0796b2f3ab62cec8e08e1f0", 0x1000, 0x1ff, 0x0, 0x0, 0xffffffffffffff9c}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2, 0x100000001, r0, &(0x7f0000000380)="40aa815ef6414e4581c828467ea031e67a9cc4d830d7252ac14e26e5330cc7865b1c3df2e5ed313d3496f89db05791e4fbddc75068006c639f68167ba796b63f6a22504b67ba2acd49afefe7f0f2e1b43b5bda67fa752ad788f689e4b990e36d221fbb2fb901f3f968e1bf8b7a", 0x6d, 0x5, 0x0, 0x0, r4}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0x8, r1, &(0x7f0000000440)='t', 0x1, 0x81, 0x0, 0x2, r5}])
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1, {{}, 0x81}}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c7766646e6f3d5d6ca0e5", @ANYRESHEX=r1, @ANYBLOB=',\x00'])
r6 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r6, &(0x7f0000000180)=""/8, 0x8)

10:47:08 executing program 6:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000000100)=""/4096)
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x40000, 0x0)
mmap$binder(&(0x7f00006a0000/0x3000)=nil, 0x3000, 0x2000002, 0x10, r0, 0x0)

[  830.708674] print_req_error: I/O error, dev loop1, sector 0
[  830.801058] input: syz1 as /devices/virtual/input/input4667
10:47:08 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x5000000}, 'syz1\x00'})

10:47:08 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000001, 0x0)
ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070")
r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x1, 0x1100082)
r2 = memfd_create(&(0x7f0000000140)="c8a8707470", 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)="16", 0x1}], 0x1, 0x1081806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
read(r1, &(0x7f0000000000)=""/5, 0x5)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendfile(r1, r1, &(0x7f0000000100)=0x3f49, 0xffffffff)
ioctl$LOOP_CLR_FD(r1, 0x4c01)

10:47:08 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast, 0x0, 0xfffff000}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

[  830.920213] 9pnet: Insufficient options for proto=fd
10:47:08 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xebc2}, 'syz1\x00'})

10:47:08 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff9e}}}}, 0xf8}}, 0x0)

[  830.981027] 9pnet: Insufficient options for proto=fd
10:47:08 executing program 6:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe2(&(0x7f00000010c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000001140)={{0x2, 0x0, 0x9, 0x2, 0x2}, 0x3, 0x3, 0x4})
r2 = getpgid(0x0)
ptrace$pokeuser(0x6, r2, 0x2, 0x5c67c5ec)
ioctl$KVM_S390_UCAS_MAP(r0, 0x4018ae50, &(0x7f0000001100)={0x7ff, 0x80})
mincore(&(0x7f0000f7e000/0x2000)=nil, 0x2000, &(0x7f00000000c0)=""/4096)

[  831.005672] 9pnet: Insufficient options for proto=fd
[  831.040304] input: syz1 as /devices/virtual/input/input4668
[  831.102608] input: syz1 as /devices/virtual/input/input4670
[  831.114481] input: syz1 as /devices/virtual/input/input4669
10:47:08 executing program 7:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
creat(&(0x7f0000000000)='./file0\x00', 0xd0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
tee(r1, r0, 0x8000, 0x4)
write$P9_RWALK(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="0900e0009b01000000"], 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1, {{0x0, 0x0, 0x3}, 0x77}}, 0x18)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x100)
write$P9_RREADDIR(r1, &(0x7f0000000600)=ANY=[@ANYBLOB="0b00001b29010000000000"], 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
ioctl$int_out(r1, 0x2, &(0x7f00000001c0))
r2 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
socket$inet6_dccp(0xa, 0x6, 0x0)
getdents(r2, &(0x7f0000000180)=""/8, 0x8)

[  831.145552] 9pnet: Insufficient options for proto=fd
10:47:08 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast, 0x0, 0x200b0000}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:47:08 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff000}}}}, 0xf8}}, 0x0)

10:47:08 executing program 1:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000ac0)=ANY=[@ANYRESOCT=r1, @ANYPTR64=&(0x7f0000000540)=ANY=[@ANYRES32, @ANYRESOCT=r0, @ANYRESDEC, @ANYRESOCT=r1, @ANYRESDEC=r0, @ANYPTR=&(0x7f0000000380)=ANY=[@ANYRESDEC=r0, @ANYRESOCT=r1, @ANYRESOCT=r1, @ANYRES64=r0, @ANYRES32=r0, @ANYRES16=r0, @ANYRESDEC=r1, @ANYPTR, @ANYRES32=r1, @ANYRES16], @ANYPTR64, @ANYPTR=&(0x7f0000000000)=ANY=[@ANYRESHEX=0x0], @ANYPTR64=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYRES16=r0, @ANYRESDEC=r1, @ANYPTR, @ANYBLOB="d8f7ae27f9617ca9bd294229cd277e4fe928c4cdb42ab3676854828a51c225d685"]], @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYRES64=r0, @ANYRES64=r1, @ANYRESHEX=r1, @ANYRESDEC=r0], @ANYRESHEX, @ANYRES64=r1, @ANYPTR64, @ANYBLOB="55db1ad4b1cacb4b61e2826ad64bdc66b3108c5561a9dbe172c741289b7bc0432085618559622210173bcb0ec8f35212b57d4eedc47ff8681a63ce9d5d12a7334962cb445f45e577ba079d1af9dcadb66b8c2868e4d4f5b0682cc4f9fb4d0c17743d09ebb5fefeb346f3e662abe5b63fa544e25e286edab3be357f157b0c589572ceea8e05f17aa1b34a0aa6d5ed3ac329fab0bff14a582d84ecafec22bd63a3bd8b6d2627ff01fd9e854d638ff0b820d35f2ccd"], 0xfd)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x2, {0x0, {0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}}, 0xfffffffffffffe2c)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
r2 = syz_open_dev$midi(&(0x7f00000004c0)='/dev/midi#\x00', 0x8000, 0x101100)
getsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000005c0), &(0x7f00000006c0)=0xb)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0)
mount$bpf(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740)='bpf\x00', 0x1000004, &(0x7f0000000880)=ANY=[@ANYBLOB="6d6f6465303030303030303021b03030305530303030352c00000000000000001b5df5cd8f9e1affc2c8ab68dcc8e0c7da9575e1997977e20947403a150a017fdf382b6d1e3097234aa382add9e8f73c"])
ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r3, 0x8008ae9d, &(0x7f0000000480)=""/26)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000780)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r4 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r4, &(0x7f0000000180)=""/8, 0x8)

[  831.239495] input: syz1 as /devices/virtual/input/input4671
10:47:08 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x42fe}, 'syz1\x00'})

10:47:08 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000001, 0x0)
ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070")
r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x1, 0x1100082)
r2 = memfd_create(&(0x7f0000000140)="c8a8707470", 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)="16", 0x1}], 0x1, 0x1081806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
read(r1, &(0x7f0000000000)=""/5, 0x5)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendfile(r1, r1, &(0x7f0000000100)=0x3f29, 0xffffffff)
ioctl$LOOP_CLR_FD(r1, 0x4c01)

10:47:08 executing program 6:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0)
getdents(r0, &(0x7f0000000100)=""/114, 0x72)
getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000240)={@mcast1, <r1=>0x0}, &(0x7f0000000280)=0x14)
clock_gettime(0x0, &(0x7f0000000300)={<r2=>0x0, <r3=>0x0})
sendmsg$can_bcm(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x1d, r1}, 0x10, &(0x7f00000003c0)={&(0x7f0000000340)={0x5, 0x20, 0xe3, {r2, r3/1000+30000}, {0x0, 0x2710}, {0x3, 0x4000000000000000, 0x4, 0x7}, 0x1, @can={{0x4, 0x2, 0x7, 0x40}, 0x7, 0x1, 0x0, 0x0, "058efd1182805fe4"}}, 0x48}, 0x1, 0x0, 0x0, 0x48010}, 0x10)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

10:47:08 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000}}}}, 0xf8}}, 0x0)

[  831.427810] input: syz1 as /devices/virtual/input/input4672
10:47:08 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast, 0x0, 0x300}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:47:08 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xc2f2}, 'syz1\x00'})

10:47:08 executing program 7:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1, {{}, 0x81}}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x80100, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000001c0)={<r4=>0xffffffffffffffff}, 0x13f, 0xb}}, 0x20)
ioctl$EVIOCGABS2F(r3, 0x8018456f, &(0x7f0000000380)=""/115)
write$RDMA_USER_CM_CMD_ACCEPT(r3, &(0x7f00000006c0)={0x8, 0x120, 0xfa00, {0x1, {0x5, 0xad, "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", 0x4a, 0x5, 0x4b7, 0x9, 0x2, 0x10000, 0x6}, r4}}, 0x128)
getdents(r2, &(0x7f0000000180)=""/8, 0x8)

10:47:09 executing program 6:
perf_event_open(&(0x7f0000000040)={0x10000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

[  831.558829] input: syz1 as /devices/virtual/input/input4673
10:47:09 executing program 1:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r3 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r3, 0x8912, &(0x7f00000001c0)="0a5cc80700315f85715070")
getsockopt$XDP_STATISTICS(r2, 0x11b, 0xb, &(0x7f0000000100), &(0x7f0000000480)=0x18)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r4 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r4, &(0x7f0000000180)=""/8, 0x8)
r5 = openat$cgroup_ro(r3, &(0x7f0000000000)='cgroup.events\x00', 0x0, 0x0)
ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f00000002c0)={'veth1_to_bridge\x00', 0x400})

10:47:09 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast, 0x0, 0x0, 0xfffffff0}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

[  831.699394] input: syz1 as /devices/virtual/input/input4674
10:47:09 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x38fe}, 'syz1\x00'})

10:47:09 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00000000000000}}}}, 0xf8}}, 0x0)

[  831.800129] input: syz1 as /devices/virtual/input/input4675
10:47:09 executing program 6:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x2, 0x208000)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000300)={0x2, 0xc, 0x6, 0x122b, <r1=>0x0}, &(0x7f0000000340)=0x10)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000380)={r1, 0x400}, 0x8)
setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000280)={0x1, 0x4, 0x4, 0xfffffffffffffffd}, 0x8)
connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @local}, 0x1c)
stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
r3 = getgid()
connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e23, 0xb4, @local, 0x6}, 0x1c)
lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
write$P9_RSTATu(r0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r4], 0x67)
mincore(&(0x7f000048d000/0x3000)=nil, 0x3000, &(0x7f0000004280)=""/4096)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000400)={r1, 0x4}, 0x8)
ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000440))

10:47:09 executing program 7:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1, {{}, 0x81}}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r2, &(0x7f0000000180)=""/8, 0x8)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x400000, 0x0)
ioctl$TIOCEXCL(r3, 0x540c)

10:47:09 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast, 0x0, 0x0, 0xa00000000000000}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:47:09 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffffffffffff}}}}, 0xf8}}, 0x0)

[  831.934444] input: syz1 as /devices/virtual/input/input4676
10:47:09 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xbc3}, 'syz1\x00'})

[  832.179735] input: syz1 as /devices/virtual/input/input4678
[  832.269037] input: syz1 as /devices/virtual/input/input4679
10:47:09 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000001, 0x0)
ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070")
r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x1, 0x1100082)
r2 = memfd_create(&(0x7f0000000140)="c8a8707470", 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)="16", 0x1}], 0x1, 0x1081806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
read(r1, &(0x7f0000000000)=""/5, 0x5)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendfile(r1, r1, &(0x7f0000000100)=0x3f6a, 0xffffffff)
ioctl$LOOP_CLR_FD(r1, 0x4c01)

10:47:09 executing program 1:
pipe2$9p(&(0x7f0000000440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
open$dir(&(0x7f00000003c0)='./file0\x00', 0x60000, 0x10)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/autofs\x00', 0x733e172057710d48, 0x0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
r4 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x80000000, 0x6000)
getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000001c0)={<r5=>0x0, 0xfff, 0x21, 0x8001}, &(0x7f00000002c0)=0x10)
setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000380)={r5, 0x81}, 0x8)
getsockopt$inet_int(r2, 0x0, 0xc, &(0x7f0000000100), &(0x7f00000004c0)=0x4)
getdents(r3, &(0x7f0000000180)=""/8, 0x8)

10:47:09 executing program 6:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00005ee000/0x3000)=nil, 0x3000, &(0x7f0000004280)=""/4096)

10:47:09 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x6}, 'syz1\x00'})

10:47:09 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast, 0x0, 0x0, 0x9effffff00000000}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:47:09 executing program 7:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000380)=ANY=[@ANYRESDEC=0x0], 0x14)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1, {{}, 0x81}}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r2, &(0x7f0000000180)=""/8, 0x8)

10:47:09 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400300}}}}, 0xf8}}, 0x0)

10:47:09 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xac270100}, 'syz1\x00'})

10:47:09 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast, 0x0, 0x0, 0xffffff7f00000000}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

[  832.447845] input: syz1 as /devices/virtual/input/input4680
[  832.458055] input: syz1 as /devices/virtual/input/input4681
10:47:09 executing program 6:
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000008, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

[  832.530990] input: syz1 as /devices/virtual/input/input4682
[  832.558469] input: syz1 as /devices/virtual/input/input4683
10:47:10 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff020000}}}}, 0xf8}}, 0x0)

[  832.637559] print_req_error: I/O error, dev loop1, sector 120
[  832.643803] Buffer I/O error on dev loop1, logical block 15, lost async page write
10:47:10 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xe4c20000}, 'syz1\x00'})

10:47:10 executing program 7:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1, {{}, 0x81}}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0)
getdents(r2, &(0x7f0000000180)=""/8, 0x8)

10:47:10 executing program 1:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x20)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r2, &(0x7f0000000180)=""/8, 0x8)

10:47:10 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast, 0x0, 0x0, 0x1000000}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:47:10 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xfe38}, 'syz1\x00'})

10:47:10 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000001, 0x0)
ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070")
r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x1, 0x1100082)
r2 = memfd_create(&(0x7f0000000140)="c8a8707470", 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)="16", 0x1}], 0x1, 0x1081806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
read(r1, &(0x7f0000000000)=""/5, 0x5)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendfile(r1, r1, &(0x7f0000000100)=0x3f9a, 0xffffffff)
ioctl$LOOP_CLR_FD(r1, 0x4c01)

10:47:10 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde01}}}}, 0xf8}}, 0x0)

[  832.839760] input: syz1 as /devices/virtual/input/input4684
10:47:10 executing program 6:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

10:47:10 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast, 0x0, 0x0, 0xf000}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

[  832.906776] input: syz1 as /devices/virtual/input/input4686
[  832.950218] input: syz1 as /devices/virtual/input/input4685
[  833.016149] input: syz1 as /devices/virtual/input/input4687
10:47:10 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}}}}, 0xf8}}, 0x0)

10:47:10 executing program 7:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1, {{}, 0x81}}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r2, &(0x7f0000000180)=""/8, 0x8)

[  833.070609] print_req_error: I/O error, dev loop1, sector 0
10:47:10 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xefc2000000000000}, 'syz1\x00'})

10:47:10 executing program 1:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
r2 = fcntl$dupfd(r0, 0x406, r0)
ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/106)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='rfdno', 0xffffffffffffff9c}, 0x10)
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r3, 0x4010ae68, &(0x7f00000002c0)={0x5000, 0x8000})
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RLCREATE(r3, &(0x7f0000000400)={0x18, 0xf, 0x2, {{0x1c, 0x2, 0x8}, 0x1}}, 0x18)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='urans=fd,r\\dno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00'])
r4 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r4, &(0x7f0000000000)=""/8, 0xa468)
ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x5, "3155b745c2a3d5ec49cef2cf9e473769fb1feb92282b9496775226455c55c22636a4f3d5185c5fef861b36eea67621e83a01ca29abb6bbd8463fc1d6e835e466", "223cfd3b41773ab9684d5af6d3eaa60282fcaf3290d800b97362f4bf0df1fb98", [0x0, 0x1000]})

10:47:10 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast, 0x0, 0x0, 0xf}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:47:10 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000001, 0x0)
ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070")
r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x1, 0x1100082)
r2 = memfd_create(&(0x7f0000000140)="c8a8707470", 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)="16", 0x1}], 0x1, 0x1081806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
read(r1, &(0x7f0000000000)=""/5, 0x5)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendfile(r1, r1, &(0x7f0000000100)=0x3f0b, 0xffffffff)
ioctl$LOOP_CLR_FD(r1, 0x4c01)

10:47:10 executing program 6:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)
r0 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x8, 0x200000)
ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000100)={'bpq0\x00', 0x3})

10:47:10 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xfe35}, 'syz1\x00'})

[  833.275053] input: syz1 as /devices/virtual/input/input4688
10:47:10 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1de}}}}, 0xf8}}, 0x0)

[  833.352068] input: syz1 as /devices/virtual/input/input4689
[  833.421401] input: syz1 as /devices/virtual/input/input4690
10:47:10 executing program 6:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)
r0 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x40000, 0x20)
sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00fc02", @ANYRES16, @ANYBLOB="000028bd7000fedbdf250f0000001c000200080003000400000008000700050000000800060001000000040003000800050031940000"], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x51)

10:47:10 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast, 0x0, 0x0, 0x34000}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:47:10 executing program 7:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1, {{}, 0x81}}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="0b000000290100000000004e54129c18c86ec607f278480826a72fc976f8f7b8bf6ef6de068db8064a513c7576e7dd81eb03b587c3271022b66673222a4a7384f158091c3f2c7e9d40c8"], 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r2, &(0x7f0000000180)=""/8, 0x8)

[  833.473576] print_req_error: I/O error, dev loop1, sector 0
10:47:10 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xffffffff87000000}, 'syz1\x00'})

[  833.558803] input: syz1 as /devices/virtual/input/input4691
10:47:11 executing program 1:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
r2 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r2, 0x8912, &(0x7f00000001c0)="0a5cc80700315f85715070")
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='mEmory.events\x00', 0x26e1, 0x0)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000680)={0x0, 0x0, 0x6cea, 0x1})
writev(r3, &(0x7f0000000740)=[{&(0x7f00000004c0), 0xc0040020}], 0x1)
ioctl$fiemap(r3, 0xc020660b, &(0x7f0000004a80)={0x0, 0x2, 0x0, 0x0, 0x30f})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1, {0x0, {0x10, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xffffffffffffffff}}, 0x3ca)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r3, &(0x7f0000000380)={0x18, 0x73, 0x1, {{0x3}, 0x80000000}}, 0xfffffffffffffefa)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r4 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
openat$md(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/md0\x00', 0x100, 0x0)
getdents(r4, &(0x7f0000000180)=""/8, 0x8)
pipe2$9p(&(0x7f0000000000), 0x0)

10:47:11 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000001, 0x0)
ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070")
r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x1, 0x1100082)
r2 = memfd_create(&(0x7f0000000140)="c8a8707470", 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)="16", 0x1}], 0x1, 0x1081806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
read(r1, &(0x7f0000000000)=""/5, 0x5)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendfile(r1, r1, &(0x7f0000000100)=0x3f14, 0xffffffff)
ioctl$LOOP_CLR_FD(r1, 0x4c01)

10:47:11 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0xf8}}, 0x0)

10:47:11 executing program 6:
r0 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x844d, 0x2080)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={r0, 0x3, 0x1, 0x7f, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}, 0x20)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r0, 0x0, 0x1, 0x3ff, &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x3}, 0x20)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$getown(r1, 0x9)
socket$nl_route(0x10, 0x3, 0x0)
mincore(&(0x7f0000c74000/0x8000)=nil, 0x8000, &(0x7f0000002280)=""/4096)

[  833.719315] input: syz1 as /devices/virtual/input/input4692
10:47:11 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast, 0x0, 0x0, 0x2000000}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:47:11 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xfe32}, 'syz1\x00'})

10:47:11 executing program 7:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="0901010000008982000b66a5d6ac65443201700a33ee1a22a740e5ae87c8d20fff68ebc13aa2f7dc6088aa732dd282b4bc61988990f7073432b95245ed41d86439e13f509ce427c75a"], 0x9)
keyctl$join(0x1, &(0x7f0000000000)={0x73, 0x79, 0x7a, 0x2})
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1, {{}, 0x81}}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)=ANY=[@ANYBLOB="0b0045bfd48e0000000000"], 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r2, &(0x7f0000000180)=""/8, 0x8)
r3 = openat$mixer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mixer\x00', 0x0, 0x0)
getsockname$netlink(r3, &(0x7f00000002c0), &(0x7f0000000400)=0xc)

[  833.838312] print_req_error: I/O error, dev loop1, sector 120
[  833.844393] Buffer I/O error on dev loop1, logical block 15, lost async page write
[  833.863850] input: syz1 as /devices/virtual/input/input4693
10:47:11 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00}}}}, 0xf8}}, 0x0)

[  833.890274] print_req_error: I/O error, dev loop1, sector 24
10:47:11 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast, 0x0, 0x0, 0x3000000}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

[  833.953410] input: syz1 as /devices/virtual/input/input4694
10:47:11 executing program 6:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

10:47:11 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1c3000000000000}, 'syz1\x00'})

[  834.032226] input: syz1 as /devices/virtual/input/input4695
10:47:11 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000001, 0x0)
ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070")
r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x1, 0x1100082)
r2 = memfd_create(&(0x7f0000000140)="c8a8707470", 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)="16", 0x1}], 0x1, 0x1081806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
read(r1, &(0x7f0000000000)=""/5, 0x5)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendfile(r1, r1, &(0x7f0000000100)=0x3f06, 0xffffffff)
ioctl$LOOP_CLR_FD(r1, 0x4c01)

10:47:11 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0}}}}, 0xf8}}, 0x0)

10:47:11 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x3afe}, 'syz1\x00'})

10:47:11 executing program 7:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1, {{}, 0x81}}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r2, &(0x7f0000000180)=""/8, 0x8)

[  834.225585] input: syz1 as /devices/virtual/input/input4696
10:47:11 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast, 0x0, 0x0, 0xf000000}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

[  834.305692] input: syz1 as /devices/virtual/input/input4697
[  834.356788] print_req_error: I/O error, dev loop1, sector 0
[  834.388385] input: syz1 as /devices/virtual/input/input4698
10:47:12 executing program 1:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0xffffffffffffff0d)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1}, 0x18)
r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x40a103, 0x0)
write$USERIO_CMD_SEND_INTERRUPT(r2, &(0x7f00000001c0)={0x2, 0x4}, 0x2)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r3, &(0x7f0000000180)=""/8, 0x8)

10:47:12 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000001, 0x0)
ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070")
r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x1, 0x1100082)
r2 = memfd_create(&(0x7f0000000140)="c8a8707470", 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)="16", 0x1}], 0x1, 0x1081806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
read(r1, &(0x7f0000000000)=""/5, 0x5)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendfile(r1, r1, &(0x7f0000000100)=0x3fc0, 0xffffffff)
ioctl$LOOP_CLR_FD(r1, 0x4c01)

10:47:12 executing program 7:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
r2 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710}, 0x10, 0x80000)
accept4$vsock_stream(r2, &(0x7f00000001c0)={0x28, 0x0, 0xffffffff}, 0x10, 0x800)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1, {{}, 0x81}}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
r4 = syz_open_dev$sndpcmp(&(0x7f00000002c0)='/dev/snd/pcmC#D#p\x00', 0x57566226, 0x200)
ioctl$RTC_ALM_READ(r4, 0x80247008, &(0x7f0000000380))
getdents(r3, &(0x7f0000000180)=""/8, 0x8)

10:47:12 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00}}}}, 0xf8}}, 0x0)

10:47:12 executing program 6:
r0 = syz_open_dev$adsp(&(0x7f0000000480)='/dev/adsp#\x00', 0x2, 0x40000)
sendto$unix(r0, &(0x7f00000004c0)="f771f7e0a756b41055722f51fc9ab7e7cc4b130dc90939b7b984d7207261ab32a16aa9f9fac766668444d7cbb04a499a0ca3ae23941e0d84468ae4b6ceb733a1c6145ff5980eb507cf612e39ee48e022a4806be2b37dd580821e2feaac605c3c64351309c4a0212fa71a34823db5047c234525d17c1e977904399ebee9cdefabdcc3de01f3a121dd5649da0a1b0bee2c15853a17ce8a56025010fd574fb651c5b7c284f997d178a7a7", 0xa9, 0x20000000, &(0x7f0000000580)=@abs={0x1, 0x0, 0x4e24}, 0x6e)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0)
getresuid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)=<r2=>0x0)
lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0})
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='fuse\x00', 0x1100000, &(0x7f0000000600)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000000000,user_id=', @ANYRESDEC=r2, @ANYBLOB=',group_id=', @ANYRESDEC=r3, @ANYBLOB="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"])
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

10:47:12 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x4800000000000000}, 'syz1\x00'})

10:47:12 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast, 0x0, 0x0, 0xfffffffffffff000}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:47:12 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x7bfe000000000000}, 'syz1\x00'})

[  834.661432] input: syz1 as /devices/virtual/input/input4699
[  834.681015] input: syz1 as /devices/virtual/input/input4700
10:47:12 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}}}}, 0xf8}}, 0x0)

10:47:12 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000001, 0x0)
ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070")
r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x1, 0x1100082)
r2 = memfd_create(&(0x7f0000000140)="c8a8707470", 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)="16", 0x1}], 0x1, 0x1081806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
read(r1, &(0x7f0000000000)=""/5, 0x5)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendfile(r1, r1, &(0x7f0000000100)=0x3f4a, 0xffffffff)
ioctl$LOOP_CLR_FD(r1, 0x4c01)

[  834.764745] input: syz1 as /devices/virtual/input/input4702
[  834.785022] input: syz1 as /devices/virtual/input/input4701
10:47:12 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast, 0x0, 0x0, 0x400300}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:47:12 executing program 6:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)
mincore(&(0x7f0000cbf000/0x3000)=nil, 0x3000, &(0x7f00000000c0)=""/50)

10:47:12 executing program 7:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000000)={0xff33}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1, {0x0, {0x0, 0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1}}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1, {{}, 0x81}}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
r2 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp\x00', 0x40000, 0x0)
renameat2(r1, &(0x7f0000000040)='./file0\x00', r2, &(0x7f00000002c0)='./file0\x00', 0x2)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r3, &(0x7f0000000180)=""/8, 0x8)

10:47:12 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34000}}}}, 0xf8}}, 0x0)

10:47:12 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xe4c2}, 'syz1\x00'})

10:47:12 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x100000000000000}, 'syz1\x00'})

10:47:12 executing program 1:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r2, &(0x7f0000000180)=""/8, 0x8)
r3 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x5fa, 0x101002)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x15, 0x13, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf3, 0x0, 0x0, 0x0, 0x374}, [@alu={0x0, 0x80000000, 0x3, 0x2, 0x8, 0x4, 0x5}, @map={0x18, 0xf, 0x1, 0x0, r3}, @jmp={0x5, 0x401, 0xb, 0xf, 0x3, 0x8}, @map={0x18, 0x7, 0x1, 0x0, r1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x85d4}, @generic={0x4, 0x9, 0xe131, 0x1}, @map={0x18, 0x3, 0x1, 0x0, r1}, @call={0x85, 0x0, 0x0, 0x2f}]}, &(0x7f00000001c0)='GPL\x00', 0x8, 0xc5, &(0x7f00000006c0)=""/197, 0x41000, 0x1, [], 0x0, 0xb}, 0x48)
userfaultfd(0x0)

10:47:12 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast, 0x0, 0x0, 0x100000000000000}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

[  835.123250] input: syz1 as /devices/virtual/input/input4703
[  835.123766] print_req_error: I/O error, dev loop1, sector 680
[  835.135142] print_req_error: I/O error, dev loop1, sector 1704
[  835.141245] print_req_error: I/O error, dev loop1, sector 2728
10:47:12 executing program 6:
r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x6, 0x22000)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0x10, &(0x7f0000000100)=@sack_info={<r1=>0x0, 0x4, 0x2}, &(0x7f0000000140)=0xc)
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={r1, 0xe70}, 0x8)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

10:47:12 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40030000000000}}}}, 0xf8}}, 0x0)

[  835.178672] input: syz1 as /devices/virtual/input/input4704
[  835.249597] input: syz1 as /devices/virtual/input/input4705
10:47:12 executing program 7:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1, {{}, 0x81}}, 0x18)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101002, 0x0)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r2, &(0x7f0000000180)=""/8, 0x8)

[  835.301006] input: syz1 as /devices/virtual/input/input4706
10:47:12 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast, 0x0, 0x0, 0x200b000000000000}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:47:12 executing program 6:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
epoll_create1(0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff}, 0x80000)
ioctl$KVM_GET_VCPU_EVENTS(r0, 0x8040ae9f, &(0x7f0000000100))

10:47:12 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {}, {0xffffff7f}}}}, 0xf8}}, 0x0)

10:47:12 executing program 1:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
r2 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x1, 0x82)
ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f00000001c0)=0x2)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r3, &(0x7f0000000180)=""/8, 0x8)

10:47:12 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000001, 0x0)
ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070")
r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x1, 0x1100082)
r2 = memfd_create(&(0x7f0000000140)="c8a8707470", 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)="16", 0x1}], 0x1, 0x1081806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
read(r1, &(0x7f0000000000)=""/5, 0x5)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendfile(r1, r1, &(0x7f0000000100)=0x1081800, 0xffffffff)
ioctl$LOOP_CLR_FD(r1, 0x4c01)

10:47:12 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x73fe0000}, 'syz1\x00'})

10:47:12 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xa}, 'syz1\x00'})

10:47:13 executing program 7:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x400000, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000940)=ANY=[@ANYBLOB="66696c746572000000000000000000000000000000000000000000000000000007000000040000007804000070020000700200000000000090030000900300009003000004000000", @ANYPTR=&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], @ANYBLOB="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"], 0x4c8)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000380)={<r3=>0x0, @in6={{0xa, 0x4e20, 0xffffffff, @local, 0x80000001}}, 0x7, 0x1000, 0x7, 0x0, 0x7}, &(0x7f00000002c0)=0x98)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000540)={r3, @in={{0x2, 0x4e21, @broadcast}}, 0x7cd, 0x8, 0x4, 0x8000}, &(0x7f0000000440)=0x98)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1, {{}, 0x81}}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r4 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r4, &(0x7f0000000180)=""/8, 0x8)

10:47:13 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast, 0x0, 0x0, 0xa00}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

[  835.621850] input: syz1 as /devices/virtual/input/input4707
[  835.641465] input: syz1 as /devices/virtual/input/input4708
10:47:13 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {}, {0xf}}}}, 0xf8}}, 0x0)

[  835.733077] input: syz1 as /devices/virtual/input/input4709
10:47:13 executing program 6:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)
add_key(&(0x7f0000000240)='.request_key_auth\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00000002c0)="67c13e41d99d41ab50e742e342f8aa09875bb9d8240cde12903ee9ef17a0f2d0b05bcdac91762c4ec4131c2c1de8df45ba20badd", 0x34, 0xfffffffffffffff8)
eventfd2(0x2, 0x80801)
r0 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x2, 0x200)
socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$KDDISABIO(r0, 0x4b37)
getpeername$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000140)=0x14)
keyctl$set_timeout(0xf, 0x0, 0x6)

10:47:13 executing program 1:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r2, &(0x7f0000000000)=""/39, 0x27)
getdents(r2, &(0x7f0000000180)=""/8, 0x8)

[  835.791716] input: syz1 as /devices/virtual/input/input4710
10:47:13 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000001, 0x0)
ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070")
r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x1, 0x1100082)
r2 = memfd_create(&(0x7f0000000140)="c8a8707470", 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)="16", 0x1}], 0x1, 0x1081806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
read(r1, &(0x7f0000000000)=""/5, 0x5)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendfile(r1, r1, &(0x7f0000000100)=0x3f88, 0xffffffff)
ioctl$LOOP_CLR_FD(r1, 0x4c01)

10:47:13 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast, 0x0, 0x0, 0xf00}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:47:13 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x79fe}, 'syz1\x00'})

10:47:13 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {}, {0xa}}}}, 0xf8}}, 0x0)

10:47:13 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xdc3000000000000}, 'syz1\x00'})

10:47:13 executing program 7:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1, {{}, 0x81}}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x8000, 0x0)
getdents(r2, &(0x7f0000000180)=""/8, 0x8)

10:47:13 executing program 6:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x80000, 0x0)
r1 = openat(r0, &(0x7f0000000140)='./file0\x00', 0x181001, 0x80)
ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)
write$P9_RSYMLINK(r0, &(0x7f0000000180)={0x14, 0x11, 0x1, {0x80, 0x2, 0x5}}, 0x14)
write$P9_RSYMLINK(r1, &(0x7f00000001c0)={0x14, 0x11, 0x1, {0x10, 0x2, 0x4}}, 0x14)

[  836.097403] input: syz1 as /devices/virtual/input/input4711
[  836.112100] input: syz1 as /devices/virtual/input/input4712
10:47:13 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast, 0x0, 0x0, 0xffffff9e}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

[  836.149501] print_req_error: I/O error, dev loop1, sector 0
10:47:13 executing program 1:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfKno=', @ANYRESHEX=r1, @ANYBLOB=',noextend,\x00'])
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
r2 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x200, 0x0)
ioctl$EVIOCGUNIQ(r2, 0x80404508, &(0x7f0000000380)=""/248)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000000)={0xfffffffffffffe91, 0x6f, 0x5, {0x2ce}}, 0x3)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r3, &(0x7f0000000180)=""/8, 0x8)

10:47:13 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {}, {0x34000}}}}, 0xf8}}, 0x0)

[  836.230357] input: syz1 as /devices/virtual/input/input4713
[  836.278591] input: syz1 as /devices/virtual/input/input4714
10:47:13 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000001, 0x0)
ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070")
r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x1, 0x1100082)
r2 = memfd_create(&(0x7f0000000140)="c8a8707470", 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)="16", 0x1}], 0x1, 0x1081806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
read(r1, &(0x7f0000000000)=""/5, 0x5)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendfile(r1, r1, &(0x7f0000000100)=0x3f8e, 0xffffffff)
ioctl$LOOP_CLR_FD(r1, 0x4c01)

10:47:13 executing program 7:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000440)=ANY=[@ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRESHEX, @ANYRESDEC], 0x4c)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1, {{}, 0x81}}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000000)={r0, 0x0, 0xe2f8, 0x4e13, 0x2})
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r2, &(0x7f0000000180)=""/8, 0x8)

10:47:13 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x49fe}, 'syz1\x00'})

10:47:13 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast, 0x0, 0x0, 0xa}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

[  836.386096] 9pnet: Insufficient options for proto=fd
10:47:13 executing program 6:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = semget$private(0x0, 0x3, 0xa)
semctl$GETPID(r0, 0x0, 0xb, &(0x7f00000000c0)=""/162)
r1 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0xfffffffffffffc00, 0x8000)
ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f00000001c0)=0x3ff)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

10:47:13 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xf2c20000}, 'syz1\x00'})

[  836.468366] 9pnet: Insufficient options for proto=fd
10:47:13 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {}, {0x3}}}}, 0xf8}}, 0x0)

[  836.516600] input: syz1 as /devices/virtual/input/input4715
[  836.586561] Buffer I/O error on dev loop1, logical block 31, lost async page write
[  836.619838] input: syz1 as /devices/virtual/input/input4716
10:47:14 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast, 0x0, 0x0, 0xf00000000000000}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:47:14 executing program 1:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="7472616e733d34a7f666642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',noextend,\x00'])
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e73caf4642c7266646e6fd0702c0b925bda59625848964f400168e69c7815b39a1741d04651f5bc626b271cd86c783092de307ee7746349f2f5fca8beb8c58d0325e48bfec43ee03123a648f9972e5582f93c0ea50bf33ee3e6a921814dc0a5f0c5eab05543fd04b5a2998061a4", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00'])
r2 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r2, &(0x7f0000000180)=""/8, 0x8)

[  836.651659] input: syz1 as /devices/virtual/input/input4717
10:47:14 executing program 6:
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x400000, 0x0)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffff9c, 0x84, 0x7b, &(0x7f00000001c0)={<r1=>0x0, 0x1f}, &(0x7f0000000200)=0x8)
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000240)={r1, 0xdc, "ce3c78d950d9ddee014a4b68a43c0df07de752d93f49819c9e4aa46af6b25b9165505cb020ea56ebf6dd79ffbe83ea2bdb5c38d624361954f93cca6ed90f020828ccf9cee6eae5f539845c44f55732f59758e0f7080259be56a5fb15640996a1f19e1ee80b89877796f2217bce92eed8f5ad3b2fe7421064892304b4997a8405bf44a18acf8da4ff1d82d8dfb6fbe3b983e28a13dffe74796f2a614077c07cc79eca3a470a47bd7bd2abcde0d8271661a2e569423b3829a9ec2593c020b21f0fa382132fca6383ac928f19b0b3f7950d17cfbde97dd889fe9da6e5e4"}, &(0x7f0000000340)=0xe4)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)
r2 = memfd_create(&(0x7f00000000c0)='lo(#-{#cpuset}\x00', 0x2)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000100)={'nat\x00', 0x4, [{}, {}, {}, {}]}, 0x68)

10:47:14 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000001, 0x0)
ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070")
r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x1, 0x1100082)
r2 = memfd_create(&(0x7f0000000140)="c8a8707470", 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)="16", 0x1}], 0x1, 0x1081806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
read(r1, &(0x7f0000000000)=""/5, 0x5)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendfile(r1, r1, &(0x7f0000000100)=0x3f3d, 0xffffffff)
ioctl$LOOP_CLR_FD(r1, 0x4c01)

10:47:14 executing program 7:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c6e6f657874656e642c004e15121a457e76b1fc995c3d89289c45a75357004c570b65b15f74a8f1bea68f5199e3acce1d4fa1f3f46f1c33cf4a0da1a5a82e13e425288987df78fc2cff23c33fa28ab9050406a3b6963cf21186d7f2f4907ef8d9c8dc62685d320062aa088f091760d6eb59bde38c6f3faa34778a156bfb90d240c1b651fe60cd8d5fc2271ef31096417b92cc29d1737423ad30516efd6588b04a7bf018b055688308a2"])
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1, {{}, 0x81}}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r2, &(0x7f0000000180)=""/8, 0x8)

10:47:14 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {}, {0xfffffffffffff000}}}}, 0xf8}}, 0x0)

[  836.768505] input: syz1 as /devices/virtual/input/input4718
10:47:14 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xe4ffffff}, 'syz1\x00'})

[  836.854473] 9pnet: Could not find request transport: 4§öfd
10:47:14 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast, 0x0, 0x0, 0x200b0000}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:47:14 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x4e040000}, 'syz1\x00'})

[  836.922026] 9pnet: Could not find request transport: 4§öfd
10:47:14 executing program 6:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000006280)=""/4096)

10:47:14 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {}, {0x9effffff}}}}, 0xf8}}, 0x0)

[  836.983305] Buffer I/O error on dev loop1, logical block 54, lost async page write
10:47:14 executing program 7:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1, {{}, 0x81}}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r2, &(0x7f00000001c0)=""/8, 0x8)

[  837.057367] input: syz1 as /devices/virtual/input/input4719
[  837.094796] input: syz1 as /devices/virtual/input/input4720
10:47:14 executing program 1:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
r2 = semget(0x0, 0x5, 0x131)
semctl$GETZCNT(r2, 0x2, 0xf, &(0x7f0000000380)=""/229)
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r3, &(0x7f0000000180)=""/8, 0x8)
r4 = memfd_create(&(0x7f0000000000)='\x00', 0x0)
connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x17}, 0x7fff}, 0x1c)

10:47:14 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast, 0x0, 0x0, 0xf0ffff}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:47:14 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000001, 0x0)
ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070")
r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x1, 0x1100082)
r2 = memfd_create(&(0x7f0000000140)="c8a8707470", 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)="16", 0x1}], 0x1, 0x1081806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
read(r1, &(0x7f0000000000)=""/5, 0x5)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendfile(r1, r1, &(0x7f0000000100)=0x3f08, 0xffffffff)
ioctl$LOOP_CLR_FD(r1, 0x4c01)

[  837.118422] input: syz1 as /devices/virtual/input/input4721
10:47:14 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {}, {0xf00000000000000}}}}, 0xf8}}, 0x0)

10:47:14 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x48000000}, 'syz1\x00'})

[  837.247037] input: syz1 as /devices/virtual/input/input4722
10:47:14 executing program 6:
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0x1000000000, 0x0)
setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000001c0)={0x9}, 0x1)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)
ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000340))
setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0x9, 0x4)
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x111000, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000100)=<r2=>0x0)
write$cgroup_pid(r1, &(0x7f0000000140)=r2, 0x12)

10:47:14 executing program 1:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='9p\x00', r1}, 0x10)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffff9c, 0x84, 0x7c, &(0x7f00000002c0)={<r3=>0x0, 0x8, 0x7}, &(0x7f0000000380)=0x8)
getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f00000003c0)={r3, 0x7ff}, &(0x7f0000000400)=0x8)
r4 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r4, &(0x7f0000000180)=""/8, 0x8)

[  837.382715] input: syz1 as /devices/virtual/input/input4723
10:47:14 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {}, {0xde01000000000000}}}}, 0xf8}}, 0x0)

10:47:14 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast, 0x0, 0x0, 0x200b}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:47:14 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xf5c2}, 'syz1\x00'})

10:47:14 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000001, 0x0)
ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070")
r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x1, 0x1100082)
r2 = memfd_create(&(0x7f0000000140)="c8a8707470", 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)="16", 0x1}], 0x1, 0x1081806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
read(r1, &(0x7f0000000000)=""/5, 0x5)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendfile(r1, r1, &(0x7f0000000100)=0x3f4d, 0xffffffff)
ioctl$LOOP_CLR_FD(r1, 0x4c01)

[  837.477065] input: syz1 as /devices/virtual/input/input4724
10:47:14 executing program 7:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="747a616e93cf1b21af3c8335f428d4733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',noextend,\x00'])
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1, {{}, 0x81}}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80000)
ioctl$sock_SIOCOUTQNSD(r3, 0x894b, &(0x7f00000001c0))
getdents(r2, &(0x7f0000000180)=""/8, 0x8)

[  837.610095] input: syz1 as /devices/virtual/input/input4725
10:47:15 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {}, {0x400300}}}}, 0xf8}}, 0x0)

10:47:15 executing program 6:
creat(&(0x7f0000000100)='./file0\x00', 0x9)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)
socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@loopback}, 0x0, @in=@loopback}}, &(0x7f0000000300)=0xe8)
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000340)={@mcast1, 0x19, r1})
socket$inet6(0xa, 0x0, 0x6)

10:47:15 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xfe30}, 'syz1\x00'})

10:47:15 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast, 0x0, 0x0, 0x300}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

[  837.795321] input: syz1 as /devices/virtual/input/input4726
[  837.804746] print_req_error: 3 callbacks suppressed
[  837.804756] print_req_error: I/O error, dev loop1, sector 0
10:47:15 executing program 1:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
set_mempolicy(0x1, &(0x7f00000002c0)=0x6, 0x1)
timerfd_create(0x5, 0x0)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="b0dab7c23a208f23f6165e700e37826e6795fe92d816d25ac62d17b6b4acbc14b499bdb21634096691e56c59776e31b5b0835f75c906e6e293af57eb3b64082287a2ecab5cc195301e1c6d533f1ba905d63f897182d88d82e9a99051f3df8fd3a9935798b1d6e853c1eb817764d2b3ed4d51"], 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
r3 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xffffffffffffff91, 0x4800)
setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f00000001c0)=0x9, 0x4)
ioctl$SCSI_IOCTL_DOORLOCK(r3, 0x5380)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$UI_SET_SWBIT(r3, 0x4004556d, 0x0)
getdents(r2, &(0x7f0000000180)=""/8, 0x8)
time(&(0x7f0000000400))

10:47:15 executing program 7:
r0 = accept4$llc(0xffffffffffffffff, 0x0, &(0x7f0000000b80), 0x800)
recvmmsg(r0, &(0x7f0000004180)=[{{&(0x7f0000000bc0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000c40)=""/232, 0xe8}, {&(0x7f0000000d40)=""/97, 0x61}, {&(0x7f0000000dc0)=""/7, 0x7}, {&(0x7f0000000e00)=""/106, 0x6a}, {&(0x7f0000000e80)}, {&(0x7f0000000ec0)=""/198, 0xc6}], 0x6, &(0x7f0000001040)=""/33, 0x21, 0x387}, 0x8c}, {{&(0x7f0000001080)=@ax25, 0x80, &(0x7f0000001300)=[{&(0x7f0000001100)=""/186, 0xba}, {&(0x7f00000011c0)=""/172, 0xac}, {&(0x7f0000001280)=""/66, 0x42}, {&(0x7f0000001400)=""/246, 0xf6}], 0x4, &(0x7f0000001340)=""/66, 0x42, 0x6}, 0x101}, {{&(0x7f0000001500)=@hci, 0x80, &(0x7f0000001680)=[{&(0x7f0000001580)=""/1, 0x1}, {&(0x7f00000015c0)=""/152, 0x98}], 0x2, 0x0, 0x0, 0xffffffff00000001}, 0x100000001}, {{0x0, 0x0, &(0x7f00000016c0), 0x0, &(0x7f0000001700)=""/11, 0xb, 0xc4}, 0x9}, {{&(0x7f0000001740)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f00000027c0)=[{&(0x7f00000017c0)=""/4096, 0x1000}], 0x1, &(0x7f0000002800)=""/4096, 0x1000, 0x800}, 0x7ff}, {{&(0x7f0000003800)=@pppol2tpin6, 0x80, &(0x7f0000003c80)=[{&(0x7f0000003880)=""/77, 0x4d}, {&(0x7f0000003900)=""/178, 0xb2}, {&(0x7f00000039c0)=""/52, 0x34}, {&(0x7f0000003a00)=""/6, 0x6}, {&(0x7f0000003a40)=""/3, 0x3}, {&(0x7f0000003a80)=""/205, 0xcd}, {&(0x7f0000003b80)=""/42, 0x2a}, {&(0x7f0000003bc0)=""/173, 0xad}], 0x8, 0x0, 0x0, 0x7}, 0x9}, {{&(0x7f0000003d00)=@generic, 0x80, &(0x7f0000004000)=[{&(0x7f0000003d80)=""/45, 0x2d}, {&(0x7f0000003dc0)=""/127, 0x7f}, {&(0x7f0000003e40)=""/3, 0x3}, {&(0x7f0000003e80)=""/109, 0x6d}, {&(0x7f0000003f00)=""/244, 0xf4}], 0x5, &(0x7f0000004080)=""/207, 0xcf, 0x3}, 0x4}], 0x7, 0x1, &(0x7f0000004340)={0x77359400})
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
r3 = syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0x0, 0x2000)
ioctl$KVM_NMI(r3, 0xae9a)
r4 = getpid()
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000002c0)={<r5=>0x0}, &(0x7f00000004c0)=0xc)
kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r3, &(0x7f00000006c0)={r3, r3, 0x2})
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}})
sendmsg$unix(r3, &(0x7f0000000a80)={&(0x7f0000000700)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000780)="f6ac44aaea764b1a763f0c0fb3178a1f4c84c8845fac3f313584239b19ba6adb71472a0150fe91aaab30a474bff4cba163ad1b9e6eba31e79cc793ca28f2b8aa527471dcf7afba88513affcd04fed6c385e46042ea43c8d71c36d9035e875c07de3a0a4998989b92a47666aaa3612b814a3317ea9cc24179bacb94702c1279788a57e2f17c2b03ea34395fdaea84e41442ad27f4e3906bdb3f9969eea6b0cafdff9bae2468add11346abb78e", 0xac}, {&(0x7f0000000940)="c6a8d0ff4f63ed1e9ddfdec6f95aa002ca9ec460895c696166d6dfdc80d288bad6369056cd1a47c89d6d99a45865f5ff7ecb5740901849b6aaa6d18cbfea3ef6c82f2e7aaf1c7a949dc2ae643e5a7e06f2adde0a14e7ff023365469a254a141756a033cd9f383a696f24e352a1746de518ecc95414d19cc0832a8bf368af0b58649f52fc5d96fde0d1d26c6282a2d48d812a648acb0fae04fbac7a69f1653e9d1565dba3e36f427f6005034252af226d82de66713f5f659fee886e95ee0e8a0241cd0e5711f29ba389", 0xc9}, {&(0x7f0000000840)="c04c12e062d61fa38ce2f27939ca54dbd7221ecf7b36fd0b89d94672fa2db0030368431db3deeba711c848a31f13a1d0686ec0ae65da164206b912830e49af747d6fbda580ef5e34", 0x48}], 0x3, &(0x7f0000000a40)=[@rights={0x18, 0x1, 0x1, [r3]}], 0x18, 0x40000}, 0x10)
write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000000000000000000b5e6bdbed0770cf0962ce12cef984c3e0000a73d11108f8724000000000000"], 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r2, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r2, &(0x7f0000000080)={0x18, 0x73, 0x1, {{}, 0x81}}, 0x18)
write$P9_RREADDIR(r2, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000380)={{{@in, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in6=@local}, 0x0, @in6}}, &(0x7f0000000000)=0xe8)
mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_client='access=client'}, {@access_client='access=client'}, {@debug={'debug', 0x3d, 0x9}}, {@access_uid={'access', 0x3d, r6}}, {@access_client='access=client'}, {@noextend='noextend'}, {@cachetag={'cachetag', 0x3d, 'wfdno'}}, {@posixacl='posixacl'}]}})
r7 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
fgetxattr(r1, &(0x7f0000000ac0)=@known='security.evm\x00', &(0x7f0000000b00)=""/104, 0x68)
getdents(r7, &(0x7f0000000180)=""/8, 0x8)

10:47:15 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {}, {0x1000000}}}}, 0xf8}}, 0x0)

[  837.896322] input: syz1 as /devices/virtual/input/input4727
10:47:15 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast, 0x0, 0x0, 0x3}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:47:15 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000001, 0x0)
ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070")
r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x1, 0x1100082)
r2 = memfd_create(&(0x7f0000000140)="c8a8707470", 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)="16", 0x1}], 0x1, 0x1081806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
read(r1, &(0x7f0000000000)=""/5, 0x5)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendfile(r1, r1, &(0x7f0000000100)=0x3f53, 0xffffffff)
ioctl$LOOP_CLR_FD(r1, 0x4c01)

10:47:15 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xedc2}, 'syz1\x00'})

[  837.988342] input: syz1 as /devices/virtual/input/input4728
10:47:15 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {}, {0x300000000000000}}}}, 0xf8}}, 0x0)

[  838.127549] input: syz1 as /devices/virtual/input/input4729
10:47:15 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x43fe000000000000}, 'syz1\x00'})

10:47:15 executing program 6:
r0 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x9, 0x20c0)
setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000100)={{0xbc, @remote, 0x4e24, 0x0, 'wlc\x00', 0x18, 0x8, 0x54}, {@empty, 0x4e23, 0x0, 0x1, 0x6, 0x1}}, 0x44)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

10:47:15 executing program 7:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x10000000000)
r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x80000, 0x0)
ioctl$KDSKBLED(r2, 0x4b65, 0x10435611)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1, {{}, 0x81}}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r3, &(0x7f0000000180)=""/8, 0x8)

10:47:15 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast, 0x0, 0x0, 0x40030000000000}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

[  838.258130] input: syz1 as /devices/virtual/input/input4730
10:47:15 executing program 1:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x0, 0x0)
ioctl$EVIOCGBITSND(r2, 0x80404532, &(0x7f0000000380)=""/77)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="00d0ff807876658d642c00"])
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r2, &(0x7f0000000580)=""/8, 0xffffffffffffffeb)

10:47:15 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {}, {0xffffff7f00000000}}}}, 0xf8}}, 0x0)

[  838.393224] input: syz1 as /devices/virtual/input/input4731
10:47:15 executing program 6:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f00000014c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000001540)={0x1, {0x2, 0x4e23, @loopback}, {0x2, 0x4e21, @local}, {0x2, 0x4e23, @local}, 0x20, 0x3, 0x5, 0x200, 0x7f, &(0x7f0000001500)='nr0\x00', 0x1c9, 0xddc, 0x9d5})
r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000001340)={0x2, 0x0, @remote}, &(0x7f0000001380)=0x10, 0x80800)
setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f00000013c0)=0x3, 0xfffffffffffffcc1)
mincore(&(0x7f000063e000/0x2000)=nil, 0x2000, &(0x7f0000000240)=""/4096)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={<r2=>0x0}, &(0x7f0000000100)=0xc)
waitid(0x1, r2, &(0x7f0000000140), 0x20000000, &(0x7f0000000180))
modify_ldt$read(0x0, &(0x7f00000015c0)=""/185, 0xb9)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001300)=<r3=>0x0)
getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000001400)=""/108, &(0x7f0000001480)=0x6c)
perf_event_open(&(0x7f0000001280)={0x4, 0x70, 0x8, 0x70, 0x401, 0x80000000, 0x0, 0x1, 0x8000, 0x1, 0x3be9, 0xb, 0x7fffffff, 0x6c00000000000000, 0x20, 0x0, 0x3f, 0x4, 0xd6, 0xac37, 0xffff, 0xa37a, 0x7, 0xffffffff, 0xc6, 0x127d, 0xf80, 0x10001, 0x4, 0xe7f3, 0x1ff, 0x80000000, 0x100, 0x6, 0x6, 0xffffffffffffffff, 0x3, 0x100000001, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000001240), 0xc}, 0x100, 0x2, 0x100, 0x3, 0x101, 0x8, 0x3}, r3, 0x7, 0xffffffffffffffff, 0x2)

10:47:15 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xe5c2000000000000}, 'syz1\x00'})

10:47:15 executing program 7:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1, {{}, 0x81}}, 0x18)
r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x4, 0xe000)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
getdents(0xffffffffffffffff, &(0x7f0000000180)=""/8, 0x8)

[  838.509576] input: syz1 as /devices/virtual/input/input4732
10:47:15 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast, 0x0, 0x0, 0xfffff000}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:47:16 executing program 1:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x800)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
r2 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x3, 0x800)
ioctl$EVIOCGID(r2, 0x80084502, &(0x7f00000006c0)=""/227)
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
ftruncate(r0, 0x5)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x16400, 0x50)
mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x6}}, {@mmap='mmap'}, {@mmap='mmap'}]}})
r3 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r3, &(0x7f0000000180)=""/8, 0x8)

10:47:16 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {}, {0xf0ffffffffffff}}}}, 0xf8}}, 0x0)

[  838.644181] input: syz1 as /devices/virtual/input/input4733
10:47:16 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x7f00000000000000}, 'syz1\x00'})

[  838.796093] input: syz1 as /devices/virtual/input/input4734
[  838.846566] input: syz1 as /devices/virtual/input/input4735
[  838.938654] input: syz1 as /devices/virtual/input/input4736
10:47:16 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000001, 0x0)
ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070")
r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x1, 0x1100082)
r2 = memfd_create(&(0x7f0000000140)="c8a8707470", 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)="16", 0x1}], 0x1, 0x1081806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
read(r1, &(0x7f0000000000)=""/5, 0x5)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendfile(r1, r1, &(0x7f0000000100)=0x3f32, 0xffffffff)
ioctl$LOOP_CLR_FD(r1, 0x4c01)

10:47:16 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast, 0x0, 0x0, 0xa000000}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:47:16 executing program 6:
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x181000, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}, &(0x7f0000000080)=0x10)
mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000001280)=""/4096)

10:47:16 executing program 1:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000380)={{{@in=@multicast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@loopback}, 0x0, @in6=@remote}}, &(0x7f0000000000)=0xe8)
write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1, {0x0, {}, 0x0, r2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r3, &(0x7f0000000180)=""/8, 0x8)

10:47:16 executing program 7:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x200000, 0x0)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
r2 = getpid()
ptrace$getregset(0x4204, r2, 0x2, &(0x7f00000001c0)={&(0x7f0000000380)=""/92, 0x5c})
write$P9_RUNLINKAT(r1, &(0x7f00000002c0)={0x7, 0x4d, 0x2}, 0x7)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1, {{}, 0x81}}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r3, &(0x7f0000000180)=""/8, 0x8)

10:47:16 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {}, {0x100000000000000}}}}, 0xf8}}, 0x0)

10:47:16 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0xecc2000000000000}, 'syz1\x00'})

10:47:16 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x400000000000000}, 'syz1\x00'})

[  839.205961] input: syz1 as /devices/virtual/input/input4737
[  839.217579] input: syz1 as /devices/virtual/input/input4738
10:47:16 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {}, {0xff020000}}}}, 0xf8}}, 0x0)

[  839.275460] input: syz1 as /devices/virtual/input/input4739
10:47:16 executing program 7:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000580)='./file0\x00', 0x1)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c6e6f657874956c8a2300a851563387f6cf89d87b0f61c13db3f2dac4d2dd"])
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x112084c6cd7d860a, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@mcast1}}}, &(0x7f00000001c0)=0xe8)
setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f00000002c0)={@multicast2, @remote, r3}, 0xc)
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
rt_sigtimedwait(&(0x7f00000004c0)={0xffffffffffffbed2}, 0x0, &(0x7f0000000540), 0x8)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1, {{}, 0x81}}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='trans=fd,rvdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00'])
r4 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r4, &(0x7f0000000180)=""/8, 0x8)

10:47:16 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast, 0x0, 0x0, 0x9effffff}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

10:47:16 executing program 6:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mincore(&(0x7f000069d000/0x3000)=nil, 0x3000, &(0x7f0000004200)=""/4096)
r0 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x7ff, 0x1)
getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000001180), &(0x7f00000011c0)=0x4)
ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{}, {}, {}]})

[  839.330810] input: syz1 as /devices/virtual/input/input4740
[  839.357537] print_req_error: I/O error, dev loop1, sector 120
[  839.363632] Buffer I/O error on dev loop1, logical block 15, lost async page write
10:47:16 executing program 1:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
pipe2$9p(&(0x7f0000000000)={<r2=>0xffffffffffffffff}, 0x0)
write$P9_RWALK(r1, &(0x7f0000000740)={0xfffffd51, 0x6f, 0x1, {0x33f}}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
syz_mount_image$minix(&(0x7f00000001c0)='minix\x00', &(0x7f00000002c0)='./file0\x00', 0x1655, 0x1, &(0x7f0000000440)=[{&(0x7f0000000380)="5f19275be8553e2a93b02dfb516e5f1e4b2e7db634d0864aa7909a58532ecfaa69440bd3d401859ce80fe7a531b8176669ec7127aba0220df40447d5cefd08e9eac989417f7e9109b5c852f1714bc9de4118a4f4c11e49670ed8dca0aaf37695903b68ee7bb71d07b7f06fe3487ae354bcdb649f83ebea0ceeb33371632f5ddc4efd76287e2693fa5df9c1f8bc0bb692c391a4962edd54ec789bf8f093f287a27c6a8e91b95d16363face039dc4a4450b28c8ddcc7a45e7321b61ecc71", 0xbd, 0x7}], 0x20, 0x0)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f00000004c0)={<r4=>0x0, 0x1}, &(0x7f0000000540)=0x8)
r5 = openat$vsock(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/vsock\x00', 0x400, 0x0)
ioctl$PPPIOCGMRU(r5, 0x80047453, &(0x7f0000000700))
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000580)={r4, 0x1f}, &(0x7f00000005c0)=0x8)
getdents(r3, &(0x7f0000000180)=""/8, 0x8)

10:47:16 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x2c3}, 'syz1\x00'})

10:47:16 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x3cfe0000}, 'syz1\x00'})

10:47:16 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {}, {0xf0ffff}}}}, 0xf8}}, 0x0)

[  839.531499] 9pnet: Insufficient options for proto=fd
10:47:16 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000001, 0x0)
ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070")
r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x1, 0x1100082)
r2 = memfd_create(&(0x7f0000000140)="c8a8707470", 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)="16", 0x1}], 0x1, 0x1081806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
read(r1, &(0x7f0000000000)=""/5, 0x5)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendfile(r1, r1, &(0x7f0000000100)=0x3f2c, 0xffffffff)
ioctl$LOOP_CLR_FD(r1, 0x4c01)

10:47:16 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast, 0x0, 0x0, 0x300000000000000}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

[  839.615860] 9pnet: Insufficient options for proto=fd
[  839.634607] input: syz1 as /devices/virtual/input/input4741
[  839.644079] Unknown ioctl -2147191725
[  839.660362] input: syz1 as /devices/virtual/input/input4742
10:47:17 executing program 6:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000e08000/0x3000)=nil, 0x3000}, 0x3})

10:47:17 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {}, {0x4e2b648dc8}}}}, 0xf8}}, 0x0)

[  839.725369] Unknown ioctl -2147191725
10:47:17 executing program 7:
pipe2$9p(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1, {{}, 0x81}}, 0x18)
write$P9_RREADDIR(r1, &(0x7f0000000380)={0x68, 0x29, 0x1, {0x40, [{{0x80, 0x2, 0x4}, 0x2, 0x7, 0x7, './file0'}, {{0x2, 0x4, 0x8}, 0x1, 0x62, 0x7, './file0'}, {{0x21, 0x1, 0x8}, 0x1, 0xc77, 0x7, './file0'}]}}, 0x68)
write$P9_RREADDIR(r1, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r2, &(0x7f0000000180)=""/8, 0x8)

[  839.746033] input: syz1 as /devices/virtual/input/input4743
10:47:17 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast, 0x0, 0x0, 0x112a4e46af000000}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

[  839.794611] input: syz1 as /devices/virtual/input/input4744
[  839.817885] print_req_error: I/O error, dev loop1, sector 0
10:47:17 executing program 1:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x401, 0x8000)
ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f00000001c0)={0x7, 0x0, 0x100, 0x3f, 0x7fff, 0x2})
pipe2$9p(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}})
write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0)
write$P9_RWALK(r2, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9)
write$P9_RCREATE(r2, &(0x7f0000000080)={0x18, 0x73, 0x1}, 0x18)
write$P9_RREADDIR(r2, &(0x7f0000000600)={0xb, 0x29, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
r3 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0)
getdents(r3, &(0x7f0000000180)=""/8, 0x8)

10:47:17 executing program 6:
r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@nl=@proc, &(0x7f0000000140)=0x80, 0x80000)
bind$rds(r0, &(0x7f0000000180)={0x2, 0x4e22, @loopback}, 0x10)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x40000, 0x0)
getcwd(&(0x7f0000000280)=""/3, 0x3)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000001c0)='\x00', r1}, 0x10)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)

10:47:17 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f00}, 'syz1\x00'})

10:47:17 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000001, 0x0)
ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070")
r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x1, 0x1100082)
r2 = memfd_create(&(0x7f0000000140)="c8a8707470", 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)="16", 0x1}], 0x1, 0x1081806)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
read(r1, &(0x7f0000000000)=""/5, 0x5)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendfile(r1, r1, &(0x7f0000000100)=0x3f16, 0xffffffff)
ioctl$LOOP_CLR_FD(r1, 0x4c01)

[  839.996255] ==================================================================
[  840.004114] BUG: KASAN: double-free or invalid-free in p9stat_free+0x35/0x100
[  840.011407] 
[  840.013064] CPU: 0 PID: 21304 Comm: syz-executor7 Not tainted 4.18.0-next-20180824+ #47
[  840.021228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  840.030604] Call Trace:
[  840.033221]  dump_stack+0x1c9/0x2b4
[  840.036877]  ? dump_stack_print_info.cold.2+0x52/0x52
[  840.042114]  ? printk+0xa7/0xcf
10:47:17 executing program 0:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0)
getcwd(&(0x7f0000000140)=""/248, 0xf8)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x49fe000000000000}, 'syz1\x00'})

10:47:17 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {}, {0x40030000000000}}}}, 0xf8}}, 0x0)

[  840.045466]  ? kmsg_dump_rewind_nolock+0xe4/0xe4
[  840.050250]  ? p9stat_free+0x35/0x100
[  840.054075]  ? p9stat_free+0x35/0x100
[  840.057904]  print_address_description+0x6c/0x20b
[  840.062796]  ? p9stat_free+0x35/0x100
[  840.066641]  ? p9stat_free+0x35/0x100
[  840.070474]  kasan_report_invalid_free+0x64/0xa0
[  840.075271]  __kasan_slab_free+0x150/0x170
[  840.079537]  ? p9stat_free+0x35/0x100
[  840.083367]  kasan_slab_free+0xe/0x10
[  840.087198]  kfree+0xd9/0x210
[  840.090329]  p9stat_free+0x35/0x100
10:47:17 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast, 0x0, 0x0, 0xf0ffffff}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

[  840.093980]  v9fs_dir_readdir+0x68e/0xbc0
[  840.098156]  ? __schedule+0x884/0x1df0
[  840.102090]  ? v9fs_dir_release+0x60/0x60
[  840.106272]  ? lock_release+0x9f0/0x9f0
[  840.110278]  ? check_same_owner+0x340/0x340
[  840.114632]  ? fsnotify+0xbac/0x14e0
[  840.118387]  ? down_read_killable+0xb4/0x200
[  840.120185] input: syz1 as /devices/virtual/input/input4745
[  840.122825]  ? iterate_dir+0xce/0x5d0
[  840.122850]  ? fsnotify+0x14e0/0x14e0
[  840.122887]  ? security_file_permission+0x1ba/0x230
[  840.122914]  iterate_dir+0x48b/0x5d0
[  840.122946]  __x64_sys_getdents+0x29f/0x510
[  840.122979]  ? __ia32_sys_old_readdir+0x2c0/0x2c0
[  840.154220]  ? fillonedir+0x2a0/0x2a0
[  840.158066]  do_syscall_64+0x1b9/0x820
[  840.161989]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[  840.167390]  ? syscall_return_slowpath+0x5e0/0x5e0
[  840.172353]  ? trace_hardirqs_on_caller+0x2b0/0x2b0
[  840.177401]  ? prepare_exit_to_usermode+0x3b0/0x3b0
[  840.182441]  ? recalc_sigpending_tsk+0x180/0x180
[  840.187229]  ? kasan_check_write+0x14/0x20
[  840.191496]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  840.196379]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  840.201621] RIP: 0033:0x457089
[  840.204840] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  840.224043] RSP: 002b:00007f6300294c78 EFLAGS: 00000246 ORIG_RAX: 000000000000004e
[  840.229454] input: syz1 as /devices/virtual/input/input4746
[  840.231771] RAX: ffffffffffffffda RBX: 00007f63002956d4 RCX: 0000000000457089
[  840.231782] RDX: 0000000000000008 RSI: 0000000020000180 RDI: 0000000000000005
[  840.231792] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000
[  840.231801] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
[  840.231811] R13: 00000000004cbd10 R14: 00000000004c350f R15: 0000000000000000
[  840.231833] 
[  840.231841] Allocated by task 21304:
[  840.231862]  save_stack+0x43/0xd0
[  840.231876]  kasan_kmalloc+0xc4/0xe0
[  840.231888]  __kmalloc+0x14e/0x720
[  840.231901]  p9pdu_readf+0x526/0x2170
[  840.231919]  p9pdu_readf+0xd5c/0x2170
[  840.297656]  p9stat_read+0x194/0x5d0
[  840.301399]  v9fs_dir_readdir+0x63d/0xbc0
[  840.305558]  iterate_dir+0x48b/0x5d0
[  840.309286]  __x64_sys_getdents+0x29f/0x510
[  840.313626]  do_syscall_64+0x1b9/0x820
[  840.317531]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  840.322742] 
[  840.324382] Freed by task 21304:
[  840.327770]  save_stack+0x43/0xd0
[  840.331241]  __kasan_slab_free+0x11a/0x170
[  840.335496]  kasan_slab_free+0xe/0x10
[  840.339309]  kfree+0xd9/0x210
[  840.342426]  p9stat_free+0x35/0x100
[  840.346064]  p9pdu_readf+0xd90/0x2170
[  840.349877]  p9stat_read+0x194/0x5d0
[  840.353600]  v9fs_dir_readdir+0x63d/0xbc0
[  840.357767]  iterate_dir+0x48b/0x5d0
[  840.361493]  __x64_sys_getdents+0x29f/0x510
[  840.365828]  do_syscall_64+0x1b9/0x820
[  840.369751]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  840.374942] 
[  840.376587] The buggy address belongs to the object at ffff8801ceaaf480
[  840.376587]  which belongs to the cache kmalloc-32 of size 32
[  840.389810] The buggy address is located 0 bytes inside of
[  840.389810]  32-byte region [ffff8801ceaaf480, ffff8801ceaaf4a0)
[  840.401526] The buggy address belongs to the page:
[  840.406469] page:ffffea00073aabc0 count:1 mapcount:0 mapping:ffff8801dac001c0 index:0xffff8801ceaaffc1
[  840.415936] flags: 0x2fffc0000000100(slab)
[  840.420196] raw: 02fffc0000000100 ffffea00075b0108 ffffea000766a808 ffff8801dac001c0
[  840.428106] raw: ffff8801ceaaffc1 ffff8801ceaaf000 000000010000002a 0000000000000000
[  840.433253] input: syz1 as /devices/virtual/input/input4748
[  840.435994] page dumped because: kasan: bad access detected
10:47:17 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast, 0x0, 0x0, 0xf0}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback}}}, 0xf8}}, 0x0)

[  840.436000] 
[  840.436005] Memory state around the buggy address:
[  840.436019]  ffff8801ceaaf380: fb fb fb fb fc fc fc fc 00 fc fc fc fc fc fc fc
[  840.436031]  ffff8801ceaaf400: 00 00 fc fc fc fc fc fc fb fb fb fb fc fc fc fc
[  840.436043] >ffff8801ceaaf480: fb fb fb fb fc fc fc fc fb fb fb fb fc fc fc fc
[  840.436050]                    ^
[  840.436062]  ffff8801ceaaf500: fb fb fb fb fc fc fc fc 00 00 fc fc fc fc fc fc
[  840.436075]  ffff8801ceaaf580: fb fb fb fb fc fc fc fc fb fb fb fb fc fc fc fc
[  840.436081] ==================================================================
[  840.436086] Disabling lock debugging due to kernel taint
[  840.436093] Kernel panic - not syncing: panic_on_warn set ...
[  840.436093] 
[  840.436110] CPU: 0 PID: 21304 Comm: syz-executor7 Tainted: G    B             4.18.0-next-20180824+ #47
[  840.436118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  840.436131] Call Trace:
[  840.536250]  dump_stack+0x1c9/0x2b4
[  840.539888]  ? dump_stack_print_info.cold.2+0x52/0x52
10:47:17 executing program 6:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0)
setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000180)=0x8, 0x4)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000001280)=""/4096)
r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x400000, 0x0)
ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f0000000100)={0x4, [0x8, 0x100000000, 0xfffffffffffffffc, 0x3]})

10:47:17 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000125ff4), 0xc, &(0x7f0000cffff0)={&(0x7f0000000840)=@allocspi={0xf8, 0x16, 0x9, 0x0, 0x0, {{{@in, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x33}, @in6=@loopback, {}, {0xde010000}}}}, 0xf8}}, 0x0)

[  840.545092]  ? lock_downgrade+0x8f0/0x8f0
[  840.549251]  ? p9_idpool_get+0x70/0x70
[  840.553146]  panic+0x238/0x4e7
[  840.556347]  ? add_taint.cold.5+0x16/0x16
[  840.560502]  ? add_taint.cold.5+0x5/0x16
[  840.564574]  ? trace_hardirqs_off+0xaf/0x2b0
[  840.568997]  ? p9stat_free+0x35/0x100
[  840.572804]  ? p9stat_free+0x35/0x100
[  840.576616]  kasan_end_report+0x47/0x4f
[  840.580612]  kasan_report_invalid_free+0x81/0xa0
[  840.585377]  __kasan_slab_free+0x150/0x170
[  840.589624]  ? p9stat_free+0x35/0x100
[  840.593437]  kasan_slab_free+0xe/0x10
[  840.597237]  kfree+0xd9/0x210
[  840.600344]  p9stat_free+0x35/0x100
[  840.603978]  v9fs_dir_readdir+0x68e/0xbc0
[  840.608127]  ? __schedule+0x884/0x1df0
[  840.612025]  ? v9fs_dir_release+0x60/0x60
[  840.616174]  ? lock_release+0x9f0/0x9f0
[  840.620148]  ? check_same_owner+0x340/0x340
[  840.624483]  ? fsnotify+0xbac/0x14e0
[  840.628205]  ? down_read_killable+0xb4/0x200
[  840.632612]  ? iterate_dir+0xce/0x5d0
[  840.636411]  ? fsnotify+0x14e0/0x14e0
[  840.640710]  ? security_file_permission+0x1ba/0x230
[  840.645764]  iterate_dir+0x48b/0x5d0
[  840.649496]  __x64_sys_getdents+0x29f/0x510
[  840.653842]  ? __ia32_sys_old_readdir+0x2c0/0x2c0
[  840.658711]  ? fillonedir+0x2a0/0x2a0
[  840.662532]  do_syscall_64+0x1b9/0x820
[  840.666425]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[  840.671799]  ? syscall_return_slowpath+0x5e0/0x5e0
[  840.676828]  ? trace_hardirqs_on_caller+0x2b0/0x2b0
[  840.681852]  ? prepare_exit_to_usermode+0x3b0/0x3b0
[  840.686869]  ? recalc_sigpending_tsk+0x180/0x180
[  840.691632]  ? kasan_check_write+0x14/0x20
[  840.695873]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  840.700741]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  840.705962] RIP: 0033:0x457089
[  840.709171] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  840.728079] RSP: 002b:00007f6300294c78 EFLAGS: 00000246 ORIG_RAX: 000000000000004e
[  840.735796] RAX: ffffffffffffffda RBX: 00007f63002956d4 RCX: 0000000000457089
[  840.743090] RDX: 0000000000000008 RSI: 0000000020000180 RDI: 0000000000000005
[  840.750721] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000
[  840.758110] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
[  840.765390] R13: 00000000004cbd10 R14: 00000000004c350f R15: 0000000000000000
[  840.772945] Dumping ftrace buffer:
[  840.776487]    (ftrace buffer empty)
[  840.780189] Kernel Offset: disabled
[  840.783810] Rebooting in 86400 seconds..