9c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x200004)
sendfile(r1, r3, 0x0, 0x80001d00c0d0)

18:12:48 executing program 3:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x200004)
sendfile(r1, r3, 0x0, 0x80001d00c0d0)

18:12:48 executing program 3:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
sendfile(r1, r4, 0x0, 0x80001d00c0d0)

18:12:48 executing program 5:
clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1}, 0x48)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10)
connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10)
socket$netlink(0x10, 0x3, 0x0)
exit(0x0)
syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00')

18:12:50 executing program 1:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x200004)
sendfile(r1, r3, 0x0, 0x80001d00c0d0)

18:12:50 executing program 3:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
sendfile(r1, r4, 0x0, 0x80001d00c0d0)

18:12:50 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@local, @in6=@empty}}, {{@in6=@empty}, 0x0, @in6=@remote}}, &(0x7f0000000040)=0xe8)
r3 = getpid()
sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
process_vm_readv(r3, &(0x7f00000008c0)=[{&(0x7f0000000240)=""/69, 0x45}, {&(0x7f00000002c0)=""/105, 0x69}, {&(0x7f0000000340)=""/92, 0x5c}, {&(0x7f0000000440)=""/222, 0xde}, {&(0x7f0000000540)=""/185, 0xb9}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f00000006c0)=""/221, 0xdd}, {&(0x7f00000007c0)=""/213, 0xd5}], 0x8, &(0x7f0000000cc0)=[{&(0x7f0000000940)=""/161, 0xa1}, {&(0x7f0000000a00)=""/88, 0x58}, {&(0x7f0000000a80)=""/189, 0xbd}, {&(0x7f0000000b40)=""/250, 0xfa}, {&(0x7f0000000c40)=""/106, 0x6a}], 0x5, 0x0)
select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_NMI(r4, 0xae9a)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

18:12:50 executing program 5:
clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1}, 0x48)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10)
connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10)
socket$netlink(0x10, 0x3, 0x0)
exit(0x0)
syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00')

18:12:50 executing program 4:
r0 = socket$inet6(0xa, 0x806, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c)
listen(r0, 0x3)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10)
r2 = accept4(r0, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0)
pipe(&(0x7f0000000340)={<r3=>0xffffffffffffffff})
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
setsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000040)=0x2, 0x4)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000000), 0x4)
stat(&(0x7f0000000380)='./file0\x00', 0x0)
syz_mount_image$hfs(0x0, 0x0, 0x6b4661dc, 0x0, 0x0, 0x0, 0x0)
sendmmsg(r2, &(0x7f0000001500), 0x4000000000002d0, 0x0)

18:12:50 executing program 0:
ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
dup(r0)
ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x0, &(0x7f0000000380))
getpid()
sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x7ff)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0)
sched_setaffinity(0x0, 0x763, 0x0)
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = dup(r2)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000000)=0xffffffff, 0xfffffffffffffe68)
bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d)
inotify_init()
mlock2(&(0x7f0000ffa000/0x6000)=nil, 0x6000, 0x0)
open(0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x14a)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, 0x0)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x0)
ftruncate(r4, 0x7fff)
sendfile(r3, r4, 0x0, 0x8000fffffffe)

18:12:51 executing program 3:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
sendfile(r1, r4, 0x0, 0x80001d00c0d0)

18:12:51 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x100, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r0, 0xc0245720, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x3800)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0)
getpeername$packet(0xffffffffffffffff, 0x0, 0x0)
mincore(&(0x7f0000000000/0x400000)=nil, 0x400000, &(0x7f0000000140)=""/164)
pipe(&(0x7f0000000340)={<r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000080)={0x9a0000, 0x6e7, 0x3, <r3=>0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x990a6b, 0x3, [], @ptr=0x687e}})
ioctl$KVM_REINJECT_CONTROL(r3, 0xae71, &(0x7f00000000c0)={0xf8})

18:12:51 executing program 3:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
close(0xffffffffffffffff)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x200004)
sendfile(0xffffffffffffffff, r3, 0x0, 0x80001d00c0d0)

18:12:51 executing program 3:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
close(0xffffffffffffffff)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x200004)
sendfile(0xffffffffffffffff, r3, 0x0, 0x80001d00c0d0)

[  193.814477] mmap: syz-executor.0 (8654) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.txt.
18:12:51 executing program 3:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
close(0xffffffffffffffff)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x200004)
sendfile(0xffffffffffffffff, r3, 0x0, 0x80001d00c0d0)

18:12:51 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @dev}, 0x10)
sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
r1 = gettid()
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
recvmsg$can_bcm(r4, &(0x7f00000004c0)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, <r5=>0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000180)=""/132, 0x84}, {&(0x7f0000000240)=""/176, 0xb0}, {&(0x7f0000000300)=""/89, 0x59}, {&(0x7f00000000c0)=""/43, 0x2b}], 0x4, &(0x7f00000003c0)=""/252, 0xfc}, 0x2100)
r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540)='l2tp\x00')
sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x54, r6, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x6}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x7f}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, [], 0x3f}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x4008811)
r7 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000080)=r1)
recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

18:12:51 executing program 3:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x200004)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)

18:12:51 executing program 4:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mkdir(&(0x7f0000000340)='./file0\x00', 0x0)
r1 = getuid()
sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000280)='./file0/f.le.\x00', &(0x7f0000000380)='overlay\x00', 0x48000, &(0x7f0000000500)={[{@index_on='index=on'}, {@index_on='index=on'}, {@default_permissions='default_permissions'}, {@metacopy_on='metacopy=on'}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on='nfs_export=on'}, {@nfs_export_on='nfs_export=on'}, {@workdir={'workdir', 0x3d, './file0'}}], [{@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@subj_role={'subj_role', 0x3d, 'system.posix_acl_access\x00'}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}]})
ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, 0x0)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e3a66606c65302c776f726b6469723d2e2f66696c65315fcb7fada8c09be74ff9d2d75b290b7ab80fead6ef2188b1b8efef07d1a0cc67b38f2abdc7e0f381951a019da6c7804af85d9f4fde5a57f72dcfe104fa62e0e641b9697cccaa0988e769"])
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104002bb9c93f0000", @ANYRES32, @ANYPTR64=&(0x7f0000000600)=ANY=[@ANYRESHEX, @ANYRESDEC, @ANYRESHEX, @ANYPTR64=&(0x7f0000000480)=ANY=[@ANYRES32=r1, @ANYPTR64, @ANYRES64, @ANYRESDEC=r0, @ANYPTR64], @ANYRES16]], 0x3}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="28000000ce93010400"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32, @ANYBLOB], 0x28}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="2800000099b2fe7d00000000000000000000000005e95c4e573eb40b98013586b4e39bdd17a5110dbd688af928942d1ead11fa760ef0d484d42455bc82361abfccd6c551816c5cce8214234a7acd1137bdbf1decacd8ef696b108d26ad65b7210ff0b41eb985ee9bdfa411a38d10baedbf641e240e5f648076275dd6dd26ffc204b73459f4c9492d5b5f75ee2ea3e6d2f5851b6f5fc4bd02e2af96b146f89b37bc3ffa0458c42da52675e4e29cd200b711c3f6c6e277a330dcc8307d7e0644a4c577d5a664faa7669c98f295bb78665933de20dc694b1cd52a6e7bbd5d342213167af08a9db2b6af", @ANYBLOB="2dadb200c417e8841b5bf6253db45be705477e3692771bce4309cbfda44517170eb4bedb22d693b31c76", @ANYBLOB="022000000022fce38db7c1bc", @ANYRES32, @ANYBLOB], 0x5}}, 0x0)
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, 0x0, 0x200, 0x70bd28, 0x25dfdbf9, {}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x5}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x4008841)
mknod$loop(&(0x7f0000000000)='.//ile0\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x301800, 0x16)
renameat(r3, &(0x7f0000000180)='.//ile0\x00', r3, &(0x7f00000007c0)='./file0/f.le.\x00')
pipe2$9p(&(0x7f0000000200), 0x80000)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f00000003c0)={0xeebb, 0x99, 0x6, 0x101, 0x1}, 0x14)

18:12:51 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.stat\x00', 0x0, 0x0)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
ioctl$DRM_IOCTL_MAP_BUFS(r1, 0xc0186419, &(0x7f0000001480)={0x5, &(0x7f0000000080)=""/203, &(0x7f0000001400)=[{0x0, 0x41, 0x7, &(0x7f0000000180)=""/65}, {0x10000, 0x61, 0x48, &(0x7f0000000200)=""/97}, {0x8, 0x75, 0x9, &(0x7f00000002c0)=""/117}, {0x0, 0x4c, 0xfff, &(0x7f0000000340)=""/76}, {0x1, 0x1c, 0x6, &(0x7f00000003c0)=""/28}]})
preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0xffc00}], 0x1, 0x20000000)

18:12:51 executing program 2:
pipe(&(0x7f0000000340)={<r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
ioctl$KVM_ASSIGN_SET_MSIX_NR(r0, 0x4008ae73, &(0x7f0000000000)={0x5, 0x7})
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
prctl$PR_SET_PTRACER(0x59616d61, r1)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
r3 = socket$netlink(0x10, 0x3, 0x200000000000004)
pipe(&(0x7f0000000340)={<r4=>0xffffffffffffffff})
vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r5=>0x0, <r6=>0x0})
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
fcntl$setpipe(r7, 0x407, 0x0)
write(r7, &(0x7f0000000340), 0x41395527)
r8 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r8, &(0x7f0000006400)=[{{&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)=""/59, 0x3b}, {&(0x7f00000001c0)=""/6, 0x6}], 0x2, &(0x7f0000000300)=""/40, 0x28}, 0x800}, {{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/124, 0x7c}, {&(0x7f0000000480)=""/173, 0xad}, {&(0x7f0000000540)=""/7, 0x7}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/28, 0x1c}], 0x5, &(0x7f0000001640)=""/91, 0x5b}, 0x8}, {{&(0x7f00000016c0)=@nl=@proc, 0x80, 0x0, 0x0, &(0x7f0000001980)=""/96, 0x60}, 0x5}, {{&(0x7f0000001a00)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000002040)=[{&(0x7f0000001b80)=""/244, 0xf4}, {&(0x7f0000001c80)=""/217, 0xd9}, {&(0x7f0000001e80)=""/102, 0x66}, {&(0x7f0000002680)=""/117, 0x75}, {&(0x7f0000001f80)=""/129, 0x81}], 0x5}, 0xa6}, {{&(0x7f00000020c0)=@nl=@proc, 0x80, &(0x7f0000002400)=[{&(0x7f0000002a40)=""/93, 0x5d}, {&(0x7f00000021c0)=""/47, 0x2f}, {&(0x7f0000002200)=""/197, 0xc5}, {&(0x7f0000002300)=""/205, 0xcd}], 0x4, &(0x7f0000002440)=""/11, 0xb}, 0xffff}, {{&(0x7f0000002480)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f00000027c0)=[{&(0x7f0000002500)=""/86, 0x56}, {&(0x7f0000002580)=""/54, 0x36}, {&(0x7f00000025c0)=""/100, 0x64}, {&(0x7f0000002640)=""/31, 0x1f}, {&(0x7f0000002900)=""/135, 0x87}, {&(0x7f0000002740)=""/66, 0x42}], 0x6, &(0x7f0000002840)=""/175, 0xaf}, 0x3ff}, {{0x0, 0x0, &(0x7f0000003f80), 0x0, &(0x7f0000004040)=""/200, 0xc8}}, {{0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000004140)=""/116, 0x74}, {0x0}, {0x0}], 0x3, &(0x7f00000029c0)=""/104, 0x68}, 0x7ff}], 0x8, 0x0, 0x0)
ioctl$VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f00000000c0)={0xfffffff9, 0x7, 0x4, 0x4, 0x100, {r5, r6/1000+30000}, {0x4, 0x2, 0x8, 0x1f, 0x5, 0x1c, "3d2e3c88"}, 0x100, 0x1, @fd=r7, 0x7, 0x0, <r9=>r8})
flock(r9, 0x0)
writev(r3, &(0x7f0000000040)=[{&(0x7f0000000200)="480000001400190d09004bb5050d8c560a8447000bffe0064e230f00000000a2bc5603b700000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1)

[  194.296768] overlayfs: failed to resolve './file1_������O���[)z����!�����Ѡ�g��*����
��ǀJ�]�O�ZW�-���b��A�i|̪	��i': -2
18:12:51 executing program 4:
pipe(&(0x7f0000000340))
ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40046f41, 0x76006e)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0)
ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, 0x0, 0x0)
r2 = dup(r1)
write$input_event(0xffffffffffffffff, &(0x7f0000000280)={{0x77359400}, 0x1f}, 0x18)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', 0x0, 0x6, 0x0, 0x0, 0x5, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3ff, 0x100000800}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0)
getpeername$unix(r2, &(0x7f00000002c0), &(0x7f0000000000)=0x6e)
ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0)
ioctl$ASHMEM_GET_SIZE(r3, 0x40186f40, 0x76006e)
prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, 0x0)
openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x0, 0x0)
sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)

18:12:51 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="0f22270fc76ca7baa00066ed66b91e0100000f320f20d8b135200000000f20d80f22d8f30fbcf80f3581d90c0066f2ba5f57160fc77c01", 0x37}], 0x17, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000140)={0x0, @in, @tipc, @phonet, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='vlan0\x00'})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58)

[  194.364487] overlayfs: failed to resolve './file1_������O���[)z����!�����Ѡ�g��*����
��ǀJ�]�O�ZW�-���b��A�i|̪	��i': -2
18:12:52 executing program 3:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x200004)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)

[  194.623345] ubi0: attaching mtd0
[  194.675481] ubi0: scanning is finished
[  194.692240] ubi0: empty MTD device detected
18:12:52 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x100, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r0, 0xc0245720, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x3800)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0)
getpeername$packet(0xffffffffffffffff, 0x0, 0x0)
mincore(&(0x7f0000000000/0x400000)=nil, 0x400000, &(0x7f0000000140)=""/164)
pipe(&(0x7f0000000340)={<r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000080)={0x9a0000, 0x6e7, 0x3, <r3=>0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x990a6b, 0x3, [], @ptr=0x687e}})
ioctl$KVM_REINJECT_CONTROL(r3, 0xae71, &(0x7f00000000c0)={0xf8})

18:12:52 executing program 2:
r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x2)
fcntl$setsig(r0, 0xa, 0x11)
fcntl$setlease(r0, 0x400, 0x0)
r1 = socket$unix(0x1, 0x5, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
read$FUSE(r3, &(0x7f0000000380), 0x1000)
r4 = dup2(r2, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000040)=<r5=>0x0)
pipe(&(0x7f0000000340)={<r6=>0xffffffffffffffff})
syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x180000000000, 0x555002)
vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
setsockopt$inet6_dccp_int(r6, 0x21, 0x1a, &(0x7f0000000140)=0xfffffffb, 0x4)
timer_settime(r5, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
truncate(&(0x7f0000000200)='./file0\x00', 0x0)

18:12:52 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x1, 0x3, 0x3, 0x0, 0x0, 0x5, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x3, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f00000001c0))
mkdir(0x0, 0x0)
setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000100)=0x89, 0x1)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
syz_open_procfs(0x0, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000080), 0xffffffffffffffff, 0x0, 0x2, 0x4}}, 0x20)
ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x50}}, 0x0)
getpeername(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, 0x0)
socket$inet(0x2, 0x0, 0x0)

[  195.030461] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  195.063796] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
18:12:52 executing program 1:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700)
splice(r0, 0x0, r3, 0x0, 0x100000800ffe0, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffc8f)
r4 = getpid()
sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
perf_event_open(&(0x7f0000000100)={0x4, 0x70, 0x9, 0x7f, 0x40, 0x1, 0x0, 0xfff, 0x29000, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000080), 0x4}, 0x800, 0x7fffffff, 0x4391, 0x6, 0x8, 0x7, 0x3}, r4, 0x0, r2, 0x0)
r5 = syz_open_procfs(r4, &(0x7f0000000180)='net/mcfilter6\x00')
ioctl$VIDIOC_G_FBUF(r5, 0x8030560a, &(0x7f0000000240)={0x1, 0x31, &(0x7f00000001c0)="39ed597a8d2fc900f6758da02c6d35f1575028917019f13dc9ceab13dcbf08df3404c2c44c029b91f9b72998d3514bc9262642c9eed6694ad4b64123a775ee3062373cbada34c3d3ebbab24f", {0x3ff, 0x3f, 0x33524742, 0x5, 0x8, 0x4, 0x7, 0x10000}})
splice(r0, 0x0, r2, 0x0, 0x1870b0a0, 0x0)

[  195.091474] device macsec1 entered promiscuous mode
[  195.106894] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
18:12:52 executing program 5:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x420002, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000004c0)={0x1, [<r0=>0x0]}, &(0x7f0000a8a000)=0x8)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)
write$cgroup_int(r3, &(0x7f0000000380), 0x101bf)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000001300)={0x2880008, r2, 0xfffffff0})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000000140)=0x20)
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
fcntl$setpipe(r6, 0x407, 0x0)
r7 = openat(r6, &(0x7f0000000380)='./file0\x00', 0x268000, 0x8)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00')
r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYRES16, @ANYRESHEX=r9, @ANYBLOB=',rootmode000040000,user_id=\x00'/42, @ANYRESDEC=0x0, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYPTR64, @ANYRES64=r8], @ANYPTR=&(0x7f00000008c0)=ANY=[@ANYBLOB="0709b969d00256e03f44cee06c1346e3f7b02db765e65257cd34d3c0866fdd2b8214ea049c950ece5bad10d90b2ea1c797c16d330a87763289d6b1509198c0f09950801ca33143779f252a19216cb5ec68e5e88a774d366b44c515e9ccc1de495f96b657e93ee6b6e54ed327480675ca", @ANYRES16, @ANYRES16, @ANYRES64, @ANYBLOB="b9913e54b3a6afd3", @ANYPTR, @ANYBLOB="72b6caa09386d9a0d9b84aaa2d79b379d8dff7603f3ef89a02418cc3cd89892603569c0b46b96648b54277621fca9166f1f8d140fbd927f664f395502299963e65505dc65eed7618f1db3f909786209411a28c62343ba032122ad07059d2fd0af3b1b3352351bf44b6313e5939bb026210cbd1e930fd7955dad794dd15680730cd66c62ef5dd4935430f586fa5c6dff4ef0bf45e91e3325b4da81bdc925420c24e4cb82d8d5233a309"]], @ANYRESDEC=0x0, @ANYBLOB="2384a5df6147c0f9000f5f4cdf5b676316effd07000000123c6c0000c0b84befc736cf2039ab24b92dee080573a94221ac9fbe48c2c5140fd897c26b13969a1b241115df21dba33453cf53ee681f859aebf19c0bd19d8d6c421596cddec40ce59dbf306b"])
sendmsg$TIPC_CMD_DISABLE_BEARER(r7, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r8, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x10, 0x13, @udp='udp:syz0\x00'}}, ["", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0xc8}, 0x48000)

[  195.137433] device macvlan0 entered promiscuous mode
[  195.157114] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  195.191524] device macvlan0 left promiscuous mode
[  195.210718] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  195.248864] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  195.283901] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2482438438
[  195.311046] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  195.335966] device macsec1 entered promiscuous mode
[  195.342126] device macvlan0 entered promiscuous mode
[  195.347492] ubi0: background thread "ubi_bgt0d" started, PID 8730
[  195.356763] device macvlan0 left promiscuous mode
18:12:52 executing program 3:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x200004)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)

[  195.365248] ubi0: detaching mtd0
[  195.378966] ubi0: mtd0 is detached
18:12:52 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x56)
r1 = creat(0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb37c}, 0x1650}, 0x0, 0xffffffffffffffff, r1, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8b1a, &(0x7f0000000040)='wlan0\x00')
r4 = socket$inet6(0xa, 0xa, 0x101)
syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00')
sendfile(r3, r2, &(0x7f00000001c0)=0x202, 0x4000000000dc)
r5 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x80000000, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x3f2, 0x400, 0x70bd29, 0x25dfdbfd, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x10008000}, 0x0)
prctl$PR_SET_PDEATHSIG(0x1, 0xf)
r6 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00')
sendfile(r5, r6, &(0x7f0000000240)=0x202, 0x4000000000dc)
r7 = dup2(r5, r4)
r8 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00')
sendmsg$SMC_PNETID_FLUSH(r7, &(0x7f0000003800)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000037c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800a9f6c7197b083edc5857384ed2982d0300", @ANYRES16=r8, @ANYBLOB="61f2d388c041c903b7e26dfab587e081d8f5e39608002bbd7000fedb5d4a0a231fb483b31d644ad5acdf2504000000"], 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x4004800)

[  195.415334] ubi0: attaching mtd0
[  195.466954] ubi0: scanning is finished
18:12:53 executing program 5:
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
fcntl$setpipe(r0, 0x407, 0x0)
write(r0, &(0x7f0000000340), 0x41395527)
setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000000)=0x4, 0x4)
r1 = memfd_create(&(0x7f0000000380)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\xe6\xff\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00D\xce\xd6\x98z\xfe\x85\xd4\x13N\xf2\xb2\xdcUQ\xedd\x18\x0fjSW\xaf*\xb7P\xe3\x80,\xc4\xfbfw)\xcepd\xe6\x85sL\xdbd}\xfb\xd1\xaa\xd7\xcc\xad;O\x9e\xc7\x84\xdb[\xb2T[z\x9c\xdf\x94\xf7)Q=\x1f\'\x85\x904\xea0k\x8dX\xff\x1b\xe2\xbdI\xbap<k0e@A\xc9\xbdy\xeb\x80}\xd7\x137\xc0\x9c\xa1\x10\xcb\xfa\xb5\xab', 0x0)
pipe(&(0x7f0000000340)={<r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00')
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYRES16, @ANYRESHEX=r4, @ANYBLOB=',rootmode000040000,user_id=\x00'/42, @ANYRESDEC=0x0, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYPTR64, @ANYRES64=r3], @ANYPTR=&(0x7f00000008c0)=ANY=[@ANYBLOB="0709b969d00256e03f44cee06c1346e3f7b02db765e65257cd34d3c0866fdd2b8214ea049c950ece5bad10d90b2ea1c797c16d330a87763289d6b1509198c0f09950801ca33143779f252a19216cb5ec68e5e88a774d366b44c515e9ccc1de495f96b657e93ee6b6e54ed327480675ca", @ANYRES16, @ANYRES16, @ANYRES64, @ANYBLOB="b9913e54b3a6afd3", @ANYPTR, @ANYBLOB="72b6caa09386d9a0d9b84aaa2d79b379d8dff7603f3ef89a02418cc3cd89892603569c0b46b96648b54277621fca9166f1f8d140fbd927f664f395502299963e65505dc65eed7618f1db3f909786209411a28c62343ba032122ad07059d2fd0af3b1b3352351bf44b6313e5939bb026210cbd1e930fd7955dad794dd15680730cd66c62ef5dd4935430f586fa5c6dff4ef0bf45e91e3325b4da81bdc925420c24e4cb82d8d5233a309"]], @ANYRESDEC=0x0, @ANYBLOB="2384a5df6147c0f9000f5f4cdf5b676316effd07000000123c6c0000c0b84befc736cf2039ab24b92dee080573a94221ac9fbe48c2c5140fd897c26b13969a1b241115df21dba33453cf53ee681f859aebf19c0bd19d8d6c421596cddec40ce59dbf306b"])
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r3, 0x410, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0xfffff9d3, 0xff, 0x8, 0xfffffffb}}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4060)
r5 = dup2(r1, r1)
r6 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r7 = dup2(r6, r6)
r8 = dup2(r5, r7)
name_to_handle_at(r8, &(0x7f0000000040)='\x00', &(0x7f0000000080)={0x8}, 0x0, 0x1000)

18:12:53 executing program 4:
pipe(&(0x7f0000000340))
ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40046f41, 0x76006e)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0)
ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, 0x0, 0x0)
r2 = dup(r1)
write$input_event(0xffffffffffffffff, &(0x7f0000000280)={{0x77359400}, 0x1f}, 0x18)
syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', 0x0, 0x6, 0x0, 0x0, 0x5, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3ff, 0x100000800}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0)
getpeername$unix(r2, &(0x7f00000002c0), &(0x7f0000000000)=0x6e)
ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0)
ioctl$ASHMEM_GET_SIZE(r3, 0x40186f40, 0x76006e)
prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, 0x0)
openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x0, 0x0)
sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)

[  195.581632] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4
18:12:53 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x56)
r1 = creat(0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb37c}, 0x1650}, 0x0, 0xffffffffffffffff, r1, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8b1a, &(0x7f0000000040)='wlan0\x00')
r4 = socket$inet6(0xa, 0xa, 0x101)
syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00')
sendfile(r3, r2, &(0x7f00000001c0)=0x202, 0x4000000000dc)
r5 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x80000000, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x3f2, 0x400, 0x70bd29, 0x25dfdbfd, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x10008000}, 0x0)
prctl$PR_SET_PDEATHSIG(0x1, 0xf)
r6 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00')
sendfile(r5, r6, &(0x7f0000000240)=0x202, 0x4000000000dc)
r7 = dup2(r5, r4)
r8 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00')
sendmsg$SMC_PNETID_FLUSH(r7, &(0x7f0000003800)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000037c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800a9f6c7197b083edc5857384ed2982d0300", @ANYRES16=r8, @ANYBLOB="61f2d388c041c903b7e26dfab587e081d8f5e39608002bbd7000fedb5d4a0a231fb483b31d644ad5acdf2504000000"], 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x4004800)

18:12:53 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, &(0x7f0000000100), 0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0)
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0xfffffd93}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="e2884d6839354fc6e5a32605d0e1518625a82efce0b8a6b88b7901b65002a6f3b0b014d8a75967140ed927a342d32c9b0d8124cdb8c639321c7ac31591a4b53a590c437d2c392a0a440def62c2d129c6664dbf28fa0e59f45bc97331c7776028ce0db7f325cab6c1d54ad1f4cb2dbcad9d74bfd333639fb6d828e5465271dd22890f81285428deb2"], 0x1}, 0x1, 0x0, 0x0, 0x4000040}, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @ipv4={[], [], @loopback}, @ipv4={[], [], @loopback}, 0x2, 0x0, 0x0, 0x400})
sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="bc00000048cf7952708a08e4359a93409f1ad1f6efdab9c87e74c23967dbd6e87d8e50c25e29e461e448b66538a77c738cfddec770f9d89a8007084471f8c2c30dcac9a5565116dd43323a9718fb9ef776302c9259cf44f72154", @ANYRES16=0x0, @ANYBLOB="000128bd7000fbdbdf25110000003c00810005000200040000000500020001000000050001002000000005000100ff0000000500020001000000050002004000000005000200200000003a00be0048042fd59d8bc7497878dbdb2997b5d885cec76f0fda216349d4e3bbdf3fe1b64ee132666cd3a2da695f3aace42c38657b33450446c4000008000300", @ANYRES32=0x0, @ANYBLOB="0600360003000000050013010200000005001301000000000600ab000900000006001201e1ff0000"], 0xbc}, 0x1, 0x0, 0x0, 0x14}, 0x24000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)

[  195.768063] ubi0: attaching mtd0
18:12:53 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x56)
r1 = creat(0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb37c}, 0x1650}, 0x0, 0xffffffffffffffff, r1, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8b1a, &(0x7f0000000040)='wlan0\x00')
r4 = socket$inet6(0xa, 0xa, 0x101)
syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00')
sendfile(r3, r2, &(0x7f00000001c0)=0x202, 0x4000000000dc)
r5 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x80000000, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x3f2, 0x400, 0x70bd29, 0x25dfdbfd, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x10008000}, 0x0)
prctl$PR_SET_PDEATHSIG(0x1, 0xf)
r6 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00')
sendfile(r5, r6, &(0x7f0000000240)=0x202, 0x4000000000dc)
r7 = dup2(r5, r4)
r8 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00')
sendmsg$SMC_PNETID_FLUSH(r7, &(0x7f0000003800)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000037c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800a9f6c7197b083edc5857384ed2982d0300", @ANYRES16=r8, @ANYBLOB="61f2d388c041c903b7e26dfab587e081d8f5e39608002bbd7000fedb5d4a0a231fb483b31d644ad5acdf2504000000"], 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x4004800)

[  195.798264] ubi0: scanning is finished
18:12:53 executing program 1:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700)
splice(r0, 0x0, r3, 0x0, 0x100000800ffe0, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffc8f)
r4 = getpid()
sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
perf_event_open(&(0x7f0000000100)={0x4, 0x70, 0x9, 0x7f, 0x40, 0x1, 0x0, 0xfff, 0x29000, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000080), 0x4}, 0x800, 0x7fffffff, 0x4391, 0x6, 0x8, 0x7, 0x3}, r4, 0x0, r2, 0x0)
r5 = syz_open_procfs(r4, &(0x7f0000000180)='net/mcfilter6\x00')
ioctl$VIDIOC_G_FBUF(r5, 0x8030560a, &(0x7f0000000240)={0x1, 0x31, &(0x7f00000001c0)="39ed597a8d2fc900f6758da02c6d35f1575028917019f13dc9ceab13dcbf08df3404c2c44c029b91f9b72998d3514bc9262642c9eed6694ad4b64123a775ee3062373cbada34c3d3ebbab24f", {0x3ff, 0x3f, 0x33524742, 0x5, 0x8, 0x4, 0x7, 0x10000}})
splice(r0, 0x0, r2, 0x0, 0x1870b0a0, 0x0)

18:12:53 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x56)
r1 = creat(0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb37c}, 0x1650}, 0x0, 0xffffffffffffffff, r1, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8b1a, &(0x7f0000000040)='wlan0\x00')
r4 = socket$inet6(0xa, 0xa, 0x101)
syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00')
sendfile(r3, r2, &(0x7f00000001c0)=0x202, 0x4000000000dc)
r5 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x80000000, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x3f2, 0x400, 0x70bd29, 0x25dfdbfd, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x10008000}, 0x0)
prctl$PR_SET_PDEATHSIG(0x1, 0xf)
r6 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00')
sendfile(r5, r6, &(0x7f0000000240)=0x202, 0x4000000000dc)
r7 = dup2(r5, r4)
r8 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00')
sendmsg$SMC_PNETID_FLUSH(r7, &(0x7f0000003800)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000037c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800a9f6c7197b083edc5857384ed2982d0300", @ANYRES16=r8, @ANYBLOB="61f2d388c041c903b7e26dfab587e081d8f5e39608002bbd7000fedb5d4a0a231fb483b31d644ad5acdf2504000000"], 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x4004800)

18:12:53 executing program 3:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x200004)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)

[  196.109771] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  196.122932] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  196.185103] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
18:12:53 executing program 2:
r0 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cgroups\x00', 0x0, 0x0)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x100)
ioctl$TIOCL_SCROLLCONSOLE(r3, 0x541c, &(0x7f0000000080)={0xd, 0x80000001})
r4 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x2, 0x0, 0x81})
sendfile(r0, r1, 0x0, 0x4000000000010046)

[  196.228696] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  196.238495] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  196.250272] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  196.267958] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2482438438
[  196.297859] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  196.317944] ubi0: background thread "ubi_bgt0d" started, PID 8817
18:12:53 executing program 5:
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket(0x1d, 0x800000003, 0x0)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000040)=0x100, &(0x7f0000000080)=0x2)

18:12:53 executing program 2:
fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000280))
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x801, 0x0)
r1 = getpid()
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x92, 0x0, 0x0, 0x82, 0x18008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x2, 0x0, 0x3, 0xffdfffff, 0x8100}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/sockstat\x00')
ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
lseek(r2, 0xfffffffffffffffa, 0x3)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0185879, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000140)={0x0, 0x0, 0x3005, 0xfffffffe, 0xfffffff9, 0x80})
ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0)
ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000000040)=""/43, 0x2b)
ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x4004400})

[  196.475436] can: request_module (can-proto-0) failed.
[  196.509146] can: request_module (can-proto-0) failed.
18:12:54 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, &(0x7f0000000100), 0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0)
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0xfffffd93}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="e2884d6839354fc6e5a32605d0e1518625a82efce0b8a6b88b7901b65002a6f3b0b014d8a75967140ed927a342d32c9b0d8124cdb8c639321c7ac31591a4b53a590c437d2c392a0a440def62c2d129c6664dbf28fa0e59f45bc97331c7776028ce0db7f325cab6c1d54ad1f4cb2dbcad9d74bfd333639fb6d828e5465271dd22890f81285428deb2"], 0x1}, 0x1, 0x0, 0x0, 0x4000040}, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @ipv4={[], [], @loopback}, @ipv4={[], [], @loopback}, 0x2, 0x0, 0x0, 0x400})
sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="bc00000048cf7952708a08e4359a93409f1ad1f6efdab9c87e74c23967dbd6e87d8e50c25e29e461e448b66538a77c738cfddec770f9d89a8007084471f8c2c30dcac9a5565116dd43323a9718fb9ef776302c9259cf44f72154", @ANYRES16=0x0, @ANYBLOB="000128bd7000fbdbdf25110000003c00810005000200040000000500020001000000050001002000000005000100ff0000000500020001000000050002004000000005000200200000003a00be0048042fd59d8bc7497878dbdb2997b5d885cec76f0fda216349d4e3bbdf3fe1b64ee132666cd3a2da695f3aace42c38657b33450446c4000008000300", @ANYRES32=0x0, @ANYBLOB="0600360003000000050013010200000005001301000000000600ab000900000006001201e1ff0000"], 0xbc}, 0x1, 0x0, 0x0, 0x14}, 0x24000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)

18:12:54 executing program 5:
socket$netlink(0x10, 0x3, 0x0)
pipe(&(0x7f0000000340)={<r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
ioctl(r0, 0x890f, &(0x7f0000000380)="1eb3eac432fba575d2bb20130803acfd151accf3f4bdab3afc2ca89cf8e3eca831bfb87041892847ec91d34bf0c73a82a634e81e85bc7b441cfd8856c6de86635a8a90471d9fca436f98487fbe78548aa0e95ef5640e37df24e1f1042ebbd78509cda87632bf597328679ec8a8351defe031ae085cd682ca0bdf12dcf2c1ce9f86f90d31b9016f2e0259c90cf5bc46")
r1 = socket(0x2, 0x5, 0x0)
sendmmsg$inet(r1, &(0x7f0000002e40)=[{{&(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000100)=[{&(0x7f00000006c0)="e0", 0x1}], 0x1}}, {{&(0x7f0000000240)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000280)="8e", 0x1}], 0x1}}], 0x2, 0x0)
pipe(&(0x7f0000000340)={<r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
r3 = openat(r2, &(0x7f0000000040)='./file0\x00', 0x40, 0x21)
pipe(&(0x7f0000000340)={<r4=>0xffffffffffffffff})
vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000440)={0x4c, 0x13, 0xa, 0x401, 0x0, 0x0, {0xc, 0x0, 0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r7, @ANYBLOB="00000016010000001800120008000100736974000c00020008000300", @ANYRES32=r8], 0x38}}, 0x0)
connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r7}, 0x10)

18:12:54 executing program 2:
fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000280))
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x801, 0x0)
r1 = getpid()
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x92, 0x0, 0x0, 0x82, 0x18008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x2, 0x0, 0x3, 0xffdfffff, 0x8100}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/sockstat\x00')
ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
lseek(r2, 0xfffffffffffffffa, 0x3)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0185879, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000140)={0x0, 0x0, 0x3005, 0xfffffffe, 0xfffffff9, 0x80})
ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0)
ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000000040)=""/43, 0x2b)
ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x4004400})

18:12:54 executing program 3:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x200004)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)

18:12:54 executing program 4:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
io_setup(0x10001, &(0x7f00000000c0))
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807284, 0x0)
mount$9p_tcp(0x0, 0x0, 0x0, 0x0, 0x0)
memfd_create(0x0, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0xf, r0, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000200)={0x2, [<r1=>0x0, 0x0]}, &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>r1}, &(0x7f0000000140)=0x20)
sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)=@in6={0xa, 0x4e20, 0x8001, @ipv4={[], [], @private=0xa010100}, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000280)="a3850c1dd719d1d0b68291d65d37a2a19d536be52be16a1e243012489707036834e2dcf17d87a4942f09873ece8d9fd3858bc87a41", 0x35}, {&(0x7f00000002c0)="0e6c090b05dd8c3af8cb7eebad6cdf9699408c888ba9834194b49f85d6fcc3677f9c4c2af6c8a57cf2925ca8c49d2abfa5c92d729ab914a067b56b85a84e26399b66142d9c868ba3f2d9101bfa872611f35ff576a503f7978aade614827b56abea105a8e5ec49500a6534c754fd57a", 0x6f}], 0x2, &(0x7f0000000500)=[@sndinfo={0x20, 0x84, 0x2, {0x7f, 0x0, 0x10001}}, @sndinfo={0x20, 0x84, 0x2, {0xa0, 0x5, 0x7, 0x8, r1}}, @dstaddrv4={0x18, 0x84, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}, @prinfo={0x18}, @dstaddrv6={0x20, 0x84, 0x8, @loopback}, @authinfo={0x18}, @sndinfo={0x20, 0x84, 0x2, {0xfc8a, 0x0, 0x401, 0x2, r2}}], 0xc8, 0x20000000}, 0x20000040)
ptrace(0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
pipe(&(0x7f0000000340)={<r4=>0xffffffffffffffff})
write$FUSE_NOTIFY_STORE(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="300000000400000000000000000000000100000000000000060000000000000008000000000000800000000000000000"], 0x30)
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
ioctl$IMGETVERSION(r3, 0x80044942, &(0x7f0000000180))
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x26003e, 0x0)

18:12:54 executing program 1:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700)
splice(r0, 0x0, r3, 0x0, 0x100000800ffe0, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffc8f)
r4 = getpid()
sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
perf_event_open(&(0x7f0000000100)={0x4, 0x70, 0x9, 0x7f, 0x40, 0x1, 0x0, 0xfff, 0x29000, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000080), 0x4}, 0x800, 0x7fffffff, 0x4391, 0x6, 0x8, 0x7, 0x3}, r4, 0x0, r2, 0x0)
r5 = syz_open_procfs(r4, &(0x7f0000000180)='net/mcfilter6\x00')
ioctl$VIDIOC_G_FBUF(r5, 0x8030560a, &(0x7f0000000240)={0x1, 0x31, &(0x7f00000001c0)="39ed597a8d2fc900f6758da02c6d35f1575028917019f13dc9ceab13dcbf08df3404c2c44c029b91f9b72998d3514bc9262642c9eed6694ad4b64123a775ee3062373cbada34c3d3ebbab24f", {0x3ff, 0x3f, 0x33524742, 0x5, 0x8, 0x4, 0x7, 0x10000}})
splice(r0, 0x0, r2, 0x0, 0x1870b0a0, 0x0)

18:12:54 executing program 2:
r0 = socket$inet(0x2, 0x2000080001, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={0x0, 0x3ff}, 0x8)
syz_genetlink_get_family_id$smc(&(0x7f0000000000)='SMC_PNETID\x00')
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$setpipe(r1, 0x407, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
recvmsg$kcm(r1, &(0x7f0000000180)={&(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000200)=""/138, 0x8a}, {&(0x7f00000002c0)=""/82, 0x52}], 0x2}, 0x20020)
ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r2, 0x8983, &(0x7f0000000340)={0x1, 'ip6erspan0\x00', {}, 0x3})
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1a000}], 0x1}, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvram\x00', 0x100, 0x0)
r4 = getpid()
sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, <r6=>0x0}, &(0x7f0000000280)=0x5)
setuid(r6)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32, @ANYBLOB="00000016010000001800120008000100736974000c00020008000300", @ANYRES32=r7], 0x38}}, 0x0)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1000}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040}, 0x88c0)
ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f00000003c0)={0x400, 0xff, {r4}, {r6}, 0x401, 0x400})

[  197.362540] EXT4-fs (sda1): re-mounted. Opts: (null)
18:12:54 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, &(0x7f0000000100), 0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0)
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0xfffffd93}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="e2884d6839354fc6e5a32605d0e1518625a82efce0b8a6b88b7901b65002a6f3b0b014d8a75967140ed927a342d32c9b0d8124cdb8c639321c7ac31591a4b53a590c437d2c392a0a440def62c2d129c6664dbf28fa0e59f45bc97331c7776028ce0db7f325cab6c1d54ad1f4cb2dbcad9d74bfd333639fb6d828e5465271dd22890f81285428deb2"], 0x1}, 0x1, 0x0, 0x0, 0x4000040}, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}})
ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @ipv4={[], [], @loopback}, @ipv4={[], [], @loopback}, 0x2, 0x0, 0x0, 0x400})
sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="bc00000048cf7952708a08e4359a93409f1ad1f6efdab9c87e74c23967dbd6e87d8e50c25e29e461e448b66538a77c738cfddec770f9d89a8007084471f8c2c30dcac9a5565116dd43323a9718fb9ef776302c9259cf44f72154", @ANYRES16=0x0, @ANYBLOB="000128bd7000fbdbdf25110000003c00810005000200040000000500020001000000050001002000000005000100ff0000000500020001000000050002004000000005000200200000003a00be0048042fd59d8bc7497878dbdb2997b5d885cec76f0fda216349d4e3bbdf3fe1b64ee132666cd3a2da695f3aace42c38657b33450446c4000008000300", @ANYRES32=0x0, @ANYBLOB="0600360003000000050013010200000005001301000000000600ab000900000006001201e1ff0000"], 0xbc}, 0x1, 0x0, 0x0, 0x14}, 0x24000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)

18:12:55 executing program 3:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x200004)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)

18:12:55 executing program 5:
syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000500)='attr/sockcreate\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0)
ioctl$int_in(r0, 0x0, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x8}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r1=>0x0})
eventfd(0x9)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

18:12:55 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000340)='user\x00', &(0x7f00000005c0)={'syz', 0x2}, &(0x7f0000000300)="ed", 0x1, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x3d})
keyctl$read(0xb, r0, &(0x7f0000000100)=""/5, 0x5)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r3, &(0x7f0000002bc0)=[{{&(0x7f00000001c0)=@ax25={{0x3, @null}, [@default, @netrom, @rose, @remote, @default, @rose, @netrom, @rose]}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000300)=""/81, 0x51}, {&(0x7f0000000440)=""/129, 0x81}], 0x2, &(0x7f0000000380)=""/21, 0x15}, 0x1}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/24, 0x18}], 0x1, &(0x7f0000000580)=""/100, 0x64}, 0x1de4}, {{&(0x7f00000006c0)=@nl=@proc, 0x80, &(0x7f0000002b40)=[{&(0x7f0000000740)=""/116, 0x74}, {&(0x7f0000000800)=""/187, 0xbb}, {&(0x7f00000019c0)=""/250, 0xfa}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/210, 0xd2}, {0x0}, {0x0}], 0x7}, 0x5}], 0x3, 0x0, 0x0)
pipe(&(0x7f0000000400)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x68, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000540)='./file0\x00', 0x0, 0x881000, 0x0)
open(&(0x7f0000000500)='./file0\x00', 0x0, 0x140)

18:12:55 executing program 4:
sched_setattr(0x0, 0x0, 0x0)
r0 = getpgid(0x0)
perf_event_open(&(0x7f0000000700)={0xb2c9a13b75945182, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0xc98, 0xfffffffffffffffc, 0x9067, 0x9, 0x0, 0xfffffffe}, r0, 0xc, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000680)='maps\x00')
preadv(r2, 0x0, 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305615, &(0x7f0000000080)={0x0, {0x8, 0x3f}})
bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10)
sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400006a0f8c010400002000000000740fe7", @ANYRES32=r8, @ANYBLOB="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"], 0x34}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2841bac266f70000001000010400000000000000", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8, @ANYBLOB="3eac669de583a1bfa615f4f651af5f35b02bbf"], 0x28}}, 0x0)

18:12:55 executing program 1:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700)
splice(r0, 0x0, r3, 0x0, 0x100000800ffe0, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffc8f)
r4 = getpid()
sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
perf_event_open(&(0x7f0000000100)={0x4, 0x70, 0x9, 0x7f, 0x40, 0x1, 0x0, 0xfff, 0x29000, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000080), 0x4}, 0x800, 0x7fffffff, 0x4391, 0x6, 0x8, 0x7, 0x3}, r4, 0x0, r2, 0x0)
r5 = syz_open_procfs(r4, &(0x7f0000000180)='net/mcfilter6\x00')
ioctl$VIDIOC_G_FBUF(r5, 0x8030560a, &(0x7f0000000240)={0x1, 0x31, &(0x7f00000001c0)="39ed597a8d2fc900f6758da02c6d35f1575028917019f13dc9ceab13dcbf08df3404c2c44c029b91f9b72998d3514bc9262642c9eed6694ad4b64123a775ee3062373cbada34c3d3ebbab24f", {0x3ff, 0x3f, 0x33524742, 0x5, 0x8, 0x4, 0x7, 0x10000}})
splice(r0, 0x0, r2, 0x0, 0x1870b0a0, 0x0)

18:12:55 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r0, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x1f}, 0x0, 0x0, 0x1, 0x1}, {{@in=@local, 0x4d2, 0x3c}, 0x0, @in6=@ipv4={[], [], @multicast1}, 0x0, 0x0, 0x1, 0x6}}, 0xe8)
sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0xf0)

18:12:55 executing program 3:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
sendfile(r1, r4, 0x0, 0x80001d00c0d0)

[  198.148417] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35855 sclass=netlink_route_socket pig=8913 comm=syz-executor.4
[  198.176163] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63334 sclass=netlink_route_socket pig=8913 comm=syz-executor.4
18:12:55 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r0, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x1f}, 0x0, 0x0, 0x1, 0x1}, {{@in=@local, 0x4d2, 0x3c}, 0x0, @in6=@ipv4={[], [], @multicast1}, 0x0, 0x0, 0x1, 0x6}}, 0xe8)
sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0xf0)

18:12:55 executing program 0:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x200004)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)

18:12:55 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x10000000009, 0x100000208d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0xff}, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x3, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$phonet_pipe(0x23, 0x5, 0x2)
ioctl$SIOCPNGETOBJECT(r3, 0x89e0, &(0x7f00000002c0))
getsockopt$IP_VS_SO_GET_SERVICE(r3, 0x0, 0x483, &(0x7f00000000c0), &(0x7f0000000140)=0x68)
getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, &(0x7f0000000240))
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000340)='[\'eth1-#\x00', 0xffffffffffffffff)
ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0), 0x80000, 0x0)

18:12:56 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000340)='user\x00', &(0x7f00000005c0)={'syz', 0x2}, &(0x7f0000000300)="ed", 0x1, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x3d})
keyctl$read(0xb, r0, &(0x7f0000000100)=""/5, 0x5)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r3, &(0x7f0000002bc0)=[{{&(0x7f00000001c0)=@ax25={{0x3, @null}, [@default, @netrom, @rose, @remote, @default, @rose, @netrom, @rose]}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000300)=""/81, 0x51}, {&(0x7f0000000440)=""/129, 0x81}], 0x2, &(0x7f0000000380)=""/21, 0x15}, 0x1}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/24, 0x18}], 0x1, &(0x7f0000000580)=""/100, 0x64}, 0x1de4}, {{&(0x7f00000006c0)=@nl=@proc, 0x80, &(0x7f0000002b40)=[{&(0x7f0000000740)=""/116, 0x74}, {&(0x7f0000000800)=""/187, 0xbb}, {&(0x7f00000019c0)=""/250, 0xfa}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/210, 0xd2}, {0x0}, {0x0}], 0x7}, 0x5}], 0x3, 0x0, 0x0)
pipe(&(0x7f0000000400)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x68, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000540)='./file0\x00', 0x0, 0x881000, 0x0)
open(&(0x7f0000000500)='./file0\x00', 0x0, 0x140)

18:12:56 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x10000000009, 0x100000208d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0xff}, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x3, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$phonet_pipe(0x23, 0x5, 0x2)
ioctl$SIOCPNGETOBJECT(r3, 0x89e0, &(0x7f00000002c0))
getsockopt$IP_VS_SO_GET_SERVICE(r3, 0x0, 0x483, &(0x7f00000000c0), &(0x7f0000000140)=0x68)
getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, &(0x7f0000000240))
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000340)='[\'eth1-#\x00', 0xffffffffffffffff)
ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0), 0x80000, 0x0)

18:12:56 executing program 3:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
sendfile(r1, r4, 0x0, 0x80001d00c0d0)

[  198.914812] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35855 sclass=netlink_route_socket pig=8962 comm=syz-executor.4
[  198.963001] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63334 sclass=netlink_route_socket pig=8913 comm=syz-executor.4
18:12:56 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x10000000009, 0x100000208d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0xff}, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x3, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$phonet_pipe(0x23, 0x5, 0x2)
ioctl$SIOCPNGETOBJECT(r3, 0x89e0, &(0x7f00000002c0))
getsockopt$IP_VS_SO_GET_SERVICE(r3, 0x0, 0x483, &(0x7f00000000c0), &(0x7f0000000140)=0x68)
getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, &(0x7f0000000240))
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000340)='[\'eth1-#\x00', 0xffffffffffffffff)
ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0), 0x80000, 0x0)

18:12:56 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x10000000009, 0x100000208d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0xff}, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x3, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$phonet_pipe(0x23, 0x5, 0x2)
ioctl$SIOCPNGETOBJECT(r3, 0x89e0, &(0x7f00000002c0))
getsockopt$IP_VS_SO_GET_SERVICE(r3, 0x0, 0x483, &(0x7f00000000c0), &(0x7f0000000140)=0x68)
getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, &(0x7f0000000240))
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000340)='[\'eth1-#\x00', 0xffffffffffffffff)
ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0), 0x80000, 0x0)

18:12:56 executing program 1:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700)
splice(r0, 0x0, r3, 0x0, 0x100000800ffe0, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffc8f)
r4 = getpid()
sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
perf_event_open(&(0x7f0000000100)={0x4, 0x70, 0x9, 0x7f, 0x40, 0x1, 0x0, 0xfff, 0x29000, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000080), 0x4}, 0x800, 0x7fffffff, 0x4391, 0x6, 0x8, 0x7, 0x3}, r4, 0x0, r2, 0x0)
syz_open_procfs(r4, &(0x7f0000000180)='net/mcfilter6\x00')
splice(r0, 0x0, r2, 0x0, 0x1870b0a0, 0x0)

18:12:56 executing program 0:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x200004)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)

18:12:56 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000340)='user\x00', &(0x7f00000005c0)={'syz', 0x2}, &(0x7f0000000300)="ed", 0x1, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x3d})
keyctl$read(0xb, r0, &(0x7f0000000100)=""/5, 0x5)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r3, &(0x7f0000002bc0)=[{{&(0x7f00000001c0)=@ax25={{0x3, @null}, [@default, @netrom, @rose, @remote, @default, @rose, @netrom, @rose]}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000300)=""/81, 0x51}, {&(0x7f0000000440)=""/129, 0x81}], 0x2, &(0x7f0000000380)=""/21, 0x15}, 0x1}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/24, 0x18}], 0x1, &(0x7f0000000580)=""/100, 0x64}, 0x1de4}, {{&(0x7f00000006c0)=@nl=@proc, 0x80, &(0x7f0000002b40)=[{&(0x7f0000000740)=""/116, 0x74}, {&(0x7f0000000800)=""/187, 0xbb}, {&(0x7f00000019c0)=""/250, 0xfa}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/210, 0xd2}, {0x0}, {0x0}], 0x7}, 0x5}], 0x3, 0x0, 0x0)
pipe(&(0x7f0000000400)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x68, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000540)='./file0\x00', 0x0, 0x881000, 0x0)
open(&(0x7f0000000500)='./file0\x00', 0x0, 0x140)

18:12:56 executing program 4:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x8, 0x4)
syz_emit_ethernet(0x6e, &(0x7f0000000080)=ANY=[@ANYBLOB="0380c2000000d96ffc088f3c02ffffffffff0086dd60bf6e0000383a00fe8000000000000000000000000000bbff0200000000000000000000000000010300907800000000606773d100003a00aebb8ab6a213038e0000000000000001ff02000000000000000000000a000001397819fbbbf2cd5d"], 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
ptrace$peekuser(0x3, r1, 0x8)

18:12:57 executing program 3:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
sendfile(r1, r4, 0x0, 0x80001d00c0d0)

18:12:57 executing program 5:
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000075470e0000000400000098030000c8010000c8010000f8000000c8010000c8010000c8020000c8020000c8020000c8020000c80200000400000000000000000000004cc7872711511674c05009ff3488171900000000000000000000ffff000000000000000000000000000000000000000000000000000000000000000000000000736974300000000000000000000000006272696467655f736c6176655f3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f8000000000000000000000000000000000000000000000000002800686c00000000000000000000000000000000000000000000001800000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000018000000000fe880000000000000000000000000001fe880000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000068737230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d00000000000000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000060000000000fe8000000000000000000000000000bbfe88000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000006272696467655f736c6176655f310000626174616476300000000000000000000000000000000000000000000000000000000000000000000000000000000000110000050000000000000000d800000100000000000000000000000000000000000000000000000030007564700000000000000000000000000000000000000000000000000000000000000092bcbe630300000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1)
r1 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)

18:12:57 executing program 4:
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
fcntl$setpipe(r0, 0x407, 0x0)
write(r0, &(0x7f0000000340), 0x41395527)
setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000000)=0x78, 0x4)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x1}, [@RTA_PREF={0x5, 0x14, 0x3}]}, 0x24}}, 0x0)

[  199.799662] ip6_tables: ip6tables: counters copy to user failed while replacing table
18:12:57 executing program 5:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
socketpair(0xb, 0x6, 0x40, &(0x7f00000000c0)={<r1=>0xffffffffffffffff})
getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000140)={'HL\x00'}, &(0x7f0000000180)=0x1e)
r2 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
setsockopt$RDS_RECVERR(r3, 0x114, 0x5, &(0x7f0000000080)=0x1, 0x4)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
ioctl$GIO_UNIMAP(r5, 0x4b66, &(0x7f0000000240)={0x2, &(0x7f0000000200)=[{}, {}]})
r6 = socket$inet6(0xa, 0x1, 0x5)
fsetxattr$security_ima(r6, &(0x7f0000000280)='security.ima\x00', &(0x7f00000002c0)=@md5={0x1, "641dd3a0941692f3e37e194c4a7c807c"}, 0x11, 0x5)
r7 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c)
setsockopt$packet_int(r7, 0x107, 0x8, &(0x7f0000000100), 0x4)
dup3(r4, r7, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4)

[  199.878003] ip6_tables: ip6tables: counters copy to user failed while replacing table
18:12:57 executing program 1:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700)
splice(r0, 0x0, r3, 0x0, 0x100000800ffe0, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffc8f)
r4 = getpid()
sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
perf_event_open(&(0x7f0000000100)={0x4, 0x70, 0x9, 0x7f, 0x40, 0x1, 0x0, 0xfff, 0x29000, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000080), 0x4}, 0x800, 0x7fffffff, 0x4391, 0x6, 0x8, 0x7, 0x3}, r4, 0x0, r2, 0x0)
splice(r0, 0x0, r2, 0x0, 0x1870b0a0, 0x0)

18:12:57 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000340)='user\x00', &(0x7f00000005c0)={'syz', 0x2}, &(0x7f0000000300)="ed", 0x1, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x3d})
keyctl$read(0xb, r0, &(0x7f0000000100)=""/5, 0x5)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r3, &(0x7f0000002bc0)=[{{&(0x7f00000001c0)=@ax25={{0x3, @null}, [@default, @netrom, @rose, @remote, @default, @rose, @netrom, @rose]}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000300)=""/81, 0x51}, {&(0x7f0000000440)=""/129, 0x81}], 0x2, &(0x7f0000000380)=""/21, 0x15}, 0x1}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/24, 0x18}], 0x1, &(0x7f0000000580)=""/100, 0x64}, 0x1de4}, {{&(0x7f00000006c0)=@nl=@proc, 0x80, &(0x7f0000002b40)=[{&(0x7f0000000740)=""/116, 0x74}, {&(0x7f0000000800)=""/187, 0xbb}, {&(0x7f00000019c0)=""/250, 0xfa}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/210, 0xd2}, {0x0}, {0x0}], 0x7}, 0x5}], 0x3, 0x0, 0x0)
pipe(&(0x7f0000000400)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x68, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000540)='./file0\x00', 0x0, 0x881000, 0x0)
open(&(0x7f0000000500)='./file0\x00', 0x0, 0x140)

18:12:57 executing program 0:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x200004)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)

18:12:57 executing program 3:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
sendfile(r1, r4, 0x0, 0x80001d00c0d0)

18:12:58 executing program 4:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700)
splice(r0, 0x0, r3, 0x0, 0x100000800ffe0, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffc8f)
r4 = getpid()
sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
perf_event_open(&(0x7f0000000100)={0x4, 0x70, 0x9, 0x7f, 0x40, 0x1, 0x0, 0xfff, 0x29000, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000080), 0x4}, 0x800, 0x7fffffff, 0x4391, 0x6, 0x8, 0x7, 0x3}, r4, 0x0, r2, 0x0)
syz_open_procfs(r4, &(0x7f0000000180)='net/mcfilter6\x00')
splice(r0, 0x0, r2, 0x0, 0x1870b0a0, 0x0)

18:12:58 executing program 3:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
sendfile(r1, r4, 0x0, 0x80001d00c0d0)

18:12:58 executing program 5:
socket$inet_icmp_raw(0x2, 0x3, 0x1)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
close(r1)
socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001d00070f000000430000db0007000001", @ANYRES32=r2, @ANYBLOB="dd3d1f240a0002"], 0x3}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0)
getsockopt$X25_QBITINCL(r1, 0x106, 0x1, &(0x7f0000000040), &(0x7f0000000100)=0x4)

[  200.919482] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=9069 comm=syz-executor.5
[  201.015963] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=9069 comm=syz-executor.5
[  201.044133] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=9069 comm=syz-executor.5
18:12:58 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000340)='user\x00', &(0x7f00000005c0)={'syz', 0x2}, &(0x7f0000000300)="ed", 0x1, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x3d})
keyctl$read(0xb, r0, &(0x7f0000000100)=""/5, 0x5)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r3, &(0x7f0000002bc0)=[{{&(0x7f00000001c0)=@ax25={{0x3, @null}, [@default, @netrom, @rose, @remote, @default, @rose, @netrom, @rose]}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000300)=""/81, 0x51}, {&(0x7f0000000440)=""/129, 0x81}], 0x2, &(0x7f0000000380)=""/21, 0x15}, 0x1}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/24, 0x18}], 0x1, &(0x7f0000000580)=""/100, 0x64}, 0x1de4}, {{&(0x7f00000006c0)=@nl=@proc, 0x80, &(0x7f0000002b40)=[{&(0x7f0000000740)=""/116, 0x74}, {&(0x7f0000000800)=""/187, 0xbb}, {&(0x7f00000019c0)=""/250, 0xfa}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/210, 0xd2}, {0x0}, {0x0}], 0x7}, 0x5}], 0x3, 0x0, 0x0)
pipe(&(0x7f0000000400)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x68, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000540)='./file0\x00', 0x0, 0x881000, 0x0)
open(&(0x7f0000000500)='./file0\x00', 0x0, 0x140)

18:12:58 executing program 1:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700)
splice(r0, 0x0, r3, 0x0, 0x100000800ffe0, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffc8f)
r4 = getpid()
sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
splice(r0, 0x0, r2, 0x0, 0x1870b0a0, 0x0)

[  201.120362] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=9069 comm=syz-executor.5
18:12:58 executing program 0:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)

[  201.165224] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=9069 comm=syz-executor.5
[  201.227096] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=9069 comm=syz-executor.5
18:12:58 executing program 0:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)

18:12:59 executing program 3:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
sendfile(r1, r4, 0x0, 0x80001d00c0d0)

18:12:59 executing program 5:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)

18:12:59 executing program 5:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700)
splice(r0, 0x0, r3, 0x0, 0x100000800ffe0, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffc8f)
r4 = getpid()
sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
perf_event_open(&(0x7f0000000100)={0x4, 0x70, 0x9, 0x7f, 0x40, 0x1, 0x0, 0xfff, 0x29000, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000080), 0x4}, 0x800, 0x7fffffff, 0x4391, 0x6, 0x8, 0x7, 0x3}, r4, 0x0, r2, 0x0)
splice(r0, 0x0, r2, 0x0, 0x1870b0a0, 0x0)

18:12:59 executing program 0:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)

18:12:59 executing program 4:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700)
splice(r0, 0x0, r3, 0x0, 0x100000800ffe0, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffc8f)
r4 = getpid()
sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
perf_event_open(&(0x7f0000000100)={0x4, 0x70, 0x9, 0x7f, 0x40, 0x1, 0x0, 0xfff, 0x29000, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000080), 0x4}, 0x800, 0x7fffffff, 0x4391, 0x6, 0x8, 0x7, 0x3}, r4, 0x0, r2, 0x0)
syz_open_procfs(r4, &(0x7f0000000180)='net/mcfilter6\x00')
splice(r0, 0x0, r2, 0x0, 0x1870b0a0, 0x0)

18:12:59 executing program 0:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
ftruncate(0xffffffffffffffff, 0x200004)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x80001d00c0d0)

18:12:59 executing program 0:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
ftruncate(0xffffffffffffffff, 0x200004)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x80001d00c0d0)

18:12:59 executing program 1:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700)
splice(r0, 0x0, r3, 0x0, 0x100000800ffe0, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffc8f)
r4 = getpid()
sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
splice(r0, 0x0, r2, 0x0, 0x1870b0a0, 0x0)

18:12:59 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000340)='user\x00', &(0x7f00000005c0)={'syz', 0x2}, &(0x7f0000000300)="ed", 0x1, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x3d})
keyctl$read(0xb, r0, &(0x7f0000000100)=""/5, 0x5)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r3, &(0x7f0000002bc0)=[{{&(0x7f00000001c0)=@ax25={{0x3, @null}, [@default, @netrom, @rose, @remote, @default, @rose, @netrom, @rose]}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000300)=""/81, 0x51}, {&(0x7f0000000440)=""/129, 0x81}], 0x2, &(0x7f0000000380)=""/21, 0x15}, 0x1}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/24, 0x18}], 0x1, &(0x7f0000000580)=""/100, 0x64}, 0x1de4}, {{&(0x7f00000006c0)=@nl=@proc, 0x80, &(0x7f0000002b40)=[{&(0x7f0000000740)=""/116, 0x74}, {&(0x7f0000000800)=""/187, 0xbb}, {&(0x7f00000019c0)=""/250, 0xfa}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/210, 0xd2}, {0x0}, {0x0}], 0x7}, 0x5}], 0x3, 0x0, 0x0)
pipe(&(0x7f0000000400)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x68, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000540)='./file0\x00', 0x0, 0x881000, 0x0)

18:12:59 executing program 3:
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
sendfile(r1, r4, 0x0, 0x80001d00c0d0)

18:12:59 executing program 0:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
ftruncate(0xffffffffffffffff, 0x200004)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x80001d00c0d0)

18:12:59 executing program 0:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x200004)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)

18:13:00 executing program 5:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700)
splice(r0, 0x0, r3, 0x0, 0x100000800ffe0, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffc8f)
r4 = getpid()
sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
splice(r0, 0x0, r2, 0x0, 0x1870b0a0, 0x0)

18:13:00 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PPPIOCGIDLE(0xffffffffffffffff, 0x8010743f, &(0x7f00000000c0))
sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7ff}, 0x0)
open(&(0x7f0000000240)='./bus\x00', 0x111040, 0x63dbc8fbd4cbfd3f)
r4 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
ftruncate(r4, 0x800)
lseek(r4, 0x0, 0x2)
r5 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0)
sendfile(r4, r5, 0x0, 0x8400fffffffa)
socket$packet(0x11, 0x3, 0x300)
creat(&(0x7f0000000100)='./bus\x00', 0x0)

18:13:00 executing program 3:
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
sendfile(r1, r4, 0x0, 0x80001d00c0d0)

18:13:00 executing program 0:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x200004)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)

18:13:00 executing program 1:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700)
splice(r0, 0x0, r3, 0x0, 0x100000800ffe0, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffc8f)
r4 = getpid()
sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
splice(r0, 0x0, r2, 0x0, 0x1870b0a0, 0x0)

[  202.966383] audit: type=1804 audit(1587147180.494:17): pid=9155 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir085944594/syzkaller.hVdvPx/33/bus" dev="sda1" ino=15826 res=1
18:13:00 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000340)='user\x00', &(0x7f00000005c0)={'syz', 0x2}, &(0x7f0000000300)="ed", 0x1, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x3d})
keyctl$read(0xb, r0, &(0x7f0000000100)=""/5, 0x5)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r3, &(0x7f0000002bc0)=[{{&(0x7f00000001c0)=@ax25={{0x3, @null}, [@default, @netrom, @rose, @remote, @default, @rose, @netrom, @rose]}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000300)=""/81, 0x51}, {&(0x7f0000000440)=""/129, 0x81}], 0x2, &(0x7f0000000380)=""/21, 0x15}, 0x1}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/24, 0x18}], 0x1, &(0x7f0000000580)=""/100, 0x64}, 0x1de4}, {{&(0x7f00000006c0)=@nl=@proc, 0x80, &(0x7f0000002b40)=[{&(0x7f0000000740)=""/116, 0x74}, {&(0x7f0000000800)=""/187, 0xbb}, {&(0x7f00000019c0)=""/250, 0xfa}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/210, 0xd2}, {0x0}, {0x0}], 0x7}, 0x5}], 0x3, 0x0, 0x0)
pipe(&(0x7f0000000400)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x68, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000540)='./file0\x00', 0x0, 0x881000, 0x0)

[  203.121546] audit: type=1804 audit(1587147180.524:18): pid=9155 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir085944594/syzkaller.hVdvPx/33/bus" dev="sda1" ino=15826 res=1
[  203.267894] audit: type=1804 audit(1587147180.574:19): pid=9157 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir085944594/syzkaller.hVdvPx/33/bus" dev="sda1" ino=15826 res=1
18:13:01 executing program 0:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x200004)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)

[  203.702227] audit: type=1804 audit(1587147181.224:20): pid=9177 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir085944594/syzkaller.hVdvPx/33/bus" dev="sda1" ino=15826 res=1
18:13:01 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PPPIOCGIDLE(0xffffffffffffffff, 0x8010743f, &(0x7f00000000c0))
sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7ff}, 0x0)
open(&(0x7f0000000240)='./bus\x00', 0x111040, 0x63dbc8fbd4cbfd3f)
r4 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
ftruncate(r4, 0x800)
lseek(r4, 0x0, 0x2)
r5 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0)
sendfile(r4, r5, 0x0, 0x8400fffffffa)
socket$packet(0x11, 0x3, 0x300)
creat(&(0x7f0000000100)='./bus\x00', 0x0)

18:13:01 executing program 5:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700)
splice(r0, 0x0, r3, 0x0, 0x100000800ffe0, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffc8f)
r4 = getpid()
sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
splice(r0, 0x0, r2, 0x0, 0x1870b0a0, 0x0)

18:13:01 executing program 3:
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
sendfile(r1, r4, 0x0, 0x80001d00c0d0)

[  203.978369] audit: type=1804 audit(1587147181.504:21): pid=9193 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir085944594/syzkaller.hVdvPx/34/bus" dev="sda1" ino=15829 res=1
18:13:01 executing program 1:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700)
splice(r0, 0x0, r3, 0x0, 0x100000800ffe0, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffc8f)
getpid()
splice(r0, 0x0, r2, 0x0, 0x1870b0a0, 0x0)

18:13:01 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000340)='user\x00', &(0x7f00000005c0)={'syz', 0x2}, &(0x7f0000000300)="ed", 0x1, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x3d})
keyctl$read(0xb, r0, &(0x7f0000000100)=""/5, 0x5)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r3, &(0x7f0000002bc0)=[{{&(0x7f00000001c0)=@ax25={{0x3, @null}, [@default, @netrom, @rose, @remote, @default, @rose, @netrom, @rose]}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000300)=""/81, 0x51}, {&(0x7f0000000440)=""/129, 0x81}], 0x2, &(0x7f0000000380)=""/21, 0x15}, 0x1}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/24, 0x18}], 0x1, &(0x7f0000000580)=""/100, 0x64}, 0x1de4}, {{&(0x7f00000006c0)=@nl=@proc, 0x80, &(0x7f0000002b40)=[{&(0x7f0000000740)=""/116, 0x74}, {&(0x7f0000000800)=""/187, 0xbb}, {&(0x7f00000019c0)=""/250, 0xfa}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/210, 0xd2}, {0x0}, {0x0}], 0x7}, 0x5}], 0x3, 0x0, 0x0)
pipe(&(0x7f0000000400)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x68, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000540)='./file0\x00', 0x0, 0x881000, 0x0)

[  204.187347] audit: type=1804 audit(1587147181.534:22): pid=9193 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir085944594/syzkaller.hVdvPx/34/bus" dev="sda1" ino=15829 res=1
[  204.267616] audit: type=1804 audit(1587147181.584:23): pid=9195 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir085944594/syzkaller.hVdvPx/34/bus" dev="sda1" ino=15829 res=1
18:13:01 executing program 0:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r2, 0x200004)
sendfile(r0, r2, 0x0, 0x80001d00c0d0)

18:13:02 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PPPIOCGIDLE(0xffffffffffffffff, 0x8010743f, &(0x7f00000000c0))
sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7ff}, 0x0)
open(&(0x7f0000000240)='./bus\x00', 0x111040, 0x63dbc8fbd4cbfd3f)
r4 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
ftruncate(r4, 0x800)
lseek(r4, 0x0, 0x2)
r5 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0)
sendfile(r4, r5, 0x0, 0x8400fffffffa)
socket$packet(0x11, 0x3, 0x300)
creat(&(0x7f0000000100)='./bus\x00', 0x0)

18:13:02 executing program 0:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r2, 0x200004)
sendfile(r0, r2, 0x0, 0x80001d00c0d0)

18:13:02 executing program 3:
openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
sendfile(r1, r4, 0x0, 0x80001d00c0d0)

18:13:02 executing program 5:
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
sendfile(r1, r4, 0x0, 0x80001d00c0d0)

18:13:02 executing program 0:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r2, 0x200004)
sendfile(r0, r2, 0x0, 0x80001d00c0d0)

[  204.929214] audit: type=1804 audit(1587147182.454:24): pid=9230 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir085944594/syzkaller.hVdvPx/35/bus" dev="sda1" ino=15800 res=1
[  205.085377] audit: type=1804 audit(1587147182.484:25): pid=9230 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir085944594/syzkaller.hVdvPx/35/bus" dev="sda1" ino=15800 res=1
18:13:02 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000340)='user\x00', &(0x7f00000005c0)={'syz', 0x2}, &(0x7f0000000300)="ed", 0x1, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x3d})
keyctl$read(0xb, r0, &(0x7f0000000100)=""/5, 0x5)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r3, &(0x7f0000002bc0)=[{{&(0x7f00000001c0)=@ax25={{0x3, @null}, [@default, @netrom, @rose, @remote, @default, @rose, @netrom, @rose]}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000300)=""/81, 0x51}, {&(0x7f0000000440)=""/129, 0x81}], 0x2, &(0x7f0000000380)=""/21, 0x15}, 0x1}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/24, 0x18}], 0x1, &(0x7f0000000580)=""/100, 0x64}, 0x1de4}, {{&(0x7f00000006c0)=@nl=@proc, 0x80, &(0x7f0000002b40)=[{&(0x7f0000000740)=""/116, 0x74}, {&(0x7f0000000800)=""/187, 0xbb}, {&(0x7f00000019c0)=""/250, 0xfa}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/210, 0xd2}, {0x0}, {0x0}], 0x7}, 0x5}], 0x3, 0x0, 0x0)
pipe(&(0x7f0000000400)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x68, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
open(&(0x7f0000000500)='./file0\x00', 0x0, 0x140)

[  205.116353] audit: type=1804 audit(1587147182.524:26): pid=9232 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir085944594/syzkaller.hVdvPx/35/bus" dev="sda1" ino=15800 res=1
18:13:02 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000340)='user\x00', &(0x7f00000005c0)={'syz', 0x2}, &(0x7f0000000300)="ed", 0x1, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x3d})
keyctl$read(0xb, r0, &(0x7f0000000100)=""/5, 0x5)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r3, &(0x7f0000002bc0)=[{{&(0x7f00000001c0)=@ax25={{0x3, @null}, [@default, @netrom, @rose, @remote, @default, @rose, @netrom, @rose]}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000300)=""/81, 0x51}, {&(0x7f0000000440)=""/129, 0x81}], 0x2, &(0x7f0000000380)=""/21, 0x15}, 0x1}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/24, 0x18}], 0x1, &(0x7f0000000580)=""/100, 0x64}, 0x1de4}, {{&(0x7f00000006c0)=@nl=@proc, 0x80, &(0x7f0000002b40)=[{&(0x7f0000000740)=""/116, 0x74}, {&(0x7f0000000800)=""/187, 0xbb}, {&(0x7f00000019c0)=""/250, 0xfa}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/210, 0xd2}, {0x0}, {0x0}], 0x7}, 0x5}], 0x3, 0x0, 0x0)
pipe(&(0x7f0000000400)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x68, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000540)='./file0\x00', 0x0, 0x881000, 0x0)

18:13:02 executing program 1:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700)
splice(r0, 0x0, r3, 0x0, 0x100000800ffe0, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffc8f)
getpid()
splice(r0, 0x0, r2, 0x0, 0x1870b0a0, 0x0)

18:13:02 executing program 0:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r2, 0x200004)
sendfile(r0, r2, 0x0, 0x80001d00c0d0)

18:13:03 executing program 4:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700)
splice(r0, 0x0, r3, 0x0, 0x100000800ffe0, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffc8f)
r4 = getpid()
sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
splice(r0, 0x0, r2, 0x0, 0x1870b0a0, 0x0)

18:13:03 executing program 3:
openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
sendfile(r1, r4, 0x0, 0x80001d00c0d0)

18:13:03 executing program 0:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r2, 0x200004)
sendfile(r0, r2, 0x0, 0x80001d00c0d0)

18:13:03 executing program 5:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x200004)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)

18:13:03 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000340)='user\x00', &(0x7f00000005c0)={'syz', 0x2}, &(0x7f0000000300)="ed", 0x1, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x3d})
keyctl$read(0xb, r0, &(0x7f0000000100)=""/5, 0x5)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r3, &(0x7f0000002bc0)=[{{&(0x7f00000001c0)=@ax25={{0x3, @null}, [@default, @netrom, @rose, @remote, @default, @rose, @netrom, @rose]}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000300)=""/81, 0x51}, {&(0x7f0000000440)=""/129, 0x81}], 0x2, &(0x7f0000000380)=""/21, 0x15}, 0x1}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/24, 0x18}], 0x1, &(0x7f0000000580)=""/100, 0x64}, 0x1de4}, {{&(0x7f00000006c0)=@nl=@proc, 0x80, &(0x7f0000002b40)=[{&(0x7f0000000740)=""/116, 0x74}, {&(0x7f0000000800)=""/187, 0xbb}, {&(0x7f00000019c0)=""/250, 0xfa}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/210, 0xd2}, {0x0}, {0x0}], 0x7}, 0x5}], 0x3, 0x0, 0x0)
pipe(&(0x7f0000000400)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x68, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
open(&(0x7f0000000500)='./file0\x00', 0x0, 0x140)

18:13:03 executing program 1:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700)
splice(r0, 0x0, r3, 0x0, 0x100000800ffe0, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffc8f)
getpid()
splice(r0, 0x0, r2, 0x0, 0x1870b0a0, 0x0)

18:13:03 executing program 3:
openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
sendfile(r1, r4, 0x0, 0x80001d00c0d0)

18:13:04 executing program 4:
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
sendfile(r1, r4, 0x0, 0x80001d00c0d0)

18:13:04 executing program 0:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r2, 0x200004)
sendfile(r0, r2, 0x0, 0x80001d00c0d0)

18:13:04 executing program 5:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x404480, 0x0)
ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000340)=""/246)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup2(r1, r1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x16}]})

18:13:04 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000340)='user\x00', &(0x7f00000005c0)={'syz', 0x2}, &(0x7f0000000300)="ed", 0x1, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x3d})
keyctl$read(0xb, r0, &(0x7f0000000100)=""/5, 0x5)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r3, &(0x7f0000002bc0)=[{{&(0x7f00000001c0)=@ax25={{0x3, @null}, [@default, @netrom, @rose, @remote, @default, @rose, @netrom, @rose]}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000300)=""/81, 0x51}, {&(0x7f0000000440)=""/129, 0x81}], 0x2, &(0x7f0000000380)=""/21, 0x15}, 0x1}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/24, 0x18}], 0x1, &(0x7f0000000580)=""/100, 0x64}, 0x1de4}, {{&(0x7f00000006c0)=@nl=@proc, 0x80, &(0x7f0000002b40)=[{&(0x7f0000000740)=""/116, 0x74}, {&(0x7f0000000800)=""/187, 0xbb}, {&(0x7f00000019c0)=""/250, 0xfa}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/210, 0xd2}, {0x0}, {0x0}], 0x7}, 0x5}], 0x3, 0x0, 0x0)
pipe(&(0x7f0000000400)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x68, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
open(&(0x7f0000000500)='./file0\x00', 0x0, 0x140)

18:13:04 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x1}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000002b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000940)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r5, 0x4, 0x46000)
lseek(r5, 0x4200, 0x0)
r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r7=>0x0)
open(0x0, 0x143042, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0)
io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}])
r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, [], 0x0, 0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x8}, 0x8, 0x10, 0x0}, 0x78)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x9, 0x0, 0x0, 0x0, 0x0}, 0x40)
open_by_handle_at(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB="780000006305000050ac3d99c7fe46ea0c30dc5fb203ce57abf581589a1fa2875f465fd421f4e97b5e6af0736698b0cc71161b4f4b3f8dcf367c3c0c72bce933ebf6430c98c67d1f6027581a764f48d30700000010bf512d4cbf955f8de59053cc6f6125c3af68130f4e64e60a9ac5c0bcd7840accd81556671ee3f1e9d6b3bf4bd33a9cebf028b362ecfdce52f6f917027f4b3ad6cc36acb67376563e0f3a197faafa0d9b77e6a08d4183da945f9ad07268d89be5c13f26458d5b114094b6e2b7d0623c948be2b5782f6036de7d1ad4be39a049d32132a2decee075cbed2d3e31a62a1706e4d59ad477b2"], 0x12da00)
sendfile(r5, r8, 0x0, 0x8400fffffffb)
sendfile(r4, r4, &(0x7f0000000100), 0x8080fffffffe)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)

18:13:04 executing program 1:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700)
splice(r0, 0x0, r3, 0x0, 0x100000800ffe0, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffc8f)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
splice(r0, 0x0, r2, 0x0, 0x1870b0a0, 0x0)

18:13:04 executing program 3:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
sendfile(r1, r4, 0x0, 0x80001d00c0d0)

18:13:05 executing program 0:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r2, 0x200004)
sendfile(r0, r2, 0x0, 0x80001d00c0d0)

18:13:05 executing program 4:
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
sendfile(r1, r4, 0x0, 0x80001d00c0d0)

18:13:05 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000340)='user\x00', &(0x7f00000005c0)={'syz', 0x2}, &(0x7f0000000300)="ed", 0x1, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x3d})
keyctl$read(0xb, r0, &(0x7f0000000100)=""/5, 0x5)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r3, &(0x7f0000002bc0)=[{{&(0x7f00000001c0)=@ax25={{0x3, @null}, [@default, @netrom, @rose, @remote, @default, @rose, @netrom, @rose]}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000300)=""/81, 0x51}, {&(0x7f0000000440)=""/129, 0x81}], 0x2, &(0x7f0000000380)=""/21, 0x15}, 0x1}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/24, 0x18}], 0x1, &(0x7f0000000580)=""/100, 0x64}, 0x1de4}, {{&(0x7f00000006c0)=@nl=@proc, 0x80, &(0x7f0000002b40)=[{&(0x7f0000000740)=""/116, 0x74}, {&(0x7f0000000800)=""/187, 0xbb}, {&(0x7f00000019c0)=""/250, 0xfa}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/210, 0xd2}, {0x0}, {0x0}], 0x7}, 0x5}], 0x3, 0x0, 0x0)
pipe(&(0x7f0000000400)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x68, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000540)='./file0\x00', 0x0, 0x881000, 0x0)
open(&(0x7f0000000500)='./file0\x00', 0x0, 0x140)

18:13:05 executing program 1:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700)
splice(r0, 0x0, r3, 0x0, 0x100000800ffe0, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffc8f)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
splice(r0, 0x0, r2, 0x0, 0x1870b0a0, 0x0)

18:13:05 executing program 3:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
sendfile(r1, r4, 0x0, 0x80001d00c0d0)

18:13:05 executing program 0:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r2, 0x200004)
sendfile(r0, r2, 0x0, 0x80001d00c0d0)

18:13:05 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x1}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000002b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000940)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r5, 0x4, 0x46000)
lseek(r5, 0x4200, 0x0)
r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r7=>0x0)
open(0x0, 0x143042, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0)
io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}])
r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, [], 0x0, 0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x8}, 0x8, 0x10, 0x0}, 0x78)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x9, 0x0, 0x0, 0x0, 0x0}, 0x40)
open_by_handle_at(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB="780000006305000050ac3d99c7fe46ea0c30dc5fb203ce57abf581589a1fa2875f465fd421f4e97b5e6af0736698b0cc71161b4f4b3f8dcf367c3c0c72bce933ebf6430c98c67d1f6027581a764f48d30700000010bf512d4cbf955f8de59053cc6f6125c3af68130f4e64e60a9ac5c0bcd7840accd81556671ee3f1e9d6b3bf4bd33a9cebf028b362ecfdce52f6f917027f4b3ad6cc36acb67376563e0f3a197faafa0d9b77e6a08d4183da945f9ad07268d89be5c13f26458d5b114094b6e2b7d0623c948be2b5782f6036de7d1ad4be39a049d32132a2decee075cbed2d3e31a62a1706e4d59ad477b2"], 0x12da00)
sendfile(r5, r8, 0x0, 0x8400fffffffb)
sendfile(r4, r4, &(0x7f0000000100), 0x8080fffffffe)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)

18:13:05 executing program 0:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r2, 0x200004)
sendfile(r0, r2, 0x0, 0x80001d00c0d0)

18:13:05 executing program 0:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x200004)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)

[  208.489701] kauditd_printk_skb: 1 callbacks suppressed
[  208.489744] audit: type=1804 audit(1587147186.015:28): pid=9366 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir862370016/syzkaller.3yRTNr/41/bus" dev="sda1" ino=15799 res=1
18:13:06 executing program 0:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x200004)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)

18:13:06 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000340)='user\x00', &(0x7f00000005c0)={'syz', 0x2}, &(0x7f0000000300)="ed", 0x1, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x3d})
keyctl$read(0xb, r0, &(0x7f0000000100)=""/5, 0x5)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r3, &(0x7f0000002bc0)=[{{&(0x7f00000001c0)=@ax25={{0x3, @null}, [@default, @netrom, @rose, @remote, @default, @rose, @netrom, @rose]}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000300)=""/81, 0x51}, {&(0x7f0000000440)=""/129, 0x81}], 0x2, &(0x7f0000000380)=""/21, 0x15}, 0x1}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/24, 0x18}], 0x1, &(0x7f0000000580)=""/100, 0x64}, 0x1de4}, {{&(0x7f00000006c0)=@nl=@proc, 0x80, &(0x7f0000002b40)=[{&(0x7f0000000740)=""/116, 0x74}, {&(0x7f0000000800)=""/187, 0xbb}, {&(0x7f00000019c0)=""/250, 0xfa}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/210, 0xd2}, {0x0}, {0x0}], 0x7}, 0x5}], 0x3, 0x0, 0x0)
pipe(&(0x7f0000000400)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x68, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000540)='./file0\x00', 0x0, 0x881000, 0x0)
open(&(0x7f0000000500)='./file0\x00', 0x0, 0x140)

18:13:06 executing program 1:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700)
splice(r0, 0x0, r3, 0x0, 0x100000800ffe0, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffc8f)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
splice(r0, 0x0, r2, 0x0, 0x1870b0a0, 0x0)

18:13:06 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x1}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000002b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000940)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r5, 0x4, 0x46000)
lseek(r5, 0x4200, 0x0)
r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r7=>0x0)
open(0x0, 0x143042, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0)
io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}])
r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, [], 0x0, 0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x8}, 0x8, 0x10, 0x0}, 0x78)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x9, 0x0, 0x0, 0x0, 0x0}, 0x40)
open_by_handle_at(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB="780000006305000050ac3d99c7fe46ea0c30dc5fb203ce57abf581589a1fa2875f465fd421f4e97b5e6af0736698b0cc71161b4f4b3f8dcf367c3c0c72bce933ebf6430c98c67d1f6027581a764f48d30700000010bf512d4cbf955f8de59053cc6f6125c3af68130f4e64e60a9ac5c0bcd7840accd81556671ee3f1e9d6b3bf4bd33a9cebf028b362ecfdce52f6f917027f4b3ad6cc36acb67376563e0f3a197faafa0d9b77e6a08d4183da945f9ad07268d89be5c13f26458d5b114094b6e2b7d0623c948be2b5782f6036de7d1ad4be39a049d32132a2decee075cbed2d3e31a62a1706e4d59ad477b2"], 0x12da00)
sendfile(r5, r8, 0x0, 0x8400fffffffb)
sendfile(r4, r4, &(0x7f0000000100), 0x8080fffffffe)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)

18:13:06 executing program 0:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x200004)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)

[  209.285430] audit: type=1804 audit(1587147186.805:29): pid=9392 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir085944594/syzkaller.hVdvPx/39/bus" dev="sda1" ino=15825 res=1
18:13:07 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x1}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000002b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000940)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r5, 0x4, 0x46000)
lseek(r5, 0x4200, 0x0)
r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r7=>0x0)
open(0x0, 0x143042, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0)
io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}])
r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, [], 0x0, 0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x8}, 0x8, 0x10, 0x0}, 0x78)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x9, 0x0, 0x0, 0x0, 0x0}, 0x40)
open_by_handle_at(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB="780000006305000050ac3d99c7fe46ea0c30dc5fb203ce57abf581589a1fa2875f465fd421f4e97b5e6af0736698b0cc71161b4f4b3f8dcf367c3c0c72bce933ebf6430c98c67d1f6027581a764f48d30700000010bf512d4cbf955f8de59053cc6f6125c3af68130f4e64e60a9ac5c0bcd7840accd81556671ee3f1e9d6b3bf4bd33a9cebf028b362ecfdce52f6f917027f4b3ad6cc36acb67376563e0f3a197faafa0d9b77e6a08d4183da945f9ad07268d89be5c13f26458d5b114094b6e2b7d0623c948be2b5782f6036de7d1ad4be39a049d32132a2decee075cbed2d3e31a62a1706e4d59ad477b2"], 0x12da00)
sendfile(r5, r8, 0x0, 0x8400fffffffb)
sendfile(r4, r4, &(0x7f0000000100), 0x8080fffffffe)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)

18:13:07 executing program 3:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
sendfile(r1, r4, 0x0, 0x80001d00c0d0)

18:13:07 executing program 0:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
close(0xffffffffffffffff)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r2, 0x200004)
sendfile(0xffffffffffffffff, r2, 0x0, 0x80001d00c0d0)

[  209.713456] audit: type=1804 audit(1587147187.235:30): pid=9408 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir862370016/syzkaller.3yRTNr/42/bus" dev="sda1" ino=15827 res=1
18:13:07 executing program 1:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700)
splice(r0, 0x0, r2, 0x0, 0x100000800ffe0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
splice(r0, 0x0, r1, 0x0, 0x1870b0a0, 0x0)

18:13:07 executing program 0:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
close(0xffffffffffffffff)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r2, 0x200004)
sendfile(0xffffffffffffffff, r2, 0x0, 0x80001d00c0d0)

18:13:07 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000340)='user\x00', &(0x7f00000005c0)={'syz', 0x2}, &(0x7f0000000300)="ed", 0x1, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x3d})
keyctl$read(0xb, r0, &(0x7f0000000100)=""/5, 0x5)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r3, &(0x7f0000002bc0)=[{{&(0x7f00000001c0)=@ax25={{0x3, @null}, [@default, @netrom, @rose, @remote, @default, @rose, @netrom, @rose]}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000300)=""/81, 0x51}, {&(0x7f0000000440)=""/129, 0x81}], 0x2, &(0x7f0000000380)=""/21, 0x15}, 0x1}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/24, 0x18}], 0x1, &(0x7f0000000580)=""/100, 0x64}, 0x1de4}, {{&(0x7f00000006c0)=@nl=@proc, 0x80, &(0x7f0000002b40)=[{&(0x7f0000000740)=""/116, 0x74}, {&(0x7f0000000800)=""/187, 0xbb}, {&(0x7f00000019c0)=""/250, 0xfa}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/210, 0xd2}, {0x0}, {0x0}], 0x7}, 0x5}], 0x3, 0x0, 0x0)
pipe(&(0x7f0000000400)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x68, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000540)='./file0\x00', 0x0, 0x881000, 0x0)
open(&(0x7f0000000500)='./file0\x00', 0x0, 0x140)

18:13:07 executing program 3:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
sendfile(r1, r4, 0x0, 0x80001d00c0d0)

18:13:07 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x1}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000002b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000940)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r5, 0x4, 0x46000)
lseek(r5, 0x4200, 0x0)
r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r7=>0x0)
open(0x0, 0x143042, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0)
io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}])
r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, [], 0x0, 0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x8}, 0x8, 0x10, 0x0}, 0x78)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x9, 0x0, 0x0, 0x0, 0x0}, 0x40)
open_by_handle_at(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB="780000006305000050ac3d99c7fe46ea0c30dc5fb203ce57abf581589a1fa2875f465fd421f4e97b5e6af0736698b0cc71161b4f4b3f8dcf367c3c0c72bce933ebf6430c98c67d1f6027581a764f48d30700000010bf512d4cbf955f8de59053cc6f6125c3af68130f4e64e60a9ac5c0bcd7840accd81556671ee3f1e9d6b3bf4bd33a9cebf028b362ecfdce52f6f917027f4b3ad6cc36acb67376563e0f3a197faafa0d9b77e6a08d4183da945f9ad07268d89be5c13f26458d5b114094b6e2b7d0623c948be2b5782f6036de7d1ad4be39a049d32132a2decee075cbed2d3e31a62a1706e4d59ad477b2"], 0x12da00)
sendfile(r5, r8, 0x0, 0x8400fffffffb)
sendfile(r4, r4, &(0x7f0000000100), 0x8080fffffffe)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)

18:13:07 executing program 0:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
close(0xffffffffffffffff)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r2, 0x200004)
sendfile(0xffffffffffffffff, r2, 0x0, 0x80001d00c0d0)

18:13:07 executing program 0:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x200004)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)

[  210.374056] audit: type=1804 audit(1587147187.895:31): pid=9440 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir085944594/syzkaller.hVdvPx/40/bus" dev="sda1" ino=15830 res=1
18:13:08 executing program 5:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
sendfile(r1, r4, 0x0, 0x80001d00c0d0)

18:13:08 executing program 1:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700)
splice(r0, 0x0, r2, 0x0, 0x100000800ffe0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
splice(r0, 0x0, r1, 0x0, 0x1870b0a0, 0x0)

18:13:08 executing program 3:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
sendfile(r1, r4, 0x0, 0x80001d00c0d0)

18:13:08 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000340)='user\x00', &(0x7f00000005c0)={'syz', 0x2}, &(0x7f0000000300)="ed", 0x1, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x3d})
keyctl$read(0xb, r0, &(0x7f0000000100)=""/5, 0x5)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r3, &(0x7f0000002bc0)=[{{&(0x7f00000001c0)=@ax25={{0x3, @null}, [@default, @netrom, @rose, @remote, @default, @rose, @netrom, @rose]}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000300)=""/81, 0x51}, {&(0x7f0000000440)=""/129, 0x81}], 0x2, &(0x7f0000000380)=""/21, 0x15}, 0x1}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/24, 0x18}], 0x1, &(0x7f0000000580)=""/100, 0x64}, 0x1de4}, {{&(0x7f00000006c0)=@nl=@proc, 0x80, &(0x7f0000002b40)=[{&(0x7f0000000740)=""/116, 0x74}, {&(0x7f0000000800)=""/187, 0xbb}, {&(0x7f00000019c0)=""/250, 0xfa}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/210, 0xd2}, {0x0}, {0x0}], 0x7}, 0x5}], 0x3, 0x0, 0x0)
pipe(&(0x7f0000000400)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x68, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000540)='./file0\x00', 0x0, 0x881000, 0x0)
open(&(0x7f0000000500)='./file0\x00', 0x0, 0x140)

18:13:08 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x1}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000002b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000940)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r5, 0x4, 0x46000)
lseek(r5, 0x4200, 0x0)
r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r7=>0x0)
open(0x0, 0x143042, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0)
io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}])
r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, [], 0x0, 0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x8}, 0x8, 0x10, 0x0}, 0x78)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x9, 0x0, 0x0, 0x0, 0x0}, 0x40)
open_by_handle_at(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB="780000006305000050ac3d99c7fe46ea0c30dc5fb203ce57abf581589a1fa2875f465fd421f4e97b5e6af0736698b0cc71161b4f4b3f8dcf367c3c0c72bce933ebf6430c98c67d1f6027581a764f48d30700000010bf512d4cbf955f8de59053cc6f6125c3af68130f4e64e60a9ac5c0bcd7840accd81556671ee3f1e9d6b3bf4bd33a9cebf028b362ecfdce52f6f917027f4b3ad6cc36acb67376563e0f3a197faafa0d9b77e6a08d4183da945f9ad07268d89be5c13f26458d5b114094b6e2b7d0623c948be2b5782f6036de7d1ad4be39a049d32132a2decee075cbed2d3e31a62a1706e4d59ad477b2"], 0x12da00)
sendfile(r5, r8, 0x0, 0x8400fffffffb)
sendfile(r4, r4, &(0x7f0000000100), 0x8080fffffffe)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)

18:13:08 executing program 0:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x200004)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)

[  211.456699] audit: type=1804 audit(1587147188.985:32): pid=9471 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir085944594/syzkaller.hVdvPx/41/bus" dev="sda1" ino=15826 res=1
18:13:09 executing program 1:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700)
splice(r0, 0x0, r2, 0x0, 0x100000800ffe0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
splice(r0, 0x0, r1, 0x0, 0x1870b0a0, 0x0)

18:13:09 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x1}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000002b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000940)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r5, 0x4, 0x46000)
lseek(r5, 0x4200, 0x0)
r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r7=>0x0)
open(0x0, 0x143042, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0)
io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}])
r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, [], 0x0, 0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x8}, 0x8, 0x10, 0x0}, 0x78)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x9, 0x0, 0x0, 0x0, 0x0}, 0x40)
open_by_handle_at(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB="780000006305000050ac3d99c7fe46ea0c30dc5fb203ce57abf581589a1fa2875f465fd421f4e97b5e6af0736698b0cc71161b4f4b3f8dcf367c3c0c72bce933ebf6430c98c67d1f6027581a764f48d30700000010bf512d4cbf955f8de59053cc6f6125c3af68130f4e64e60a9ac5c0bcd7840accd81556671ee3f1e9d6b3bf4bd33a9cebf028b362ecfdce52f6f917027f4b3ad6cc36acb67376563e0f3a197faafa0d9b77e6a08d4183da945f9ad07268d89be5c13f26458d5b114094b6e2b7d0623c948be2b5782f6036de7d1ad4be39a049d32132a2decee075cbed2d3e31a62a1706e4d59ad477b2"], 0x12da00)
sendfile(r5, r8, 0x0, 0x8400fffffffb)
sendfile(r4, r4, &(0x7f0000000100), 0x8080fffffffe)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)

18:13:09 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000340)='user\x00', &(0x7f00000005c0)={'syz', 0x2}, &(0x7f0000000300)="ed", 0x1, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x3d})
keyctl$read(0xb, r0, &(0x7f0000000100)=""/5, 0x5)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r3, &(0x7f0000002bc0)=[{{&(0x7f00000001c0)=@ax25={{0x3, @null}, [@default, @netrom, @rose, @remote, @default, @rose, @netrom, @rose]}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000300)=""/81, 0x51}, {&(0x7f0000000440)=""/129, 0x81}], 0x2, &(0x7f0000000380)=""/21, 0x15}, 0x1}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/24, 0x18}], 0x1, &(0x7f0000000580)=""/100, 0x64}, 0x1de4}, {{&(0x7f00000006c0)=@nl=@proc, 0x80, &(0x7f0000002b40)=[{&(0x7f0000000740)=""/116, 0x74}, {&(0x7f0000000800)=""/187, 0xbb}, {&(0x7f00000019c0)=""/250, 0xfa}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/210, 0xd2}, {0x0}, {0x0}], 0x7}, 0x5}], 0x3, 0x0, 0x0)
pipe(&(0x7f0000000400)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x68, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000540)='./file0\x00', 0x0, 0x881000, 0x0)
open(&(0x7f0000000500)='./file0\x00', 0x0, 0x140)

18:13:09 executing program 3:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
sendfile(r1, r4, 0x0, 0x80001d00c0d0)

[  212.178215] audit: type=1804 audit(1587147189.705:33): pid=9498 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir862370016/syzkaller.3yRTNr/44/bus" dev="sda1" ino=15833 res=1
18:13:09 executing program 4:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
sendfile(r1, r4, 0x0, 0x80001d00c0d0)

18:13:10 executing program 0:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x200004)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)

18:13:10 executing program 1:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffc8f)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
splice(r0, 0x0, r2, 0x0, 0x1870b0a0, 0x0)

18:13:10 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000340)='user\x00', &(0x7f00000005c0)={'syz', 0x2}, &(0x7f0000000300)="ed", 0x1, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x3d})
keyctl$read(0xb, r0, &(0x7f0000000100)=""/5, 0x5)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r3, &(0x7f0000002bc0)=[{{&(0x7f00000001c0)=@ax25={{0x3, @null}, [@default, @netrom, @rose, @remote, @default, @rose, @netrom, @rose]}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000300)=""/81, 0x51}, {&(0x7f0000000440)=""/129, 0x81}], 0x2, &(0x7f0000000380)=""/21, 0x15}, 0x1}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/24, 0x18}], 0x1, &(0x7f0000000580)=""/100, 0x64}, 0x1de4}, {{&(0x7f00000006c0)=@nl=@proc, 0x80, &(0x7f0000002b40)=[{&(0x7f0000000740)=""/116, 0x74}, {&(0x7f0000000800)=""/187, 0xbb}, {&(0x7f00000019c0)=""/250, 0xfa}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/210, 0xd2}, {0x0}, {0x0}], 0x7}, 0x5}], 0x3, 0x0, 0x0)
pipe(&(0x7f0000000400)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x68, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000540)='./file0\x00', 0x0, 0x881000, 0x0)
open(&(0x7f0000000500)='./file0\x00', 0x0, 0x140)

18:13:10 executing program 3:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
sendfile(r1, r4, 0x0, 0x80001d00c0d0)

18:13:10 executing program 5:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700)
splice(r0, 0x0, r3, 0x0, 0x100000800ffe0, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffc8f)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
splice(r0, 0x0, r2, 0x0, 0x1870b0a0, 0x0)

18:13:10 executing program 0:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x200004)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)

18:13:10 executing program 3:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
sendfile(r1, r4, 0x0, 0x80001d00c0d0)

18:13:10 executing program 4:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x9, 0xa0862)
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x4, 0x210500)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
fchmod(r2, 0x0)
dup3(r1, r2, 0x80000)
r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
ioctl$sock_inet_SIOCSIFBRDADDR(r3, 0x891a, &(0x7f00000000c0)={'veth0\x00', {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}})
r4 = socket(0x10, 0x803, 0x0)
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getaddr={0x14, 0x16, 0x200, 0x70bd26, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40000)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10)
getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000100005072cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="65350600dd1300001c0012800c0001006d6163766c616e000c00028008000100080000000a000500040000000000000008000a00", @ANYRES32=r6, @ANYBLOB="db9b5e6c52a94a07af4dc76a4697d0de11261ce20fcde036958905d6bcd1a9221eed980f7b594b9c2d6c7be9ace4da3153f94c7d886fb96bf7050401f4fdc602f43eae0c5dbd9b2f4b1a08907e1bdfa39dee9348e917c27d39549a7e619f0a815d9a28e9a282b1daf9a2da4153a61786d5a89c8b4544f9ed09e5a8dc986e150a"], 0x50}}, 0x0)

18:13:11 executing program 1:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffc8f)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
splice(r0, 0x0, r2, 0x0, 0x1870b0a0, 0x0)

18:13:11 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000340)='user\x00', &(0x7f00000005c0)={'syz', 0x2}, &(0x7f0000000300)="ed", 0x1, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x3d})
keyctl$read(0xb, r0, &(0x7f0000000100)=""/5, 0x5)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r3, &(0x7f0000002bc0)=[{{&(0x7f00000001c0)=@ax25={{0x3, @null}, [@default, @netrom, @rose, @remote, @default, @rose, @netrom, @rose]}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000300)=""/81, 0x51}, {&(0x7f0000000440)=""/129, 0x81}], 0x2, &(0x7f0000000380)=""/21, 0x15}, 0x1}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/24, 0x18}], 0x1, &(0x7f0000000580)=""/100, 0x64}, 0x1de4}, {{&(0x7f00000006c0)=@nl=@proc, 0x80, &(0x7f0000002b40)=[{&(0x7f0000000740)=""/116, 0x74}, {&(0x7f0000000800)=""/187, 0xbb}, {&(0x7f00000019c0)=""/250, 0xfa}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/210, 0xd2}, {0x0}, {0x0}], 0x7}, 0x5}], 0x3, 0x0, 0x0)
pipe(&(0x7f0000000400)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000540)='./file0\x00', 0x0, 0x881000, 0x0)
open(&(0x7f0000000500)='./file0\x00', 0x0, 0x140)

[  213.609439] device gretap0 entered promiscuous mode
[  213.644170] device macvlan2 entered promiscuous mode
18:13:11 executing program 0:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x200004)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)

18:13:11 executing program 5:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
sendfile(r1, r4, 0x0, 0x80001d00c0d0)

18:13:11 executing program 3:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
sendfile(r1, r4, 0x0, 0x80001d00c0d0)

18:13:11 executing program 4:
creat(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
sendmsg$NLBL_CIPSOV4_C_LISTALL(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="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", @ANYBLOB="00ff0000000000000000000400000080a36b4b215480835bc2cf204bb00f622efdbaa97ffda04d688442d10f024e2cca2f61bc3d613229ffc334e74ad293168a90bde33d46d57fc262fde46ebcfc35c934cbf66a6513eea7ed4cc759939758c1c59a70e32e4a9a3df09c889a5f0baeaa7f2f7c01f0776510e0280f06f134f12ffb3eb2fc10521f26c929b61ececed10fb53bc13b20446215a9d49f74a774dbf9c37ea91d735d8828025a15986f744fb52ff16cc55e1037f051f8f42091"], 0x2}, 0x1, 0x0, 0x0, 0xc850}, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f000002eff0)={0x0, 0x0}, 0x10)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0xfffffd93}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0)
geteuid()
geteuid()
write(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000100), 0x4)
r4 = syz_open_dev$evdev(0x0, 0x0, 0x0)
ioctl$EVIOCGKEYCODE_V2(r4, 0x80284504, &(0x7f0000032280)=""/102379)
r5 = memfd_create(&(0x7f0000000000)='dummY0\x00', 0x0)
fsetxattr$system_posix_acl(r5, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYBLOB="02000400", @ANYRES32, @ANYBLOB="0400000007000000080000", @ANYRES32=0x0, @ANYBLOB="10000200000000082000000000000000bf6ba308525fb82df4d1ae00a29f40e06b000000000000000000000000000000cb967802a35d8cf51cd8a6b0caae714e399af327eca1a4e4fe36e2648cd3bcc59a1b37cd1f0944aa459f1d304fa8b17722595b44510363745431f26bc2e31a60a275bc6211731f0361878aa0c2930a0e00920006e9fdb4eae261d4c02c1fe9c5659f5d672bf342eacd48f6806b463b3a94083644525ad36721c71b6df4448ab96810a8b5d246d37c"], 0x6, 0x0)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r6, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}})
ioctl$sock_inet6_SIOCADDRT(r6, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @ipv4={[], [], @loopback}, @ipv4={[], [], @loopback}})

18:13:11 executing program 1:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffc8f)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
splice(r0, 0x0, r2, 0x0, 0x1870b0a0, 0x0)

18:13:12 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000340)='user\x00', &(0x7f00000005c0)={'syz', 0x2}, &(0x7f0000000300)="ed", 0x1, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x3d})
keyctl$read(0xb, r0, &(0x7f0000000100)=""/5, 0x5)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r3, &(0x7f0000002bc0)=[{{&(0x7f00000001c0)=@ax25={{0x3, @null}, [@default, @netrom, @rose, @remote, @default, @rose, @netrom, @rose]}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000300)=""/81, 0x51}, {&(0x7f0000000440)=""/129, 0x81}], 0x2, &(0x7f0000000380)=""/21, 0x15}, 0x1}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/24, 0x18}], 0x1, &(0x7f0000000580)=""/100, 0x64}, 0x1de4}, {{&(0x7f00000006c0)=@nl=@proc, 0x80, &(0x7f0000002b40)=[{&(0x7f0000000740)=""/116, 0x74}, {&(0x7f0000000800)=""/187, 0xbb}, {&(0x7f00000019c0)=""/250, 0xfa}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/210, 0xd2}, {0x0}, {0x0}], 0x7}, 0x5}], 0x3, 0x0, 0x0)
pipe(&(0x7f0000000400)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000540)='./file0\x00', 0x0, 0x881000, 0x0)
open(&(0x7f0000000500)='./file0\x00', 0x0, 0x140)

18:13:12 executing program 0:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x200004)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)

18:13:12 executing program 3:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
sendfile(r1, r4, 0x0, 0x80001d00c0d0)

18:13:12 executing program 5:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
sendfile(r1, r4, 0x0, 0x80001d00c0d0)

18:13:12 executing program 4:
creat(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
sendmsg$NLBL_CIPSOV4_C_LISTALL(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="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", @ANYBLOB="00ff0000000000000000000400000080a36b4b215480835bc2cf204bb00f622efdbaa97ffda04d688442d10f024e2cca2f61bc3d613229ffc334e74ad293168a90bde33d46d57fc262fde46ebcfc35c934cbf66a6513eea7ed4cc759939758c1c59a70e32e4a9a3df09c889a5f0baeaa7f2f7c01f0776510e0280f06f134f12ffb3eb2fc10521f26c929b61ececed10fb53bc13b20446215a9d49f74a774dbf9c37ea91d735d8828025a15986f744fb52ff16cc55e1037f051f8f42091"], 0x2}, 0x1, 0x0, 0x0, 0xc850}, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f000002eff0)={0x0, 0x0}, 0x10)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0xfffffd93}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0)
geteuid()
geteuid()
write(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000100), 0x4)
r4 = syz_open_dev$evdev(0x0, 0x0, 0x0)
ioctl$EVIOCGKEYCODE_V2(r4, 0x80284504, &(0x7f0000032280)=""/102379)
r5 = memfd_create(&(0x7f0000000000)='dummY0\x00', 0x0)
fsetxattr$system_posix_acl(r5, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYBLOB="02000400", @ANYRES32, @ANYBLOB="0400000007000000080000", @ANYRES32=0x0, @ANYBLOB="10000200000000082000000000000000bf6ba308525fb82df4d1ae00a29f40e06b000000000000000000000000000000cb967802a35d8cf51cd8a6b0caae714e399af327eca1a4e4fe36e2648cd3bcc59a1b37cd1f0944aa459f1d304fa8b17722595b44510363745431f26bc2e31a60a275bc6211731f0361878aa0c2930a0e00920006e9fdb4eae261d4c02c1fe9c5659f5d672bf342eacd48f6806b463b3a94083644525ad36721c71b6df4448ab96810a8b5d246d37c"], 0x6, 0x0)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r6, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}})
ioctl$sock_inet6_SIOCADDRT(r6, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @ipv4={[], [], @loopback}, @ipv4={[], [], @loopback}})

18:13:12 executing program 1:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x100000800ffe0, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffc8f)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
splice(r0, 0x0, r2, 0x0, 0x1870b0a0, 0x0)

18:13:13 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000340)='user\x00', &(0x7f00000005c0)={'syz', 0x2}, &(0x7f0000000300)="ed", 0x1, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x3d})
keyctl$read(0xb, r0, &(0x7f0000000100)=""/5, 0x5)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r3, &(0x7f0000002bc0)=[{{&(0x7f00000001c0)=@ax25={{0x3, @null}, [@default, @netrom, @rose, @remote, @default, @rose, @netrom, @rose]}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000300)=""/81, 0x51}, {&(0x7f0000000440)=""/129, 0x81}], 0x2, &(0x7f0000000380)=""/21, 0x15}, 0x1}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/24, 0x18}], 0x1, &(0x7f0000000580)=""/100, 0x64}, 0x1de4}, {{&(0x7f00000006c0)=@nl=@proc, 0x80, &(0x7f0000002b40)=[{&(0x7f0000000740)=""/116, 0x74}, {&(0x7f0000000800)=""/187, 0xbb}, {&(0x7f00000019c0)=""/250, 0xfa}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/210, 0xd2}, {0x0}, {0x0}], 0x7}, 0x5}], 0x3, 0x0, 0x0)
pipe(&(0x7f0000000400)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000540)='./file0\x00', 0x0, 0x881000, 0x0)
open(&(0x7f0000000500)='./file0\x00', 0x0, 0x140)

18:13:13 executing program 0:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x200004)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)

18:13:13 executing program 3:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
sendfile(r1, r4, 0x0, 0x80001d00c0d0)

18:13:13 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @dev}, 0x6c)
sendto$inet(r0, 0x0, 0x0, 0x20040040, &(0x7f0000000240)={0x2, 0x4e23, @empty}, 0x10)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
pipe(&(0x7f0000000340)={<r3=>0xffffffffffffffff})
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x90, 0x0, 0x1, 0x5, 0x0, 0x0, {0x0, 0x0, 0x8}, [@CTA_LABELS_MASK={0xc, 0x17, [0x7, 0x1]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x400}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @private=0xa010100}}}]}, @CTA_LABELS={0xc, 0x16, 0x1, 0x0, [0xe9, 0xfffff001]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x6}, @CTA_SEQ_ADJ_ORIG={0x3c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x42e}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xffffffe9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x4000000}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xffff}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x24040800}, 0x20040000)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='ip_vti0\x00', 0x1e4)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffffb5, 0x60, 0x0, 0xffffffffffffff8a)

18:13:13 executing program 5:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
sendfile(r1, r4, 0x0, 0x80001d00c0d0)

18:13:13 executing program 0:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x200004)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)

18:13:13 executing program 1:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x100000800ffe0, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffc8f)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
splice(r0, 0x0, r2, 0x0, 0x1870b0a0, 0x0)

18:13:14 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000340)='user\x00', &(0x7f00000005c0)={'syz', 0x2}, &(0x7f0000000300)="ed", 0x1, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x3d})
keyctl$read(0xb, r0, &(0x7f0000000100)=""/5, 0x5)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r3, &(0x7f0000002bc0)=[{{&(0x7f00000001c0)=@ax25={{0x3, @null}, [@default, @netrom, @rose, @remote, @default, @rose, @netrom, @rose]}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000300)=""/81, 0x51}, {&(0x7f0000000440)=""/129, 0x81}], 0x2, &(0x7f0000000380)=""/21, 0x15}, 0x1}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/24, 0x18}], 0x1, &(0x7f0000000580)=""/100, 0x64}, 0x1de4}, {{&(0x7f00000006c0)=@nl=@proc, 0x80, &(0x7f0000002b40)=[{&(0x7f0000000740)=""/116, 0x74}, {&(0x7f0000000800)=""/187, 0xbb}, {&(0x7f00000019c0)=""/250, 0xfa}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/210, 0xd2}, {0x0}, {0x0}], 0x7}, 0x5}], 0x3, 0x0, 0x0)
pipe(&(0x7f0000000400)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x68, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000540)='./file0\x00', 0x0, 0x881000, 0x0)
open(&(0x7f0000000500)='./file0\x00', 0x0, 0x140)

18:13:14 executing program 3:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
sendfile(r1, r4, 0x0, 0x80001d00c0d0)

18:13:14 executing program 5:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x200004)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)

18:13:14 executing program 4:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x200004)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)

18:13:14 executing program 0:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x200004)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)

18:13:14 executing program 1:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x100000800ffe0, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffc8f)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
splice(r0, 0x0, r2, 0x0, 0x1870b0a0, 0x0)

18:13:14 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000340)='user\x00', &(0x7f00000005c0)={'syz', 0x2}, &(0x7f0000000300)="ed", 0x1, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x3d})
keyctl$read(0xb, r0, &(0x7f0000000100)=""/5, 0x5)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r3, &(0x7f0000002bc0)=[{{&(0x7f00000001c0)=@ax25={{0x3, @null}, [@default, @netrom, @rose, @remote, @default, @rose, @netrom, @rose]}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000300)=""/81, 0x51}, {&(0x7f0000000440)=""/129, 0x81}], 0x2, &(0x7f0000000380)=""/21, 0x15}, 0x1}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/24, 0x18}], 0x1, &(0x7f0000000580)=""/100, 0x64}, 0x1de4}, {{&(0x7f00000006c0)=@nl=@proc, 0x80, &(0x7f0000002b40)=[{&(0x7f0000000740)=""/116, 0x74}, {&(0x7f0000000800)=""/187, 0xbb}, {&(0x7f00000019c0)=""/250, 0xfa}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/210, 0xd2}, {0x0}, {0x0}], 0x7}, 0x5}], 0x3, 0x0, 0x0)
pipe(&(0x7f0000000400)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x68, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000540)='./file0\x00', 0x0, 0x881000, 0x0)
open(&(0x7f0000000500)='./file0\x00', 0x0, 0x140)

18:13:15 executing program 3:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
sendfile(r1, r4, 0x0, 0x80001d00c0d0)

18:13:15 executing program 0:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x200004)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)

18:13:15 executing program 5:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x200004)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)

18:13:15 executing program 4:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x200004)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)

18:13:15 executing program 1:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700)
splice(r0, 0x0, r2, 0x0, 0x100000800ffe0, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffc8f)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x1870b0a0, 0x0)

18:13:15 executing program 3:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
sendfile(r1, r4, 0x0, 0x80001d00c0d0)

18:13:15 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000340)='user\x00', &(0x7f00000005c0)={'syz', 0x2}, &(0x7f0000000300)="ed", 0x1, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x3d})
keyctl$read(0xb, r0, &(0x7f0000000100)=""/5, 0x5)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r3, &(0x7f0000002bc0)=[{{&(0x7f00000001c0)=@ax25={{0x3, @null}, [@default, @netrom, @rose, @remote, @default, @rose, @netrom, @rose]}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000300)=""/81, 0x51}, {&(0x7f0000000440)=""/129, 0x81}], 0x2, &(0x7f0000000380)=""/21, 0x15}, 0x1}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/24, 0x18}], 0x1, &(0x7f0000000580)=""/100, 0x64}, 0x1de4}, {{&(0x7f00000006c0)=@nl=@proc, 0x80, &(0x7f0000002b40)=[{&(0x7f0000000740)=""/116, 0x74}, {&(0x7f0000000800)=""/187, 0xbb}, {&(0x7f00000019c0)=""/250, 0xfa}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/210, 0xd2}, {0x0}, {0x0}], 0x7}, 0x5}], 0x3, 0x0, 0x0)
pipe(&(0x7f0000000400)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x68, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000540)='./file0\x00', 0x0, 0x881000, 0x0)
open(&(0x7f0000000500)='./file0\x00', 0x0, 0x140)

18:13:15 executing program 0:
openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x200004)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)

18:13:16 executing program 5:
r0 = socket$rxrpc(0x21, 0x2, 0x2)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000006400)=[{{&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)=""/59, 0x3b}, {&(0x7f00000001c0)=""/6, 0x6}], 0x2, &(0x7f0000000300)=""/40, 0x28}, 0x800}, {{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/124, 0x7c}, {&(0x7f0000000480)=""/173, 0xad}, {&(0x7f0000000540)=""/2, 0x2}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/28, 0x1c}], 0x5, &(0x7f0000001640)=""/91, 0x5b}, 0x8}, {{&(0x7f00000016c0)=@nl=@proc, 0x80, 0x0, 0x0, &(0x7f0000001980)=""/96, 0x60}, 0x5}, {{&(0x7f0000001a00)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000002040)=[{&(0x7f0000001b80)=""/244, 0xf4}, {&(0x7f0000001c80)=""/217, 0xd9}, {&(0x7f0000001e80)=""/102, 0x66}, {&(0x7f0000002680)=""/117, 0x75}, {&(0x7f0000001f80)=""/129, 0x81}], 0x5}, 0xa6}, {{&(0x7f00000020c0)=@nl=@proc, 0x80, &(0x7f0000002400)=[{&(0x7f0000002a40)=""/93, 0x5d}, {&(0x7f00000021c0)=""/47, 0x2f}, {&(0x7f0000002200)=""/197, 0xc5}, {&(0x7f0000002300)=""/205, 0xcd}], 0x4, &(0x7f0000002440)=""/11, 0xb}, 0xffff}, {{&(0x7f0000002480)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f00000027c0)=[{&(0x7f0000002500)=""/86, 0x56}, {&(0x7f0000002580)=""/54, 0x36}, {&(0x7f00000025c0)=""/100, 0x64}, {&(0x7f0000002640)=""/31, 0x1f}, {&(0x7f0000002900)=""/135, 0x87}, {&(0x7f0000002740)=""/66, 0x42}], 0x6, &(0x7f0000002840)=""/175, 0xaf}, 0x3ff}, {{0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000004040)=""/200, 0xc8}}, {{0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000004140)=""/116, 0x74}, {0x0}, {0x0}], 0x3, &(0x7f00000029c0)=""/104, 0x68}, 0x7ff}], 0x8, 0x0, 0x0)
bind$ax25(r2, &(0x7f0000000280)={{0x3, @null}, [@default, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @null]}, 0x48)
r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
read$snddsp(r3, &(0x7f0000000000)=""/146, 0x92)
sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x14, 0x110, 0x2}}], 0x18}, 0x0)

18:13:16 executing program 1:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700)
splice(r0, 0x0, r2, 0x0, 0x100000800ffe0, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffc8f)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x1870b0a0, 0x0)

18:13:16 executing program 4:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x7fff, 0x10882)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000200)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0)
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$setpipe(r1, 0x407, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000000)=0x7fffffff, 0x4)

18:13:16 executing program 3:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
sendfile(r1, r4, 0x0, 0x80001d00c0d0)

18:13:16 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000340)='user\x00', &(0x7f00000005c0)={'syz', 0x2}, &(0x7f0000000300)="ed", 0x1, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x3d})
keyctl$read(0xb, r0, &(0x7f0000000100)=""/5, 0x5)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r3, &(0x7f0000002bc0)=[{{&(0x7f00000001c0)=@ax25={{0x3, @null}, [@default, @netrom, @rose, @remote, @default, @rose, @netrom, @rose]}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000300)=""/81, 0x51}, {&(0x7f0000000440)=""/129, 0x81}], 0x2, &(0x7f0000000380)=""/21, 0x15}, 0x1}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/24, 0x18}], 0x1, &(0x7f0000000580)=""/100, 0x64}, 0x1de4}, {{&(0x7f00000006c0)=@nl=@proc, 0x80, &(0x7f0000002b40)=[{&(0x7f0000000740)=""/116, 0x74}, {&(0x7f0000000800)=""/187, 0xbb}, {&(0x7f00000019c0)=""/250, 0xfa}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/210, 0xd2}, {0x0}, {0x0}], 0x7}, 0x5}], 0x3, 0x0, 0x0)
pipe(&(0x7f0000000400)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x68, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000540)='./file0\x00', 0x0, 0x881000, 0x0)
open(&(0x7f0000000500)='./file0\x00', 0x0, 0x140)

18:13:16 executing program 0:
openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x200004)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)

18:13:17 executing program 3:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
sendfile(r1, r4, 0x0, 0x80001d00c0d0)

18:13:17 executing program 0:
openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x200004)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)

18:13:17 executing program 1:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700)
splice(r0, 0x0, r2, 0x0, 0x100000800ffe0, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffc8f)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x1870b0a0, 0x0)

18:13:17 executing program 4:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x7fff, 0x10882)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000200)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0)
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$setpipe(r1, 0x407, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000000)=0x7fffffff, 0x4)

18:13:17 executing program 3:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
sendfile(r1, r4, 0x0, 0x80001d00c0d0)

18:13:17 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00')
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="ce873bae82df37dbfcf9fcc3d2941702ff83b400c80b073bc738c42c4bb43ec1601d31f37e8930d32e91fa99407fd435a4e7843cabcdcde1ae3816c3cc9dd48fa028682af8bc4b95972038b173a9c3129b39fa410685a717c126b4be6cb86eeb1c41e399d31d3c6e006c9e0b0fbf4b16a3407f22289547e0fd338badf146c7cc55d98241b07880afb024c541c27ec2cbbe6ba8a8da089c4b39269656", @ANYRES16=r3, @ANYBLOB="0101400000000000000100c7c18b759531b266a30000000000a204000000000000"], 0x3}}, 0x0)
sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x80)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x71)
prlimit64(r0, 0x4, &(0x7f0000000000)={0x0, 0x5}, &(0x7f0000000240))
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x7ff, 0x97e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001]})
socket$netlink(0x10, 0x3, 0x0)
openat$nvram(0xffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x4101, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r4, 0xae80, 0x0)

18:13:17 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000340)='user\x00', &(0x7f00000005c0)={'syz', 0x2}, &(0x7f0000000300)="ed", 0x1, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x3d})
keyctl$read(0xb, r0, &(0x7f0000000100)=""/5, 0x5)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r3, &(0x7f0000002bc0)=[{{&(0x7f00000001c0)=@ax25={{0x3, @null}, [@default, @netrom, @rose, @remote, @default, @rose, @netrom, @rose]}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000300)=""/81, 0x51}, {&(0x7f0000000440)=""/129, 0x81}], 0x2, &(0x7f0000000380)=""/21, 0x15}, 0x1}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/24, 0x18}], 0x1, &(0x7f0000000580)=""/100, 0x64}, 0x1de4}, {{&(0x7f00000006c0)=@nl=@proc, 0x80, &(0x7f0000002b40)=[{&(0x7f0000000740)=""/116, 0x74}, {&(0x7f0000000800)=""/187, 0xbb}, {&(0x7f00000019c0)=""/250, 0xfa}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/210, 0xd2}, {0x0}, {0x0}], 0x7}, 0x5}], 0x3, 0x0, 0x0)
pipe(&(0x7f0000000400)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x68, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000540)='./file0\x00', 0x0, 0x881000, 0x0)
open(&(0x7f0000000500)='./file0\x00', 0x0, 0x140)

18:13:18 executing program 0:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x200004)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)

18:13:18 executing program 3:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
sendfile(r1, r4, 0x0, 0x80001d00c0d0)

18:13:18 executing program 4:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup3(r1, r0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
pipe(&(0x7f0000000340)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000300)={0x4, &(0x7f00000002c0)=[{0x6, 0x0, 0xc0, 0xffffffff}, {0x7fff, 0xfa, 0x0, 0x4}, {0x21c, 0x38, 0x1f, 0x101}, {0x5, 0x8, 0x1, 0x6}]}, 0x10)
write(r4, &(0x7f0000000340), 0x41395527)
fsetxattr$trusted_overlay_nlink(r4, &(0x7f0000000040)='trusted.overlay.nlink\x00', &(0x7f0000000080)={'L+', 0xfffffffffffffffa}, 0x16, 0x3)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)={0x24, r6, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_CONN_ID={0x8}]}, 0x24}}, 0x0)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2210080}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x7c, r6, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bridge0\x00'}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003440200bfa30000000000001702000000feffff7a0af0ff01ffffff79a4f0ff00000000b7060000ffffffff3d6402000000000055020300037202000404000001007d60b7030000001000006a0a00fe00000000850000002b000000cf000000000000009500000000000000a81bbfa3982de7b0efc5733ed236e4add6de094e0832aaa6912a8b2ce571c45841e41f44ae7c5e84e6e3a94b574d2eb38a748355f0b886bd005362df1d4f73860db580892243533e0f242a46b3009a077db0d4968a384b0f59c7919b89bd9d5fdb68832e986440bd207edfa0cb231ccd00000000000000000000007777e2704653f620f5898a327a5ce13419b2272c3c7fea60493073807c4b7bbaed91f33fb382d91ae8e18c9b6c9f0322ec5f1c7cc5869ff455896712198c4e2ddf8b86e714229527ca40b24cfd6a02fa0892728807982d90e116bba29bb744af81a4cd8f3ad2d9582da7a9ba2ebdd0b424ac416e66af9ebcfea905d37cf226312cb81ec8439ced91f5c93f7f4d256c1d06e7fa7d3935301460142f83b422dbe57dfdb06dcf91fd2464cb1300330749d2110cf2e1f4682c24a305447c5e0807af806f952e8df0b1766ec7ecbd061772daa52a38539295d3fea7a7e66944121ff041143edfa9f1bf98d0a38edc345415c42d3d2dd3339d32a4796ceece18b68bc37e061d33357dcc2a8881015c9e1842fbdf1bb75c663e3776c7a37c5cd62e12102f237bbf60c0a3bf07d55b3888418de2b2ad23d25395dd4ccddf247dd2c712e2eaf7d432e968122cc5dcaa7ba330963b7093a58a02d0a1c9356bcb942eef51cda96cd2e04d8e2cc1f5c683aeb27395f93665846edf20be431509f6e6e58ce376979c8aa6b80220ddd98265b90ce2f082d3cb887b78c1ee5426000084175c7ab4986cd6aee7e7543611121e601e7fe0afb46782895148953b0aeded8bb45f239421f7ada169907693e91fbe55d0c20d94925402805fef20a52350367b1730f0405dbefc97e8f6f3655eb2d2e4f5331c24da1f4420c9692cfa7471b9874d7ea0f516d4705e20fbf9d29772668f043bfab2a83eaf9b073e5d3a3e944a0c532db7c72632cc33e14b94f5c16dbb78325a5c85ee07e3bf7e9da803248a005456ad4f3e3cdb92eb95cdfa1855ca58708b8a5775d296d897a22ec72a31eff2ed2ebea19655bd34cbaf0c0cb6bc79e826221f11b47112b1e0f27086e750f6d433927c8ed7b676fcccc505c57c25599385763311a18c1bfa78a3b09857347573d0a832ed69ced106349ce605c091a955ca74466c80fd5e0814054b17994d802ffad33f758fa39922506829d1ee5c560cf23ca9dbb7"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)

18:13:18 executing program 1:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700)
splice(r0, 0x0, r3, 0x0, 0x100000800ffe0, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffc8f)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
splice(r0, 0x0, r2, 0x0, 0x1870b0a0, 0x0)

18:13:18 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000340)='user\x00', &(0x7f00000005c0)={'syz', 0x2}, &(0x7f0000000300)="ed", 0x1, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x3d})
keyctl$read(0xb, r0, &(0x7f0000000100)=""/5, 0x5)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r3, &(0x7f0000002bc0)=[{{&(0x7f00000001c0)=@ax25={{0x3, @null}, [@default, @netrom, @rose, @remote, @default, @rose, @netrom, @rose]}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000300)=""/81, 0x51}, {&(0x7f0000000440)=""/129, 0x81}], 0x2, &(0x7f0000000380)=""/21, 0x15}, 0x1}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/24, 0x18}], 0x1, &(0x7f0000000580)=""/100, 0x64}, 0x1de4}, {{&(0x7f00000006c0)=@nl=@proc, 0x80, &(0x7f0000002b40)=[{&(0x7f0000000740)=""/116, 0x74}, {&(0x7f0000000800)=""/187, 0xbb}, {&(0x7f00000019c0)=""/250, 0xfa}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/210, 0xd2}, {0x0}, {0x0}], 0x7}, 0x5}], 0x3, 0x0, 0x0)
pipe(&(0x7f0000000400)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x68, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000540)='./file0\x00', 0x0, 0x881000, 0x0)
open(&(0x7f0000000500)='./file0\x00', 0x0, 0x140)

18:13:18 executing program 0:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x200004)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)

18:13:18 executing program 3:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
sendfile(r1, r4, 0x0, 0x80001d00c0d0)

18:13:18 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00')
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="ce873bae82df37dbfcf9fcc3d2941702ff83b400c80b073bc738c42c4bb43ec1601d31f37e8930d32e91fa99407fd435a4e7843cabcdcde1ae3816c3cc9dd48fa028682af8bc4b95972038b173a9c3129b39fa410685a717c126b4be6cb86eeb1c41e399d31d3c6e006c9e0b0fbf4b16a3407f22289547e0fd338badf146c7cc55d98241b07880afb024c541c27ec2cbbe6ba8a8da089c4b39269656", @ANYRES16=r3, @ANYBLOB="0101400000000000000100c7c18b759531b266a30000000000a204000000000000"], 0x3}}, 0x0)
sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x80)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x71)
prlimit64(r0, 0x4, &(0x7f0000000000)={0x0, 0x5}, &(0x7f0000000240))
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x7ff, 0x97e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001]})
socket$netlink(0x10, 0x3, 0x0)
openat$nvram(0xffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x4101, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r4, 0xae80, 0x0)

18:13:19 executing program 0:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x200004)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)

18:13:19 executing program 3:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
sendfile(r1, r4, 0x0, 0x80001d00c0d0)

18:13:19 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2}, 0x0)
pipe(&(0x7f0000000840)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setxattr$security_capability(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='security.capability\x00', &(0x7f0000000140)=@v1={0x1000000, [{0x29, 0xffffff3d}]}, 0xc, 0x3)
fcntl$setpipe(r3, 0x407, 0x0)
getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x41, &(0x7f0000000180)=ANY=[@ANYBLOB="66696c746ba99b8ab732fc1c3c3f8a6572000000000f00"/36], &(0x7f0000000240)=0x24)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
close(0xffffffffffffffff)
r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0)
r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6)
writev(r0, &(0x7f0000000440)=[{&(0x7f0000000200)="9c", 0x1}], 0x1)

18:13:19 executing program 1:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700)
splice(r0, 0x0, r3, 0x0, 0x100000800ffe0, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffc8f)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
splice(r0, 0x0, r2, 0x0, 0x1870b0a0, 0x0)

18:13:19 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000340)='user\x00', &(0x7f00000005c0)={'syz', 0x2}, &(0x7f0000000300)="ed", 0x1, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x3d})
keyctl$read(0xb, r0, &(0x7f0000000100)=""/5, 0x5)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r3, &(0x7f0000002bc0)=[{{&(0x7f00000001c0)=@ax25={{0x3, @null}, [@default, @netrom, @rose, @remote, @default, @rose, @netrom, @rose]}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000300)=""/81, 0x51}, {&(0x7f0000000440)=""/129, 0x81}], 0x2, &(0x7f0000000380)=""/21, 0x15}, 0x1}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/24, 0x18}], 0x1, &(0x7f0000000580)=""/100, 0x64}, 0x1de4}, {{&(0x7f00000006c0)=@nl=@proc, 0x80, &(0x7f0000002b40)=[{&(0x7f0000000740)=""/116, 0x74}, {&(0x7f0000000800)=""/187, 0xbb}, {&(0x7f00000019c0)=""/250, 0xfa}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/210, 0xd2}, {0x0}, {0x0}], 0x7}, 0x5}], 0x3, 0x0, 0x0)
pipe(&(0x7f0000000400)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x68, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000540)='./file0\x00', 0x0, 0x881000, 0x0)
open(&(0x7f0000000500)='./file0\x00', 0x0, 0x140)

18:13:19 executing program 0:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x200004)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)

18:13:19 executing program 3:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
sendfile(r1, r4, 0x0, 0x80001d00c0d0)

18:13:20 executing program 1:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700)
splice(r0, 0x0, r3, 0x0, 0x100000800ffe0, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffc8f)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
splice(r0, 0x0, r2, 0x0, 0x1870b0a0, 0x0)

18:13:20 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2}, 0x0)
pipe(&(0x7f0000000840)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setxattr$security_capability(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='security.capability\x00', &(0x7f0000000140)=@v1={0x1000000, [{0x29, 0xffffff3d}]}, 0xc, 0x3)
fcntl$setpipe(r3, 0x407, 0x0)
getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x41, &(0x7f0000000180)=ANY=[@ANYBLOB="66696c746ba99b8ab732fc1c3c3f8a6572000000000f00"/36], &(0x7f0000000240)=0x24)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
close(0xffffffffffffffff)
r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0)
r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6)
writev(r0, &(0x7f0000000440)=[{&(0x7f0000000200)="9c", 0x1}], 0x1)

18:13:20 executing program 0:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x200004)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)

18:13:20 executing program 3:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(0x0, 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
sendfile(r1, r4, 0x0, 0x80001d00c0d0)

18:13:20 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00')
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="ce873bae82df37dbfcf9fcc3d2941702ff83b400c80b073bc738c42c4bb43ec1601d31f37e8930d32e91fa99407fd435a4e7843cabcdcde1ae3816c3cc9dd48fa028682af8bc4b95972038b173a9c3129b39fa410685a717c126b4be6cb86eeb1c41e399d31d3c6e006c9e0b0fbf4b16a3407f22289547e0fd338badf146c7cc55d98241b07880afb024c541c27ec2cbbe6ba8a8da089c4b39269656", @ANYRES16=r3, @ANYBLOB="0101400000000000000100c7c18b759531b266a30000000000a204000000000000"], 0x3}}, 0x0)
sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x80)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x71)
prlimit64(r0, 0x4, &(0x7f0000000000)={0x0, 0x5}, &(0x7f0000000240))
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x7ff, 0x97e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001]})
socket$netlink(0x10, 0x3, 0x0)
openat$nvram(0xffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x4101, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r4, 0xae80, 0x0)

18:13:20 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000340)='user\x00', &(0x7f00000005c0)={'syz', 0x2}, &(0x7f0000000300)="ed", 0x1, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x3d})
keyctl$read(0xb, r0, &(0x7f0000000100)=""/5, 0x5)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r3, &(0x7f0000002bc0)=[{{&(0x7f00000001c0)=@ax25={{0x3, @null}, [@default, @netrom, @rose, @remote, @default, @rose, @netrom, @rose]}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000300)=""/81, 0x51}, {&(0x7f0000000440)=""/129, 0x81}], 0x2, &(0x7f0000000380)=""/21, 0x15}, 0x1}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/24, 0x18}], 0x1, &(0x7f0000000580)=""/100, 0x64}, 0x1de4}, {{&(0x7f00000006c0)=@nl=@proc, 0x80, &(0x7f0000002b40)=[{&(0x7f0000000740)=""/116, 0x74}, {&(0x7f0000000800)=""/187, 0xbb}, {&(0x7f00000019c0)=""/250, 0xfa}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/210, 0xd2}, {0x0}, {0x0}], 0x7}, 0x5}], 0x3, 0x0, 0x0)
pipe(&(0x7f0000000400)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x68, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000540)='./file0\x00', 0x0, 0x881000, 0x0)
open(&(0x7f0000000500)='./file0\x00', 0x0, 0x140)

18:13:20 executing program 0:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x200004)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)

18:13:20 executing program 4:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x200004)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)

18:13:20 executing program 3:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(0x0, 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
sendfile(r1, r4, 0x0, 0x80001d00c0d0)

18:13:20 executing program 1:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700)
splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x100000800ffe0, 0x0)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfffffc8f)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x1870b0a0, 0x0)

18:13:21 executing program 1:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700)
splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x100000800ffe0, 0x0)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfffffc8f)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x1870b0a0, 0x0)

18:13:21 executing program 1:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700)
splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x100000800ffe0, 0x0)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfffffc8f)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x1870b0a0, 0x0)

18:13:21 executing program 1:
pipe(0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700)
splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x100000800ffe0, 0x0)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfffffc8f)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x1870b0a0, 0x0)

18:13:21 executing program 1:
pipe(0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700)
splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x100000800ffe0, 0x0)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfffffc8f)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x1870b0a0, 0x0)

18:13:21 executing program 0:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x200004)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)

18:13:21 executing program 1:
pipe(0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700)
splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x100000800ffe0, 0x0)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfffffc8f)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x1870b0a0, 0x0)

18:13:21 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00')
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="ce873bae82df37dbfcf9fcc3d2941702ff83b400c80b073bc738c42c4bb43ec1601d31f37e8930d32e91fa99407fd435a4e7843cabcdcde1ae3816c3cc9dd48fa028682af8bc4b95972038b173a9c3129b39fa410685a717c126b4be6cb86eeb1c41e399d31d3c6e006c9e0b0fbf4b16a3407f22289547e0fd338badf146c7cc55d98241b07880afb024c541c27ec2cbbe6ba8a8da089c4b39269656", @ANYRES16=r3, @ANYBLOB="0101400000000000000100c7c18b759531b266a30000000000a204000000000000"], 0x3}}, 0x0)
sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x80)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x71)
prlimit64(r0, 0x4, &(0x7f0000000000)={0x0, 0x5}, &(0x7f0000000240))
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x7ff, 0x97e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001]})
socket$netlink(0x10, 0x3, 0x0)
openat$nvram(0xffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x4101, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r4, 0xae80, 0x0)

18:13:21 executing program 3:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(0x0, 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
sendfile(r1, r4, 0x0, 0x80001d00c0d0)

18:13:21 executing program 1:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700)
splice(r0, 0x0, r3, 0x0, 0x100000800ffe0, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffc8f)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
splice(r0, 0x0, r2, 0x0, 0x1870b0a0, 0x0)

18:13:21 executing program 4:
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
fcntl$setpipe(r0, 0x407, 0x0)
write(r0, &(0x7f0000000340), 0x41395527)
connect$rxrpc(r0, &(0x7f0000000040)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e22, 0x97, @dev={0xfe, 0x80, [], 0xf}, 0x1ff}}, 0x24)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x1)
r2 = socket(0x2, 0x3, 0x100000001)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x79)
connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10)
sendto(r2, &(0x7f0000000140)="0400", 0x2, 0x8002, 0x0, 0x0)
write$binfmt_elf32(r2, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58)

18:13:21 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000340)='user\x00', &(0x7f00000005c0)={'syz', 0x2}, &(0x7f0000000300)="ed", 0x1, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x3d})
keyctl$read(0xb, r0, &(0x7f0000000100)=""/5, 0x5)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r3, &(0x7f0000002bc0)=[{{&(0x7f00000001c0)=@ax25={{0x3, @null}, [@default, @netrom, @rose, @remote, @default, @rose, @netrom, @rose]}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000300)=""/81, 0x51}, {&(0x7f0000000440)=""/129, 0x81}], 0x2, &(0x7f0000000380)=""/21, 0x15}, 0x1}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/24, 0x18}], 0x1, &(0x7f0000000580)=""/100, 0x64}, 0x1de4}, {{&(0x7f00000006c0)=@nl=@proc, 0x80, &(0x7f0000002b40)=[{&(0x7f0000000740)=""/116, 0x74}, {&(0x7f0000000800)=""/187, 0xbb}, {&(0x7f00000019c0)=""/250, 0xfa}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/210, 0xd2}, {0x0}, {0x0}], 0x7}, 0x5}], 0x3, 0x0, 0x0)
pipe(&(0x7f0000000400)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x68, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000540)='./file0\x00', 0x0, 0x881000, 0x0)
open(&(0x7f0000000500)='./file0\x00', 0x0, 0x140)

18:13:21 executing program 0:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x200004)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)

[  224.442085] ip_tables: iptables: counters copy to user failed while replacing table
18:13:22 executing program 0:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x200004)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)

18:13:22 executing program 3:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x0, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
sendfile(r1, r4, 0x0, 0x80001d00c0d0)

18:13:22 executing program 0:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x200004)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)

18:13:22 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000340)='user\x00', &(0x7f00000005c0)={'syz', 0x2}, &(0x7f0000000300)="ed", 0x1, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x3d})
keyctl$read(0xb, r0, &(0x7f0000000100)=""/5, 0x5)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r3, &(0x7f0000002bc0)=[{{&(0x7f00000001c0)=@ax25={{0x3, @null}, [@default, @netrom, @rose, @remote, @default, @rose, @netrom, @rose]}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000300)=""/81, 0x51}, {&(0x7f0000000440)=""/129, 0x81}], 0x2, &(0x7f0000000380)=""/21, 0x15}, 0x1}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/24, 0x18}], 0x1, &(0x7f0000000580)=""/100, 0x64}, 0x1de4}, {{&(0x7f00000006c0)=@nl=@proc, 0x80, &(0x7f0000002b40)=[{&(0x7f0000000740)=""/116, 0x74}, {&(0x7f0000000800)=""/187, 0xbb}, {&(0x7f00000019c0)=""/250, 0xfa}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/210, 0xd2}, {0x0}, {0x0}], 0x7}, 0x5}], 0x3, 0x0, 0x0)
pipe(&(0x7f0000000400)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
write(r5, &(0x7f0000000340), 0x41395527)
vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x68, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000540)='./file0\x00', 0x0, 0x881000, 0x0)
open(&(0x7f0000000500)='./file0\x00', 0x0, 0x140)

18:13:22 executing program 1:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700)
splice(r0, 0x0, r3, 0x0, 0x100000800ffe0, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffc8f)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
splice(r0, 0x0, r2, 0x0, 0x1870b0a0, 0x0)

18:13:22 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
msgget(0x0, 0x409)
r4 = msgget$private(0x0, 0x504)
msgctl$MSG_STAT(r4, 0xb, &(0x7f0000000140)=""/54)
r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x2)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
pipe(&(0x7f0000000340)={<r7=>0xffffffffffffffff})
vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500)}], 0x1, 0x4)
ioctl$DRM_IOCTL_AUTH_MAGIC(r7, 0x40046411, &(0x7f0000000040)=0xfa6)
syz_kvm_setup_cpu$x86(r2, r1, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

18:13:23 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00')
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="ce873bae82df37dbfcf9fcc3d2941702ff83b400c80b073bc738c42c4bb43ec1601d31f37e8930d32e91fa99407fd435a4e7843cabcdcde1ae3816c3cc9dd48fa028682af8bc4b95972038b173a9c3129b39fa410685a717c126b4be6cb86eeb1c41e399d31d3c6e006c9e0b0fbf4b16a3407f22289547e0fd338badf146c7cc55d98241b07880afb024c541c27ec2cbbe6ba8a8da089c4b39269656", @ANYRES16=r3, @ANYBLOB="0101400000000000000100c7c18b759531b266a30000000000a204000000000000"], 0x3}}, 0x0)
sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x80)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x71)
prlimit64(r0, 0x4, &(0x7f0000000000)={0x0, 0x5}, &(0x7f0000000240))
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x7ff, 0x97e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001]})
socket$netlink(0x10, 0x3, 0x0)
openat$nvram(0xffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x4101, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_RUN(r4, 0xae80, 0x0)

18:13:23 executing program 4:
r0 = socket(0x2000000011, 0x4000000000080002, 0x0)
sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8000)
socket$kcm(0x10, 0x2, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x9, 0x5, 0x1, 0x3fffffffffffd, 0xffffffffffffffff}, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r2, &(0x7f0000002b00)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x80)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5}, 0x0)
r5 = open(&(0x7f00000001c0)='./bus\x00', 0x161002, 0x20)
write$UHID_INPUT(r5, &(0x7f0000000980), 0x10a9)
r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r6, 0x4, 0x46000)
lseek(r6, 0x4200, 0x0)
creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0))

18:13:23 executing program 3:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x0, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
sendfile(r1, r4, 0x0, 0x80001d00c0d0)

18:13:23 executing program 0:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x200004)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)

18:13:23 executing program 1:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700)
splice(r0, 0x0, r3, 0x0, 0x100000800ffe0, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffc8f)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
splice(r0, 0x0, r2, 0x0, 0x1870b0a0, 0x0)

18:13:23 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000340)='user\x00', &(0x7f00000005c0)={'syz', 0x2}, &(0x7f0000000300)="ed", 0x1, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x3d})
keyctl$read(0xb, r0, &(0x7f0000000100)=""/5, 0x5)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r3, &(0x7f0000002bc0)=[{{&(0x7f00000001c0)=@ax25={{0x3, @null}, [@default, @netrom, @rose, @remote, @default, @rose, @netrom, @rose]}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000300)=""/81, 0x51}, {&(0x7f0000000440)=""/129, 0x81}], 0x2, &(0x7f0000000380)=""/21, 0x15}, 0x1}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/24, 0x18}], 0x1, &(0x7f0000000580)=""/100, 0x64}, 0x1de4}, {{&(0x7f00000006c0)=@nl=@proc, 0x80, &(0x7f0000002b40)=[{&(0x7f0000000740)=""/116, 0x74}, {&(0x7f0000000800)=""/187, 0xbb}, {&(0x7f00000019c0)=""/250, 0xfa}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/210, 0xd2}, {0x0}, {0x0}], 0x7}, 0x5}], 0x3, 0x0, 0x0)
pipe(&(0x7f0000000400)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
write(r5, &(0x7f0000000340), 0x41395527)
vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x68, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000540)='./file0\x00', 0x0, 0x881000, 0x0)
open(&(0x7f0000000500)='./file0\x00', 0x0, 0x140)

18:13:23 executing program 3:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x0, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
sendfile(r1, r4, 0x0, 0x80001d00c0d0)

18:13:23 executing program 0:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x200004)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)

18:13:24 executing program 3:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x0)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
sendfile(r1, r4, 0x0, 0x80001d00c0d0)

18:13:24 executing program 4:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x200004)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)

18:13:24 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00')
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="ce873bae82df37dbfcf9fcc3d2941702ff83b400c80b073bc738c42c4bb43ec1601d31f37e8930d32e91fa99407fd435a4e7843cabcdcde1ae3816c3cc9dd48fa028682af8bc4b95972038b173a9c3129b39fa410685a717c126b4be6cb86eeb1c41e399d31d3c6e006c9e0b0fbf4b16a3407f22289547e0fd338badf146c7cc55d98241b07880afb024c541c27ec2cbbe6ba8a8da089c4b39269656", @ANYRES16=r3, @ANYBLOB="0101400000000000000100c7c18b759531b266a30000000000a204000000000000"], 0x3}}, 0x0)
sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x80)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x71)
prlimit64(r0, 0x4, &(0x7f0000000000)={0x0, 0x5}, &(0x7f0000000240))
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x7ff, 0x97e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001]})
socket$netlink(0x10, 0x3, 0x0)
openat$nvram(0xffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x4101, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_RUN(r4, 0xae80, 0x0)

18:13:24 executing program 0:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x0, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x200004)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)

18:13:24 executing program 0:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x0, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x200004)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)

18:13:24 executing program 1:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0)
pipe(0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700)
splice(r0, 0x0, r2, 0x0, 0x100000800ffe0, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffc8f)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x1870b0a0, 0x0)

18:13:24 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000340)='user\x00', &(0x7f00000005c0)={'syz', 0x2}, &(0x7f0000000300)="ed", 0x1, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x3d})
keyctl$read(0xb, r0, &(0x7f0000000100)=""/5, 0x5)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r3, &(0x7f0000002bc0)=[{{&(0x7f00000001c0)=@ax25={{0x3, @null}, [@default, @netrom, @rose, @remote, @default, @rose, @netrom, @rose]}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000300)=""/81, 0x51}, {&(0x7f0000000440)=""/129, 0x81}], 0x2, &(0x7f0000000380)=""/21, 0x15}, 0x1}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/24, 0x18}], 0x1, &(0x7f0000000580)=""/100, 0x64}, 0x1de4}, {{&(0x7f00000006c0)=@nl=@proc, 0x80, &(0x7f0000002b40)=[{&(0x7f0000000740)=""/116, 0x74}, {&(0x7f0000000800)=""/187, 0xbb}, {&(0x7f00000019c0)=""/250, 0xfa}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/210, 0xd2}, {0x0}, {0x0}], 0x7}, 0x5}], 0x3, 0x0, 0x0)
pipe(&(0x7f0000000400)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
write(r5, &(0x7f0000000340), 0x41395527)
vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x68, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000540)='./file0\x00', 0x0, 0x881000, 0x0)
open(&(0x7f0000000500)='./file0\x00', 0x0, 0x140)

18:13:24 executing program 0:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x0, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x200004)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)

18:13:24 executing program 3:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x0)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
sendfile(r1, r4, 0x0, 0x80001d00c0d0)

18:13:24 executing program 4:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00')
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="ce873bae82df37dbfcf9fcc3d2941702ff83b400c80b073bc738c42c4bb43ec1601d31f37e8930d32e91fa99407fd435a4e7843cabcdcde1ae3816c3cc9dd48fa028682af8bc4b95972038b173a9c3129b39fa410685a717c126b4be6cb86eeb1c41e399d31d3c6e006c9e0b0fbf4b16a3407f22289547e0fd338badf146c7cc55d98241b07880afb024c541c27ec2cbbe6ba8a8da089c4b39269656", @ANYRES16=r3, @ANYBLOB="0101400000000000000100c7c18b759531b266a30000000000a204000000000000"], 0x3}}, 0x0)
sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x80)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x71)
prlimit64(r0, 0x4, &(0x7f0000000000)={0x0, 0x5}, &(0x7f0000000240))
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x7ff, 0x97e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001]})
socket$netlink(0x10, 0x3, 0x0)
openat$nvram(0xffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x4101, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_RUN(r4, 0xae80, 0x0)

18:13:24 executing program 0:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(0xffffffffffffffff)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x200004)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)

18:13:25 executing program 0:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(0xffffffffffffffff)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x200004)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)

18:13:25 executing program 3:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x0)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
sendfile(r1, r4, 0x0, 0x80001d00c0d0)

18:13:25 executing program 4:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x0, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x200004)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)

18:13:25 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00')
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="ce873bae82df37dbfcf9fcc3d2941702ff83b400c80b073bc738c42c4bb43ec1601d31f37e8930d32e91fa99407fd435a4e7843cabcdcde1ae3816c3cc9dd48fa028682af8bc4b95972038b173a9c3129b39fa410685a717c126b4be6cb86eeb1c41e399d31d3c6e006c9e0b0fbf4b16a3407f22289547e0fd338badf146c7cc55d98241b07880afb024c541c27ec2cbbe6ba8a8da089c4b39269656", @ANYRES16=r3, @ANYBLOB="0101400000000000000100c7c18b759531b266a30000000000a204000000000000"], 0x3}}, 0x0)
sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x80)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x71)
prlimit64(r0, 0x4, &(0x7f0000000000)={0x0, 0x5}, &(0x7f0000000240))
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x7ff, 0x97e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001]})
socket$netlink(0x10, 0x3, 0x0)
openat$nvram(0xffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x4101, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_RUN(r4, 0xae80, 0x0)

18:13:25 executing program 0:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(0xffffffffffffffff)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x200004)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)

18:13:25 executing program 1:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0)
pipe(0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700)
splice(r0, 0x0, r2, 0x0, 0x100000800ffe0, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffc8f)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x1870b0a0, 0x0)

18:13:25 executing program 4:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x200004)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)

18:13:25 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000340)='user\x00', &(0x7f00000005c0)={'syz', 0x2}, &(0x7f0000000300)="ed", 0x1, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x3d})
keyctl$read(0xb, r0, &(0x7f0000000100)=""/5, 0x5)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r3, &(0x7f0000002bc0)=[{{&(0x7f00000001c0)=@ax25={{0x3, @null}, [@default, @netrom, @rose, @remote, @default, @rose, @netrom, @rose]}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000300)=""/81, 0x51}, {&(0x7f0000000440)=""/129, 0x81}], 0x2, &(0x7f0000000380)=""/21, 0x15}, 0x1}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/24, 0x18}], 0x1, &(0x7f0000000580)=""/100, 0x64}, 0x1de4}, {{&(0x7f00000006c0)=@nl=@proc, 0x80, &(0x7f0000002b40)=[{&(0x7f0000000740)=""/116, 0x74}, {&(0x7f0000000800)=""/187, 0xbb}, {&(0x7f00000019c0)=""/250, 0xfa}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/210, 0xd2}, {0x0}, {0x0}], 0x7}, 0x5}], 0x3, 0x0, 0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x68, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000540)='./file0\x00', 0x0, 0x881000, 0x0)
open(&(0x7f0000000500)='./file0\x00', 0x0, 0x140)

18:13:25 executing program 0:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r2, 0x200004)
sendfile(r0, r2, 0x0, 0x80001d00c0d0)

18:13:25 executing program 3:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x200004)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)

18:13:25 executing program 0:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r2, 0x200004)
sendfile(r0, r2, 0x0, 0x80001d00c0d0)

18:13:25 executing program 0:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r2, 0x200004)
sendfile(r0, r2, 0x0, 0x80001d00c0d0)

18:13:25 executing program 0:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, 0x0, 0x0)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x200004)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)

18:13:25 executing program 0:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, 0x0, 0x0)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x200004)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)

18:13:25 executing program 3:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x200004)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)

18:13:26 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00')
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="ce873bae82df37dbfcf9fcc3d2941702ff83b400c80b073bc738c42c4bb43ec1601d31f37e8930d32e91fa99407fd435a4e7843cabcdcde1ae3816c3cc9dd48fa028682af8bc4b95972038b173a9c3129b39fa410685a717c126b4be6cb86eeb1c41e399d31d3c6e006c9e0b0fbf4b16a3407f22289547e0fd338badf146c7cc55d98241b07880afb024c541c27ec2cbbe6ba8a8da089c4b39269656", @ANYRES16=r3, @ANYBLOB="0101400000000000000100c7c18b759531b266a30000000000a204000000000000"], 0x3}}, 0x0)
sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x80)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x71)
prlimit64(r0, 0x4, &(0x7f0000000000)={0x0, 0x5}, &(0x7f0000000240))
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x7ff, 0x97e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001]})
socket$netlink(0x10, 0x3, 0x0)
openat$nvram(0xffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x4101, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r4, 0xae80, 0x0)

18:13:26 executing program 0:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, 0x0, 0x0)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x200004)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)

18:13:26 executing program 1:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0)
pipe(0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700)
splice(r0, 0x0, r2, 0x0, 0x100000800ffe0, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffc8f)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x1870b0a0, 0x0)

18:13:26 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYPTR64, @ANYRES64, @ANYPTR64, @ANYBLOB="66bd153d9fca1f3d4ada8d641bd79bfc8d335a6cb0c43799c3771dcf50", @ANYPTR64], 0x0, 0x3d}, 0x20)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000006c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$setpipe(r1, 0x407, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000000)={'mangle\x00', 0xc, "93da47352e6b082a6877c266"}, &(0x7f0000000140)=0x30)
tkill(r0, 0x33)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

18:13:26 executing program 0:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x200004)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)

18:13:26 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000340)='user\x00', &(0x7f00000005c0)={'syz', 0x2}, &(0x7f0000000300)="ed", 0x1, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x3d})
keyctl$read(0xb, r0, &(0x7f0000000100)=""/5, 0x5)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r3, &(0x7f0000002bc0)=[{{&(0x7f00000001c0)=@ax25={{0x3, @null}, [@default, @netrom, @rose, @remote, @default, @rose, @netrom, @rose]}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000300)=""/81, 0x51}, {&(0x7f0000000440)=""/129, 0x81}], 0x2, &(0x7f0000000380)=""/21, 0x15}, 0x1}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/24, 0x18}], 0x1, &(0x7f0000000580)=""/100, 0x64}, 0x1de4}, {{&(0x7f00000006c0)=@nl=@proc, 0x80, &(0x7f0000002b40)=[{&(0x7f0000000740)=""/116, 0x74}, {&(0x7f0000000800)=""/187, 0xbb}, {&(0x7f00000019c0)=""/250, 0xfa}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/210, 0xd2}, {0x0}, {0x0}], 0x7}, 0x5}], 0x3, 0x0, 0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x68, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000540)='./file0\x00', 0x0, 0x881000, 0x0)
open(&(0x7f0000000500)='./file0\x00', 0x0, 0x140)

18:13:26 executing program 3:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x200004)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)

18:13:26 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00')
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="ce873bae82df37dbfcf9fcc3d2941702ff83b400c80b073bc738c42c4bb43ec1601d31f37e8930d32e91fa99407fd435a4e7843cabcdcde1ae3816c3cc9dd48fa028682af8bc4b95972038b173a9c3129b39fa410685a717c126b4be6cb86eeb1c41e399d31d3c6e006c9e0b0fbf4b16a3407f22289547e0fd338badf146c7cc55d98241b07880afb024c541c27ec2cbbe6ba8a8da089c4b39269656", @ANYRES16=r3, @ANYBLOB="0101400000000000000100c7c18b759531b266a30000000000a204000000000000"], 0x3}}, 0x0)
sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x80)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x71)
prlimit64(r0, 0x4, &(0x7f0000000000)={0x0, 0x5}, &(0x7f0000000240))
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x7ff, 0x97e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001]})
socket$netlink(0x10, 0x3, 0x0)
openat$nvram(0xffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x4101, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r4, 0xae80, 0x0)

18:13:26 executing program 0:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x200004)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)

18:13:27 executing program 3:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
sendfile(r1, r4, 0x0, 0x80001d00c0d0)

18:13:27 executing program 1:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
splice(r0, 0x0, r3, 0x0, 0x100000800ffe0, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffc8f)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
splice(r0, 0x0, r2, 0x0, 0x1870b0a0, 0x0)

18:13:27 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000340)='user\x00', &(0x7f00000005c0)={'syz', 0x2}, &(0x7f0000000300)="ed", 0x1, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x3d})
keyctl$read(0xb, r0, &(0x7f0000000100)=""/5, 0x5)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r3, &(0x7f0000002bc0)=[{{&(0x7f00000001c0)=@ax25={{0x3, @null}, [@default, @netrom, @rose, @remote, @default, @rose, @netrom, @rose]}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000300)=""/81, 0x51}, {&(0x7f0000000440)=""/129, 0x81}], 0x2, &(0x7f0000000380)=""/21, 0x15}, 0x1}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/24, 0x18}], 0x1, &(0x7f0000000580)=""/100, 0x64}, 0x1de4}, {{&(0x7f00000006c0)=@nl=@proc, 0x80, &(0x7f0000002b40)=[{&(0x7f0000000740)=""/116, 0x74}, {&(0x7f0000000800)=""/187, 0xbb}, {&(0x7f00000019c0)=""/250, 0xfa}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/210, 0xd2}, {0x0}, {0x0}], 0x7}, 0x5}], 0x3, 0x0, 0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x68, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000540)='./file0\x00', 0x0, 0x881000, 0x0)
open(&(0x7f0000000500)='./file0\x00', 0x0, 0x140)

18:13:27 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00')
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="ce873bae82df37dbfcf9fcc3d2941702ff83b400c80b073bc738c42c4bb43ec1601d31f37e8930d32e91fa99407fd435a4e7843cabcdcde1ae3816c3cc9dd48fa028682af8bc4b95972038b173a9c3129b39fa410685a717c126b4be6cb86eeb1c41e399d31d3c6e006c9e0b0fbf4b16a3407f22289547e0fd338badf146c7cc55d98241b07880afb024c541c27ec2cbbe6ba8a8da089c4b39269656", @ANYRES16=r3, @ANYBLOB="0101400000000000000100c7c18b759531b266a30000000000a204000000000000"], 0x3}}, 0x0)
sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x80)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x71)
prlimit64(r0, 0x4, &(0x7f0000000000)={0x0, 0x5}, &(0x7f0000000240))
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x7ff, 0x97e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001]})
socket$netlink(0x10, 0x3, 0x0)
openat$nvram(0xffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x4101, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r4, 0xae80, 0x0)

18:13:27 executing program 0:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x200004)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)

18:13:27 executing program 3:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
sendfile(r1, r4, 0x0, 0x80001d00c0d0)

18:13:29 executing program 4:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00')
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="ce873bae82df37dbfcf9fcc3d2941702ff83b400c80b073bc738c42c4bb43ec1601d31f37e8930d32e91fa99407fd435a4e7843cabcdcde1ae3816c3cc9dd48fa028682af8bc4b95972038b173a9c3129b39fa410685a717c126b4be6cb86eeb1c41e399d31d3c6e006c9e0b0fbf4b16a3407f22289547e0fd338badf146c7cc55d98241b07880afb024c541c27ec2cbbe6ba8a8da089c4b39269656", @ANYRES16=r3, @ANYBLOB="0101400000000000000100c7c18b759531b266a30000000000a204000000000000"], 0x3}}, 0x0)
sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x80)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x71)
prlimit64(r0, 0x4, &(0x7f0000000000)={0x0, 0x5}, &(0x7f0000000240))
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x7ff, 0x97e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001]})
socket$netlink(0x10, 0x3, 0x0)
openat$nvram(0xffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x4101, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r4, 0xae80, 0x0)

18:13:29 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00')
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="ce873bae82df37dbfcf9fcc3d2941702ff83b400c80b073bc738c42c4bb43ec1601d31f37e8930d32e91fa99407fd435a4e7843cabcdcde1ae3816c3cc9dd48fa028682af8bc4b95972038b173a9c3129b39fa410685a717c126b4be6cb86eeb1c41e399d31d3c6e006c9e0b0fbf4b16a3407f22289547e0fd338badf146c7cc55d98241b07880afb024c541c27ec2cbbe6ba8a8da089c4b39269656", @ANYRES16=r3, @ANYBLOB="0101400000000000000100c7c18b759531b266a30000000000a204000000000000"], 0x3}}, 0x0)
sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x80)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x71)
prlimit64(r0, 0x4, &(0x7f0000000000)={0x0, 0x5}, &(0x7f0000000240))
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x7ff, 0x97e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001]})
socket$netlink(0x10, 0x3, 0x0)
openat$nvram(0xffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x4101, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r4, 0xae80, 0x0)

18:13:29 executing program 0:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}}}, 0x2e)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x200004)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)

18:13:29 executing program 3:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
sendfile(r1, r4, 0x0, 0x80001d00c0d0)

18:13:29 executing program 1:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
splice(r0, 0x0, r3, 0x0, 0x100000800ffe0, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffc8f)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
splice(r0, 0x0, r2, 0x0, 0x1870b0a0, 0x0)

18:13:29 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000340)='user\x00', &(0x7f00000005c0)={'syz', 0x2}, &(0x7f0000000300)="ed", 0x1, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x3d})
keyctl$read(0xb, r0, &(0x7f0000000100)=""/5, 0x5)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
pipe(&(0x7f0000000400)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x68, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000540)='./file0\x00', 0x0, 0x881000, 0x0)
open(&(0x7f0000000500)='./file0\x00', 0x0, 0x140)

18:13:29 executing program 0:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}}}, 0x2e)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x200004)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)

18:13:29 executing program 0:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}}}, 0x2e)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x200004)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)

18:13:29 executing program 0:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x200004)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)

18:13:29 executing program 3:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
sendfile(r1, r4, 0x0, 0x80001d00c0d0)

18:13:29 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000340)='user\x00', &(0x7f00000005c0)={'syz', 0x2}, &(0x7f0000000300)="ed", 0x1, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x3d})
keyctl$read(0xb, r0, &(0x7f0000000100)=""/5, 0x5)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
pipe(&(0x7f0000000400)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x68, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000540)='./file0\x00', 0x0, 0x881000, 0x0)
open(&(0x7f0000000500)='./file0\x00', 0x0, 0x140)

18:13:30 executing program 1:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
splice(r0, 0x0, r3, 0x0, 0x100000800ffe0, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffc8f)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
splice(r0, 0x0, r2, 0x0, 0x1870b0a0, 0x0)

18:13:30 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c)
sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0xa, 0x4e23, 0xe4, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}, 0x1c, &(0x7f0000000180)}, 0x44084)
sendmmsg(r0, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0}}], 0x400000000000107, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x22800, 0x0)
ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r1, 0xc0984124, &(0x7f0000000200))

18:13:30 executing program 0:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x200004)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)

18:13:30 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000340)='user\x00', &(0x7f00000005c0)={'syz', 0x2}, &(0x7f0000000300)="ed", 0x1, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x3d})
keyctl$read(0xb, r0, &(0x7f0000000100)=""/5, 0x5)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
pipe(&(0x7f0000000400)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x68, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000540)='./file0\x00', 0x0, 0x881000, 0x0)
open(&(0x7f0000000500)='./file0\x00', 0x0, 0x140)

18:13:30 executing program 3:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
sendfile(r1, r4, 0x0, 0x80001d00c0d0)

18:13:30 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00')
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="ce873bae82df37dbfcf9fcc3d2941702ff83b400c80b073bc738c42c4bb43ec1601d31f37e8930d32e91fa99407fd435a4e7843cabcdcde1ae3816c3cc9dd48fa028682af8bc4b95972038b173a9c3129b39fa410685a717c126b4be6cb86eeb1c41e399d31d3c6e006c9e0b0fbf4b16a3407f22289547e0fd338badf146c7cc55d98241b07880afb024c541c27ec2cbbe6ba8a8da089c4b39269656", @ANYRES16=r3, @ANYBLOB="0101400000000000000100c7c18b759531b266a30000000000a204000000000000"], 0x3}}, 0x0)
sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x80)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x71)
prlimit64(r0, 0x4, &(0x7f0000000000)={0x0, 0x5}, &(0x7f0000000240))
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x7ff, 0x97e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001]})
socket$netlink(0x10, 0x3, 0x0)
openat$nvram(0xffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x4101, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r4, 0xae80, 0x0)

18:13:31 executing program 3:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
sendfile(r1, r4, 0x0, 0x80001d00c0d0)

18:13:31 executing program 1:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700)
splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x100000800ffe0, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffc8f)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
splice(r0, 0x0, r2, 0x0, 0x1870b0a0, 0x0)

18:13:31 executing program 0:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x200004)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)

18:13:31 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000340)='user\x00', &(0x7f00000005c0)={'syz', 0x2}, &(0x7f0000000300)="ed", 0x1, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x3d})
keyctl$read(0xb, r0, &(0x7f0000000100)=""/5, 0x5)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{&(0x7f00000001c0)=@ax25={{0x3, @null}, [@default, @netrom, @rose, @remote, @default, @rose, @netrom, @rose]}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000300)=""/81, 0x51}, {&(0x7f0000000440)=""/129, 0x81}], 0x2, &(0x7f0000000380)=""/21, 0x15}, 0x1}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/24, 0x18}], 0x1, &(0x7f0000000580)=""/100, 0x64}, 0x1de4}, {{&(0x7f00000006c0)=@nl=@proc, 0x80, &(0x7f0000002b40)=[{&(0x7f0000000740)=""/116, 0x74}, {&(0x7f0000000800)=""/187, 0xbb}, {&(0x7f00000019c0)=""/250, 0xfa}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/210, 0xd2}, {0x0}, {0x0}], 0x7}, 0x5}], 0x3, 0x0, 0x0)
pipe(&(0x7f0000000400)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x68, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000540)='./file0\x00', 0x0, 0x881000, 0x0)
open(&(0x7f0000000500)='./file0\x00', 0x0, 0x140)

18:13:31 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c)
sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0xa, 0x4e23, 0xe4, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}, 0x1c, &(0x7f0000000180)}, 0x44084)
sendmmsg(r0, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0}}], 0x400000000000107, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x22800, 0x0)
ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r1, 0xc0984124, &(0x7f0000000200))

18:13:31 executing program 3:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x0, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
sendfile(r1, r4, 0x0, 0x80001d00c0d0)

18:13:31 executing program 0:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r2, 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x200004)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)

18:13:31 executing program 3:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x0, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
sendfile(r1, r4, 0x0, 0x80001d00c0d0)

18:13:31 executing program 4:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x200004)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)

18:13:31 executing program 1:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700)
splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x100000800ffe0, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffc8f)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
splice(r0, 0x0, r2, 0x0, 0x1870b0a0, 0x0)

18:13:32 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000340)='user\x00', &(0x7f00000005c0)={'syz', 0x2}, &(0x7f0000000300)="ed", 0x1, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x3d})
keyctl$read(0xb, r0, &(0x7f0000000100)=""/5, 0x5)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{&(0x7f00000001c0)=@ax25={{0x3, @null}, [@default, @netrom, @rose, @remote, @default, @rose, @netrom, @rose]}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000300)=""/81, 0x51}, {&(0x7f0000000440)=""/129, 0x81}], 0x2, &(0x7f0000000380)=""/21, 0x15}, 0x1}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/24, 0x18}], 0x1, &(0x7f0000000580)=""/100, 0x64}, 0x1de4}, {{&(0x7f00000006c0)=@nl=@proc, 0x80, &(0x7f0000002b40)=[{&(0x7f0000000740)=""/116, 0x74}, {&(0x7f0000000800)=""/187, 0xbb}, {&(0x7f00000019c0)=""/250, 0xfa}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/210, 0xd2}, {0x0}, {0x0}], 0x7}, 0x5}], 0x3, 0x0, 0x0)
pipe(&(0x7f0000000400)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x68, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000540)='./file0\x00', 0x0, 0x881000, 0x0)
open(&(0x7f0000000500)='./file0\x00', 0x0, 0x140)

18:13:32 executing program 3:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x0, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
sendfile(r1, r4, 0x0, 0x80001d00c0d0)

18:13:32 executing program 4:
r0 = socket(0x10, 0x80002, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="00000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00')
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r9, @ANYBLOB="00000016010000001800120008000100736974000c00020008000300", @ANYRES32=r10], 0x38}}, 0x0)
munlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x101000, 0x0)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x1c, r6, 0x411, 0x0, 0x0, {0x2}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x1c}}, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000004440)={{{@in=@multicast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0}}, {{@in6=@private0}, 0x0, @in6=@dev}}, &(0x7f0000004540)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newneigh={0x58, 0x1c, 0x300, 0x70bd2b, 0x25dfdbfd, {0xa, 0x0, 0x0, r4, 0x2, 0x8, 0x8}, [@NDA_IFINDEX={0x8, 0x8, r11}, @NDA_PORT={0x6, 0x6, 0x4e22}, @NDA_DST_IPV4={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x21}}, @NDA_DST_IPV6={0x14, 0x1, @remote}, @NDA_SRC_VNI={0x8, 0xb, 0x80200001}, @NDA_LINK_NETNSID={0x8, 0xa, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x8d0}, 0x4000040)

18:13:32 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00')
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="ce873bae82df37dbfcf9fcc3d2941702ff83b400c80b073bc738c42c4bb43ec1601d31f37e8930d32e91fa99407fd435a4e7843cabcdcde1ae3816c3cc9dd48fa028682af8bc4b95972038b173a9c3129b39fa410685a717c126b4be6cb86eeb1c41e399d31d3c6e006c9e0b0fbf4b16a3407f22289547e0fd338badf146c7cc55d98241b07880afb024c541c27ec2cbbe6ba8a8da089c4b39269656", @ANYRES16=r3, @ANYBLOB="0101400000000000000100c7c18b759531b266a30000000000a204000000000000"], 0x3}}, 0x0)
sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x80)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x71)
prlimit64(r0, 0x4, &(0x7f0000000000)={0x0, 0x5}, &(0x7f0000000240))
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x7ff, 0x97e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001]})
socket$netlink(0x10, 0x3, 0x0)
openat$nvram(0xffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x4101, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r4, 0xae80, 0x0)

18:13:32 executing program 0:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r2, 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x200004)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)

18:13:32 executing program 3:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(0xffffffffffffffff)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
sendfile(r1, r4, 0x0, 0x80001d00c0d0)

18:13:32 executing program 4:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00')
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="ce873bae82df37dbfcf9fcc3d2941702ff83b400c80b073bc738c42c4bb43ec1601d31f37e8930d32e91fa99407fd435a4e7843cabcdcde1ae3816c3cc9dd48fa028682af8bc4b95972038b173a9c3129b39fa410685a717c126b4be6cb86eeb1c41e399d31d3c6e006c9e0b0fbf4b16a3407f22289547e0fd338badf146c7cc55d98241b07880afb024c541c27ec2cbbe6ba8a8da089c4b39269656", @ANYRES16=r3, @ANYBLOB="0101400000000000000100c7c18b759531b266a30000000000a204000000000000"], 0x3}}, 0x0)
sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x80)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x71)
prlimit64(r0, 0x4, &(0x7f0000000000)={0x0, 0x5}, &(0x7f0000000240))
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x7ff, 0x97e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001]})
socket$netlink(0x10, 0x3, 0x0)
openat$nvram(0xffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x4101, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r4, 0xae80, 0x0)

18:13:32 executing program 3:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(0xffffffffffffffff)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
sendfile(r1, r4, 0x0, 0x80001d00c0d0)

18:13:32 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000340)='user\x00', &(0x7f00000005c0)={'syz', 0x2}, &(0x7f0000000300)="ed", 0x1, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x3d})
keyctl$read(0xb, r0, &(0x7f0000000100)=""/5, 0x5)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{&(0x7f00000001c0)=@ax25={{0x3, @null}, [@default, @netrom, @rose, @remote, @default, @rose, @netrom, @rose]}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000300)=""/81, 0x51}, {&(0x7f0000000440)=""/129, 0x81}], 0x2, &(0x7f0000000380)=""/21, 0x15}, 0x1}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/24, 0x18}], 0x1, &(0x7f0000000580)=""/100, 0x64}, 0x1de4}, {{&(0x7f00000006c0)=@nl=@proc, 0x80, &(0x7f0000002b40)=[{&(0x7f0000000740)=""/116, 0x74}, {&(0x7f0000000800)=""/187, 0xbb}, {&(0x7f00000019c0)=""/250, 0xfa}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/210, 0xd2}, {0x0}, {0x0}], 0x7}, 0x5}], 0x3, 0x0, 0x0)
pipe(&(0x7f0000000400)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x68, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000540)='./file0\x00', 0x0, 0x881000, 0x0)
open(&(0x7f0000000500)='./file0\x00', 0x0, 0x140)

18:13:32 executing program 3:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(0xffffffffffffffff)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
sendfile(r1, r4, 0x0, 0x80001d00c0d0)

18:13:32 executing program 1:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700)
splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x100000800ffe0, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffc8f)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
splice(r0, 0x0, r2, 0x0, 0x1870b0a0, 0x0)

18:13:32 executing program 3:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x200004)
sendfile(r1, r3, 0x0, 0x80001d00c0d0)

18:13:32 executing program 0:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r2, 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x200004)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)

18:13:33 executing program 3:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x200004)
sendfile(r1, r3, 0x0, 0x80001d00c0d0)

18:13:33 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00')
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="ce873bae82df37dbfcf9fcc3d2941702ff83b400c80b073bc738c42c4bb43ec1601d31f37e8930d32e91fa99407fd435a4e7843cabcdcde1ae3816c3cc9dd48fa028682af8bc4b95972038b173a9c3129b39fa410685a717c126b4be6cb86eeb1c41e399d31d3c6e006c9e0b0fbf4b16a3407f22289547e0fd338badf146c7cc55d98241b07880afb024c541c27ec2cbbe6ba8a8da089c4b39269656", @ANYRES16=r3, @ANYBLOB="0101400000000000000100c7c18b759531b266a30000000000a204000000000000"], 0x3}}, 0x0)
sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x80)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x71)
prlimit64(r0, 0x4, &(0x7f0000000000)={0x0, 0x5}, &(0x7f0000000240))
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x7ff, 0x97e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001]})
socket$netlink(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r4, 0xae80, 0x0)

18:13:33 executing program 3:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x200004)
sendfile(r1, r3, 0x0, 0x80001d00c0d0)

18:13:33 executing program 3:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, 0x0, 0x0)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
sendfile(r1, r4, 0x0, 0x80001d00c0d0)

18:13:33 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000340)='user\x00', &(0x7f00000005c0)={'syz', 0x2}, &(0x7f0000000300)="ed", 0x1, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x3d})
keyctl$read(0xb, r0, &(0x7f0000000100)=""/5, 0x5)
getpid()
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000002bc0)=[{{&(0x7f00000001c0)=@ax25={{0x3, @null}, [@default, @netrom, @rose, @remote, @default, @rose, @netrom, @rose]}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000300)=""/81, 0x51}, {&(0x7f0000000440)=""/129, 0x81}], 0x2, &(0x7f0000000380)=""/21, 0x15}, 0x1}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/24, 0x18}], 0x1, &(0x7f0000000580)=""/100, 0x64}, 0x1de4}, {{&(0x7f00000006c0)=@nl=@proc, 0x80, &(0x7f0000002b40)=[{&(0x7f0000000740)=""/116, 0x74}, {&(0x7f0000000800)=""/187, 0xbb}, {&(0x7f00000019c0)=""/250, 0xfa}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/210, 0xd2}, {0x0}, {0x0}], 0x7}, 0x5}], 0x3, 0x0, 0x0)
pipe(&(0x7f0000000400)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x68, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000540)='./file0\x00', 0x0, 0x881000, 0x0)
open(&(0x7f0000000500)='./file0\x00', 0x0, 0x140)

18:13:33 executing program 4:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r2, 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x200004)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)

18:13:33 executing program 3:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, 0x0, 0x0)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
sendfile(r1, r4, 0x0, 0x80001d00c0d0)

18:13:33 executing program 0:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r2, 0x0, 0x0)
r3 = open(0x0, 0x141042, 0x0)
ftruncate(r3, 0x200004)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)

18:13:33 executing program 3:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, 0x0, 0x0)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
sendfile(r1, r4, 0x0, 0x80001d00c0d0)

18:13:33 executing program 1:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700)
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x100000800ffe0, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffc8f)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
splice(r0, 0x0, r2, 0x0, 0x1870b0a0, 0x0)

18:13:33 executing program 0:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r2, 0x0, 0x0)
r3 = open(0x0, 0x141042, 0x0)
ftruncate(r3, 0x200004)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)

18:13:33 executing program 3:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
sendfile(r1, r4, 0x0, 0x80001d00c0d0)

18:13:33 executing program 0:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r2, 0x0, 0x0)
r3 = open(0x0, 0x141042, 0x0)
ftruncate(r3, 0x200004)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)

18:13:34 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00')
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="ce873bae82df37dbfcf9fcc3d2941702ff83b400c80b073bc738c42c4bb43ec1601d31f37e8930d32e91fa99407fd435a4e7843cabcdcde1ae3816c3cc9dd48fa028682af8bc4b95972038b173a9c3129b39fa410685a717c126b4be6cb86eeb1c41e399d31d3c6e006c9e0b0fbf4b16a3407f22289547e0fd338badf146c7cc55d98241b07880afb024c541c27ec2cbbe6ba8a8da089c4b39269656", @ANYRES16=r3, @ANYBLOB="0101400000000000000100c7c18b759531b266a30000000000a204000000000000"], 0x3}}, 0x0)
sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x80)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x71)
prlimit64(r0, 0x4, &(0x7f0000000000)={0x0, 0x5}, &(0x7f0000000240))
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x7ff, 0x97e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001]})
socket$netlink(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r4, 0xae80, 0x0)

18:13:34 executing program 0:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r2, 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
ftruncate(r3, 0x200004)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)

18:13:34 executing program 3:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
sendfile(r1, r4, 0x0, 0x80001d00c0d0)

18:13:34 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000340)='user\x00', &(0x7f00000005c0)={'syz', 0x2}, &(0x7f0000000300)="ed", 0x1, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x3d})
keyctl$read(0xb, r0, &(0x7f0000000100)=""/5, 0x5)
getpid()
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000002bc0)=[{{&(0x7f00000001c0)=@ax25={{0x3, @null}, [@default, @netrom, @rose, @remote, @default, @rose, @netrom, @rose]}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000300)=""/81, 0x51}, {&(0x7f0000000440)=""/129, 0x81}], 0x2, &(0x7f0000000380)=""/21, 0x15}, 0x1}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/24, 0x18}], 0x1, &(0x7f0000000580)=""/100, 0x64}, 0x1de4}, {{&(0x7f00000006c0)=@nl=@proc, 0x80, &(0x7f0000002b40)=[{&(0x7f0000000740)=""/116, 0x74}, {&(0x7f0000000800)=""/187, 0xbb}, {&(0x7f00000019c0)=""/250, 0xfa}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/210, 0xd2}, {0x0}, {0x0}], 0x7}, 0x5}], 0x3, 0x0, 0x0)
pipe(&(0x7f0000000400)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x68, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000540)='./file0\x00', 0x0, 0x881000, 0x0)
open(&(0x7f0000000500)='./file0\x00', 0x0, 0x140)

18:13:34 executing program 4:
r0 = getpid()
ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'})
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000b40)='NLBL_MGMT\x00')
sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x40, r1, 0x0, 0x70bd29, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x40}, 0x1, 0x0, 0x0, 0x84}, 0x40000)
sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x30, r1, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008801}, 0x4000)
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000000)=0x14)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0xfffffec6)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x3)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000000c0)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

18:13:34 executing program 0:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r2, 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
ftruncate(r3, 0x200004)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)

18:13:34 executing program 0:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r2, 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
ftruncate(r3, 0x200004)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)

18:13:34 executing program 1:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700)
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x100000800ffe0, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffc8f)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
splice(r0, 0x0, r2, 0x0, 0x1870b0a0, 0x0)

18:13:34 executing program 0:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r2, 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(0xffffffffffffffff, 0x200004)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)

18:13:34 executing program 0:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r2, 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(0xffffffffffffffff, 0x200004)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)

18:13:34 executing program 3:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
sendfile(r1, r4, 0x0, 0x80001d00c0d0)

18:13:34 executing program 0:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r2, 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(0xffffffffffffffff, 0x200004)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)

18:13:35 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00')
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="ce873bae82df37dbfcf9fcc3d2941702ff83b400c80b073bc738c42c4bb43ec1601d31f37e8930d32e91fa99407fd435a4e7843cabcdcde1ae3816c3cc9dd48fa028682af8bc4b95972038b173a9c3129b39fa410685a717c126b4be6cb86eeb1c41e399d31d3c6e006c9e0b0fbf4b16a3407f22289547e0fd338badf146c7cc55d98241b07880afb024c541c27ec2cbbe6ba8a8da089c4b39269656", @ANYRES16=r3, @ANYBLOB="0101400000000000000100c7c18b759531b266a30000000000a204000000000000"], 0x3}}, 0x0)
sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x80)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x71)
prlimit64(r0, 0x4, &(0x7f0000000000)={0x0, 0x5}, &(0x7f0000000240))
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x7ff, 0x97e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001]})
socket$netlink(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r4, 0xae80, 0x0)

18:13:35 executing program 0:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r2, 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x0)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)

18:13:35 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000340)='user\x00', &(0x7f00000005c0)={'syz', 0x2}, &(0x7f0000000300)="ed", 0x1, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x3d})
keyctl$read(0xb, r0, &(0x7f0000000100)=""/5, 0x5)
getpid()
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000002bc0)=[{{&(0x7f00000001c0)=@ax25={{0x3, @null}, [@default, @netrom, @rose, @remote, @default, @rose, @netrom, @rose]}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000300)=""/81, 0x51}, {&(0x7f0000000440)=""/129, 0x81}], 0x2, &(0x7f0000000380)=""/21, 0x15}, 0x1}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/24, 0x18}], 0x1, &(0x7f0000000580)=""/100, 0x64}, 0x1de4}, {{&(0x7f00000006c0)=@nl=@proc, 0x80, &(0x7f0000002b40)=[{&(0x7f0000000740)=""/116, 0x74}, {&(0x7f0000000800)=""/187, 0xbb}, {&(0x7f00000019c0)=""/250, 0xfa}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/210, 0xd2}, {0x0}, {0x0}], 0x7}, 0x5}], 0x3, 0x0, 0x0)
pipe(&(0x7f0000000400)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x68, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000540)='./file0\x00', 0x0, 0x881000, 0x0)
open(&(0x7f0000000500)='./file0\x00', 0x0, 0x140)

18:13:35 executing program 3:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}}}, 0x2e)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
sendfile(r1, r4, 0x0, 0x80001d00c0d0)

18:13:35 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000340), 0x0)
ftruncate(r0, 0x800799e)
mmap(&(0x7f00007e2000/0x4000)=nil, 0x4000, 0xa601, 0x8010, 0xffffffffffffffff, 0x0)
mount$fuseblk(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000000980)=ANY=[])
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00')
r2 = open(0x0, 0x0, 0x0)
fchdir(r2)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00')
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000000)={0x5e, @private=0xa010101, 0x4e24, 0x0, 'ovf\x00', 0x22, 0x7f, 0x3d}, 0x2c)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0)
syz_genetlink_get_family_id$ipvs(0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2)

18:13:35 executing program 3:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}}}, 0x2e)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
sendfile(r1, r4, 0x0, 0x80001d00c0d0)

18:13:35 executing program 0:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r2, 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x0)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)

18:13:35 executing program 3:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}}}, 0x2e)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
sendfile(r1, r4, 0x0, 0x80001d00c0d0)

18:13:35 executing program 1:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700)
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x100000800ffe0, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffc8f)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
splice(r0, 0x0, r2, 0x0, 0x1870b0a0, 0x0)

18:13:35 executing program 0:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r2, 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x0)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)

18:13:35 executing program 3:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
sendfile(r1, r4, 0x0, 0x80001d00c0d0)

18:13:35 executing program 0:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r2, 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x200004)
sendfile(0xffffffffffffffff, r3, 0x0, 0x80001d00c0d0)

18:13:36 executing program 0:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r2, 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x200004)
sendfile(0xffffffffffffffff, r3, 0x0, 0x80001d00c0d0)

18:13:36 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00')
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="ce873bae82df37dbfcf9fcc3d2941702ff83b400c80b073bc738c42c4bb43ec1601d31f37e8930d32e91fa99407fd435a4e7843cabcdcde1ae3816c3cc9dd48fa028682af8bc4b95972038b173a9c3129b39fa410685a717c126b4be6cb86eeb1c41e399d31d3c6e006c9e0b0fbf4b16a3407f22289547e0fd338badf146c7cc55d98241b07880afb024c541c27ec2cbbe6ba8a8da089c4b39269656", @ANYRES16=r3, @ANYBLOB="0101400000000000000100c7c18b759531b266a30000000000a204000000000000"], 0x3}}, 0x0)
sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x80)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x71)
prlimit64(r0, 0x4, &(0x7f0000000000)={0x0, 0x5}, &(0x7f0000000240))
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x7ff, 0x97e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001]})
openat$nvram(0xffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x4101, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r4, 0xae80, 0x0)

18:13:36 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000340)='user\x00', &(0x7f00000005c0)={'syz', 0x2}, &(0x7f0000000300)="ed", 0x1, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x3d})
keyctl$read(0xb, r0, &(0x7f0000000100)=""/5, 0x5)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000002bc0)=[{{&(0x7f00000001c0)=@ax25={{0x3, @null}, [@default, @netrom, @rose, @remote, @default, @rose, @netrom, @rose]}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000300)=""/81, 0x51}, {&(0x7f0000000440)=""/129, 0x81}], 0x2, &(0x7f0000000380)=""/21, 0x15}, 0x1}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/24, 0x18}], 0x1, &(0x7f0000000580)=""/100, 0x64}, 0x1de4}, {{&(0x7f00000006c0)=@nl=@proc, 0x80, &(0x7f0000002b40)=[{&(0x7f0000000740)=""/116, 0x74}, {&(0x7f0000000800)=""/187, 0xbb}, {&(0x7f00000019c0)=""/250, 0xfa}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/210, 0xd2}, {0x0}, {0x0}], 0x7}, 0x5}], 0x3, 0x0, 0x0)
pipe(&(0x7f0000000400)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x68, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000540)='./file0\x00', 0x0, 0x881000, 0x0)
open(&(0x7f0000000500)='./file0\x00', 0x0, 0x140)

18:13:36 executing program 4:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00')
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="ce873bae82df37dbfcf9fcc3d2941702ff83b400c80b073bc738c42c4bb43ec1601d31f37e8930d32e91fa99407fd435a4e7843cabcdcde1ae3816c3cc9dd48fa028682af8bc4b95972038b173a9c3129b39fa410685a717c126b4be6cb86eeb1c41e399d31d3c6e006c9e0b0fbf4b16a3407f22289547e0fd338badf146c7cc55d98241b07880afb024c541c27ec2cbbe6ba8a8da089c4b39269656", @ANYRES16=r3, @ANYBLOB="0101400000000000000100c7c18b759531b266a30000000000a204000000000000"], 0x3}}, 0x0)
sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x80)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x71)
prlimit64(r0, 0x4, &(0x7f0000000000)={0x0, 0x5}, &(0x7f0000000240))
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x7ff, 0x97e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001]})
socket$netlink(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r4, 0xae80, 0x0)

18:13:36 executing program 3:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
sendfile(r1, r4, 0x0, 0x80001d00c0d0)

18:13:36 executing program 0:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r2, 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x200004)
sendfile(0xffffffffffffffff, r3, 0x0, 0x80001d00c0d0)

18:13:36 executing program 0:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r2, 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x200004)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x80001d00c0d0)

18:13:36 executing program 1:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700)
splice(r0, 0x0, r3, 0x0, 0x0, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffc8f)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
splice(r0, 0x0, r2, 0x0, 0x1870b0a0, 0x0)

18:13:36 executing program 0:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r2, 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x200004)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x80001d00c0d0)

18:13:36 executing program 0:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r2, 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x200004)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x80001d00c0d0)

18:13:36 executing program 0:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r2, 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x200004)
sendfile(r0, r3, 0x0, 0x0)

18:13:36 executing program 3:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
sendfile(r1, r4, 0x0, 0x80001d00c0d0)

18:13:36 executing program 0:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r2, 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x200004)
sendfile(r0, r3, 0x0, 0x0)

18:13:37 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00')
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="ce873bae82df37dbfcf9fcc3d2941702ff83b400c80b073bc738c42c4bb43ec1601d31f37e8930d32e91fa99407fd435a4e7843cabcdcde1ae3816c3cc9dd48fa028682af8bc4b95972038b173a9c3129b39fa410685a717c126b4be6cb86eeb1c41e399d31d3c6e006c9e0b0fbf4b16a3407f22289547e0fd338badf146c7cc55d98241b07880afb024c541c27ec2cbbe6ba8a8da089c4b39269656", @ANYRES16=r3, @ANYBLOB="0101400000000000000100c7c18b759531b266a30000000000a204000000000000"], 0x3}}, 0x0)
sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x80)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x71)
prlimit64(r0, 0x4, &(0x7f0000000000)={0x0, 0x5}, &(0x7f0000000240))
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x7ff, 0x97e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001]})
openat$nvram(0xffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x4101, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r4, 0xae80, 0x0)

18:13:37 executing program 0:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r2, 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x200004)
sendfile(r0, r3, 0x0, 0x0)

18:13:37 executing program 4:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00')
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="ce873bae82df37dbfcf9fcc3d2941702ff83b400c80b073bc738c42c4bb43ec1601d31f37e8930d32e91fa99407fd435a4e7843cabcdcde1ae3816c3cc9dd48fa028682af8bc4b95972038b173a9c3129b39fa410685a717c126b4be6cb86eeb1c41e399d31d3c6e006c9e0b0fbf4b16a3407f22289547e0fd338badf146c7cc55d98241b07880afb024c541c27ec2cbbe6ba8a8da089c4b39269656", @ANYRES16=r3, @ANYBLOB="0101400000000000000100c7c18b759531b266a30000000000a204000000000000"], 0x3}}, 0x0)
sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x80)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x71)
prlimit64(r0, 0x4, &(0x7f0000000000)={0x0, 0x5}, &(0x7f0000000240))
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x7ff, 0x97e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001]})
openat$nvram(0xffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x4101, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r4, 0xae80, 0x0)

18:13:37 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000340)='user\x00', &(0x7f00000005c0)={'syz', 0x2}, &(0x7f0000000300)="ed", 0x1, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x3d})
keyctl$read(0xb, r0, &(0x7f0000000100)=""/5, 0x5)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000002bc0)=[{{&(0x7f00000001c0)=@ax25={{0x3, @null}, [@default, @netrom, @rose, @remote, @default, @rose, @netrom, @rose]}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000300)=""/81, 0x51}, {&(0x7f0000000440)=""/129, 0x81}], 0x2, &(0x7f0000000380)=""/21, 0x15}, 0x1}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/24, 0x18}], 0x1, &(0x7f0000000580)=""/100, 0x64}, 0x1de4}, {{&(0x7f00000006c0)=@nl=@proc, 0x80, &(0x7f0000002b40)=[{&(0x7f0000000740)=""/116, 0x74}, {&(0x7f0000000800)=""/187, 0xbb}, {&(0x7f00000019c0)=""/250, 0xfa}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/210, 0xd2}, {0x0}, {0x0}], 0x7}, 0x5}], 0x3, 0x0, 0x0)
pipe(&(0x7f0000000400)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x68, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000540)='./file0\x00', 0x0, 0x881000, 0x0)
open(&(0x7f0000000500)='./file0\x00', 0x0, 0x140)

18:13:37 executing program 1:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700)
splice(r0, 0x0, r3, 0x0, 0x0, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffc8f)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
splice(r0, 0x0, r2, 0x0, 0x1870b0a0, 0x0)

18:13:37 executing program 3:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, 0x0, 0x0)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
sendfile(r1, r4, 0x0, 0x80001d00c0d0)

18:13:37 executing program 0:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00')
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="ce873bae82df37dbfcf9fcc3d2941702ff83b400c80b073bc738c42c4bb43ec1601d31f37e8930d32e91fa99407fd435a4e7843cabcdcde1ae3816c3cc9dd48fa028682af8bc4b95972038b173a9c3129b39fa410685a717c126b4be6cb86eeb1c41e399d31d3c6e006c9e0b0fbf4b16a3407f22289547e0fd338badf146c7cc55d98241b07880afb024c541c27ec2cbbe6ba8a8da089c4b39269656", @ANYRES16=r3, @ANYBLOB="0101400000000000000100c7c18b759531b266a30000000000a204000000000000"], 0x3}}, 0x0)
sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x80)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x71)
prlimit64(r0, 0x4, &(0x7f0000000000)={0x0, 0x5}, &(0x7f0000000240))
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x7ff, 0x97e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001]})
openat$nvram(0xffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x4101, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r4, 0xae80, 0x0)

18:13:37 executing program 3:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, 0x0, 0x0)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
sendfile(r1, r4, 0x0, 0x80001d00c0d0)

18:13:38 executing program 3:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, 0x0, 0x0)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
sendfile(r1, r4, 0x0, 0x80001d00c0d0)

18:13:38 executing program 1:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700)
splice(r0, 0x0, r3, 0x0, 0x0, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffc8f)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
splice(r0, 0x0, r2, 0x0, 0x1870b0a0, 0x0)

18:13:38 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000340)='user\x00', &(0x7f00000005c0)={'syz', 0x2}, &(0x7f0000000300)="ed", 0x1, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x3d})
keyctl$read(0xb, r0, &(0x7f0000000100)=""/5, 0x5)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000002bc0)=[{{&(0x7f00000001c0)=@ax25={{0x3, @null}, [@default, @netrom, @rose, @remote, @default, @rose, @netrom, @rose]}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000300)=""/81, 0x51}, {&(0x7f0000000440)=""/129, 0x81}], 0x2, &(0x7f0000000380)=""/21, 0x15}, 0x1}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/24, 0x18}], 0x1, &(0x7f0000000580)=""/100, 0x64}, 0x1de4}, {{&(0x7f00000006c0)=@nl=@proc, 0x80, &(0x7f0000002b40)=[{&(0x7f0000000740)=""/116, 0x74}, {&(0x7f0000000800)=""/187, 0xbb}, {&(0x7f00000019c0)=""/250, 0xfa}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/210, 0xd2}, {0x0}, {0x0}], 0x7}, 0x5}], 0x3, 0x0, 0x0)
pipe(&(0x7f0000000400)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x68, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000540)='./file0\x00', 0x0, 0x881000, 0x0)
open(&(0x7f0000000500)='./file0\x00', 0x0, 0x140)

18:13:38 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00')
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="ce873bae82df37dbfcf9fcc3d2941702ff83b400c80b073bc738c42c4bb43ec1601d31f37e8930d32e91fa99407fd435a4e7843cabcdcde1ae3816c3cc9dd48fa028682af8bc4b95972038b173a9c3129b39fa410685a717c126b4be6cb86eeb1c41e399d31d3c6e006c9e0b0fbf4b16a3407f22289547e0fd338badf146c7cc55d98241b07880afb024c541c27ec2cbbe6ba8a8da089c4b39269656", @ANYRES16=r3, @ANYBLOB="0101400000000000000100c7c18b759531b266a30000000000a204000000000000"], 0x3}}, 0x0)
sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x80)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x71)
prlimit64(r0, 0x4, &(0x7f0000000000)={0x0, 0x5}, &(0x7f0000000240))
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x7ff, 0x97e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001]})
openat$nvram(0xffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x4101, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r4, 0xae80, 0x0)

18:13:38 executing program 3:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
sendfile(r1, r4, 0x0, 0x80001d00c0d0)

18:13:39 executing program 1:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700)
splice(r0, 0x0, r2, 0x0, 0x100000800ffe0, 0x0)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfffffc8f)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
splice(r0, 0x0, r1, 0x0, 0x1870b0a0, 0x0)

18:13:39 executing program 4:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00')
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="ce873bae82df37dbfcf9fcc3d2941702ff83b400c80b073bc738c42c4bb43ec1601d31f37e8930d32e91fa99407fd435a4e7843cabcdcde1ae3816c3cc9dd48fa028682af8bc4b95972038b173a9c3129b39fa410685a717c126b4be6cb86eeb1c41e399d31d3c6e006c9e0b0fbf4b16a3407f22289547e0fd338badf146c7cc55d98241b07880afb024c541c27ec2cbbe6ba8a8da089c4b39269656", @ANYRES16=r3, @ANYBLOB="0101400000000000000100c7c18b759531b266a30000000000a204000000000000"], 0x3}}, 0x0)
sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x80)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x71)
prlimit64(r0, 0x4, &(0x7f0000000000)={0x0, 0x5}, &(0x7f0000000240))
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x7ff, 0x97e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001]})
openat$nvram(0xffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x4101, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r4, 0xae80, 0x0)

18:13:39 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00')
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="ce873bae82df37dbfcf9fcc3d2941702ff83b400c80b073bc738c42c4bb43ec1601d31f37e8930d32e91fa99407fd435a4e7843cabcdcde1ae3816c3cc9dd48fa028682af8bc4b95972038b173a9c3129b39fa410685a717c126b4be6cb86eeb1c41e399d31d3c6e006c9e0b0fbf4b16a3407f22289547e0fd338badf146c7cc55d98241b07880afb024c541c27ec2cbbe6ba8a8da089c4b39269656", @ANYRES16=r3, @ANYBLOB="0101400000000000000100c7c18b759531b266a30000000000a204000000000000"], 0x3}}, 0x0)
sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x80)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x71)
prlimit64(r0, 0x4, &(0x7f0000000000)={0x0, 0x5}, &(0x7f0000000240))
openat$nvram(0xffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x4101, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r4, 0xae80, 0x0)

18:13:39 executing program 3:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
sendfile(r1, r4, 0x0, 0x80001d00c0d0)

18:13:39 executing program 0:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00')
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="ce873bae82df37dbfcf9fcc3d2941702ff83b400c80b073bc738c42c4bb43ec1601d31f37e8930d32e91fa99407fd435a4e7843cabcdcde1ae3816c3cc9dd48fa028682af8bc4b95972038b173a9c3129b39fa410685a717c126b4be6cb86eeb1c41e399d31d3c6e006c9e0b0fbf4b16a3407f22289547e0fd338badf146c7cc55d98241b07880afb024c541c27ec2cbbe6ba8a8da089c4b39269656", @ANYRES16=r3, @ANYBLOB="0101400000000000000100c7c18b759531b266a30000000000a204000000000000"], 0x3}}, 0x0)
sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x80)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x71)
prlimit64(r0, 0x4, &(0x7f0000000000)={0x0, 0x5}, &(0x7f0000000240))
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x7ff, 0x97e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001]})
openat$nvram(0xffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x4101, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r4, 0xae80, 0x0)

18:13:39 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000340)='user\x00', &(0x7f00000005c0)={'syz', 0x2}, &(0x7f0000000300)="ed", 0x1, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x3d})
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r3, &(0x7f0000002bc0)=[{{&(0x7f00000001c0)=@ax25={{0x3, @null}, [@default, @netrom, @rose, @remote, @default, @rose, @netrom, @rose]}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000300)=""/81, 0x51}, {&(0x7f0000000440)=""/129, 0x81}], 0x2, &(0x7f0000000380)=""/21, 0x15}, 0x1}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/24, 0x18}], 0x1, &(0x7f0000000580)=""/100, 0x64}, 0x1de4}, {{&(0x7f00000006c0)=@nl=@proc, 0x80, &(0x7f0000002b40)=[{&(0x7f0000000740)=""/116, 0x74}, {&(0x7f0000000800)=""/187, 0xbb}, {&(0x7f00000019c0)=""/250, 0xfa}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/210, 0xd2}, {0x0}, {0x0}], 0x7}, 0x5}], 0x3, 0x0, 0x0)
pipe(&(0x7f0000000400)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x68, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000540)='./file0\x00', 0x0, 0x881000, 0x0)
open(&(0x7f0000000500)='./file0\x00', 0x0, 0x140)

18:13:39 executing program 3:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
sendfile(r1, r4, 0x0, 0x80001d00c0d0)

18:13:39 executing program 1:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700)
splice(r0, 0x0, r2, 0x0, 0x100000800ffe0, 0x0)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfffffc8f)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
splice(r0, 0x0, r1, 0x0, 0x1870b0a0, 0x0)

18:13:40 executing program 3:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r4 = open(0x0, 0x141042, 0x0)
ftruncate(r4, 0x200004)
sendfile(r1, r4, 0x0, 0x80001d00c0d0)

18:13:40 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000340)='user\x00', &(0x7f00000005c0)={'syz', 0x2}, &(0x7f0000000300)="ed", 0x1, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x3d})
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r3, &(0x7f0000002bc0)=[{{&(0x7f00000001c0)=@ax25={{0x3, @null}, [@default, @netrom, @rose, @remote, @default, @rose, @netrom, @rose]}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000300)=""/81, 0x51}, {&(0x7f0000000440)=""/129, 0x81}], 0x2, &(0x7f0000000380)=""/21, 0x15}, 0x1}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/24, 0x18}], 0x1, &(0x7f0000000580)=""/100, 0x64}, 0x1de4}, {{&(0x7f00000006c0)=@nl=@proc, 0x80, &(0x7f0000002b40)=[{&(0x7f0000000740)=""/116, 0x74}, {&(0x7f0000000800)=""/187, 0xbb}, {&(0x7f00000019c0)=""/250, 0xfa}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/210, 0xd2}, {0x0}, {0x0}], 0x7}, 0x5}], 0x3, 0x0, 0x0)
pipe(&(0x7f0000000400)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x68, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000540)='./file0\x00', 0x0, 0x881000, 0x0)
open(&(0x7f0000000500)='./file0\x00', 0x0, 0x140)

18:13:40 executing program 3:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r4 = open(0x0, 0x141042, 0x0)
ftruncate(r4, 0x200004)
sendfile(r1, r4, 0x0, 0x80001d00c0d0)

18:13:40 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00')
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="ce873bae82df37dbfcf9fcc3d2941702ff83b400c80b073bc738c42c4bb43ec1601d31f37e8930d32e91fa99407fd435a4e7843cabcdcde1ae3816c3cc9dd48fa028682af8bc4b95972038b173a9c3129b39fa410685a717c126b4be6cb86eeb1c41e399d31d3c6e006c9e0b0fbf4b16a3407f22289547e0fd338badf146c7cc55d98241b07880afb024c541c27ec2cbbe6ba8a8da089c4b39269656", @ANYRES16=r3, @ANYBLOB="0101400000000000000100c7c18b759531b266a30000000000a204000000000000"], 0x3}}, 0x0)
sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x80)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x71)
prlimit64(r0, 0x4, &(0x7f0000000000)={0x0, 0x5}, &(0x7f0000000240))
openat$nvram(0xffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x4101, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r4, 0xae80, 0x0)

18:13:40 executing program 3:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r4 = open(0x0, 0x141042, 0x0)
ftruncate(r4, 0x200004)
sendfile(r1, r4, 0x0, 0x80001d00c0d0)

18:13:40 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000340)='user\x00', &(0x7f00000005c0)={'syz', 0x2}, &(0x7f0000000300)="ed", 0x1, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x3d})
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r3, &(0x7f0000002bc0)=[{{&(0x7f00000001c0)=@ax25={{0x3, @null}, [@default, @netrom, @rose, @remote, @default, @rose, @netrom, @rose]}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000300)=""/81, 0x51}, {&(0x7f0000000440)=""/129, 0x81}], 0x2, &(0x7f0000000380)=""/21, 0x15}, 0x1}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/24, 0x18}], 0x1, &(0x7f0000000580)=""/100, 0x64}, 0x1de4}, {{&(0x7f00000006c0)=@nl=@proc, 0x80, &(0x7f0000002b40)=[{&(0x7f0000000740)=""/116, 0x74}, {&(0x7f0000000800)=""/187, 0xbb}, {&(0x7f00000019c0)=""/250, 0xfa}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/210, 0xd2}, {0x0}, {0x0}], 0x7}, 0x5}], 0x3, 0x0, 0x0)
pipe(&(0x7f0000000400)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x68, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000540)='./file0\x00', 0x0, 0x881000, 0x0)
open(&(0x7f0000000500)='./file0\x00', 0x0, 0x140)

18:13:40 executing program 3:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
ftruncate(r4, 0x200004)
sendfile(r1, r4, 0x0, 0x80001d00c0d0)

18:13:40 executing program 3:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
ftruncate(r4, 0x200004)
sendfile(r1, r4, 0x0, 0x80001d00c0d0)

18:13:40 executing program 0 (fault-call:11 fault-nth:0):
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r2, 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x200004)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)

18:13:40 executing program 3:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
ftruncate(r4, 0x200004)
sendfile(r1, r4, 0x0, 0x80001d00c0d0)

18:13:40 executing program 1:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700)
splice(r0, 0x0, r2, 0x0, 0x100000800ffe0, 0x0)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfffffc8f)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
splice(r0, 0x0, r1, 0x0, 0x1870b0a0, 0x0)

18:13:40 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000340)='user\x00', &(0x7f00000005c0)={'syz', 0x2}, &(0x7f0000000300)="ed", 0x1, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x3d})
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r3, &(0x7f0000002bc0)=[{{&(0x7f00000001c0)=@ax25={{0x3, @null}, [@default, @netrom, @rose, @remote, @default, @rose, @netrom, @rose]}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000300)=""/81, 0x51}, {&(0x7f0000000440)=""/129, 0x81}], 0x2, &(0x7f0000000380)=""/21, 0x15}, 0x1}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/24, 0x18}], 0x1, &(0x7f0000000580)=""/100, 0x64}, 0x1de4}, {{&(0x7f00000006c0)=@nl=@proc, 0x80, &(0x7f0000002b40)=[{&(0x7f0000000740)=""/116, 0x74}, {&(0x7f0000000800)=""/187, 0xbb}, {&(0x7f00000019c0)=""/250, 0xfa}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/210, 0xd2}, {0x0}, {0x0}], 0x7}, 0x5}], 0x3, 0x0, 0x0)
pipe(&(0x7f0000000400)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x68, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000540)='./file0\x00', 0x0, 0x881000, 0x0)
open(&(0x7f0000000500)='./file0\x00', 0x0, 0x140)

18:13:40 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00')
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="ce873bae82df37dbfcf9fcc3d2941702ff83b400c80b073bc738c42c4bb43ec1601d31f37e8930d32e91fa99407fd435a4e7843cabcdcde1ae3816c3cc9dd48fa028682af8bc4b95972038b173a9c3129b39fa410685a717c126b4be6cb86eeb1c41e399d31d3c6e006c9e0b0fbf4b16a3407f22289547e0fd338badf146c7cc55d98241b07880afb024c541c27ec2cbbe6ba8a8da089c4b39269656", @ANYRES16=r3, @ANYBLOB="0101400000000000000100c7c18b759531b266a30000000000a204000000000000"], 0x3}}, 0x0)
sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x80)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x71)
prlimit64(r0, 0x4, &(0x7f0000000000)={0x0, 0x5}, &(0x7f0000000240))
openat$nvram(0xffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x4101, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r4, 0xae80, 0x0)

[  243.474935] FAULT_INJECTION: forcing a failure.
[  243.474935] name failslab, interval 1, probability 0, space 0, times 1
[  243.492618] CPU: 1 PID: 10796 Comm: syz-executor.0 Not tainted 4.14.176-syzkaller #0
[  243.500798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  243.510166] Call Trace:
[  243.512867]  dump_stack+0x13e/0x194
[  243.516634]  should_fail.cold+0x10a/0x14b
[  243.520883]  should_failslab+0xd6/0x130
[  243.524994]  kmem_cache_alloc_trace+0x2db/0x7b0
[  243.529764]  ? inode_has_perm.isra.0+0x153/0x1d0
[  243.534607]  alloc_pipe_info+0xaa/0x380
[  243.538781]  splice_direct_to_actor+0x581/0x730
[  243.543472]  ? generic_pipe_buf_nosteal+0x10/0x10
[  243.548357]  ? do_splice_to+0x150/0x150
[  243.552430]  ? rw_verify_area+0xe1/0x2a0
[  243.556565]  do_splice_direct+0x164/0x210
[  243.560727]  ? splice_direct_to_actor+0x730/0x730
[  243.565589]  ? rw_verify_area+0xe1/0x2a0
[  243.569656]  do_sendfile+0x469/0xaf0
[  243.573399]  ? do_compat_pwritev64+0x140/0x140
[  243.577983]  SyS_sendfile64+0xff/0x110
[  243.581870]  ? SyS_sendfile+0x130/0x130
[  243.585843]  ? do_syscall_64+0x4c/0x640
[  243.589810]  ? SyS_sendfile+0x130/0x130
[  243.593792]  do_syscall_64+0x1d5/0x640
[  243.597790]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  243.603358] RIP: 0033:0x45c889
[  243.606544] RSP: 002b:00007fd268177c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  243.614255] RAX: ffffffffffffffda RBX: 00007fd2681786d4 RCX: 000000000045c889
18:13:41 executing program 3:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(0xffffffffffffffff, 0x200004)
sendfile(r1, r4, 0x0, 0x80001d00c0d0)

[  243.621541] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004
[  243.628825] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000
[  243.636118] R10: 000080001d00c0d0 R11: 0000000000000246 R12: 0000000000000007
[  243.643392] R13: 00000000000008d6 R14: 00000000004cb7ee R15: 0000000000000000
18:13:41 executing program 4:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
dup3(r1, r0, 0x0)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000ac0)=@sack_info={0x0, 0x0, 0x8001}, 0xc)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000006400)=[{{&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)=""/59, 0x3b}, {&(0x7f00000001c0)=""/6, 0x6}], 0x2, &(0x7f0000000300)=""/40, 0x28}, 0x800}, {{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/124, 0x7c}, {&(0x7f0000000480)=""/173, 0xad}, {&(0x7f0000000540)=""/7, 0x7}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/28, 0x1c}], 0x5, &(0x7f0000001640)=""/91, 0x5b}, 0x8}, {{&(0x7f00000016c0)=@nl=@proc, 0x80, 0x0, 0x0, &(0x7f0000001980)=""/96, 0x60}, 0x5}, {{&(0x7f0000001a00)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000002040)=[{&(0x7f0000001b80)=""/244, 0xf4}, {&(0x7f0000001c80)=""/217, 0xd9}, {&(0x7f0000001e80)=""/102, 0x66}, {&(0x7f0000002680)=""/117, 0x75}, {&(0x7f0000001f80)=""/129, 0x81}], 0x5}, 0xa6}, {{&(0x7f00000020c0)=@nl=@proc, 0x80, &(0x7f0000002400)=[{&(0x7f0000002a40)=""/93, 0x5d}, {&(0x7f00000021c0)=""/47, 0x2f}, {&(0x7f0000002200)=""/197, 0xc5}, {&(0x7f0000002300)=""/205, 0xcd}], 0x4, &(0x7f0000002440)=""/11, 0xb}, 0xffff}, {{&(0x7f0000002480)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f00000027c0)=[{&(0x7f0000002500)=""/86, 0x56}, {&(0x7f0000002580)=""/54, 0x36}, {&(0x7f00000025c0)=""/100, 0x64}, {&(0x7f0000002640)=""/31, 0x1f}, {&(0x7f0000002900)=""/135, 0x87}, {&(0x7f0000002740)=""/66, 0x42}], 0x6, &(0x7f0000002840)=""/175, 0xaf}, 0x3ff}, {{0x0, 0x0, &(0x7f0000003f80), 0x0, &(0x7f0000004040)=""/200, 0xc8}}, {{0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000004140)=""/116, 0x74}, {0x0}, {0x0}], 0x3, &(0x7f00000029c0)=""/104, 0x68}, 0x7ff}], 0x8, 0x0, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e0000003000050ad22780648c6394fb0107fc001007b8400c000200053582c137153e4439d8b95a7418b346bb37", 0x2e}], 0x1}, 0x0)
ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f0000000040))
r4 = open(&(0x7f0000000000)='./bus\x00', 0x511042, 0xee958e3b0015d030)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc)
ftruncate(r4, 0x600004)
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r6 = dup(r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
sendfile(r0, r4, 0x0, 0x80001d00c0d0)

18:13:41 executing program 0 (fault-call:11 fault-nth:1):
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r2, 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x200004)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)

18:13:41 executing program 3:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(0xffffffffffffffff, 0x200004)
sendfile(r1, r4, 0x0, 0x80001d00c0d0)

18:13:41 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00')
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="ce873bae82df37dbfcf9fcc3d2941702ff83b400c80b073bc738c42c4bb43ec1601d31f37e8930d32e91fa99407fd435a4e7843cabcdcde1ae3816c3cc9dd48fa028682af8bc4b95972038b173a9c3129b39fa410685a717c126b4be6cb86eeb1c41e399d31d3c6e006c9e0b0fbf4b16a3407f22289547e0fd338badf146c7cc55d98241b07880afb024c541c27ec2cbbe6ba8a8da089c4b39269656", @ANYRES16=r3, @ANYBLOB="0101400000000000000100c7c18b759531b266a30000000000a204000000000000"], 0x3}}, 0x0)
sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x80)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x71)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x7ff, 0x97e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001]})
openat$nvram(0xffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x4101, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r4, 0xae80, 0x0)

[  244.025166] FAULT_INJECTION: forcing a failure.
[  244.025166] name failslab, interval 1, probability 0, space 0, times 0
[  244.040755] CPU: 1 PID: 10817 Comm: syz-executor.0 Not tainted 4.14.176-syzkaller #0
[  244.049473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  244.058921] Call Trace:
[  244.061527]  dump_stack+0x13e/0x194
[  244.065172]  should_fail.cold+0x10a/0x14b
[  244.069343]  should_failslab+0xd6/0x130
18:13:41 executing program 3:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(0xffffffffffffffff, 0x200004)
sendfile(r1, r4, 0x0, 0x80001d00c0d0)

[  244.073331]  __kmalloc+0x2e9/0x7c0
[  244.076883]  ? kmem_cache_alloc_trace+0x63e/0x7b0
[  244.081730]  ? alloc_pipe_info+0x156/0x380
[  244.086065]  ? inode_has_perm.isra.0+0x153/0x1d0
[  244.091531]  alloc_pipe_info+0x156/0x380
[  244.095600]  splice_direct_to_actor+0x581/0x730
[  244.100282]  ? generic_pipe_buf_nosteal+0x10/0x10
[  244.105153]  ? do_splice_to+0x150/0x150
[  244.109138]  ? rw_verify_area+0xe1/0x2a0
[  244.113295]  do_splice_direct+0x164/0x210
[  244.117455]  ? splice_direct_to_actor+0x730/0x730
[  244.122460]  ? rw_verify_area+0xe1/0x2a0
[  244.126534]  do_sendfile+0x469/0xaf0
[  244.130524]  ? do_compat_pwritev64+0x140/0x140
[  244.135129]  SyS_sendfile64+0xff/0x110
[  244.139038]  ? SyS_sendfile+0x130/0x130
[  244.143022]  ? do_syscall_64+0x4c/0x640
[  244.147003]  ? SyS_sendfile+0x130/0x130
[  244.150987]  do_syscall_64+0x1d5/0x640
[  244.154888]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  244.160079] RIP: 0033:0x45c889
[  244.163268] RSP: 002b:00007fd268177c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  244.170985] RAX: ffffffffffffffda RBX: 00007fd2681786d4 RCX: 000000000045c889
[  244.178262] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004
[  244.185537] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000
[  244.192810] R10: 000080001d00c0d0 R11: 0000000000000246 R12: 0000000000000007
[  244.200091] R13: 00000000000008d6 R14: 00000000004cb7ee R15: 0000000000000001
[  244.221642] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'.
18:13:41 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe)
add_key$user(&(0x7f0000000340)='user\x00', &(0x7f00000005c0)={'syz', 0x2}, &(0x7f0000000300)="ed", 0x1, 0xfffffffffffffffd)
keyctl$read(0xb, r0, &(0x7f0000000100)=""/5, 0x5)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000002bc0)=[{{&(0x7f00000001c0)=@ax25={{0x3, @null}, [@default, @netrom, @rose, @remote, @default, @rose, @netrom, @rose]}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000300)=""/81, 0x51}, {&(0x7f0000000440)=""/129, 0x81}], 0x2, &(0x7f0000000380)=""/21, 0x15}, 0x1}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/24, 0x18}], 0x1, &(0x7f0000000580)=""/100, 0x64}, 0x1de4}, {{&(0x7f00000006c0)=@nl=@proc, 0x80, &(0x7f0000002b40)=[{&(0x7f0000000740)=""/116, 0x74}, {&(0x7f0000000800)=""/187, 0xbb}, {&(0x7f00000019c0)=""/250, 0xfa}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/210, 0xd2}, {0x0}, {0x0}], 0x7}, 0x5}], 0x3, 0x0, 0x0)
pipe(&(0x7f0000000400)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x68, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000540)='./file0\x00', 0x0, 0x881000, 0x0)
open(&(0x7f0000000500)='./file0\x00', 0x0, 0x140)

18:13:41 executing program 1:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700)
splice(r0, 0x0, r3, 0x0, 0x100000800ffe0, 0x0)
write$binfmt_misc(r1, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
splice(r0, 0x0, r2, 0x0, 0x1870b0a0, 0x0)

18:13:41 executing program 3:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x0)
sendfile(r1, r4, 0x0, 0x80001d00c0d0)

18:13:41 executing program 0 (fault-call:11 fault-nth:2):
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r2, 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x200004)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)

[  244.381595] FAULT_INJECTION: forcing a failure.
[  244.381595] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  244.381605] CPU: 1 PID: 10841 Comm: syz-executor.0 Not tainted 4.14.176-syzkaller #0
[  244.381614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  244.410757] Call Trace:
[  244.413356]  dump_stack+0x13e/0x194
[  244.416991]  should_fail.cold+0x10a/0x14b
[  244.421508]  __alloc_pages_nodemask+0x1bf/0x700
[  244.426275]  ? save_trace+0x290/0x290
[  244.430093]  ? __alloc_pages_slowpath+0x26c0/0x26c0
[  244.435121]  ? find_held_lock+0x2d/0x110
[  244.439194]  ? __do_page_cache_readahead+0x28e/0xa20
[  244.444455]  alloc_pages_current+0xe7/0x1e0
[  244.448839]  __page_cache_alloc+0x245/0x3d0
[  244.453176]  __do_page_cache_readahead+0x2d9/0xa20
[  244.458124]  ? save_trace+0x290/0x290
[  244.462140]  ? read_cache_pages+0x690/0x690
[  244.466463]  ? find_get_entry+0x21d/0x690
[  244.470633]  ? lock_downgrade+0x6e0/0x6e0
[  244.475059]  ? ondemand_readahead+0x516/0xb60
[  244.479559]  ondemand_readahead+0x516/0xb60
[  244.483906]  page_cache_sync_readahead+0xa6/0xf0
[  244.488676]  generic_file_read_iter+0x1365/0x26c0
[  244.493525]  ? kasan_kmalloc+0xbf/0xe0
[  244.497424]  ? splice_direct_to_actor+0x581/0x730
[  244.502537]  ? SyS_sendfile64+0xff/0x110
[  244.506610]  ? entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  244.512086]  ? filemap_range_has_page+0x2c0/0x2c0
[  244.516943]  ? trace_hardirqs_on+0x10/0x10
[  244.521186]  ? lock_acquire+0x170/0x3f0
[  244.525165]  ? lock_downgrade+0x6e0/0x6e0
[  244.529326]  ? save_trace+0x290/0x290
[  244.533142]  ? save_trace+0x290/0x290
[  244.537019]  ? fsnotify+0x897/0x1110
[  244.540846]  ext4_file_read_iter+0x14b/0x330
[  244.545275]  generic_file_splice_read+0x374/0x5d0
[  244.550224]  ? add_to_pipe+0x350/0x350
[  244.554132]  ? avc_policy_seqno+0x5/0x10
[  244.558199]  ? selinux_file_permission+0x7a/0x440
[  244.563055]  ? rw_verify_area+0xe1/0x2a0
[  244.567128]  ? add_to_pipe+0x350/0x350
[  244.571018]  do_splice_to+0xfb/0x150
[  244.574741]  ? alloc_pipe_info+0x2dc/0x380
[  244.578989]  splice_direct_to_actor+0x20a/0x730
[  244.583669]  ? generic_pipe_buf_nosteal+0x10/0x10
[  244.589493]  ? do_splice_to+0x150/0x150
[  244.593507]  ? rw_verify_area+0xe1/0x2a0
[  244.597581]  do_splice_direct+0x164/0x210
[  244.601747]  ? splice_direct_to_actor+0x730/0x730
[  244.606616]  ? rw_verify_area+0xe1/0x2a0
[  244.610699]  do_sendfile+0x469/0xaf0
[  244.614432]  ? do_compat_pwritev64+0x140/0x140
[  244.619027]  SyS_sendfile64+0xff/0x110
[  244.622922]  ? SyS_sendfile+0x130/0x130
[  244.626906]  ? do_syscall_64+0x4c/0x640
[  244.630885]  ? SyS_sendfile+0x130/0x130
[  244.634864]  do_syscall_64+0x1d5/0x640
[  244.638764]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  244.643956] RIP: 0033:0x45c889
[  244.647166] RSP: 002b:00007fd268177c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  244.654964] RAX: ffffffffffffffda RBX: 00007fd2681786d4 RCX: 000000000045c889
[  244.662259] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004
[  244.669530] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000
18:13:42 executing program 3:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x0)
sendfile(r1, r4, 0x0, 0x80001d00c0d0)

[  244.677172] R10: 000080001d00c0d0 R11: 0000000000000246 R12: 0000000000000007
[  244.684554] R13: 00000000000008d6 R14: 00000000004cb7ee R15: 0000000000000002
[  244.917973] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'.
18:13:42 executing program 4:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00')
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="ce873bae82df37dbfcf9fcc3d2941702ff83b400c80b073bc738c42c4bb43ec1601d31f37e8930d32e91fa99407fd435a4e7843cabcdcde1ae3816c3cc9dd48fa028682af8bc4b95972038b173a9c3129b39fa410685a717c126b4be6cb86eeb1c41e399d31d3c6e006c9e0b0fbf4b16a3407f22289547e0fd338badf146c7cc55d98241b07880afb024c541c27ec2cbbe6ba8a8da089c4b39269656", @ANYRES16=r3, @ANYBLOB="0101400000000000000100c7c18b759531b266a30000000000a204000000000000"], 0x3}}, 0x0)
sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x80)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x71)
prlimit64(r0, 0x4, &(0x7f0000000000)={0x0, 0x5}, &(0x7f0000000240))
openat$nvram(0xffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x4101, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r4, 0xae80, 0x0)

18:13:42 executing program 3:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x0)
sendfile(r1, r4, 0x0, 0x80001d00c0d0)

18:13:42 executing program 1:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700)
splice(r0, 0x0, r3, 0x0, 0x100000800ffe0, 0x0)
write$binfmt_misc(r1, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
splice(r0, 0x0, r2, 0x0, 0x1870b0a0, 0x0)

18:13:42 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe)
add_key$user(&(0x7f0000000340)='user\x00', &(0x7f00000005c0)={'syz', 0x2}, &(0x7f0000000300)="ed", 0x1, 0xfffffffffffffffd)
keyctl$read(0xb, r0, &(0x7f0000000100)=""/5, 0x5)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000002bc0)=[{{&(0x7f00000001c0)=@ax25={{0x3, @null}, [@default, @netrom, @rose, @remote, @default, @rose, @netrom, @rose]}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000300)=""/81, 0x51}, {&(0x7f0000000440)=""/129, 0x81}], 0x2, &(0x7f0000000380)=""/21, 0x15}, 0x1}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/24, 0x18}], 0x1, &(0x7f0000000580)=""/100, 0x64}, 0x1de4}, {{&(0x7f00000006c0)=@nl=@proc, 0x80, &(0x7f0000002b40)=[{&(0x7f0000000740)=""/116, 0x74}, {&(0x7f0000000800)=""/187, 0xbb}, {&(0x7f00000019c0)=""/250, 0xfa}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/210, 0xd2}, {0x0}, {0x0}], 0x7}, 0x5}], 0x3, 0x0, 0x0)
pipe(&(0x7f0000000400)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x68, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000540)='./file0\x00', 0x0, 0x881000, 0x0)
open(&(0x7f0000000500)='./file0\x00', 0x0, 0x140)

18:13:42 executing program 3:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
sendfile(0xffffffffffffffff, r4, 0x0, 0x80001d00c0d0)

18:13:42 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00')
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="ce873bae82df37dbfcf9fcc3d2941702ff83b400c80b073bc738c42c4bb43ec1601d31f37e8930d32e91fa99407fd435a4e7843cabcdcde1ae3816c3cc9dd48fa028682af8bc4b95972038b173a9c3129b39fa410685a717c126b4be6cb86eeb1c41e399d31d3c6e006c9e0b0fbf4b16a3407f22289547e0fd338badf146c7cc55d98241b07880afb024c541c27ec2cbbe6ba8a8da089c4b39269656", @ANYRES16=r3, @ANYBLOB="0101400000000000000100c7c18b759531b266a30000000000a204000000000000"], 0x3}}, 0x0)
sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x80)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x7ff, 0x97e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001]})
openat$nvram(0xffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x4101, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

18:13:42 executing program 0:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_config_ext={0x4, 0x3960}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x11}, 0x0, 0x3, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000180)="dda8b13351f8be0ad64d082a59b7f995ad87ed86d71d734dd96c820e124d25f86767cf534ee7d856c06933500f8a831d01e10ae1b7bb55c5c2b0b266b779cac67ac0ab7769fbe1b77279a8f53064deec671e6fe63162bc176fce6f9ffa98f160d37be1fa26d36db985c416c69932a787ebdf34c8f8a110934c076088cf7ddb915b2eb71e58d6451e4d1ff17e3931b602abe230ac3c43edb827e03a674152cb595911d86100fd5e06721e64f8fbdef6f4c890c3a5ece6f17eeac96e46a923837ab2fa150000", 0xc5)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000100)={0x0, 0x0, <r5=>r4})
ioctl$DRM_IOCTL_SET_VERSION(r5, 0xc0106407, &(0x7f0000000140)={0x3, 0x0, 0x0, 0x3})
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r2, 0x0, 0x0)
r6 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r6, 0x200004)
sendfile(r0, r6, 0x0, 0x80001d00c0d0)

18:13:42 executing program 3:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
sendfile(0xffffffffffffffff, r4, 0x0, 0x80001d00c0d0)

18:13:43 executing program 3:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
sendfile(0xffffffffffffffff, r4, 0x0, 0x80001d00c0d0)

18:13:43 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00')
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="ce873bae82df37dbfcf9fcc3d2941702ff83b400c80b073bc738c42c4bb43ec1601d31f37e8930d32e91fa99407fd435a4e7843cabcdcde1ae3816c3cc9dd48fa028682af8bc4b95972038b173a9c3129b39fa410685a717c126b4be6cb86eeb1c41e399d31d3c6e006c9e0b0fbf4b16a3407f22289547e0fd338badf146c7cc55d98241b07880afb024c541c27ec2cbbe6ba8a8da089c4b39269656", @ANYRES16=r3, @ANYBLOB="0101400000000000000100c7c18b759531b266a30000000000a204000000000000"], 0x3}}, 0x0)
sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x80)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x7ff, 0x97e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001]})
openat$nvram(0xffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x4101, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

18:13:43 executing program 3:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x80001d00c0d0)

18:13:43 executing program 3:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x80001d00c0d0)

18:13:43 executing program 4:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
sendfile(0xffffffffffffffff, r4, 0x0, 0x80001d00c0d0)

18:13:43 executing program 3:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x80001d00c0d0)

18:13:43 executing program 1:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700)
splice(r0, 0x0, r3, 0x0, 0x100000800ffe0, 0x0)
write$binfmt_misc(r1, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
splice(r0, 0x0, r2, 0x0, 0x1870b0a0, 0x0)

18:13:43 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe)
add_key$user(&(0x7f0000000340)='user\x00', &(0x7f00000005c0)={'syz', 0x2}, &(0x7f0000000300)="ed", 0x1, 0xfffffffffffffffd)
keyctl$read(0xb, r0, &(0x7f0000000100)=""/5, 0x5)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000002bc0)=[{{&(0x7f00000001c0)=@ax25={{0x3, @null}, [@default, @netrom, @rose, @remote, @default, @rose, @netrom, @rose]}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000300)=""/81, 0x51}, {&(0x7f0000000440)=""/129, 0x81}], 0x2, &(0x7f0000000380)=""/21, 0x15}, 0x1}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/24, 0x18}], 0x1, &(0x7f0000000580)=""/100, 0x64}, 0x1de4}, {{&(0x7f00000006c0)=@nl=@proc, 0x80, &(0x7f0000002b40)=[{&(0x7f0000000740)=""/116, 0x74}, {&(0x7f0000000800)=""/187, 0xbb}, {&(0x7f00000019c0)=""/250, 0xfa}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/210, 0xd2}, {0x0}, {0x0}], 0x7}, 0x5}], 0x3, 0x0, 0x0)
pipe(&(0x7f0000000400)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x68, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000540)='./file0\x00', 0x0, 0x881000, 0x0)
open(&(0x7f0000000500)='./file0\x00', 0x0, 0x140)

18:13:43 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00')
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="ce873bae82df37dbfcf9fcc3d2941702ff83b400c80b073bc738c42c4bb43ec1601d31f37e8930d32e91fa99407fd435a4e7843cabcdcde1ae3816c3cc9dd48fa028682af8bc4b95972038b173a9c3129b39fa410685a717c126b4be6cb86eeb1c41e399d31d3c6e006c9e0b0fbf4b16a3407f22289547e0fd338badf146c7cc55d98241b07880afb024c541c27ec2cbbe6ba8a8da089c4b39269656", @ANYRES16=r3, @ANYBLOB="0101400000000000000100c7c18b759531b266a30000000000a204000000000000"], 0x3}}, 0x0)
sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x80)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x7ff, 0x97e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001]})
openat$nvram(0xffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x4101, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

18:13:43 executing program 3:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
sendfile(r1, r4, 0x0, 0x0)

18:13:43 executing program 3:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
sendfile(r1, r4, 0x0, 0x0)

18:13:43 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00')
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="ce873bae82df37dbfcf9fcc3d2941702ff83b400c80b073bc738c42c4bb43ec1601d31f37e8930d32e91fa99407fd435a4e7843cabcdcde1ae3816c3cc9dd48fa028682af8bc4b95972038b173a9c3129b39fa410685a717c126b4be6cb86eeb1c41e399d31d3c6e006c9e0b0fbf4b16a3407f22289547e0fd338badf146c7cc55d98241b07880afb024c541c27ec2cbbe6ba8a8da089c4b39269656", @ANYRES16=r3, @ANYBLOB="0101400000000000000100c7c18b759531b266a30000000000a204000000000000"], 0x3}}, 0x0)
sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x80)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x71)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x7ff, 0x97e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001]})
openat$nvram(0xffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x4101, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r4, 0xae80, 0x0)

18:13:43 executing program 4:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
sendfile(0xffffffffffffffff, r4, 0x0, 0x80001d00c0d0)

18:13:43 executing program 0:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$setpipe(r1, 0x407, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x10001)
ioctl$TCSETS(r2, 0x5402, &(0x7f0000000100)={0x8, 0x7af, 0x8, 0x0, 0x8, "110c070c37035b4534b446ca76eb757f5d5997"})
close(r0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000000307d45001000000000000000300000208000540000000010c0006400000000000000004"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r3, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r4, 0x0, 0x0)
r5 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r5, 0x200004)
sendfile(r0, r5, 0x0, 0x80001d00c0d0)

18:13:43 executing program 3:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
sendfile(r1, r4, 0x0, 0x0)

18:13:44 executing program 4:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_config_ext={0x4, 0x3960}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x11}, 0x0, 0x3, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000180)="dda8b13351f8be0ad64d082a59b7f995ad87ed86d71d734dd96c820e124d25f86767cf534ee7d856c06933500f8a831d01e10ae1b7bb55c5c2b0b266b779cac67ac0ab7769fbe1b77279a8f53064deec671e6fe63162bc176fce6f9ffa98f160d37be1fa26d36db985c416c69932a787ebdf34c8f8a110934c076088cf7ddb915b2eb71e58d6451e4d1ff17e3931b602abe230ac3c43edb827e03a674152cb595911d86100fd5e06721e64f8fbdef6f4c890c3a5ece6f17eeac96e46a923837ab2fa150000", 0xc5)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000100)={0x0, 0x0, <r5=>r4})
ioctl$DRM_IOCTL_SET_VERSION(r5, 0xc0106407, &(0x7f0000000140)={0x3, 0x0, 0x0, 0x3})
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r2, 0x0, 0x0)
r6 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r6, 0x200004)
sendfile(r0, r6, 0x0, 0x80001d00c0d0)

18:13:44 executing program 3:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
sendfile(0xffffffffffffffff, r4, 0x0, 0x80001d00c0d0)

18:13:44 executing program 3:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00')
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="ce873bae82df37dbfcf9fcc3d2941702ff83b400c80b073bc738c42c4bb43ec1601d31f37e8930d32e91fa99407fd435a4e7843cabcdcde1ae3816c3cc9dd48fa028682af8bc4b95972038b173a9c3129b39fa410685a717c126b4be6cb86eeb1c41e399d31d3c6e006c9e0b0fbf4b16a3407f22289547e0fd338badf146c7cc55d98241b07880afb024c541c27ec2cbbe6ba8a8da089c4b39269656", @ANYRES16=r3, @ANYBLOB="0101400000000000000100c7c18b759531b266a30000000000a204000000000000"], 0x3}}, 0x0)
sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x80)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x71)
prlimit64(r0, 0x4, &(0x7f0000000000)={0x0, 0x5}, &(0x7f0000000240))
openat$nvram(0xffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x4101, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r4, 0xae80, 0x0)

18:13:44 executing program 1:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700)
splice(r0, 0x0, r3, 0x0, 0x100000800ffe0, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffc8f)
sched_setattr(0x0, 0x0, 0x0)
splice(r0, 0x0, r2, 0x0, 0x1870b0a0, 0x0)

18:13:44 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe)
keyctl$dh_compute(0x17, &(0x7f0000000140)={0x0, r0}, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x3d})
keyctl$read(0xb, r0, &(0x7f0000000100)=""/5, 0x5)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000002bc0)=[{{&(0x7f00000001c0)=@ax25={{0x3, @null}, [@default, @netrom, @rose, @remote, @default, @rose, @netrom, @rose]}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000300)=""/81, 0x51}, {&(0x7f0000000440)=""/129, 0x81}], 0x2, &(0x7f0000000380)=""/21, 0x15}, 0x1}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/24, 0x18}], 0x1, &(0x7f0000000580)=""/100, 0x64}, 0x1de4}, {{&(0x7f00000006c0)=@nl=@proc, 0x80, &(0x7f0000002b40)=[{&(0x7f0000000740)=""/116, 0x74}, {&(0x7f0000000800)=""/187, 0xbb}, {&(0x7f00000019c0)=""/250, 0xfa}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/210, 0xd2}, {0x0}, {0x0}], 0x7}, 0x5}], 0x3, 0x0, 0x0)
pipe(&(0x7f0000000400)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x68, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000540)='./file0\x00', 0x0, 0x881000, 0x0)
open(&(0x7f0000000500)='./file0\x00', 0x0, 0x140)

18:13:44 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00')
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="ce873bae82df37dbfcf9fcc3d2941702ff83b400c80b073bc738c42c4bb43ec1601d31f37e8930d32e91fa99407fd435a4e7843cabcdcde1ae3816c3cc9dd48fa028682af8bc4b95972038b173a9c3129b39fa410685a717c126b4be6cb86eeb1c41e399d31d3c6e006c9e0b0fbf4b16a3407f22289547e0fd338badf146c7cc55d98241b07880afb024c541c27ec2cbbe6ba8a8da089c4b39269656", @ANYRES16=r3, @ANYBLOB="0101400000000000000100c7c18b759531b266a30000000000a204000000000000"], 0x3}}, 0x0)
sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x80)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x71)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x7ff, 0x97e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001]})
openat$nvram(0xffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x4101, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r4, 0xae80, 0x0)

18:13:44 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe)
add_key$user(&(0x7f0000000340)='user\x00', &(0x7f00000005c0)={'syz', 0x2}, &(0x7f0000000300)="ed", 0x1, 0xfffffffffffffffd)
keyctl$read(0xb, r0, &(0x7f0000000100)=""/5, 0x5)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000002bc0)=[{{&(0x7f00000001c0)=@ax25={{0x3, @null}, [@default, @netrom, @rose, @remote, @default, @rose, @netrom, @rose]}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000300)=""/81, 0x51}, {&(0x7f0000000440)=""/129, 0x81}], 0x2, &(0x7f0000000380)=""/21, 0x15}, 0x1}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/24, 0x18}], 0x1, &(0x7f0000000580)=""/100, 0x64}, 0x1de4}, {{&(0x7f00000006c0)=@nl=@proc, 0x80, &(0x7f0000002b40)=[{&(0x7f0000000740)=""/116, 0x74}, {&(0x7f0000000800)=""/187, 0xbb}, {&(0x7f00000019c0)=""/250, 0xfa}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/210, 0xd2}, {0x0}, {0x0}], 0x7}, 0x5}], 0x3, 0x0, 0x0)
pipe(&(0x7f0000000400)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x68, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000540)='./file0\x00', 0x0, 0x881000, 0x0)
open(&(0x7f0000000500)='./file0\x00', 0x0, 0x140)

18:13:44 executing program 0:
r0 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x6, 0x482001)
ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000140)=""/91)
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000280)={0x7ff, 0x7fff, 0x94, 0x7fff}, 0x8)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r2)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
r5 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0xa, &(0x7f0000000200)=0x20, 0x4)
recvmmsg(r5, &(0x7f0000006400)=[{{&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)=""/59, 0x3b}, {&(0x7f00000001c0)=""/6, 0x6}], 0x2, &(0x7f0000000300)=""/40, 0x28}, 0x800}, {{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/124, 0x7c}, {&(0x7f0000000480)=""/173, 0xad}, {&(0x7f00000002c0)=""/10, 0xa}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/28, 0x1c}], 0x5, &(0x7f0000001640)=""/91, 0x5b}, 0x8}, {{&(0x7f00000016c0)=@nl=@proc, 0x80, 0x0, 0x0, &(0x7f0000001980)=""/96, 0x60}, 0x5}, {{&(0x7f0000001a00)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000002040)=[{&(0x7f0000001b80)=""/244, 0xf4}, {&(0x7f0000001c80)=""/217, 0xd9}, {&(0x7f0000000380)=""/109, 0x6d}, {&(0x7f0000002680)=""/117, 0x75}, {&(0x7f0000001f80)=""/129, 0x81}], 0x5}, 0xa6}, {{&(0x7f00000020c0)=@nl=@proc, 0x80, &(0x7f0000002400)=[{&(0x7f0000002a40)=""/93, 0x5d}, {&(0x7f00000021c0)=""/47, 0x2f}, {&(0x7f0000002200)=""/197, 0xc5}, {&(0x7f0000001740)=""/205, 0xcd}], 0x4, &(0x7f0000002440)=""/11, 0xb}, 0xffff}, {{&(0x7f0000002480)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f00000027c0)=[{&(0x7f0000002500)=""/86, 0x56}, {&(0x7f0000002580)=""/54, 0x36}, {&(0x7f00000025c0)=""/100, 0x64}, {&(0x7f0000002640)=""/31, 0x1f}, {&(0x7f0000002900)=""/135, 0x87}, {&(0x7f0000002740)=""/66, 0x42}], 0x6, &(0x7f0000002840)=""/175, 0xaf}, 0x3ff}, {{0x0, 0x0, &(0x7f0000003f80), 0x0, &(0x7f0000004040)=""/200, 0xc8}, 0xffffffff}, {{0x0, 0x0, &(0x7f0000001f00), 0x0, &(0x7f00000029c0)=""/104, 0x68}, 0x7ff}], 0x8, 0x0, 0x0)
connect$pppl2tp(r3, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e23, @multicast2}, 0x1, 0x0, 0x4, 0x1}}, 0x26)
connect$inet6(r4, 0x0, 0x0)
r6 = open(&(0x7f0000000080)='./bus\x00', 0x1011c2, 0x0)
ftruncate(r6, 0x200004)
sendfile(r2, r6, 0x0, 0x80001d00c0d0)

18:13:44 executing program 4 (fault-call:13 fault-nth:0):
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
sendfile(r1, r4, 0x0, 0x80001d00c0d0)

[  247.401951] FAULT_INJECTION: forcing a failure.
[  247.401951] name failslab, interval 1, probability 0, space 0, times 0
[  247.425959] CPU: 1 PID: 11014 Comm: syz-executor.4 Not tainted 4.14.176-syzkaller #0
[  247.433888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  247.443252] Call Trace:
[  247.445855]  dump_stack+0x13e/0x194
[  247.449525]  should_fail.cold+0x10a/0x14b
[  247.453699]  should_failslab+0xd6/0x130
[  247.457715]  kmem_cache_alloc_trace+0x2db/0x7b0
[  247.462456]  ? inode_has_perm.isra.0+0x153/0x1d0
[  247.467319]  alloc_pipe_info+0xaa/0x380
[  247.471324]  splice_direct_to_actor+0x581/0x730
[  247.476013]  ? generic_pipe_buf_nosteal+0x10/0x10
[  247.480875]  ? do_splice_to+0x150/0x150
[  247.484866]  ? rw_verify_area+0xe1/0x2a0
[  247.488951]  do_splice_direct+0x164/0x210
[  247.493282]  ? splice_direct_to_actor+0x730/0x730
[  247.498921]  ? rw_verify_area+0xe1/0x2a0
[  247.502995]  do_sendfile+0x469/0xaf0
[  247.506726]  ? do_compat_pwritev64+0x140/0x140
[  247.511498]  SyS_sendfile64+0xff/0x110
[  247.515553]  ? SyS_sendfile+0x130/0x130
[  247.519621]  ? do_syscall_64+0x4c/0x640
[  247.523601]  ? SyS_sendfile+0x130/0x130
[  247.527579]  do_syscall_64+0x1d5/0x640
[  247.531938]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  247.537142] RIP: 0033:0x45c889
[  247.540339] RSP: 002b:00007ff7fb1c7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
18:13:44 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00')
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="ce873bae82df37dbfcf9fcc3d2941702ff83b400c80b073bc738c42c4bb43ec1601d31f37e8930d32e91fa99407fd435a4e7843cabcdcde1ae3816c3cc9dd48fa028682af8bc4b95972038b173a9c3129b39fa410685a717c126b4be6cb86eeb1c41e399d31d3c6e006c9e0b0fbf4b16a3407f22289547e0fd338badf146c7cc55d98241b07880afb024c541c27ec2cbbe6ba8a8da089c4b39269656", @ANYRES16=r3, @ANYBLOB="0101400000000000000100c7c18b759531b266a30000000000a204000000000000"], 0x3}}, 0x0)
sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x80)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x71)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x7ff, 0x97e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001]})
openat$nvram(0xffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x4101, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r4, 0xae80, 0x0)

[  247.548045] RAX: ffffffffffffffda RBX: 00007ff7fb1c86d4 RCX: 000000000045c889
[  247.555481] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004
[  247.562748] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000
[  247.571159] R10: 000080001d00c0d0 R11: 0000000000000246 R12: 0000000000000007
[  247.578421] R13: 00000000000008d6 R14: 00000000004cb7ee R15: 0000000000000000
18:13:45 executing program 4 (fault-call:13 fault-nth:1):
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
sendfile(r1, r4, 0x0, 0x80001d00c0d0)

18:13:45 executing program 1:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700)
splice(r0, 0x0, r3, 0x0, 0x100000800ffe0, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffc8f)
sched_setattr(0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x1870b0a0, 0x0)

18:13:45 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe)
keyctl$dh_compute(0x17, &(0x7f0000000140)={0x0, r0}, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x3d})
keyctl$read(0xb, r0, &(0x7f0000000100)=""/5, 0x5)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000002bc0)=[{{&(0x7f00000001c0)=@ax25={{0x3, @null}, [@default, @netrom, @rose, @remote, @default, @rose, @netrom, @rose]}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000300)=""/81, 0x51}, {&(0x7f0000000440)=""/129, 0x81}], 0x2, &(0x7f0000000380)=""/21, 0x15}, 0x1}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/24, 0x18}], 0x1, &(0x7f0000000580)=""/100, 0x64}, 0x1de4}, {{&(0x7f00000006c0)=@nl=@proc, 0x80, &(0x7f0000002b40)=[{&(0x7f0000000740)=""/116, 0x74}, {&(0x7f0000000800)=""/187, 0xbb}, {&(0x7f00000019c0)=""/250, 0xfa}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/210, 0xd2}, {0x0}, {0x0}], 0x7}, 0x5}], 0x3, 0x0, 0x0)
pipe(&(0x7f0000000400)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x68, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000540)='./file0\x00', 0x0, 0x881000, 0x0)
open(&(0x7f0000000500)='./file0\x00', 0x0, 0x140)

[  247.786366] FAULT_INJECTION: forcing a failure.
[  247.786366] name failslab, interval 1, probability 0, space 0, times 0
[  247.810809] CPU: 1 PID: 11034 Comm: syz-executor.4 Not tainted 4.14.176-syzkaller #0
[  247.818852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  247.828201] Call Trace:
[  247.830785]  dump_stack+0x13e/0x194
[  247.834675]  should_fail.cold+0x10a/0x14b
[  247.838843]  should_failslab+0xd6/0x130
[  247.842904]  __kmalloc+0x2e9/0x7c0
[  247.846597]  ? kmem_cache_alloc_trace+0x63e/0x7b0
[  247.851534]  ? alloc_pipe_info+0x156/0x380
[  247.856727]  ? inode_has_perm.isra.0+0x153/0x1d0
[  247.861478]  alloc_pipe_info+0x156/0x380
[  247.865531]  splice_direct_to_actor+0x581/0x730
[  247.870379]  ? generic_pipe_buf_nosteal+0x10/0x10
[  247.875206]  ? do_splice_to+0x150/0x150
[  247.879165]  ? rw_verify_area+0xe1/0x2a0
[  247.883242]  do_splice_direct+0x164/0x210
[  247.887397]  ? splice_direct_to_actor+0x730/0x730
[  247.892225]  ? rw_verify_area+0xe1/0x2a0
[  247.896271]  do_sendfile+0x469/0xaf0
[  247.899972]  ? do_compat_pwritev64+0x140/0x140
[  247.905247]  SyS_sendfile64+0xff/0x110
[  247.909117]  ? SyS_sendfile+0x130/0x130
[  247.913076]  ? do_syscall_64+0x4c/0x640
[  247.917040]  ? SyS_sendfile+0x130/0x130
[  247.921000]  do_syscall_64+0x1d5/0x640
[  247.924876]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  247.930053] RIP: 0033:0x45c889
18:13:45 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00')
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="ce873bae82df37dbfcf9fcc3d2941702ff83b400c80b073bc738c42c4bb43ec1601d31f37e8930d32e91fa99407fd435a4e7843cabcdcde1ae3816c3cc9dd48fa028682af8bc4b95972038b173a9c3129b39fa410685a717c126b4be6cb86eeb1c41e399d31d3c6e006c9e0b0fbf4b16a3407f22289547e0fd338badf146c7cc55d98241b07880afb024c541c27ec2cbbe6ba8a8da089c4b39269656", @ANYRES16=r3, @ANYBLOB="0101400000000000000100c7c18b759531b266a30000000000a204000000000000"], 0x3}}, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x71)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x7ff, 0x97e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001]})
openat$nvram(0xffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x4101, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r4, 0xae80, 0x0)

[  247.933312] RSP: 002b:00007ff7fb1c7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  247.941203] RAX: ffffffffffffffda RBX: 00007ff7fb1c86d4 RCX: 000000000045c889
[  247.948562] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004
[  247.955944] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000
[  247.963212] R10: 000080001d00c0d0 R11: 0000000000000246 R12: 0000000000000007
[  247.970473] R13: 00000000000008d6 R14: 00000000004cb7ee R15: 0000000000000001
18:13:45 executing program 4 (fault-call:13 fault-nth:2):
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
sendfile(r1, r4, 0x0, 0x80001d00c0d0)

[  248.093043] FAULT_INJECTION: forcing a failure.
[  248.093043] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  248.127277] CPU: 1 PID: 11049 Comm: syz-executor.4 Not tainted 4.14.176-syzkaller #0
[  248.135223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  248.144614] Call Trace:
[  248.147216]  dump_stack+0x13e/0x194
[  248.150865]  should_fail.cold+0x10a/0x14b
[  248.155035]  __alloc_pages_nodemask+0x1bf/0x700
[  248.159732]  ? save_trace+0x290/0x290
[  248.163634]  ? __alloc_pages_slowpath+0x26c0/0x26c0
[  248.168665]  ? find_held_lock+0x2d/0x110
[  248.172834]  ? __do_page_cache_readahead+0x28e/0xa20
[  248.178126]  alloc_pages_current+0xe7/0x1e0
[  248.182658]  __page_cache_alloc+0x245/0x3d0
[  248.187109]  __do_page_cache_readahead+0x2d9/0xa20
[  248.192051]  ? save_trace+0x290/0x290
[  248.196039]  ? read_cache_pages+0x690/0x690
[  248.200362]  ? find_get_entry+0x21d/0x690
[  248.204533]  ? lock_downgrade+0x6e0/0x6e0
[  248.208684]  ? ondemand_readahead+0x516/0xb60
[  248.213187]  ondemand_readahead+0x516/0xb60
[  248.217761]  page_cache_sync_readahead+0xa6/0xf0
[  248.222595]  generic_file_read_iter+0x1365/0x26c0
[  248.227445]  ? kasan_kmalloc+0xbf/0xe0
[  248.231346]  ? splice_direct_to_actor+0x581/0x730
[  248.236202]  ? SyS_sendfile64+0xff/0x110
[  248.240358]  ? entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  248.245736]  ? filemap_range_has_page+0x2c0/0x2c0
[  248.250666]  ? trace_hardirqs_on+0x10/0x10
[  248.255002]  ? lock_acquire+0x170/0x3f0
[  248.258975]  ? lock_downgrade+0x6e0/0x6e0
[  248.263121]  ? save_trace+0x290/0x290
[  248.266939]  ? save_trace+0x290/0x290
[  248.271190]  ? fsnotify+0x897/0x1110
[  248.275195]  ext4_file_read_iter+0x14b/0x330
[  248.279636]  generic_file_splice_read+0x374/0x5d0
[  248.284776]  ? add_to_pipe+0x350/0x350
[  248.288679]  ? avc_policy_seqno+0x5/0x10
[  248.292776]  ? selinux_file_permission+0x7a/0x440
[  248.297644]  ? rw_verify_area+0xe1/0x2a0
[  248.301728]  ? add_to_pipe+0x350/0x350
[  248.305641]  do_splice_to+0xfb/0x150
[  248.309398]  ? alloc_pipe_info+0x2dc/0x380
[  248.313644]  splice_direct_to_actor+0x20a/0x730
[  248.318315]  ? generic_pipe_buf_nosteal+0x10/0x10
[  248.323313]  ? do_splice_to+0x150/0x150
[  248.327461]  ? rw_verify_area+0xe1/0x2a0
[  248.331623]  do_splice_direct+0x164/0x210
[  248.335878]  ? splice_direct_to_actor+0x730/0x730
[  248.340729]  ? rw_verify_area+0xe1/0x2a0
[  248.344799]  do_sendfile+0x469/0xaf0
[  248.348521]  ? do_compat_pwritev64+0x140/0x140
[  248.353110]  SyS_sendfile64+0xff/0x110
[  248.356993]  ? SyS_sendfile+0x130/0x130
[  248.360966]  ? do_syscall_64+0x4c/0x640
[  248.365050]  ? SyS_sendfile+0x130/0x130
[  248.369119]  do_syscall_64+0x1d5/0x640
[  248.373008]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  248.378391] RIP: 0033:0x45c889
[  248.381586] RSP: 002b:00007ff7fb1c7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
18:13:45 executing program 3:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00')
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="ce873bae82df37dbfcf9fcc3d2941702ff83b400c80b073bc738c42c4bb43ec1601d31f37e8930d32e91fa99407fd435a4e7843cabcdcde1ae3816c3cc9dd48fa028682af8bc4b95972038b173a9c3129b39fa410685a717c126b4be6cb86eeb1c41e399d31d3c6e006c9e0b0fbf4b16a3407f22289547e0fd338badf146c7cc55d98241b07880afb024c541c27ec2cbbe6ba8a8da089c4b39269656", @ANYRES16=r3, @ANYBLOB="0101400000000000000100c7c18b759531b266a30000000000a204000000000000"], 0x3}}, 0x0)
sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x80)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x71)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x7ff, 0x97e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001]})
openat$nvram(0xffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x4101, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r4, 0xae80, 0x0)

[  248.389390] RAX: ffffffffffffffda RBX: 00007ff7fb1c86d4 RCX: 000000000045c889
[  248.396829] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004
[  248.404124] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000
[  248.411565] R10: 000080001d00c0d0 R11: 0000000000000246 R12: 0000000000000007
[  248.418830] R13: 00000000000008d6 R14: 00000000004cb7ee R15: 0000000000000002
18:13:46 executing program 0:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r2, 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x200004)
pipe(&(0x7f0000000340)={<r4=>0xffffffffffffffff})
vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x2000, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r5, 0x89ea, &(0x7f00000001c0))
getsockopt$inet_sctp_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000100), &(0x7f0000000140)=0xe)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)
pipe(&(0x7f0000000340)={<r6=>0xffffffffffffffff})
vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
setsockopt$inet_udp_encap(r6, 0x11, 0x64, &(0x7f0000000200)=0x2, 0x4)

18:13:46 executing program 1:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700)
splice(r0, 0x0, r3, 0x0, 0x100000800ffe0, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffc8f)
sched_setattr(0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x1870b0a0, 0x0)

18:13:46 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe)
keyctl$dh_compute(0x17, &(0x7f0000000140)={0x0, r0}, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x3d})
keyctl$read(0xb, r0, &(0x7f0000000100)=""/5, 0x5)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000002bc0)=[{{&(0x7f00000001c0)=@ax25={{0x3, @null}, [@default, @netrom, @rose, @remote, @default, @rose, @netrom, @rose]}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000300)=""/81, 0x51}, {&(0x7f0000000440)=""/129, 0x81}], 0x2, &(0x7f0000000380)=""/21, 0x15}, 0x1}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/24, 0x18}], 0x1, &(0x7f0000000580)=""/100, 0x64}, 0x1de4}, {{&(0x7f00000006c0)=@nl=@proc, 0x80, &(0x7f0000002b40)=[{&(0x7f0000000740)=""/116, 0x74}, {&(0x7f0000000800)=""/187, 0xbb}, {&(0x7f00000019c0)=""/250, 0xfa}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/210, 0xd2}, {0x0}, {0x0}], 0x7}, 0x5}], 0x3, 0x0, 0x0)
pipe(&(0x7f0000000400)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x68, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000540)='./file0\x00', 0x0, 0x881000, 0x0)
open(&(0x7f0000000500)='./file0\x00', 0x0, 0x140)

18:13:46 executing program 4:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
r5 = open(&(0x7f0000000100)='./bus\x00', 0x20140, 0xca)
ioctl$EVIOCSABS0(r5, 0x401845c0, &(0x7f0000000140)={0x3, 0x6, 0x956, 0x7})
shmctl$SHM_LOCK(0x0, 0xb)
shmctl$SHM_UNLOCK(0x0, 0xc)
r6 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000)
shmdt(r6)
sendfile(r1, r4, 0x0, 0x80001d00c0d0)

[  249.146016] audit: type=1804 audit(1587147226.677:34): pid=11085 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir085944594/syzkaller.hVdvPx/84/bus" dev="sda1" ino=16013 res=1
18:13:46 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00')
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="ce873bae82df37dbfcf9fcc3d2941702ff83b400c80b073bc738c42c4bb43ec1601d31f37e8930d32e91fa99407fd435a4e7843cabcdcde1ae3816c3cc9dd48fa028682af8bc4b95972038b173a9c3129b39fa410685a717c126b4be6cb86eeb1c41e399d31d3c6e006c9e0b0fbf4b16a3407f22289547e0fd338badf146c7cc55d98241b07880afb024c541c27ec2cbbe6ba8a8da089c4b39269656", @ANYRES16=r3, @ANYBLOB="0101400000000000000100c7c18b759531b266a30000000000a204000000000000"], 0x3}}, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x71)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x7ff, 0x97e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001]})
openat$nvram(0xffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x4101, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r4, 0xae80, 0x0)

18:13:47 executing program 0:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r2, 0x0, 0x0)
pipe(&(0x7f0000000340)={<r3=>0xffffffffffffffff})
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000100)={0x7})
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
sendfile(r0, r4, 0x0, 0x80001d00c0d0)

18:13:47 executing program 1:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700)
splice(r0, 0x0, r3, 0x0, 0x100000800ffe0, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffc8f)
sched_setattr(0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x1870b0a0, 0x0)

18:13:47 executing program 4:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
sendmsg$kcm(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@ax25={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@null, @default, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default]}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000001c0)="d00efc904b40dc3e1d40fdf129c94331b5d1f905c3b41fb53df45418dc5e91061f4ca3b3173e5bd5290d239ec11c0caa3588643cf134f560644972e35381e21bcf8ed5df825ae0c2c9b28ab10fc999bd2157537b7d2b11443efdc25b4f746f021de742824785ce972c9e83ef18aff1b44a49bd48c2753e742b2f69b46f91a50c45a6d54c96f32239276911f6218c10798275e529ef6080e5250e7bf5a797c4a1c804b8ae1ec7538739dd4ef7b123514f11eb428d5137514c2ba28c84bed4f92b03ffd5a68b7f1d0b6587212913fa46f93bcee8c6b5f1", 0xd6}], 0x1, &(0x7f0000000300)=[{0x10, 0x111, 0x7fffffff}, {0xa8, 0x10a, 0x40, "205e08d65f45db669eee95a2701b8257e936842c76fc1836a554ec58f30c9d655a2192165d01c824325f3a3f8ed0476fda287e65f6c03c2c6aee695fa492191be7eccacb1f571a8e45276155cc161691cf319c6792bffa2efce909b74ce68fb6829d988d3936308e38fac69eadfe7cf80dbc1a25e5b201fed4eeb816ec6c43109c3b2883e1c70a6fe799eeb85461526919"}, {0xb8, 0x0, 0x752, "e6e844db5d29d955d543828cddc7ae2bc05970542cd2ab5db8ede3980dfb06368cbc3a54fb98932b1d88bd804ccefe7b4a0a5121f38cce5b808c94651e56b4e7ad3108d89f66cfb7b6504a340677f1ba7d872b3836e2716edbf29b1f86f7c56818305fa702164a39147d99af42ed4239340e87d800bc3c61be689e6fa599addcd54149baac75903191dcfcd445ec074b17fe2506fa1fcb4fd5d3a375c7364a3c9889958624f0"}, {0x58, 0x3a, 0x4, "73f5e2d9379d04270253d82196e13fc95a87e9c86caa275ae090e4b5ac59f823b69db213e9d96a7854708c2a2390e2deb44df11280ce449beff652edca17a7f38c8fb34f5366de"}, {0xa8, 0x116, 0x8, "dacd55a9d26cfc069dc6250ec1fbf77575bd245db70a9b1e87ce339ca6616c4c17acecd258e3ef9bb6b03ee7826b085473febd9c81672b57bc0cad98fbc0b3c693c79ae369cb4386aff549d5affbc02c5406556f928808df1f62405593876a3df36c552897625794e96d91c61ebc66311de90ec6ca69d173f2cc9161653f924a20501429370e898c61f5232e7993d8e0d417f0452c93"}, {0x78, 0x11, 0x1, "581ea79bf84d2806659dc3f952d4ac7534d02e68f8d99353ebaf96e2df8da1426ec307fcc22144bd6df4e3a7409086e4d10d9f66958910bf442947db339d87d0c669b261294e8e757078768f80c859e4bc4c6fa9c00f737c7e1a72bdf944363ef4dc2621db90660b"}, {0xa0, 0x102, 0x3, "adf81256b197ee3a2a578195d249a4dd6459d4c711b80ae4ee70a46854d4efae19f1af27407d48719b3f55fa66ed5d121cdf4b65107f0b1f96c76a3662b155e2a9712f647e48e85e4c61ac3f0704be47c4ae489827d3f41b4477817b8dcd5448236b71e5a65af5875a3072185f5fe1899c9b4144a1f8938e1521c61379e261400ae8adb65615e349ede1"}, {0x30, 0x101, 0x9, "ce2c59adb50e4def50e410b429add0097be8fd0ecf6d5cb72112679d07"}], 0x3b8}, 0x1)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
sendfile(r1, r4, 0x0, 0x80001d00c0d0)

[  249.705774] audit: type=1804 audit(1587147227.237:35): pid=11085 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir085944594/syzkaller.hVdvPx/84/bus" dev="sda1" ino=16013 res=1
18:13:47 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = add_key$user(&(0x7f0000000340)='user\x00', &(0x7f00000005c0)={'syz', 0x2}, &(0x7f0000000300)="ed", 0x1, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, 0x0, r0}, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x3d})
keyctl$read(0xb, 0x0, &(0x7f0000000100)=""/5, 0x5)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000002bc0)=[{{&(0x7f00000001c0)=@ax25={{0x3, @null}, [@default, @netrom, @rose, @remote, @default, @rose, @netrom, @rose]}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000300)=""/81, 0x51}, {&(0x7f0000000440)=""/129, 0x81}], 0x2, &(0x7f0000000380)=""/21, 0x15}, 0x1}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/24, 0x18}], 0x1, &(0x7f0000000580)=""/100, 0x64}, 0x1de4}, {{&(0x7f00000006c0)=@nl=@proc, 0x80, &(0x7f0000002b40)=[{&(0x7f0000000740)=""/116, 0x74}, {&(0x7f0000000800)=""/187, 0xbb}, {&(0x7f00000019c0)=""/250, 0xfa}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/210, 0xd2}, {0x0}, {0x0}], 0x7}, 0x5}], 0x3, 0x0, 0x0)
pipe(&(0x7f0000000400)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x68, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000540)='./file0\x00', 0x0, 0x881000, 0x0)
open(&(0x7f0000000500)='./file0\x00', 0x0, 0x140)

18:13:47 executing program 4:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x10001000}, 0x0, 0xfffffffffffdffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38eb02000005e1623983f7566bafcd3669cd7b9c7ca19780f6413bc4236650856e176e4a64ace17c63fe4f8cc43be4b4adeabad5c138d71f350e8826acab9c44524cb266763046f4ba8f17ed9bec4c74fcc73e4b49426970d0c0cf1fd88e663aba6934b6074488fe49bd2967d7b2888895f0bc4ea657", @ANYRES32=r2, @ANYBLOB="00736974020600020008000310", @ANYRES32=r3], 0x38}}, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x6, r2, 0x1, 0x3, 0x6, @random="d38af9900c2d"}, 0x14)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r4 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r4)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r5, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev}, 0x1}}, 0x2e)
connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r7 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r7, 0x200004)
sendfile(r4, r7, 0x0, 0x80001d00c0d0)

18:13:47 executing program 1:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0)
pipe(&(0x7f0000000000))
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700)
splice(r0, 0x0, r2, 0x0, 0x100000800ffe0, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffc8f)
sched_setattr(0x0, 0x0, 0x0)
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x1870b0a0, 0x0)

18:13:48 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/bluetooth/6lowpan_control\x00', 0x2, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000555f336727e9870010d9460700000000000045b714f1dfca", @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="d2ad0200cf9ca4a3"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000f4070002006a9a0000"], 0x38}}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r5, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071")
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x58, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_flow={{0x9, 0x1, 'flow\x00'}, {0x28, 0x2, [@TCA_FLOW_EMATCHES={0x24, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xde1}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1}]}]}]}}]}, 0x58}}, 0x0)

18:13:48 executing program 0:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
pipe(&(0x7f0000000340)={<r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x40, 0x0)
sendmmsg$alg(r2, &(0x7f0000002f00)=[{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000140)="820427c6f3a6fdbe51808b1a3abbc4855ec1398566bc70a41729ceba0a715babfc385d4de7d70b9330c51da43819ba9a8c40f5cb9aff752bd2dad2616aed65d2cbc40383ed3254801028d060734ba7270d0f757aed", 0x55}, {&(0x7f00000001c0)="b578babcd7c35cd9803b81e4708118d757a28ecf8eae0fb472ee5af736e0a80e480cb30e6da6416b36c67e8284a6450d1cff68d9a3aa29c15355f180fcf7f1c99a70366477d063c403e632eee098006bc92d9488dacb646f8638", 0x5a}, {&(0x7f0000000240)="9dea474ff786e57882faf5792d282c5de4e0a9302f68212b6c1dc1065d487d3b8fe1867310bc697506d2aac8bc063139d0ca824fe2c0fd058af425d2b363cf8406220f39b4f0765c6cb3dff76fd036298b72fc5a7891684477e82586a3722d40adf1d1805a878614cc8ab24016400bf632eb425b1e9cf76712b2d03926444730262354644d053e", 0x87}, {&(0x7f0000000300)="86e1be5fb293f6b25d903bcfe7575a485ae3333c1f9a500d2b5c573cf008a6cfaa74998d9c3b5a04e3bfc7b3204bd83ee82947cf7a309ecb05f73ce17e4851f457018c5881183e2d0112f4b9105777272a3c", 0x52}, {&(0x7f0000000380)="4dcd930ff6efbce120ee42a5162de3a1c7ccd672306a43fd048a4a290f50f37a9a5e91749cd65100e2a1ec6fd09da45e89b44aeed3c982efc5748bd6a8b0078b8652eaa50badcefdf0dcd556f5aa72340e20b0146f6c268e7fc5af494d1f8414500e22cafe150dcf99a0259ce3a17c40ee19a1eb380d74fd1ef5d8f55e9847c02e906f19cd93883333008225f0e0f2ab4f7d910f6d476f53cfeddb46b92c4d88c48dfd47dd8a2e5eab98ec", 0xab}, {&(0x7f0000000440)="2d331be560a8fa7cd750167e79d9e88acbc269ee3f1e4375e1770202b0cb5e0bfa2fc5970f5fabe87177abcd2c2e6bad1ef458acff1c0d8e82bd92a6833a218694b6513c31fbca14e0199802eb8197f658f2808e69ffdbe55524fdbd49f2ee3f5ba5dea24ea438c64f302dc7154f", 0x6e}, {&(0x7f00000004c0)="d1dd3e268beaeb261ac16064ca64913564fcb236e8172aa5dfaef2555e5d2b95db3e32c292fb87d8f09507e0c29c26338b32cc6006a4738771a81a9d28ace72a6e2c00ea4b85a5d09d5fe289b3307f0d64ac507aecf7929ee79bfe0facd4694c03ddd860f1e2bff3ec8018ea522387c5a4a50f39a04936b4b4a050c18982385d2d3a3003041f29b1e559a297a302c05e86598f0f4d2a9e8833e89fbdbe33eb3eb1393df59a5deaf2", 0xa8}, {&(0x7f0000000580)="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", 0x1000}], 0x8, &(0x7f0000001600)=[@iv={0x30, 0x117, 0x2, 0x16, "00692ae60652bd8f1662d4b5e2377db31c598096954d"}, @assoc={0x18}, @iv={0x98, 0x117, 0x2, 0x83, "c4c4ba90eda47527538c5c925d33ceffd3ffc41d061ba5ee24caf91a88141d1452e84e5bfb2bae4c7de80d97b61b33dca79f6fb44dbb251c19ab6a27d58467fdf30b2d88ed8ab669a009595766dddb2f5ded549b0c758f56eef75c1c31d9e5f7115c40b44e55f34218210edcf3b3b1b4b30307b08937fde9b1c82e37a175c6d9d1f255"}], 0xe0, 0x4044000}, {0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="25c7f98feaade7ea4f63c69aeb423dd80dbf346490730dcfa31bdcefc259bde2439e04d923cb2cb312c37255f4eabf1ade82d6b6383400d2193c253760fae9df01e0423a61a1f01b9cb094cde0e6cc13bfa928ca0340b973172d5e0bded128a869b009933f632ec71383d98076254da8c43beafadf019d089f2f1d2ffa50f03d398cb784426b7af26a2fab2566ab5c2da6b74e4915f7c35dd16294052fd950a94ff10860f95df1d155e151589a07ad1a2fbcd8ffe16b31a91f", 0xb9}], 0x1, &(0x7f0000001800)=[@assoc={0x18, 0x117, 0x4, 0x4}, @iv={0x38, 0x117, 0x2, 0x1f, "4c75cd186127d6fe5e7aa0d1f1650f8597b96e813a89fcb6cb028729d72dc8"}], 0x50, 0xd0}, {0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000001880)="43d2d34e7b1321be55f032b441817d62e407acc5874fb243764cc4734f239e590ec064d7f1bf29f1d4a6b5", 0x2b}, {&(0x7f00000018c0)="e3c0df9f2b528cb5bad5f531359e9d6845b77d1b11a185c2a5620c9029b0a8a270569d2e328e593fc52014c8bd1682cf282aa02ae810c9679f9ccc9f2cb5d9b5f4883e7bd7e4f812123fef9b55f91bdda0ef188d37eee87d6153149dcef4932fd72026159db9d60f44cc1a4b7de39789eaa37fe00cb1aebfa4072dd2c43f6b0f1e4ea0c9c38cc5ba65441b2f437a905543c6ef10bfc6863719cf0cb7602eb1c409874de45a3fb4bcfe8a5589d1486aabf599aba9072b4b3026a9fd2398a6ed97543350", 0xc3}], 0x2, &(0x7f0000001a40)=ANY=[@ANYBLOB="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"], 0x1200, 0x4001}, {0x0, 0x0, &(0x7f0000002d40)=[{&(0x7f0000002c40)="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", 0xfa}], 0x1, &(0x7f0000002d80)=[@assoc={0x18, 0x117, 0x4, 0xdc83}, @op={0x18}], 0x30, 0x80}, {0x0, 0x0, &(0x7f0000002ec0)=[{&(0x7f0000002dc0)="541c0586e3db3abb754e4f38a5995a9af6c0e22d2b7c45516511b3a4d760dcc76adac2b800b23aa2", 0x28}, {&(0x7f0000002e00)="9dce2ee11b473ff8667cc921606915436710281c5851b5ee6306c04e31bc5c931c30a0bc9896b463bc769b8027cdd2d5a5d723e251c58f1f405a974c0f94033f90f4d1a1d7abc5519e89677a8e0f80d4bf7fc0b99da4acc1dc594097558168a6685c2b80282c03fa9044522c3d0a1e74de1e0b0a24886dc18c08f07433f8b80daf678784557cfc30bbbb81be25801c68c425447ab058bdc145380735507cc5c42514b214a765b7a3950786a4af303d468a158b07049de15578", 0xb9}], 0x2, 0x0, 0x0, 0x88c}], 0x5, 0x24004084)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r3, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r4, 0x0, 0x0)
r5 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r5, 0x200004)
sendfile(r1, r5, 0x0, 0x80001d00c0d0)

18:13:48 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = add_key$user(&(0x7f0000000340)='user\x00', &(0x7f00000005c0)={'syz', 0x2}, &(0x7f0000000300)="ed", 0x1, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, 0x0, r0}, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x3d})
keyctl$read(0xb, 0x0, &(0x7f0000000100)=""/5, 0x5)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000002bc0)=[{{&(0x7f00000001c0)=@ax25={{0x3, @null}, [@default, @netrom, @rose, @remote, @default, @rose, @netrom, @rose]}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000300)=""/81, 0x51}, {&(0x7f0000000440)=""/129, 0x81}], 0x2, &(0x7f0000000380)=""/21, 0x15}, 0x1}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/24, 0x18}], 0x1, &(0x7f0000000580)=""/100, 0x64}, 0x1de4}, {{&(0x7f00000006c0)=@nl=@proc, 0x80, &(0x7f0000002b40)=[{&(0x7f0000000740)=""/116, 0x74}, {&(0x7f0000000800)=""/187, 0xbb}, {&(0x7f00000019c0)=""/250, 0xfa}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/210, 0xd2}, {0x0}, {0x0}], 0x7}, 0x5}], 0x3, 0x0, 0x0)
pipe(&(0x7f0000000400)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x68, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000540)='./file0\x00', 0x0, 0x881000, 0x0)
open(&(0x7f0000000500)='./file0\x00', 0x0, 0x140)

[  250.738494] selinux_nlmsg_perm: 9 callbacks suppressed
[  250.738505] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=13151 sclass=netlink_route_socket pig=11140 comm=syz-executor.3
18:13:48 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000013001d0400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008000a0014000000140003006970766c616e31000000000000000000ed97ce9703d10a8590bafd81c162ae6ad5bb500b6741fccb0ea0864d40f4559c07dfd407538efb1f609e4f508936965cbf4aa868ec05c0669ff6a46b0671694ee16407ec2309c4"], 0x3c}}, 0x0)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x4e24, @rand_addr=0x64010100}, {0x2, 0x4e23, @empty}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x20, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000100)='gretap0\x00', 0x9, 0x1, 0x100})
write(r2, &(0x7f0000000340), 0x41395527)
pipe(&(0x7f0000000340)={<r3=>0xffffffffffffffff})
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
pipe(&(0x7f0000000340)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r2, r3, 0x0, r5}, 0x10)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQ(r4, 0x5411, &(0x7f00000000c0))
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000000)={0x1, 'ipvlan1\x00', {}, 0x24})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013001d0400"/20, @ANYRES32=0x0, @ANYBLOB="ffffffe80000000008000a0000000000140003006970766c616e31000000000000000000"], 0x3c}}, 0x0)

18:13:48 executing program 4:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x40920, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
sendfile(r1, r4, 0x0, 0x80001d00c0d0)

[  250.837826] batman_adv: batadv0: Adding interface: ipvlan1
[  250.856341] batman_adv: batadv0: The MTU of interface ipvlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
18:13:48 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00')
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="ce873bae82df37dbfcf9fcc3d2941702ff83b400c80b073bc738c42c4bb43ec1601d31f37e8930d32e91fa99407fd435a4e7843cabcdcde1ae3816c3cc9dd48fa028682af8bc4b95972038b173a9c3129b39fa410685a717c126b4be6cb86eeb1c41e399d31d3c6e006c9e0b0fbf4b16a3407f22289547e0fd338badf146c7cc55d98241b07880afb024c541c27ec2cbbe6ba8a8da089c4b39269656", @ANYRES16=r3, @ANYBLOB="0101400000000000000100c7c18b759531b266a30000000000a204000000000000"], 0x3}}, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x71)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x7ff, 0x97e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001]})
openat$nvram(0xffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x4101, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r4, 0xae80, 0x0)

[  250.883655] batman_adv: batadv0: Not using interface ipvlan1 (retrying later): interface not active
[  251.155154] device ipvlan1 entered promiscuous mode
[  251.202866] batman_adv: batadv0: Interface activated: ipvlan1
[  251.209482] batman_adv: batadv0: Interface deactivated: ipvlan1
[  251.226024] batman_adv: batadv0: Removing interface: ipvlan1
18:13:48 executing program 1:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0)
pipe(&(0x7f0000000000))
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700)
splice(r0, 0x0, r2, 0x0, 0x100000800ffe0, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffc8f)
sched_setattr(0x0, 0x0, 0x0)
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x1870b0a0, 0x0)

18:13:49 executing program 4:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x100000000)
r1 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r1, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r2)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r3, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r5 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r5, 0x200004)
sendfile(r2, r5, 0x0, 0x80001d00c0d0)

18:13:49 executing program 0:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x82004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_config_ext={0x805, 0x5}, 0x0, 0x4}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x8)
close(r0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
pipe(&(0x7f00000000c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
openat$cgroup(r5, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0)
connect$pppl2tp(r2, &(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x3, 0x4, 0x3, {0xa, 0x4e20, 0x1, @private1={0xfc, 0x1, [], 0x1}, 0x7}}}, 0x3a)
connect$inet6(r3, 0x0, 0x0)
r6 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
socket$inet6(0xa, 0x2, 0x0)
ftruncate(r4, 0x7)
sendfile(r0, r6, 0x0, 0x80001d00c0d0)

18:13:49 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000013001d0400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008000a0014000000140003006970766c616e31000000000000000000ed97ce9703d10a8590bafd81c162ae6ad5bb500b6741fccb0ea0864d40f4559c07dfd407538efb1f609e4f508936965cbf4aa868ec05c0669ff6a46b0671694ee16407ec2309c4"], 0x3c}}, 0x0)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x4e24, @rand_addr=0x64010100}, {0x2, 0x4e23, @empty}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x20, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000100)='gretap0\x00', 0x9, 0x1, 0x100})
write(r2, &(0x7f0000000340), 0x41395527)
pipe(&(0x7f0000000340)={<r3=>0xffffffffffffffff})
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
pipe(&(0x7f0000000340)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r2, r3, 0x0, r5}, 0x10)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQ(r4, 0x5411, &(0x7f00000000c0))
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000000)={0x1, 'ipvlan1\x00', {}, 0x24})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013001d0400"/20, @ANYRES32=0x0, @ANYBLOB="ffffffe80000000008000a0000000000140003006970766c616e31000000000000000000"], 0x3c}}, 0x0)

18:13:49 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = add_key$user(&(0x7f0000000340)='user\x00', &(0x7f00000005c0)={'syz', 0x2}, &(0x7f0000000300)="ed", 0x1, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, 0x0, r0}, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x3d})
keyctl$read(0xb, 0x0, &(0x7f0000000100)=""/5, 0x5)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000002bc0)=[{{&(0x7f00000001c0)=@ax25={{0x3, @null}, [@default, @netrom, @rose, @remote, @default, @rose, @netrom, @rose]}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000300)=""/81, 0x51}, {&(0x7f0000000440)=""/129, 0x81}], 0x2, &(0x7f0000000380)=""/21, 0x15}, 0x1}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/24, 0x18}], 0x1, &(0x7f0000000580)=""/100, 0x64}, 0x1de4}, {{&(0x7f00000006c0)=@nl=@proc, 0x80, &(0x7f0000002b40)=[{&(0x7f0000000740)=""/116, 0x74}, {&(0x7f0000000800)=""/187, 0xbb}, {&(0x7f00000019c0)=""/250, 0xfa}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/210, 0xd2}, {0x0}, {0x0}], 0x7}, 0x5}], 0x3, 0x0, 0x0)
pipe(&(0x7f0000000400)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x68, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000540)='./file0\x00', 0x0, 0x881000, 0x0)
open(&(0x7f0000000500)='./file0\x00', 0x0, 0x140)

[  251.703097] batman_adv: batadv0: Adding interface: ipvlan1
[  251.723514] batman_adv: batadv0: The MTU of interface ipvlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  251.787297] batman_adv: batadv0: Interface activated: ipvlan1
18:13:49 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00')
sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x80)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x71)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x7ff, 0x97e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001]})
openat$nvram(0xffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x4101, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[  252.098786] batman_adv: batadv0: Interface deactivated: ipvlan1
18:13:49 executing program 1:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0)
pipe(&(0x7f0000000000))
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700)
splice(r0, 0x0, r2, 0x0, 0x100000800ffe0, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffc8f)
sched_setattr(0x0, 0x0, 0x0)
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x1870b0a0, 0x0)

[  252.171252] batman_adv: batadv0: Removing interface: ipvlan1
18:13:49 executing program 4:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
perf_event_open(&(0x7f000001d000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffd}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r1, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r2)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r3, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32, @ANYBLOB="00000016010000001800120008000100736974000c00020008000300", @ANYRES32], 0x38}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x19, 0x9, 0x5, 0x2, 0x104, 0xffffffffffffffff, 0x5, [], 0x0, r1, 0x5, 0x5, 0x3}, 0x40)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r5 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x7, 0x0, 0x9, 0x100, 0xcac33793211d1109, 0x6, 0xfffff801, 0x1d5, 0x38, 0x37c, 0x3, 0x7, 0x20, 0x2, 0xfa, 0xee3, 0x64a1}, [{0x2, 0x6, 0x27ae50cd, 0x20, 0x1ff, 0x6, 0x5, 0x4}], "6b73a0db190783caba92bdf2a3e6fb640381a794347ad3d787277080731e5792718106d924b259a50d1c73832aa621865ed76fc06b1c1a9874c267", [[], []]}, 0x293)
ftruncate(r5, 0x200004)
sendfile(r2, r5, 0x0, 0x80001d00c0d0)

18:13:50 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = add_key$user(&(0x7f0000000340)='user\x00', &(0x7f00000005c0)={'syz', 0x2}, &(0x7f0000000300)="ed", 0x1, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, 0x0, r0}, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x3d})
keyctl$read(0xb, 0x0, &(0x7f0000000100)=""/5, 0x5)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000002bc0)=[{{&(0x7f00000001c0)=@ax25={{0x3, @null}, [@default, @netrom, @rose, @remote, @default, @rose, @netrom, @rose]}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000300)=""/81, 0x51}, {&(0x7f0000000440)=""/129, 0x81}], 0x2, &(0x7f0000000380)=""/21, 0x15}, 0x1}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/24, 0x18}], 0x1, &(0x7f0000000580)=""/100, 0x64}, 0x1de4}, {{&(0x7f00000006c0)=@nl=@proc, 0x80, &(0x7f0000002b40)=[{&(0x7f0000000740)=""/116, 0x74}, {&(0x7f0000000800)=""/187, 0xbb}, {&(0x7f00000019c0)=""/250, 0xfa}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/210, 0xd2}, {0x0}, {0x0}], 0x7}, 0x5}], 0x3, 0x0, 0x0)
pipe(&(0x7f0000000400)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x68, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000540)='./file0\x00', 0x0, 0x881000, 0x0)
open(&(0x7f0000000500)='./file0\x00', 0x0, 0x140)

18:13:50 executing program 0:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
fcntl$setpipe(r0, 0x407, 0x0)
write(r0, &(0x7f0000000340), 0x41395527)
ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000140)={0x9d0000, 0x9, 0x20, 0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x9e0906, 0x35, [], @value64=0x7ff}})
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, 0x0, 0x0)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
sendfile(r1, r4, 0x0, 0x80001d00c0d0)

18:13:50 executing program 4:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
sendfile(r1, r4, 0x0, 0x80001d00c0d0)

18:13:50 executing program 2:
r0 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000340)='user\x00', &(0x7f00000005c0)={'syz', 0x2}, &(0x7f0000000300)="ed", 0x1, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x3d})
keyctl$read(0xb, r0, &(0x7f0000000100)=""/5, 0x5)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r3, &(0x7f0000002bc0)=[{{&(0x7f00000001c0)=@ax25={{0x3, @null}, [@default, @netrom, @rose, @remote, @default, @rose, @netrom, @rose]}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000300)=""/81, 0x51}, {&(0x7f0000000440)=""/129, 0x81}], 0x2, &(0x7f0000000380)=""/21, 0x15}, 0x1}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/24, 0x18}], 0x1, &(0x7f0000000580)=""/100, 0x64}, 0x1de4}, {{&(0x7f00000006c0)=@nl=@proc, 0x80, &(0x7f0000002b40)=[{&(0x7f0000000740)=""/116, 0x74}, {&(0x7f0000000800)=""/187, 0xbb}, {&(0x7f00000019c0)=""/250, 0xfa}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/210, 0xd2}, {0x0}, {0x0}], 0x7}, 0x5}], 0x3, 0x0, 0x0)
pipe(&(0x7f0000000400)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x68, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000540)='./file0\x00', 0x0, 0x881000, 0x0)
open(&(0x7f0000000500)='./file0\x00', 0x0, 0x140)

18:13:50 executing program 1:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700)
splice(r0, 0x0, r3, 0x0, 0x100000800ffe0, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffc8f)
sched_setattr(0x0, 0x0, 0x0)
splice(r0, 0x0, r2, 0x0, 0x0, 0x0)

18:13:50 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00')
sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x80)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x71)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x7ff, 0x97e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001]})
openat$nvram(0xffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x4101, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

18:13:50 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = add_key$user(&(0x7f0000000340)='user\x00', &(0x7f00000005c0)={'syz', 0x2}, &(0x7f0000000300)="ed", 0x1, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, 0x0, r0}, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x3d})
keyctl$read(0xb, 0x0, &(0x7f0000000100)=""/5, 0x5)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000002bc0)=[{{&(0x7f00000001c0)=@ax25={{0x3, @null}, [@default, @netrom, @rose, @remote, @default, @rose, @netrom, @rose]}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000300)=""/81, 0x51}, {&(0x7f0000000440)=""/129, 0x81}], 0x2, &(0x7f0000000380)=""/21, 0x15}, 0x1}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/24, 0x18}], 0x1, &(0x7f0000000580)=""/100, 0x64}, 0x1de4}, {{&(0x7f00000006c0)=@nl=@proc, 0x80, &(0x7f0000002b40)=[{&(0x7f0000000740)=""/116, 0x74}, {&(0x7f0000000800)=""/187, 0xbb}, {&(0x7f00000019c0)=""/250, 0xfa}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/210, 0xd2}, {0x0}, {0x0}], 0x7}, 0x5}], 0x3, 0x0, 0x0)
pipe(&(0x7f0000000400)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x68, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000540)='./file0\x00', 0x0, 0x881000, 0x0)
open(&(0x7f0000000500)='./file0\x00', 0x0, 0x140)

18:13:51 executing program 0:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvme-fabrics\x00', 0x20000, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002600)='IPVS\x00')
sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r3, 0x1, 0x0, 0x0, {0x10}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_AF={0x4}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x48}}, 0x0)
sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r3, @ANYBLOB="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"], 0xa8}, 0x1, 0x0, 0x0, 0x40000}, 0xbb878e590dc353c8)
close(r0)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r4, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r5, 0x0, 0x0)
r6 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r6, 0x200004)
sendfile(r0, r6, 0x0, 0x80001d00c0d0)

18:13:51 executing program 4:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x204301)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
pipe(&(0x7f0000000340)={<r4=>0xffffffffffffffff})
vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
r5 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r6 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r6, 0x200004)
sendfile(r1, r6, 0x0, 0x80001d00c0d0)

18:13:51 executing program 2:
r0 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000340)='user\x00', &(0x7f00000005c0)={'syz', 0x2}, &(0x7f0000000300)="ed", 0x1, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x3d})
keyctl$read(0xb, r0, &(0x7f0000000100)=""/5, 0x5)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r3, &(0x7f0000002bc0)=[{{&(0x7f00000001c0)=@ax25={{0x3, @null}, [@default, @netrom, @rose, @remote, @default, @rose, @netrom, @rose]}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000300)=""/81, 0x51}, {&(0x7f0000000440)=""/129, 0x81}], 0x2, &(0x7f0000000380)=""/21, 0x15}, 0x1}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/24, 0x18}], 0x1, &(0x7f0000000580)=""/100, 0x64}, 0x1de4}, {{&(0x7f00000006c0)=@nl=@proc, 0x80, &(0x7f0000002b40)=[{&(0x7f0000000740)=""/116, 0x74}, {&(0x7f0000000800)=""/187, 0xbb}, {&(0x7f00000019c0)=""/250, 0xfa}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/210, 0xd2}, {0x0}, {0x0}], 0x7}, 0x5}], 0x3, 0x0, 0x0)
pipe(&(0x7f0000000400)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x68, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000540)='./file0\x00', 0x0, 0x881000, 0x0)
open(&(0x7f0000000500)='./file0\x00', 0x0, 0x140)

18:13:51 executing program 1:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700)
splice(r0, 0x0, r3, 0x0, 0x100000800ffe0, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffc8f)
sched_setattr(0x0, 0x0, 0x0)
splice(r0, 0x0, r2, 0x0, 0x0, 0x0)

18:13:51 executing program 0:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x109280, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x1ff000)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
pipe(&(0x7f0000000340)={<r3=>0xffffffffffffffff})
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0xffffff5e)
r4 = socket$bt_rfcomm(0x1f, 0x3, 0x3)
clock_gettime(0x0, &(0x7f0000000140)={<r5=>0x0, <r6=>0x0})
ppoll(&(0x7f0000000100)=[{r4, 0x4104}], 0x1, &(0x7f0000000180)={r5, r6+30000000}, &(0x7f00000001c0)={[0x3]}, 0x8)
connect$inet6(r2, 0x0, 0x0)
r7 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000240)='/dev/vfio/vfio\x00')
r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200)={0xffffffffffffffff, 0x80, 0x10}, 0xc)
ftruncate(r8, 0x7)
sendfile(r0, r7, 0x0, 0x80001d00c0d0)

18:13:51 executing program 3:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
fcntl$setpipe(r0, 0x407, 0x0)
write(r0, &(0x7f0000000340), 0x41395527)
ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000140)={0x9d0000, 0x9, 0x20, 0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x9e0906, 0x35, [], @value64=0x7ff}})
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, 0x0, 0x0)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
sendfile(r1, r4, 0x0, 0x80001d00c0d0)

18:13:52 executing program 4:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r1, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
fcntl$setstatus(r0, 0x4, 0x4000)
close(r2)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r3, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r5 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r5, 0x200004)
sendfile(r2, r5, 0x0, 0x80001d00c0d0)

18:13:52 executing program 1:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700)
splice(r0, 0x0, r3, 0x0, 0x100000800ffe0, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffc8f)
sched_setattr(0x0, 0x0, 0x0)
splice(r0, 0x0, r2, 0x0, 0x0, 0x0)

18:13:52 executing program 2:
r0 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000340)='user\x00', &(0x7f00000005c0)={'syz', 0x2}, &(0x7f0000000300)="ed", 0x1, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x3d})
keyctl$read(0xb, r0, &(0x7f0000000100)=""/5, 0x5)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r3, &(0x7f0000002bc0)=[{{&(0x7f00000001c0)=@ax25={{0x3, @null}, [@default, @netrom, @rose, @remote, @default, @rose, @netrom, @rose]}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000300)=""/81, 0x51}, {&(0x7f0000000440)=""/129, 0x81}], 0x2, &(0x7f0000000380)=""/21, 0x15}, 0x1}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/24, 0x18}], 0x1, &(0x7f0000000580)=""/100, 0x64}, 0x1de4}, {{&(0x7f00000006c0)=@nl=@proc, 0x80, &(0x7f0000002b40)=[{&(0x7f0000000740)=""/116, 0x74}, {&(0x7f0000000800)=""/187, 0xbb}, {&(0x7f00000019c0)=""/250, 0xfa}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/210, 0xd2}, {0x0}, {0x0}], 0x7}, 0x5}], 0x3, 0x0, 0x0)
pipe(&(0x7f0000000400)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x68, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000540)='./file0\x00', 0x0, 0x881000, 0x0)
open(&(0x7f0000000500)='./file0\x00', 0x0, 0x140)

18:13:52 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00')
sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x80)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x71)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x7ff, 0x97e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001]})
openat$nvram(0xffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x4101, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

18:13:52 executing program 4:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
bind$unix(0xffffffffffffffff, &(0x7f0000001800)=@file={0x0, './bus\x00'}, 0x6e)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
sendmsg$inet6(r5, &(0x7f00000018c0)={&(0x7f0000000100)={0xa, 0x4e20, 0x5, @private0={0xfc, 0x0, [], 0x1}, 0x292bbd89}, 0x1c, &(0x7f0000001740)=[{&(0x7f00000001c0)="11b4d466eb58ccc57c4344ba7a854d8f15bb7166dba7c217ea5f58ef2617fd714627ed8d5b5b1e8f942896fe145a5be4dca1e9d0f98a70f535a22889b6d79c5c08d309ffe544fd5e4ff84dfc58ff56b128abc6988846ee603bbbd979f5216dff1a949c03a3828d660d741c365694cfe8c05630ffdacce53791a89caba6d3b31224b76843234e411beae2d3c0374148dce44c8fd3aebcb62931445796beb3cc3b6bc1dcc2ff6b904bb6a552b2897079a73382267267dba4f65590d04e5e96f91e7e2325cea6775d746027d479ee53d595cc5ed87956c752547a577890986d4908f08fb15452806dd1b92813942e5ed896", 0xf0}, {&(0x7f00000002c0)="b0de247e1937200fdb32462d1a22f38d5a0b75132ef76d5e0adbabb045ec7a7f05be24fc8ac4a64c77d30d3744ac536cb8bd21423c2c284c4aaa8e9037f4daa8357e2faf0125fc3e34326438c1b1ad1d194a3a0e1d4bc1b85aa7a156bb459ed187f3c14680b01d10dc1f948a272af86c236bcaeb11fb179748748329bac6bd5c16bb1270c9689e84db0b28b8a3782a72b1bf7e87168b859c7282a2b3434bcd8a36afb44d33f410ea1a0827c3c04011c0d589456cd9e76c", 0xb7}, {&(0x7f0000000380)="a2b14336f5f49304fe0495b5425503a3f5ce0a33786b3728031b72f16f6e5892d718d08dff160eb62a05f285dca93535fb577351ed5750e643fe2f49e02c6c29109c11f0a8b8950929340b0fe1f08fc116bdac289a0edfd3b0f4054df12c753ed4b49cceaba08fdbf207165dab85", 0x6e}, {&(0x7f0000000400)="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", 0x1000}, {&(0x7f0000001400)="350feeab9175c38ab9e11fcf8cfc7c95d3bb4c9c6f5efa12adc59952b9203d2f0f8d406e3222703249df957b3dfeeb5dc97130712cadcb481f6bed101c16ac3f8cffc90fca51deec22a652796e192c6e72bf5ff4101cdf24cebd8722969fce0a6d68019d83d166552c9a2ac372bca177d4af66c431979ac7a7ac32230167ed06a2b2bda8", 0x84}, {&(0x7f0000001a00)="97bae04baeb6647055bef8932038752f04c5f6d19b9fa29d4eb362c20dcf37f18635054400695e1cd8a1edb6b289df2465fd62da3c4b1d3850b9d403bc72a9f4c3241b0d49c1becd9f323e9649f0aa4abe2325a058c426788c26633441c81720f8dcdd7cff7df0cd8d72a466a3233bf9042a64370914abba56cab2f1e036ec764a7579b855add12b06622d261586e5d1e34d8e31a0c438d12296e3b3458e895a93ede7556f4dce1eef961daa8b327c59576ed5e2db2fa5fcefdd2ee4e5d6ac05805760bf5d3b7200e6997e0ce419eb50ac31438cd98e6ab5c4713e9611ed4b3b8dcb70142f0567bd48c6b027c252be478153af6b2aeff148250730ffba9388257d6c5daeb4bbddfa6113673efa7230bee16b5f7a183d308de08a0b3dc9a9f366bdc7beccdde415885cbf1480a28bcd71bbd54572514e00cf2599df06b7e596ac8146ac0c3d7c46ffb35788828c12c7cbeaa4bf1fb5f89452af5f7fcf3d443f46aa5bc2d1606ecb55169476e183145804fa8b9e6bf3c64a6051dbf3a3166887f5224308019d2464f8dfd49b04ebe41f73bd0f4c44a93d3be71d5ad5b517f9701f6ada5a18913cd04f65d6b342c22209ed7d05c09e9e5fdc7187d4ed42c5b4f3d3aa55c6bb71a0a63035b70939a184a918b8500e7e643598f636f6882a9d59dd75098e511219d60aff897fbdda056fe85de95364c3ce504396cdd5071f59e4c2f09060e82aa828db4e129637a22c675fd145e95a6dcaca681d8761dc77084c511ce187bdd8e8316a9e00a0ea004de58918357b4ee0627cb31ff5c4c1b10374f2229d550008e40eef78a4d4ffa3384f805e532d79cf0da4694da16615316c03dc5f85cbf06ed61a69ea10a8f39f08b273430ba12c5e71030c1a08785783b0ba06de39ffd09ed452e323013e92a62cf68decf2851e444cbb5cb4b2b3d8577794d8e297d91c9605670bda195cf11fa6c2442e42907ab2ddb8b55d76c90af50bda4301ca5a81bf1b8e2c69e42c3a916600aef7fe0f8dcfcf1c5bfdfae8a8ea708efaf48e3108632c35619f59631c9eb0832ac1c397bff1d751a72d966d3303698eca7b4bd0a8d4119d6e332dea809351d63e195f6643c45a4e25ca2c407b1d79d96de029a6a8b7a93ccb4fb7066ec091f39cfe4e2414976653e72e0f3e36fcee982117e3a68f7ee6ca3afbe6a6ec8303c2bb74754dc02af7d657157fd4d3b937c074fecab0db2e8beb9eca6009a410a49dc2bdcbe44508ab06a74a741ce5bc49fb18310bc96d0a42868b68da1df9fa0f7d2bc1b47e7221ecd52108bce045498cc2a20e339e915bc093ba100c3b35646a3f60c38757f8d18f9ababb3a992b2e63e508ee890462db20a90dcbf2ecab8d0a63de3d8d68c6748666ef7e44d7cf51faedf6d03b06102bf333153ad295ed93ce8f01b703da76b2a1681c7ef92f19349820a2959b1eb0502ea7a10d034aaff526727b47800b6f4633ed0ef6071b2d464744aae86f2521b564007e5b82357a1da122f1253137240ced4133014540300b196e69a58c9f362d6d715370adcd193b6bd6f60b6a486a5ece2a6107d1edc54668c6b34bd55e776953d32469acb777ff219791b9e7251ea6f8f409262c3d81ac5df5baa34589bd2e3a15a4a7ea5f1c32a2d2134dac5aa9d087f6a6812c9bcefd6e01a0c917b4875630dc4dc5dcbc847e980d20f63cad6e9fff29e05c76226da267479ee58e77c5cfebf884ca632d3933e0d729138fb662d3de2cc315434a6f5b481142173d5e079bc6698af1bcd67efb4888dae955594a5ce650e8c7eeaaed6528a772999020717b1aac4336dbeb4fbff7dc4fe42615d08e08e30517d70e40bad0697446a202cb8bd55f56f22342ac9347f53ca9f7fcf5f1d1bffe78442a1feaab9c177f573a9b51424fe08d6462dfe08f442f2d3d4c910d7f159ee9dee0d182ca355242db121c7bfb3d5d8ef25280161ca6e013b11922d2b7789d51a927d4f0d88e78bb5f90dcc7e3c443c02d9afe129ff9f408c75a2024812243b4e5215b0acbc4e9f6f43cd8909ac2f18c28181fd2bf2a761516d8df7f2c87f1cd9ab076bc3f0d0beba618dbf98a9ef441651a32113f2a056acad38070d59242f9e648ea822ff90834ddfdc1a55a6a949d333d447fd974d2f696af80f470e87246d102200abeea960d88e7b50af0a061f403240e58a4886af9f089f20016d4677dcf061ab2a400cbd9e988f0f13716aff703829c4a1daea602af687651f1c5dd9bcaf293a7813dc678af0727e925e6fad00e32beee79ad541b5acdec3cb95fcedabc7e97770131d9cb4bed9dbfb52022a2348dd6f7f5467dd34d4b594f68093365a91f98c85bc78f4f38d3ce86d236d41f8623457613cab4a9f2849dca0917c589015da61880099f80a7fe888e96d593f182fe5dc7e1c2cf533f5e9aa6bafbc9c27aed5e889973754b738e42325251f09d8411af9754d1c7f310c4bfd4ed93c5207ee6c78f07f9cd4bf38801ba857a3a2d58027b8c554247b48e87cd499b00ecc139023ab380793deaaa1d06b0d0bead4f035681b917dee0d3baf686b433d0fcd81670c6769f436ef870b558def99a9ecaaa093afb8ace145b904c5ccf1efa2cf24173dee45b5fc6e360b6033dbb7bb69a7248eedb2f5b271cd2f9640d3a0daee87afc97e795ec46e53bcb4907e8fc95a9c60b3d8e54511600e01c7ba5a3ba38f9b07448a660698c20d519d62fafbffc56a755b3dfbe9870874b2ec49f46d1ae184aa60ef0132a490be38dd6df19eaa42aebe03e355cb037dccd390c08a434bf71d2538127fc3304ab665bd995e31889bb14fa047b2e798627649660faabefa39ac559018826cc8c2784ed8ca2983054f2ba7cf96789fb0195a514ac83ddc92f1f4eb30d47513e393bf06717680b8d8d14da58d4f9def68f54c3899c3337c28c48ff7912c0c723c987eb96ef1153271262f3498106a0a5ad39ccf0262e713c948513958b6af49203f15851f2b63ab3985f3086f2b7592e565d92e0ab74252ec2879d9253acc6c669af03870355ad9c01b10c89543b70ffe5376f2dcb5fdc507a65afe0bee28e1f2a0088d10db2bc52b23c7c4cbe6655076c3c884c6ac8f48d5bc7493bfd341d8410208f7218ea8640a1bd4a0994879e6745a3d8d0ca903ee7c461a883574066367b83ca6af9c129c6d6f3ffa94a766d7a0652f6c0ab429f177d33dbadc26043bec8bffb321d33307f0f29be0ad01452da757eac21b895ba5dba554f60947a70287ca9932ea3435870bbb11eab7aee09209279998b0dd163d550070239e06e6d544203e205bcef8528601159af1166918e16da4caa6adda518489048bad889ff6ef0a0c1cdabaca8ab69ed878f21e1ad3c479278259b8db62674d1616a3a73319619007a99907b33d37dc6de1e4c6b8aa79924a58a3c3726aa741821d2fff47fdef756edc80bc4fa7a1a256eeadb49b0a27aba4ce4a12bade845f3af5a311ac51bebccf38c892643aa27cd1037172c9044a1e219f48052f734281bb9e1f12a74e54d806e21d8b28dd4908b6de511ab917d365c9f46109c7c61c08767474fabe0fa9adc6bcdef5b029b6e25898f8c81f8b44614edbfd26304df975ad0ccfbe33e9ce6590c8201d17f5f87a5358e95f12aa80549e39f36477717e18d05a0d377220ecbf8d57320f1eaed91640107b50fe7f37ba69942ff67df28c3256a5a3738331db69ac7d84d020ef90b030d42216284010396b56e518876d7cbb8a095d6721fe77738f9908ea61b433b4f2a3663186ac1ebdc8a17ccc83dbf1b7c40f0de138e542f85ba959b905f380c6861a3d8a0992c18c34713f67c018e002ebafa55d0dcb394d20c3e9bdbdf46477579a2128a491c787ead9e00af540632c56063e3def2f9f3a4691d492eeff9e534a50e1d61295a1cbcae3a81b4020739406b2cc7a0cbbc7dbf2eadf8ccee2e9d3cd426ada5b34c362328d695e4e85d63b76086c3a90508d4d58706a958a4a59ce26465549a4a8440bf2ad61340b944c030288dcefc27a62bcfb3dc615f0e4e0be1364f1640f22860c2b880b6bf0967206d12c467f9ceb0b276d9b6752fe6ee5281303a6f8a13a89c62bc7f6e0760c84f5a63a2bc928b01ab97c458b1aaf83189e9631b84e093b16011c30762f17c6b4b3d880ba4d06cacc4cde1470751f19ed0752b51576fa2a52f7b2f247240a8a8c855223a2cd80f8acdd991f3c09f276a7b88bddbdb020d23460cf8a8cc51025417a8dfb4164321621cf3173d1a3383d1cc10e3adcf6e868c1d992fa65570d863110707a4029c4021b00984baff7b2f1d2ca82b477578434577caa4cfd9a6b433224d97054073c09e182aafb1fcd98f102b73ef78b253eea7ebeeca0758a18cccc156c3558fc87f9705afe10289a0144acf2e153a38607a5e03ca15c378ddc1ced5722886fbf63b8c04cc8fa8dcb85b778caafc9e455fad14c5a036ab1a790f7e49224d2c1eae27f902a8e5bd51ed66e86d84e9f993e73a904b8e36fa9f29c1dabe8e8a3693a6ee5eaa3585e3f94cdf0dd04c443e1a8bc4e7535d0fe1aee679b4c33ad0638a8a8d5840f6547d278039b3abd697449cb1da12208248e37b3676f3221c1d944efbe9845c3f9d864ee7953da342df43cc80040c3ea70be30657f39f4e0d01c1c05dc2b511d82fca36b4a8e5cb72aae0459cc858e5f81d7a37000a2f4ce6a38018522cd71884093fabb8ecfca99cefa9908a8f391cc5c8b06150dfc2d58bd7d256a54de14b550b1335479a72016664e0b7b9229b54b3e962b68ca74e8b3a5adddb041cf71d31770e90670c5e0baa98d52bae4272b02da2248dc415be2fed30c0484b6782ea4ca6e004be1fac60ad88a2c6683267b92c7ef8fe0b3227189611b7f6bb8d6660ff6a9859ad78cdbbf5dea07786cf4f2163b63ba302b3007ae211ac37e93c775e2d14851195d5cb35f4753fee9d3329bbfd76c2848749890e0e7854d727b285a9e4dafa8d746700dd8638a174e1ac49962046ff78cb52e07b2c4d8314382dc8da20ee1235f7f6c314795f59316303f13141fda10adf5c713beeadd7b85526963277ebdd1a5e6a85b70ac27f82257572e4112cd591ad0c04a4885006ecb1ecac2c3303e2e4e522acd3b938a640dc316b7b7afb60830eabac79090b677df7dad3a5d86ee8dde6aad3f7b682d0551e4994c2c20150b5449a2eaca3afd948ec4c5b9c60df9ffd1cd540311f65e31336f25270b454ff82908be0022403186a450037169a2f0898125501552dd14a177019913076c3e3751b7c4e3fe47cd997b313d41bb00b92f3fe7a40aa7681570be5fd011895d92fff20141eee832093ed169735d1a1bac8b0eb6fb70df7080c3b12b8fe14e0df7a234f4f268e67bdcc476340577f1b04404b58d8222dc06a680fd8208126ea019df8aeabb9fee5dde9e4bebc43e885be242244930747d3324988926846187b5a661391528da2d59e117a6caad2b281987bbd26ebaf4684cb1c86f1be2b5338170a3ad78470b9d57bf90403914343aa4531152cf3771e23e951034650bfcbc353a5e8e715f6ba9a379b2281f66218cb01ad08a24043ca9c4c3f63d8256921641040efdddeaacc09f1bc8861183ea77cc88a471c028d476705bad18de154eb00fce6944061e03cb00bac4e346837c2a884534a827988f8d8b9a888da25c301bed5995709bcaa2edb36c9a27267e84dbf76dded1fcc74cc7625e6fc207e5062509ab9d3e312884d1faffec7c97818fd7f7839289b1c0b1c6d07355217b262ba3556a742ff5853053e6ca2514b507fae3b", 0x1000}, {&(0x7f0000000140)="ce7ae1ae7425cc8717e777405f4842ac6ccda216c0270a713b18112bf375e7db7b912f14db7613f227b640f2f98110461007", 0x32}, {&(0x7f00000014c0)="07df54b4ba984c424a4c01309a99ea182eac5c07f5c384404c5011729d2f65ccfaa2a629dc8337b6a06d04536dcd017d19bac098f4db7344a1925a15a6e5cc1aa239f15084529c2547f525128ab26405af3299bacc94b9a3dc4c98f3c87b9652ce82b1ab60862d59e8dacc3e145897bf8160cb98c82af9c4f93a97e5b0262ba7b20294d535c223e05dd3b52c4aeec994be4a00", 0x93}, {&(0x7f0000001580)="9ca2bff96d7900cf99cf8e902cfd5794eb925832cb29e468b51f6ac76ee15aa98ec062ee54a4e95cef98479ee865ebce12c6c84aa5bd4003ca869677874f4c6815876b6f3346ec6865ce0712e21f4db919fb27f92e1c23db991ecc621c29392cf20a6e99362aa12096d1a7be76337e355cf739cc691f33342746fc16b87435e1834edf43faadea987ec802126b184bdd4843656f95a479e502981683350e70f5fe911db4fe56e110a29f8e94266a6ba65d0cbf5eb846c4ed699736292bb07cd78ab42f81ccaa824487dfffb3352bfe103efed5f2788c6ae7", 0xd8}, {&(0x7f0000001680)="d1c8026b2b4a81fed1c2e235cef2ce5aa4e2c2fae1f6fa7101dcd8297bc278e716dbba3e572734214db094d716f7bb5047ac19d36d54642c0715700647369e89601d0d524295e878ed722d0a2118c1cbb9fbd7181c511313ad71ce2de134a940cf780e28ed8de85f1f5362676ede014f38eaef379a278c65598e00bbb9df8bb504336070b00ab3b4fbdc40a471fb491c932b944236ab6b4396355236bd8d9d06f9d62995", 0xa4}], 0xa, &(0x7f0000002a00)=ANY=[@ANYBLOB="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"], 0x88}, 0x40002)
ftruncate(r4, 0x200004)
sendfile(r1, r4, 0x0, 0x80001d00c0d0)

18:13:52 executing program 0:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
getuid()
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r2, 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x200004)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)

18:13:52 executing program 3:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00')
sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x80)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x71)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x7ff, 0x97e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001]})
openat$nvram(0xffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x4101, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

18:13:53 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = add_key$user(&(0x7f0000000340)='user\x00', &(0x7f00000005c0)={'syz', 0x2}, &(0x7f0000000300)="ed", 0x1, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, 0x0, r0}, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x3d})
keyctl$read(0xb, 0x0, &(0x7f0000000100)=""/5, 0x5)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000002bc0)=[{{&(0x7f00000001c0)=@ax25={{0x3, @null}, [@default, @netrom, @rose, @remote, @default, @rose, @netrom, @rose]}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000300)=""/81, 0x51}, {&(0x7f0000000440)=""/129, 0x81}], 0x2, &(0x7f0000000380)=""/21, 0x15}, 0x1}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/24, 0x18}], 0x1, &(0x7f0000000580)=""/100, 0x64}, 0x1de4}, {{&(0x7f00000006c0)=@nl=@proc, 0x80, &(0x7f0000002b40)=[{&(0x7f0000000740)=""/116, 0x74}, {&(0x7f0000000800)=""/187, 0xbb}, {&(0x7f00000019c0)=""/250, 0xfa}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/210, 0xd2}, {0x0}, {0x0}], 0x7}, 0x5}], 0x3, 0x0, 0x0)
pipe(&(0x7f0000000400)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x68, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000540)='./file0\x00', 0x0, 0x881000, 0x0)
open(&(0x7f0000000500)='./file0\x00', 0x0, 0x140)

18:13:53 executing program 2:
prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000340)='user\x00', &(0x7f00000005c0)={'syz', 0x2}, &(0x7f0000000300)="ed", 0x1, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x3d})
keyctl$read(0xb, r0, &(0x7f0000000100)=""/5, 0x5)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r3, &(0x7f0000002bc0)=[{{&(0x7f00000001c0)=@ax25={{0x3, @null}, [@default, @netrom, @rose, @remote, @default, @rose, @netrom, @rose]}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000300)=""/81, 0x51}, {&(0x7f0000000440)=""/129, 0x81}], 0x2, &(0x7f0000000380)=""/21, 0x15}, 0x1}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/24, 0x18}], 0x1, &(0x7f0000000580)=""/100, 0x64}, 0x1de4}, {{&(0x7f00000006c0)=@nl=@proc, 0x80, &(0x7f0000002b40)=[{&(0x7f0000000740)=""/116, 0x74}, {&(0x7f0000000800)=""/187, 0xbb}, {&(0x7f00000019c0)=""/250, 0xfa}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/210, 0xd2}, {0x0}, {0x0}], 0x7}, 0x5}], 0x3, 0x0, 0x0)
pipe(&(0x7f0000000400)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x68, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000540)='./file0\x00', 0x0, 0x881000, 0x0)
open(&(0x7f0000000500)='./file0\x00', 0x0, 0x140)

18:13:53 executing program 0:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r2, 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x200004)
getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000000100), &(0x7f0000000140)=0x30)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)

18:13:53 executing program 4:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
pipe(&(0x7f0000000340)={<r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000004c0)={0x1, [<r3=>0x0]}, &(0x7f0000a8a000)=0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, &(0x7f0000000140)=0x20)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f00000001c0)={r3, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x847, 0x5, 0x9, 0x10000, 0x81, 0xffffffffffffff05, 0x2, 0x5, 0x2, 0xff, 0x6, 0x32c4, 0xea, 0xffffffff, 0x5]}, &(0x7f0000000100)=0x100)
close(r1)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
arch_prctl$ARCH_SET_CPUID(0x1012, 0x3)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r4, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @local}, 0x2}}, 0x2e)
connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r6 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r6, 0x200004)
sendfile(r1, r6, 0x0, 0x80001d00c0d0)

18:13:54 executing program 0:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
fadvise64(0xffffffffffffffff, 0x74, 0x4, 0x2)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000002c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x2, 0x4, 0x1, 0x1, {0xa, 0x4e21, 0x9, @empty, 0x6}}}, 0x3a)
r3 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r3, &(0x7f0000006400)=[{{&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)=""/59, 0x3b}, {&(0x7f00000001c0)=""/6, 0x6}], 0x2, &(0x7f0000000300)=""/40, 0x28}, 0x800}, {{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/124, 0x7c}, {&(0x7f0000000480)=""/173, 0xad}, {&(0x7f0000000540)=""/7, 0x7}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/28, 0x1c}], 0x5, &(0x7f0000001640)=""/91, 0x5b}, 0x8}, {{&(0x7f00000016c0)=@nl=@proc, 0x80, 0x0, 0x0, &(0x7f0000001980)=""/96, 0x60}, 0x5}, {{&(0x7f0000001a00)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000002040)=[{&(0x7f0000001b80)=""/244, 0xf4}, {&(0x7f0000001c80)=""/217, 0xd9}, {&(0x7f0000001e80)=""/102, 0x66}, {&(0x7f0000002680)=""/117, 0x75}, {&(0x7f0000001f80)=""/129, 0x81}], 0x5}, 0xa6}, {{&(0x7f00000020c0)=@nl=@proc, 0x80, &(0x7f0000002400)=[{&(0x7f0000002a40)=""/93, 0x5d}, {&(0x7f00000021c0)=""/47, 0x2f}, {&(0x7f0000002200)=""/197, 0xc5}, {&(0x7f0000002300)=""/205, 0xcd}], 0x4, &(0x7f0000002440)=""/11, 0xb}, 0xffff}, {{&(0x7f0000002480)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f00000027c0)=[{&(0x7f0000002500)=""/86, 0x56}, {&(0x7f0000002580)=""/54, 0x36}, {&(0x7f00000025c0)=""/100, 0x64}, {&(0x7f0000002640)=""/31, 0x1f}, {&(0x7f0000002900)=""/135, 0x87}, {&(0x7f0000002740)=""/66, 0x42}], 0x6, &(0x7f0000002840)=""/175, 0xaf}, 0x3ff}, {{0x0, 0x0, &(0x7f0000003f80), 0x0, &(0x7f0000004040)=""/200, 0xc8}}, {{0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000004140)=""/116, 0x74}, {0x0}, {0x0}], 0x3, &(0x7f00000029c0)=""/104, 0x68}, 0x7ff}], 0x8, 0x0, 0x0)
connect$inet6(r3, 0x0, 0x0)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
syz_genetlink_get_family_id$net_dm(&(0x7f0000000280)='NET_DM\x00')
ftruncate(r4, 0x200004)
r5 = getpid()
sched_setattr(r5, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000140)={{0x6, 0x4, 0x6, 0x0, 'syz1\x00', 0x9}, 0x1, 0x10, 0x400, r5, 0x3, 0xa85, 'syz0\x00', &(0x7f0000000100)=['*vboxnet1*]wlan1nodevuser\x00', ':\x00', '**\'$system\x00'], 0x27, [], [0x2, 0x4, 0xcba6, 0xc0]})
sendfile(r1, r4, 0x0, 0x80001d00c0d0)

18:13:54 executing program 1:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r2, 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x200004)
getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000000100), &(0x7f0000000140)=0x30)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)

18:13:54 executing program 2:
prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000340)='user\x00', &(0x7f00000005c0)={'syz', 0x2}, &(0x7f0000000300)="ed", 0x1, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x3d})
keyctl$read(0xb, r0, &(0x7f0000000100)=""/5, 0x5)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r3, &(0x7f0000002bc0)=[{{&(0x7f00000001c0)=@ax25={{0x3, @null}, [@default, @netrom, @rose, @remote, @default, @rose, @netrom, @rose]}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000300)=""/81, 0x51}, {&(0x7f0000000440)=""/129, 0x81}], 0x2, &(0x7f0000000380)=""/21, 0x15}, 0x1}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/24, 0x18}], 0x1, &(0x7f0000000580)=""/100, 0x64}, 0x1de4}, {{&(0x7f00000006c0)=@nl=@proc, 0x80, &(0x7f0000002b40)=[{&(0x7f0000000740)=""/116, 0x74}, {&(0x7f0000000800)=""/187, 0xbb}, {&(0x7f00000019c0)=""/250, 0xfa}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/210, 0xd2}, {0x0}, {0x0}], 0x7}, 0x5}], 0x3, 0x0, 0x0)
pipe(&(0x7f0000000400)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x68, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000540)='./file0\x00', 0x0, 0x881000, 0x0)
open(&(0x7f0000000500)='./file0\x00', 0x0, 0x140)

18:13:54 executing program 4:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
fsetxattr$security_capability(r2, &(0x7f00000001c0)='security.capability\x00', &(0x7f0000000140)=@v1={0x1000000, [{0x2, 0x7ff}]}, 0xc, 0x3)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
sendfile(r1, r4, 0x0, 0x80001d00c0d0)

18:13:54 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x80)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x71)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x7ff, 0x97e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001]})
openat$nvram(0xffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x4101, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

18:13:54 executing program 1:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00')
sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x80)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x71)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x7ff, 0x97e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001]})
openat$nvram(0xffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x4101, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

18:13:55 executing program 0:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe38d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
memfd_create(&(0x7f0000000100)='{\x00', 0x1)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r2, 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x200004)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)

18:13:55 executing program 3:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00')
sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x80)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x71)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x7ff, 0x97e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001]})
openat$nvram(0xffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x4101, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

18:13:55 executing program 4:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x2, 0x201, 0x0, 0x0, {0x3, 0x0, 0x9}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x10000}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x17c3efe01989b8a6}, 0x1)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000100))
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
sendfile(r1, r4, 0x0, 0x80001d00c0d0)

18:13:55 executing program 2:
prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000340)='user\x00', &(0x7f00000005c0)={'syz', 0x2}, &(0x7f0000000300)="ed", 0x1, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x3d})
keyctl$read(0xb, r0, &(0x7f0000000100)=""/5, 0x5)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r3, &(0x7f0000002bc0)=[{{&(0x7f00000001c0)=@ax25={{0x3, @null}, [@default, @netrom, @rose, @remote, @default, @rose, @netrom, @rose]}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000300)=""/81, 0x51}, {&(0x7f0000000440)=""/129, 0x81}], 0x2, &(0x7f0000000380)=""/21, 0x15}, 0x1}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/24, 0x18}], 0x1, &(0x7f0000000580)=""/100, 0x64}, 0x1de4}, {{&(0x7f00000006c0)=@nl=@proc, 0x80, &(0x7f0000002b40)=[{&(0x7f0000000740)=""/116, 0x74}, {&(0x7f0000000800)=""/187, 0xbb}, {&(0x7f00000019c0)=""/250, 0xfa}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/210, 0xd2}, {0x0}, {0x0}], 0x7}, 0x5}], 0x3, 0x0, 0x0)
pipe(&(0x7f0000000400)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x68, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000540)='./file0\x00', 0x0, 0x881000, 0x0)
open(&(0x7f0000000500)='./file0\x00', 0x0, 0x140)

18:13:55 executing program 0:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r2, 0x0, 0x0)
r3 = open(&(0x7f0000000100)='./bus\x00', 0x342, 0x180)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"})
write$binfmt_aout(r4, &(0x7f0000000240)=ANY=[], 0x35b)
r5 = syz_open_pts(r4, 0x0)
ioctl$TCSETSF(r5, 0x5412, &(0x7f0000000100)={0x10017})
ftruncate(r3, 0x200004)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)

18:13:55 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x80)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x71)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x7ff, 0x97e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001]})
openat$nvram(0xffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x4101, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

18:13:55 executing program 4:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000100)={0x32, 0x6, 0x0, {0x1, 0x5, 0x9, 0x0, 'eth0\'{,+%'}}, 0x32)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r2)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r3, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r5 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r5, 0x200004)
sendfile(r2, r5, 0x0, 0x80001d00c0d0)

18:13:56 executing program 0:
r0 = openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x4, 0x4d, 0x2}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, 0x0, 0x0)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x200000, 0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000400)={0x2, 0x4, 0x4, 0x100, 0x9, {0x77359400}, {0x5, 0xc, 0xa4, 0x8, 0xe4, 0x5, "a5a9b127"}, 0x44, 0x7, @userptr=0x89e7, 0x7, 0x0, <r6=>r0})
bind$bt_l2cap(r6, &(0x7f00000002c0)={0x1f, 0x5, @any, 0xffff, 0x1}, 0xe)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000300)=ANY=[@ANYBLOB="a7f0a4c493659d01000000cbc2f1bf66ba7902465168e4db4a16f630e8864d052222adb1ccd92370a90b375e6712f0706ba106c743811899582d85a76455b49ed3f73e28f46e87a4ef6630463a0a95417080647482986603c2920f32bf35ffdda23d47222366474f9fe173f76b007ef21468265639dd73fc77193517558fa9864f885e95c9b8da4031a905d1422a97f67612d836bfc78d0deca9483efc9371e3644280e7973b0224b2819f09cea99347c8bc3becacd6ad598699991ace178418c38a89d8478f0987629d38e9d1a6ee03785d11b3fc3e796621219bac13226c2b91a82b910998f2e97a367e9f272d9f2c26f41f38", @ANYRES32=<r7=>0x0], &(0x7f0000a8a000)=0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7}, &(0x7f0000000140)=0x20)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000140)={r7, @in6={{0xa, 0x4e20, 0x4, @loopback, 0x6}}, 0x8000}, 0x90)
sendfile(r1, r4, 0x0, 0x80001d00c0d0)

18:13:56 executing program 2:
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000340)='user\x00', &(0x7f00000005c0)={'syz', 0x2}, &(0x7f0000000300)="ed", 0x1, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x3d})
keyctl$read(0xb, r0, &(0x7f0000000100)=""/5, 0x5)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r3, &(0x7f0000002bc0)=[{{&(0x7f00000001c0)=@ax25={{0x3, @null}, [@default, @netrom, @rose, @remote, @default, @rose, @netrom, @rose]}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000300)=""/81, 0x51}, {&(0x7f0000000440)=""/129, 0x81}], 0x2, &(0x7f0000000380)=""/21, 0x15}, 0x1}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/24, 0x18}], 0x1, &(0x7f0000000580)=""/100, 0x64}, 0x1de4}, {{&(0x7f00000006c0)=@nl=@proc, 0x80, &(0x7f0000002b40)=[{&(0x7f0000000740)=""/116, 0x74}, {&(0x7f0000000800)=""/187, 0xbb}, {&(0x7f00000019c0)=""/250, 0xfa}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/210, 0xd2}, {0x0}, {0x0}], 0x7}, 0x5}], 0x3, 0x0, 0x0)
pipe(&(0x7f0000000400)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x68, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000540)='./file0\x00', 0x0, 0x881000, 0x0)
open(&(0x7f0000000500)='./file0\x00', 0x0, 0x140)

18:13:56 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x80)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x71)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x7ff, 0x97e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001]})
openat$nvram(0xffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x4101, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

18:13:56 executing program 0:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r2, 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x90)
ftruncate(r3, 0x200004)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)

18:13:56 executing program 1:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r2, 0x0, 0x0)
r3 = open(&(0x7f0000000100)='./bus\x00', 0x342, 0x180)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"})
write$binfmt_aout(r4, &(0x7f0000000240)=ANY=[], 0x35b)
r5 = syz_open_pts(r4, 0x0)
ioctl$TCSETSF(r5, 0x5412, &(0x7f0000000100)={0x10017})
ftruncate(r3, 0x200004)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)

18:13:56 executing program 3:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x2, 0x201, 0x0, 0x0, {0x3, 0x0, 0x9}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x10000}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x17c3efe01989b8a6}, 0x1)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000100))
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
sendfile(r1, r4, 0x0, 0x80001d00c0d0)

18:13:56 executing program 4:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpid()
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
sendfile(r1, r4, 0x0, 0x80001d00c0d0)

18:13:57 executing program 2:
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000340)='user\x00', &(0x7f00000005c0)={'syz', 0x2}, &(0x7f0000000300)="ed", 0x1, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x3d})
keyctl$read(0xb, r0, &(0x7f0000000100)=""/5, 0x5)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r3, &(0x7f0000002bc0)=[{{&(0x7f00000001c0)=@ax25={{0x3, @null}, [@default, @netrom, @rose, @remote, @default, @rose, @netrom, @rose]}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000300)=""/81, 0x51}, {&(0x7f0000000440)=""/129, 0x81}], 0x2, &(0x7f0000000380)=""/21, 0x15}, 0x1}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/24, 0x18}], 0x1, &(0x7f0000000580)=""/100, 0x64}, 0x1de4}, {{&(0x7f00000006c0)=@nl=@proc, 0x80, &(0x7f0000002b40)=[{&(0x7f0000000740)=""/116, 0x74}, {&(0x7f0000000800)=""/187, 0xbb}, {&(0x7f00000019c0)=""/250, 0xfa}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/210, 0xd2}, {0x0}, {0x0}], 0x7}, 0x5}], 0x3, 0x0, 0x0)
pipe(&(0x7f0000000400)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x68, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000540)='./file0\x00', 0x0, 0x881000, 0x0)
open(&(0x7f0000000500)='./file0\x00', 0x0, 0x140)

18:13:57 executing program 0:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
pipe(&(0x7f0000000340)={<r3=>0xffffffffffffffff})
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
r4 = accept$phonet_pipe(r3, &(0x7f0000000140), &(0x7f0000000180)=0x10)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x2}}, 0x2e)
connect$inet6(r2, 0x0, 0x0)
r5 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
fcntl$setpipe(r6, 0x407, 0x0)
write(r6, &(0x7f0000000340), 0x41395527)
ioctl$SOUND_MIXER_WRITE_RECSRC(r6, 0xc0044dff, &(0x7f0000000100)=0x7)
ftruncate(r5, 0x200004)
sendfile(r0, r5, 0x0, 0x80001d00c0d0)

18:13:57 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x80)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x71)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x7ff, 0x97e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001]})
openat$nvram(0xffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x4101, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

18:13:57 executing program 3:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r2, 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x200004)
getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000000100), &(0x7f0000000140)=0x30)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)

18:13:57 executing program 1:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r2, 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x200004)
getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000000100), &(0x7f0000000140)=0x30)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)

18:13:57 executing program 4:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
pipe(&(0x7f0000000340)={<r4=>0xffffffffffffffff})
vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r5 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r5, 0x200004)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendfile(r1, r5, 0x0, 0x80001d00c0d0)

18:13:58 executing program 2:
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000340)='user\x00', &(0x7f00000005c0)={'syz', 0x2}, &(0x7f0000000300)="ed", 0x1, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x3d})
keyctl$read(0xb, r0, &(0x7f0000000100)=""/5, 0x5)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r3, &(0x7f0000002bc0)=[{{&(0x7f00000001c0)=@ax25={{0x3, @null}, [@default, @netrom, @rose, @remote, @default, @rose, @netrom, @rose]}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000300)=""/81, 0x51}, {&(0x7f0000000440)=""/129, 0x81}], 0x2, &(0x7f0000000380)=""/21, 0x15}, 0x1}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/24, 0x18}], 0x1, &(0x7f0000000580)=""/100, 0x64}, 0x1de4}, {{&(0x7f00000006c0)=@nl=@proc, 0x80, &(0x7f0000002b40)=[{&(0x7f0000000740)=""/116, 0x74}, {&(0x7f0000000800)=""/187, 0xbb}, {&(0x7f00000019c0)=""/250, 0xfa}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/210, 0xd2}, {0x0}, {0x0}], 0x7}, 0x5}], 0x3, 0x0, 0x0)
pipe(&(0x7f0000000400)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x68, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000540)='./file0\x00', 0x0, 0x881000, 0x0)
open(&(0x7f0000000500)='./file0\x00', 0x0, 0x140)

18:13:58 executing program 0:
r0 = openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x4, 0x1}, 0x505}, 0x0, 0x0, 0xffffffffffffffff, 0x96dc4147d2c679bc)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, 0x0, 0x0)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
sendfile(r1, r4, 0x0, 0x80001d00c0d0)
ioctl$KVM_GET_TSC_KHZ(r0, 0xaea3)

18:13:58 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x80)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x71)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x7ff, 0x97e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001]})
openat$nvram(0xffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x4101, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:13:58 executing program 3 (fault-call:7 fault-nth:0):
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700)
splice(r0, 0x0, r3, 0x0, 0x100000800ffe0, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffc8f)
sched_setattr(0x0, 0x0, 0x0)
splice(r0, 0x0, r2, 0x0, 0x1870b0a0, 0x0)

18:13:58 executing program 1:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r2, 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x200004)
getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000000100), &(0x7f0000000140)=0x30)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)

18:13:58 executing program 0:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r2, 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
r4 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="58d249ce0200"/16, @ANYRES32=r7, @ANYBLOB="00000116010000001800120008000000000000000000020008000300a901b753095601d4b36974547a26137e7507338ccefb41e2ec158c08fcad7a38adbbdba9e6ffdc5f51023e7574f72b4e4e287e96b67b52c2c6761e83012655e6e1c3608160491fee", @ANYRES32=r8], 0x38}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000180)={'wg0\x00', r7})
ftruncate(r3, 0x200004)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)

18:13:58 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x80)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x71)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x7ff, 0x97e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001]})
openat$nvram(0xffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x4101, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:13:58 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0)
r0 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000340)='user\x00', &(0x7f00000005c0)={'syz', 0x2}, &(0x7f0000000300)="ed", 0x1, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x3d})
keyctl$read(0xb, r0, &(0x7f0000000100)=""/5, 0x5)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r3, &(0x7f0000002bc0)=[{{&(0x7f00000001c0)=@ax25={{0x3, @null}, [@default, @netrom, @rose, @remote, @default, @rose, @netrom, @rose]}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000300)=""/81, 0x51}, {&(0x7f0000000440)=""/129, 0x81}], 0x2, &(0x7f0000000380)=""/21, 0x15}, 0x1}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/24, 0x18}], 0x1, &(0x7f0000000580)=""/100, 0x64}, 0x1de4}, {{&(0x7f00000006c0)=@nl=@proc, 0x80, &(0x7f0000002b40)=[{&(0x7f0000000740)=""/116, 0x74}, {&(0x7f0000000800)=""/187, 0xbb}, {&(0x7f00000019c0)=""/250, 0xfa}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/210, 0xd2}, {0x0}, {0x0}], 0x7}, 0x5}], 0x3, 0x0, 0x0)
pipe(&(0x7f0000000400)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x68, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000540)='./file0\x00', 0x0, 0x881000, 0x0)
open(&(0x7f0000000500)='./file0\x00', 0x0, 0x140)

18:13:58 executing program 4:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f00000001c0)=@usbdevfs_driver={0xfffffff8, 0x7fff, &(0x7f0000000100)="16a9cf858934c8d2340badbc570cee1d7708514fea97abed85696c083fc7ce6edde774a99cd61ce36bbb54805b34557dab864d6fbd16d6920643c0a6188fad86334eb68e0076a41229f7af10216b2d1330628143e92022bbf80856a2b688bdc1d0e05261d1053191141d700f3ef50d7b2f0d9c2e208a896e76de"})
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
r5 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r5, &(0x7f0000006400)=[{{&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)=""/59, 0x3b}, {&(0x7f00000001c0)=""/6, 0x6}], 0x2, &(0x7f0000000300)=""/40, 0x28}, 0x800}, {{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/124, 0x7c}, {&(0x7f0000000480)=""/173, 0xad}, {&(0x7f0000000540)=""/7, 0x7}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/28, 0x1c}], 0x5, &(0x7f0000001640)=""/91, 0x5b}, 0x8}, {{&(0x7f00000016c0)=@nl=@proc, 0x80, 0x0, 0x0, &(0x7f0000001980)=""/96, 0x60}, 0x5}, {{&(0x7f0000001a00)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000002040)=[{&(0x7f0000001b80)=""/244, 0xf4}, {&(0x7f0000001c80)=""/217, 0xd9}, {&(0x7f0000001e80)=""/102, 0x66}, {&(0x7f0000002680)=""/117, 0x75}, {&(0x7f0000001f80)=""/129, 0x81}], 0x5}, 0xa6}, {{&(0x7f00000020c0)=@nl=@proc, 0x80, &(0x7f0000002400)=[{&(0x7f0000002a40)=""/93, 0x5d}, {&(0x7f00000021c0)=""/47, 0x2f}, {&(0x7f0000002200)=""/197, 0xc5}, {&(0x7f0000002300)=""/205, 0xcd}], 0x4, &(0x7f0000002440)=""/11, 0xb}, 0xffff}, {{&(0x7f0000002480)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f00000027c0)=[{&(0x7f0000002500)=""/86, 0x56}, {&(0x7f0000002580)=""/54, 0x36}, {&(0x7f00000025c0)=""/100, 0x64}, {&(0x7f0000002640)=""/31, 0x1f}, {&(0x7f0000002900)=""/135, 0x87}, {&(0x7f0000002740)=""/66, 0x42}], 0x6, &(0x7f0000002840)=""/175, 0xaf}, 0x3ff}, {{0x0, 0x0, &(0x7f0000003f80), 0x0, &(0x7f0000004040)=""/200, 0xc8}}, {{0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000004140)=""/116, 0x74}, {0x0}, {0x0}], 0x3, &(0x7f00000029c0)=""/104, 0x68}, 0x7ff}], 0x8, 0x0, 0x0)
fcntl$setpipe(r5, 0x407, 0x890f)
sendfile(r1, r4, 0x0, 0x80001d00c0d0)

[  261.380252] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pig=11532 comm=syz-executor.0
18:13:59 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x80)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x71)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x7ff, 0x97e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001]})
openat$nvram(0xffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x4101, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:13:59 executing program 1:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r2, 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x200004)
getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000000100), &(0x7f0000000140)=0x30)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)

18:13:59 executing program 3:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700)
splice(r0, 0x0, r3, 0x0, 0x100000800ffe0, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffc8f)
sched_setattr(0x0, 0x0, 0x0)
pipe(&(0x7f0000000340)={<r4=>0xffffffffffffffff})
vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000080)=0x9f0, 0x4)
splice(r0, 0x0, r2, 0x0, 0x1870b0a0, 0x0)

[  261.934112] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pig=11561 comm=syz-executor.0
18:13:59 executing program 0:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = msgget$private(0x0, 0x0)
msgrcv(r0, 0x0, 0x0, 0x0, 0x0)
msgsnd(r0, &(0x7f0000000100)={0x2, "641ab0432f5109fac82479b19e7ddd8f302c50ae4d3e6e9c870b9af587f5cf689ba8cb65ecf523e62c6ede2afe9bf3622951c89c64d20e105da72bbf0df293f5e0cba7d94656fd98761458f2a201ee57eee465670d581b0c7f1e6bd91d6a36497dd1c9c9bb9afda48ac8bb3f62d40c10550c1d1914f3dccd77"}, 0x81, 0x800)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
socket$inet6(0xa, 0x800, 0x100)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, 0x0, 0x0)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
sendfile(r1, r4, 0x0, 0x80001d00c0d0)

18:13:59 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x80)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x71)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x7ff, 0x97e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001]})
openat$nvram(0xffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x4101, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

18:13:59 executing program 1:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r2, 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x200004)
getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000000100), &(0x7f0000000140)=0x30)

18:13:59 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0)
r0 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000340)='user\x00', &(0x7f00000005c0)={'syz', 0x2}, &(0x7f0000000300)="ed", 0x1, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x3d})
keyctl$read(0xb, r0, &(0x7f0000000100)=""/5, 0x5)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r3, &(0x7f0000002bc0)=[{{&(0x7f00000001c0)=@ax25={{0x3, @null}, [@default, @netrom, @rose, @remote, @default, @rose, @netrom, @rose]}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000300)=""/81, 0x51}, {&(0x7f0000000440)=""/129, 0x81}], 0x2, &(0x7f0000000380)=""/21, 0x15}, 0x1}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/24, 0x18}], 0x1, &(0x7f0000000580)=""/100, 0x64}, 0x1de4}, {{&(0x7f00000006c0)=@nl=@proc, 0x80, &(0x7f0000002b40)=[{&(0x7f0000000740)=""/116, 0x74}, {&(0x7f0000000800)=""/187, 0xbb}, {&(0x7f00000019c0)=""/250, 0xfa}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/210, 0xd2}, {0x0}, {0x0}], 0x7}, 0x5}], 0x3, 0x0, 0x0)
pipe(&(0x7f0000000400)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x68, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000540)='./file0\x00', 0x0, 0x881000, 0x0)
open(&(0x7f0000000500)='./file0\x00', 0x0, 0x140)

18:13:59 executing program 4:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-monitor\x00', 0x1, 0x0)
r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer\x00', 0x400, 0x0)
r4 = syz_open_dev$audion(&(0x7f0000000240)='/dev/audio#\x00', 0x1, 0x501880)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x6c, r1, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x3}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8, 0x1, r3}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8}, {0x8, 0x1, r0}]}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40800}, 0x40000)
r5 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r5)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r6, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r8 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r8, 0x200004)
sendfile(r5, r8, 0x0, 0x80001d00c0d0)

18:13:59 executing program 1:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r2, 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x200004)

18:14:00 executing program 3:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700)
splice(r0, 0x0, r3, 0x0, 0x100000800ffe0, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffc8f)
ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000100)=""/90)
sched_setattr(0x0, 0x0, 0x0)
splice(r0, 0x0, r2, 0x0, 0x1870b0a0, 0x0)

18:14:00 executing program 1:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r2, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)

18:14:00 executing program 1:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r2, 0x0, 0x0)

18:14:00 executing program 1:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)

18:14:00 executing program 1:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e)

18:14:00 executing program 0:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x109400, 0x0)
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000140)={0x1, 0x18000})
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, 0x0, 0x0)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
sendfile(r0, r4, 0x0, 0x80001d00c0d0)

18:14:00 executing program 1:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
connect$pppl2tp(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e)

18:14:00 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x80)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x71)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x7ff, 0x97e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001]})
openat$nvram(0xffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x4101, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

18:14:00 executing program 4:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200)={<r5=>0xffffffffffffffff}, 0x0, 0xa}}, 0x20)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r4, &(0x7f0000000280)={0x16, 0x98, 0xfa00, {&(0x7f00000001c0), 0x3, r5, 0x10, 0x1, @ib={0x1b, 0xa3dd, 0xe00000, {"c316171d028709b8799b642f321603c8"}, 0x1, 0x8, 0x28}}}, 0xa0)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r6 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r6, 0x200004)
sendfile(r1, r6, 0x0, 0x80001d00c0d0)
ioctl$DRM_IOCTL_FREE_BUFS(r6, 0x4010641a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[0x7ff, 0x46]})

18:14:00 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0)
r0 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000340)='user\x00', &(0x7f00000005c0)={'syz', 0x2}, &(0x7f0000000300)="ed", 0x1, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x3d})
keyctl$read(0xb, r0, &(0x7f0000000100)=""/5, 0x5)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r3, &(0x7f0000002bc0)=[{{&(0x7f00000001c0)=@ax25={{0x3, @null}, [@default, @netrom, @rose, @remote, @default, @rose, @netrom, @rose]}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000300)=""/81, 0x51}, {&(0x7f0000000440)=""/129, 0x81}], 0x2, &(0x7f0000000380)=""/21, 0x15}, 0x1}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/24, 0x18}], 0x1, &(0x7f0000000580)=""/100, 0x64}, 0x1de4}, {{&(0x7f00000006c0)=@nl=@proc, 0x80, &(0x7f0000002b40)=[{&(0x7f0000000740)=""/116, 0x74}, {&(0x7f0000000800)=""/187, 0xbb}, {&(0x7f00000019c0)=""/250, 0xfa}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/210, 0xd2}, {0x0}, {0x0}], 0x7}, 0x5}], 0x3, 0x0, 0x0)
pipe(&(0x7f0000000400)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x68, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000540)='./file0\x00', 0x0, 0x881000, 0x0)
open(&(0x7f0000000500)='./file0\x00', 0x0, 0x140)

18:14:00 executing program 1:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
connect$pppl2tp(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e)

18:14:00 executing program 0:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000240)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
ioctl$VIDIOC_DBG_G_CHIP_INFO(r3, 0xc0c85666, &(0x7f0000000140)={{0x3, @addr=0x2}, "05690b91cb16d7e46363f04c30266352ed734bfec06ba6e74e54891a5f6b3d05", 0x1})
connect$inet6(r2, 0x0, 0x0)
pipe(&(0x7f0000000340)={<r4=>0xffffffffffffffff})
vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
setsockopt$inet_sctp_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000100)={0x9, 0x8000, 0x7, 0x4}, 0x8)
r5 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r5, 0x200004)
sendfile(r0, r5, 0x0, 0x80001d00c0d0)

18:14:00 executing program 3:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700)
splice(r0, 0x0, r3, 0x0, 0x100000800ffe0, 0x0)
r4 = getpid()
sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRESOCT=r4, @ANYRESHEX=r4, @ANYRES64=r4], 0x43)
sched_setattr(0x0, 0x0, 0x0)
splice(r0, 0x0, r2, 0x0, 0x1870b0a0, 0x0)

18:14:00 executing program 1:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
connect$pppl2tp(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e)

18:14:01 executing program 1:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
socket$inet6(0xa, 0x400000000001, 0x0)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r0, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e)

18:14:01 executing program 3:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
r3 = epoll_create1(0x0)
r4 = timerfd_create(0x0, 0x0)
r5 = dup3(r4, r3, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r5, &(0x7f00000001c0)={0x0, 0x3f00})
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=""/211, 0xd3}}], 0x1, 0x0, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00')
preadv(r6, &(0x7f00000017c0), 0xde, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700)
r8 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r8, &(0x7f0000006400)=[{{&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)=""/59, 0x3b}, {&(0x7f00000001c0)=""/6, 0x6}], 0x2, &(0x7f0000000300)=""/40, 0x28}, 0x800}, {{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/124, 0x7c}, {&(0x7f0000000480)=""/173, 0xad}, {&(0x7f0000000540)=""/7, 0x7}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/28, 0x1c}], 0x5, &(0x7f0000001640)=""/91, 0x5b}, 0x8}, {{&(0x7f00000016c0)=@nl=@proc, 0x80, 0x0, 0x0, &(0x7f0000001980)=""/96, 0x60}, 0x5}, {{&(0x7f0000001a00)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000002040)=[{&(0x7f0000001b80)=""/244, 0xf4}, {&(0x7f0000001c80)=""/217, 0xd9}, {&(0x7f0000001e80)=""/102, 0x66}, {&(0x7f0000002680)=""/117, 0x75}, {&(0x7f0000001f80)=""/129, 0x81}], 0x5}, 0xa6}, {{&(0x7f00000020c0)=@nl=@proc, 0x80, &(0x7f0000002400)=[{&(0x7f0000002a40)=""/93, 0x5d}, {&(0x7f00000021c0)=""/47, 0x2f}, {&(0x7f0000002200)=""/197, 0xc5}, {&(0x7f0000002300)=""/205, 0xcd}], 0x4, &(0x7f0000002440)=""/11, 0xb}, 0xffff}, {{&(0x7f0000002480)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f00000027c0)=[{&(0x7f0000002500)=""/86, 0x56}, {&(0x7f0000002580)=""/54, 0x36}, {&(0x7f00000025c0)=""/100, 0x64}, {&(0x7f0000002640)=""/31, 0x1f}, {&(0x7f0000002900)=""/135, 0x87}, {&(0x7f0000002740)=""/66, 0x42}], 0x6, &(0x7f0000002840)=""/175, 0xaf}, 0x3ff}, {{0x0, 0x0, &(0x7f0000003f80), 0x0, &(0x7f0000004040)=""/200, 0xc8}}, {{0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000004140)=""/116, 0x74}, {0x0}, {0x0}], 0x3, &(0x7f00000029c0)=""/104, 0x68}, 0x7ff}], 0x8, 0x0, 0x0)
r9 = socket$inet6(0xa, 0x2, 0x0)
write$binfmt_misc(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="f9c1d54db43826e6b0d08c2fe7ce1a11b5d50360f3f43bf915af", @ANYRES32=r0, @ANYPTR, @ANYPTR=&(0x7f0000000200)=ANY=[@ANYRESOCT=r2, @ANYRESDEC=r7, @ANYRES64=r8, @ANYRES16=r6, @ANYPTR=&(0x7f0000000080)=ANY=[@ANYPTR], @ANYRESOCT], @ANYRES16=r4, @ANYRES64=r9], 0x38)
sched_setattr(0x0, 0x0, 0x0)
splice(r0, 0x0, r7, 0x0, 0x1870b0a0, 0x0)

18:14:01 executing program 1:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r0, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e)

18:14:01 executing program 1:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r0, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e)

18:14:01 executing program 1:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r0, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e)

18:14:01 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x80)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x71)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x7ff, 0x97e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001]})
openat$nvram(0xffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x4101, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

18:14:01 executing program 1:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r0, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e)

18:14:01 executing program 4:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r1, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r2)
r3 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r3, &(0x7f0000006400)=[{{&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)=""/59, 0x3b}, {&(0x7f00000001c0)=""/6, 0x6}], 0x2, &(0x7f0000000300)=""/40, 0x28}, 0x800}, {{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/124, 0x7c}, {&(0x7f0000000480)=""/173, 0xad}, {&(0x7f0000000540)=""/7, 0x7}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/28, 0x1c}], 0x5, &(0x7f0000001640)=""/91, 0x5b}, 0x8}, {{&(0x7f00000016c0)=@nl=@proc, 0x80, 0x0, 0x0, &(0x7f0000001980)=""/96, 0x60}, 0x5}, {{&(0x7f0000001a00)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000002040)=[{&(0x7f0000001b80)=""/244, 0xf4}, {&(0x7f0000001c80)=""/217, 0xd9}, {&(0x7f0000001e80)=""/102, 0x66}, {&(0x7f0000002680)=""/117, 0x75}, {&(0x7f0000001f80)=""/129, 0x81}], 0x5}, 0xa6}, {{&(0x7f00000020c0)=@nl=@proc, 0x80, &(0x7f0000002400)=[{&(0x7f0000002a40)=""/93, 0x5d}, {&(0x7f00000021c0)=""/47, 0x2f}, {&(0x7f0000002200)=""/197, 0xc5}, {&(0x7f0000002300)=""/205, 0xcd}], 0x4, &(0x7f0000002440)=""/11, 0xb}, 0xffff}, {{&(0x7f0000002480)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f00000027c0)=[{&(0x7f0000002500)=""/86, 0x56}, {&(0x7f0000002580)=""/54, 0x36}, {&(0x7f00000025c0)=""/100, 0x64}, {&(0x7f0000002640)=""/31, 0x1f}, {&(0x7f0000002900)=""/135, 0x87}, {&(0x7f0000002740)=""/66, 0x42}], 0x6, &(0x7f0000002840)=""/175, 0xaf}, 0x3ff}, {{0x0, 0x0, &(0x7f0000003f80), 0x0, &(0x7f0000004040)=""/200, 0xc8}}, {{0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000004140)=""/116, 0x74}, {0x0}, {0x0}], 0x3, &(0x7f00000029c0)=""/104, 0x68}, 0x7ff}], 0x8, 0x0, 0x0)
splice(r0, &(0x7f0000000100)=0x2, r3, &(0x7f0000000140)=0x9, 0xece, 0x9)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r4, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1}}, 0x4, 0x4, 0x3, 0x2}}, 0x26)
connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
pipe(&(0x7f0000000340)={<r6=>0xffffffffffffffff})
vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
ioctl$EVIOCGREP(r6, 0x80084503, &(0x7f00000000c0)=""/42)
r7 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r7, 0x200004)
sendfile(r2, r7, 0x0, 0x80001d00c0d0)

18:14:01 executing program 0:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x109001, 0x0)
write$P9_RUNLINKAT(r0, &(0x7f0000000100)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, 0x0, 0x0)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x161042, 0xa4)
ftruncate(r4, 0x200004)
sendfile(r1, r4, 0x0, 0x80001d00c0d0)

18:14:01 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0)
r0 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000340)='user\x00', &(0x7f00000005c0)={'syz', 0x2}, &(0x7f0000000300)="ed", 0x1, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x3d})
keyctl$read(0xb, r0, &(0x7f0000000100)=""/5, 0x5)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r3, &(0x7f0000002bc0)=[{{&(0x7f00000001c0)=@ax25={{0x3, @null}, [@default, @netrom, @rose, @remote, @default, @rose, @netrom, @rose]}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000300)=""/81, 0x51}, {&(0x7f0000000440)=""/129, 0x81}], 0x2, &(0x7f0000000380)=""/21, 0x15}, 0x1}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/24, 0x18}], 0x1, &(0x7f0000000580)=""/100, 0x64}, 0x1de4}, {{&(0x7f00000006c0)=@nl=@proc, 0x80, &(0x7f0000002b40)=[{&(0x7f0000000740)=""/116, 0x74}, {&(0x7f0000000800)=""/187, 0xbb}, {&(0x7f00000019c0)=""/250, 0xfa}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/210, 0xd2}, {0x0}, {0x0}], 0x7}, 0x5}], 0x3, 0x0, 0x0)
pipe(&(0x7f0000000400)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x68, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000540)='./file0\x00', 0x0, 0x881000, 0x0)
open(&(0x7f0000000500)='./file0\x00', 0x0, 0x140)

18:14:02 executing program 1:
socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e)

18:14:02 executing program 3:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f0000000080)={0x3, r2})
pipe(&(0x7f0000000340)={<r5=>0xffffffffffffffff})
vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
fcntl$setpipe(r0, 0x407, 0x100000000000003)
write(r3, &(0x7f0000000340), 0x41395527)
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
fcntl$setpipe(r6, 0x407, 0x0)
write(r6, &(0x7f0000000340), 0x41395527)
openat$cgroup_ro(r6, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700)
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x100000800ffe0, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffc8f)
sched_setattr(0x0, 0x0, 0x0)
splice(r0, 0x0, r2, 0x0, 0x1870b0a0, 0x0)

18:14:02 executing program 1:
socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e)

18:14:02 executing program 1:
socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e)

18:14:02 executing program 1:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r0, 0x0, 0x0)

18:14:02 executing program 1:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r0, 0x0, 0x0)

18:14:02 executing program 1:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r0, 0x0, 0x0)

18:14:02 executing program 5:
getpid()
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x80)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x71)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x7ff, 0x97e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001]})
openat$nvram(0xffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x4101, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:14:02 executing program 1:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r0, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e)

18:14:02 executing program 4:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x5}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="00000016010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x1c, 0x0, 0x411, 0x0, 0x0, {0x2}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @multicast}, @NL80211_ATTR_SCHED_SCAN_MATCH={0xc, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x6}]}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x4, 0x9}}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0xf387}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x5d2}]}, 0x4c}}, 0x40)
ftruncate(r4, 0x200004)
sendfile(r1, r4, 0x0, 0x80001d00c0d0)

18:14:02 executing program 0:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
r3 = socket$inet6(0xa, 0x2, 0x0)
pipe(&(0x7f0000000340)={<r4=>0xffffffffffffffff})
vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000280)='l2tp\x00')
sendmsg$L2TP_CMD_TUNNEL_GET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r5, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0xc0)
recvmmsg(r3, &(0x7f0000006400)=[{{&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)=""/59, 0x3b}, {&(0x7f00000001c0)=""/6, 0x6}], 0x2, &(0x7f0000000300)=""/40, 0x28}, 0x800}, {{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/124, 0x7c}, {&(0x7f0000000480)=""/173, 0xad}, {&(0x7f0000000540)=""/7, 0x7}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/28, 0x1c}], 0x5, &(0x7f0000001640)=""/91, 0x5b}, 0x8}, {{&(0x7f00000016c0)=@nl=@proc, 0x80, 0x0, 0x0, &(0x7f0000001980)=""/96, 0x60}, 0x5}, {{&(0x7f0000001a00)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000002040)=[{&(0x7f0000001b80)=""/244, 0xf4}, {&(0x7f0000001c80)=""/217, 0xd9}, {&(0x7f0000001e80)=""/102, 0x66}, {&(0x7f0000002680)=""/117, 0x75}, {&(0x7f0000001f80)=""/129, 0x81}], 0x5}, 0xa6}, {{&(0x7f00000020c0)=@nl=@proc, 0x80, &(0x7f0000002400)=[{&(0x7f0000002a40)=""/93, 0x5d}, {&(0x7f00000021c0)=""/47, 0x2f}, {&(0x7f0000002200)=""/197, 0xc5}, {&(0x7f0000002300)=""/205, 0xcd}], 0x4, &(0x7f0000002440)=""/11, 0xb}, 0xffff}, {{&(0x7f0000002480)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f00000027c0)=[{&(0x7f0000002500)=""/86, 0x56}, {&(0x7f0000002580)=""/54, 0x36}, {&(0x7f00000025c0)=""/100, 0x64}, {&(0x7f0000002640)=""/31, 0x1f}, {&(0x7f0000002900)=""/135, 0x87}, {&(0x7f0000002740)=""/66, 0x42}], 0x6, &(0x7f0000002840)=""/175, 0xaf}, 0x3ff}, {{0x0, 0x0, &(0x7f0000003f80), 0x0, &(0x7f0000004040)=""/200, 0xc8}}, {{0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000004140)=""/116, 0x74}, {0x0}, {0x0}], 0x3, &(0x7f00000029c0)=""/104, 0x68}, 0x7ff}], 0x8, 0x0, 0x0)
getsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000100), &(0x7f0000000140)=0x4)
connect$inet6(r2, 0x0, 0x0)
r6 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r6, 0x200004)
sendfile(r0, r6, 0x0, 0x80001d00c0d0)

18:14:02 executing program 1:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r0, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e)

18:14:02 executing program 5:
getpid()
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x80)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x71)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x7ff, 0x97e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001]})
openat$nvram(0xffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x4101, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:14:02 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0)
r0 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000340)='user\x00', &(0x7f00000005c0)={'syz', 0x2}, &(0x7f0000000300)="ed", 0x1, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x3d})
keyctl$read(0xb, r0, &(0x7f0000000100)=""/5, 0x5)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r3, &(0x7f0000002bc0)=[{{&(0x7f00000001c0)=@ax25={{0x3, @null}, [@default, @netrom, @rose, @remote, @default, @rose, @netrom, @rose]}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000300)=""/81, 0x51}, {&(0x7f0000000440)=""/129, 0x81}], 0x2, &(0x7f0000000380)=""/21, 0x15}, 0x1}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/24, 0x18}], 0x1, &(0x7f0000000580)=""/100, 0x64}, 0x1de4}, {{&(0x7f00000006c0)=@nl=@proc, 0x80, &(0x7f0000002b40)=[{&(0x7f0000000740)=""/116, 0x74}, {&(0x7f0000000800)=""/187, 0xbb}, {&(0x7f00000019c0)=""/250, 0xfa}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/210, 0xd2}, {0x0}, {0x0}], 0x7}, 0x5}], 0x3, 0x0, 0x0)
pipe(&(0x7f0000000400)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x68, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000540)='./file0\x00', 0x0, 0x881000, 0x0)
open(&(0x7f0000000500)='./file0\x00', 0x0, 0x140)

18:14:02 executing program 1:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r0, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e)

18:14:02 executing program 3:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700)
splice(r0, 0x0, r2, 0x0, 0x100000800ffe0, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffc8f)
sched_setattr(0x0, 0x0, 0x0)
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x1870b0a0, 0x0)
pipe(&(0x7f0000000340)={<r3=>0xffffffffffffffff})
ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
write$FUSE_WRITE(r3, &(0x7f0000000080)={0x18, 0x0, 0x8, {0x902}}, 0x18)

18:14:03 executing program 5:
getpid()
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x80)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x71)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x7ff, 0x97e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001]})
openat$nvram(0xffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x4101, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:14:03 executing program 1:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700)
splice(r0, 0x0, r3, 0x0, 0x100000800ffe0, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffc8f)
ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000100)=""/90)
sched_setattr(0x0, 0x0, 0x0)
splice(r0, 0x0, r2, 0x0, 0x1870b0a0, 0x0)

18:14:03 executing program 5:
sched_setscheduler(0x0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x80)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x71)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x7ff, 0x97e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001]})
openat$nvram(0xffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x4101, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:14:03 executing program 0:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x2cc, 0x8}, 0xc1400, 0xff, 0x9, 0x1, 0x0, 0x1f, 0x5}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
pipe(&(0x7f0000000340)={<r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000100)={0x15, 0x65, 0xffff, 0x9, 0x8, '9P2000.u'}, 0x15)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, 0x0, 0x0)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
sendfile(r0, r4, 0x0, 0x80001d00c0d0)

18:14:03 executing program 4:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x20008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xb47}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0xff, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
pipe(&(0x7f0000000340)={<r3=>0xffffffffffffffff})
ioctl$SNDRV_PCM_IOCTL_UNLINK(0xffffffffffffffff, 0x4161, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r4, &(0x7f0000002ac0)=[{{&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000240)=""/40, 0x28}, 0x800}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000480)=""/124, 0x7c}, {&(0x7f0000001740)=""/182, 0xb6}, {&(0x7f0000000540)=""/7, 0x7}, {&(0x7f0000000580)=""/4088, 0xff8}, {&(0x7f0000000200)=""/28, 0x1c}], 0x5, &(0x7f0000001640)=""/83, 0x53}, 0x9}, {{&(0x7f00000016c0)=@nl=@proc, 0x80, 0x0, 0x0, &(0x7f0000001880)=""/100, 0x64}, 0x5}, {{&(0x7f0000000380)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000002040)=[{&(0x7f0000001b80)=""/244, 0xf4}, {&(0x7f0000001c80)=""/217, 0xd9}, {&(0x7f0000001900)=""/87, 0x57}, {&(0x7f0000002680)=""/117, 0x75}, {&(0x7f0000001f80)=""/129, 0xba}], 0x5}, 0xa6}, {{&(0x7f00000020c0)=@nl=@proc, 0x80, &(0x7f0000002400)=[{&(0x7f0000002a40)=""/93, 0x5d}, {&(0x7f00000021c0)=""/47, 0x2f}, {&(0x7f0000001a00)=""/204, 0xcc}, {&(0x7f0000002300)=""/205, 0xcd}], 0x4, &(0x7f0000002440)=""/6, 0xb}, 0xffff}, {{&(0x7f0000002480)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f00000027c0)=[{&(0x7f0000000400)=""/86, 0x56}, {&(0x7f00000001c0)=""/47, 0x2f}, {&(0x7f0000001800)=""/100, 0x64}, {&(0x7f0000002640)=""/15, 0x1f}, {&(0x7f0000002900)=""/120, 0x78}, {&(0x7f00000015c0)=""/66, 0x42}], 0x6, &(0x7f0000002840)=""/166, 0xa6}, 0x3ff}, {{0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000004040)=""/200, 0xc8}, 0x3}, {{0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000004140)=""/116, 0x74}, {0x0}, {0x0}], 0x3, &(0x7f00000029c0)=""/104, 0x68}, 0x7ff}], 0x8, 0x0, 0x0)
r5 = dup2(r3, r4)
ioctl$KVM_S390_UCAS_UNMAP(r5, 0x4018ae51, &(0x7f0000000100)={0x5, 0x9, 0x8})
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r7 = open(&(0x7f0000000080)='./bus\x00', 0x620001, 0x0)
ftruncate(r7, 0x200004)
sendfile(0xffffffffffffffff, r7, 0x0, 0x80001d00c0d0)

18:14:03 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0)
r0 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000340)='user\x00', &(0x7f00000005c0)={'syz', 0x2}, &(0x7f0000000300)="ed", 0x1, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x3d})
keyctl$read(0xb, r0, &(0x7f0000000100)=""/5, 0x5)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r3, &(0x7f0000002bc0)=[{{&(0x7f00000001c0)=@ax25={{0x3, @null}, [@default, @netrom, @rose, @remote, @default, @rose, @netrom, @rose]}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000300)=""/81, 0x51}, {&(0x7f0000000440)=""/129, 0x81}], 0x2, &(0x7f0000000380)=""/21, 0x15}, 0x1}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/24, 0x18}], 0x1, &(0x7f0000000580)=""/100, 0x64}, 0x1de4}, {{&(0x7f00000006c0)=@nl=@proc, 0x80, &(0x7f0000002b40)=[{&(0x7f0000000740)=""/116, 0x74}, {&(0x7f0000000800)=""/187, 0xbb}, {&(0x7f00000019c0)=""/250, 0xfa}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/210, 0xd2}, {0x0}, {0x0}], 0x7}, 0x5}], 0x3, 0x0, 0x0)
pipe(&(0x7f0000000400)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x68, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000540)='./file0\x00', 0x0, 0x881000, 0x0)
open(&(0x7f0000000500)='./file0\x00', 0x0, 0x140)

18:14:03 executing program 5:
sched_setscheduler(0x0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x80)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x71)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x7ff, 0x97e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001]})
openat$nvram(0xffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x4101, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:14:03 executing program 3:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000340)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140)='gtp\x00')
sendmsg$GTP_CMD_DELPDP(r4, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, r5, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6, 0x6, 0x20}, @GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010100}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_I_TEI={0x8}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_I_TEI={0x8, 0x8, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x8000)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
openat$cgroup_ro(r2, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700)
splice(r0, 0x0, r7, 0x0, 0x100000800ffe0, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffc8f)
sched_setattr(0x0, 0x0, 0x0)
splice(r0, 0x0, r6, 0x0, 0x1870b0a0, 0x0)
getsockopt$inet6_tcp_buf(r4, 0x6, 0x1a, &(0x7f0000000380)=""/227, &(0x7f0000000280)=0xe3)

18:14:04 executing program 1:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700)
splice(r0, 0x0, r3, 0x0, 0x100000800ffe0, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffc8f)
ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000100)=""/90)
sched_setattr(0x0, 0x0, 0x0)
splice(r0, 0x0, r2, 0x0, 0x1870b0a0, 0x0)

18:14:04 executing program 5:
sched_setscheduler(0x0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x80)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x71)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x7ff, 0x97e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001]})
openat$nvram(0xffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x4101, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:14:04 executing program 5:
getpid()
sched_setscheduler(0x0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x80)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x71)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x7ff, 0x97e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001]})
openat$nvram(0xffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x4101, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:14:04 executing program 4:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
pipe(&(0x7f0000000340)={<r5=>0xffffffffffffffff})
pipe(&(0x7f0000000340)={<r6=>0xffffffffffffffff})
vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f00000001c0)=0x4)
vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000100), &(0x7f0000000140)=0x4)
sendfile(r1, r4, 0x0, 0x80001d00c0d0)

18:14:04 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = add_key$user(0x0, &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000340)='user\x00', &(0x7f00000005c0)={'syz', 0x2}, &(0x7f0000000300)="ed", 0x1, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x3d})
keyctl$read(0xb, r0, &(0x7f0000000100)=""/5, 0x5)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r3, &(0x7f0000002bc0)=[{{&(0x7f00000001c0)=@ax25={{0x3, @null}, [@default, @netrom, @rose, @remote, @default, @rose, @netrom, @rose]}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000300)=""/81, 0x51}, {&(0x7f0000000440)=""/129, 0x81}], 0x2, &(0x7f0000000380)=""/21, 0x15}, 0x1}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/24, 0x18}], 0x1, &(0x7f0000000580)=""/100, 0x64}, 0x1de4}, {{&(0x7f00000006c0)=@nl=@proc, 0x80, &(0x7f0000002b40)=[{&(0x7f0000000740)=""/116, 0x74}, {&(0x7f0000000800)=""/187, 0xbb}, {&(0x7f00000019c0)=""/250, 0xfa}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/210, 0xd2}, {0x0}, {0x0}], 0x7}, 0x5}], 0x3, 0x0, 0x0)
pipe(&(0x7f0000000400)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x68, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000540)='./file0\x00', 0x0, 0x881000, 0x0)
open(&(0x7f0000000500)='./file0\x00', 0x0, 0x140)

18:14:04 executing program 0:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x1ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$setpipe(r1, 0x407, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
recvfrom$ax25(r1, &(0x7f0000000100)=""/108, 0x6c, 0x40000000, &(0x7f0000000180)={{0x3, @null, 0x6}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast]}, 0x48)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, 0x0, 0x0)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
ioctl$TIOCSRS485(r5, 0x542f, &(0x7f0000000200)={0xbe37, 0x2, 0x80})
ftruncate(r4, 0x200004)
sendfile(r0, r4, 0x0, 0x80001d00c0d0)

18:14:04 executing program 3:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0)
ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f0000000080)={0x32, 0x28, 0x8, 0x5, 0x8, 0x20, 0x4, 0x35, 0x1})
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700)
splice(r0, 0x0, r4, 0x0, 0x100000800ffe0, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffc8f)
sched_setattr(0x0, 0x0, 0x0)
splice(r0, 0x0, r3, 0x0, 0x1870b0a0, 0x0)
ioctl$VIDIOC_S_FBUF(r1, 0x4030560b, &(0x7f0000000200)={0x19, 0x20, &(0x7f0000000100)="c2d82ffd6dbd64ad4ae851719ead66b64f4df4a4515ac9b5651c19dd0a45daa94a396eb8574f3db5202be64d8ff3befb7c122fb946e9199206d9497ec3ee47c4d79fb0eb6c06cab11fb7ca03b35c330f50b6e465f6e2681190ee2e14bf3792a4c530355968cd2be46f6ef0fbe9533973d1c8ce61922a9f77cd3bf0446b79bf7c9206ba6f6ce35950a7aec3065f0d435281dfb3ad8666fc86a777d847ed99d3bf3031dc91db5da0c7512f0cd0b093f12d73ac00f4e304d93bdb215c4824b89ca01d9a4b85873a3f66", {0x9, 0x10000, 0x4c314356, 0x1, 0x20000, 0x3e98883f, 0x9}})

18:14:05 executing program 1 (fault-call:1 fault-nth:0):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r0, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e)

[  267.710478] FAULT_INJECTION: forcing a failure.
[  267.710478] name failslab, interval 1, probability 0, space 0, times 0
[  267.738963] CPU: 0 PID: 11871 Comm: syz-executor.1 Not tainted 4.14.176-syzkaller #0
[  267.747161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  267.756643] Call Trace:
[  267.759254]  dump_stack+0x13e/0x194
[  267.762912]  should_fail.cold+0x10a/0x14b
[  267.767088]  should_failslab+0xd6/0x130
[  267.771253]  __kmalloc+0x2e9/0x7c0
[  267.774983]  ? l2tp_session_create+0x35/0x16f0
[  267.779600]  ? find_held_lock+0x2d/0x110
[  267.783664]  ? l2tp_session_get+0x169/0x680
[  267.790714]  l2tp_session_create+0x35/0x16f0
[  267.795127]  ? mark_held_locks+0xa6/0xf0
[  267.799261]  ? __local_bh_enable_ip+0x94/0x190
[  267.803881]  ? trace_hardirqs_on_caller+0x3f6/0x590
[  267.808921]  ? l2tp_session_get+0x169/0x680
[  267.813240]  ? __local_bh_enable_ip+0x94/0x190
[  267.818287]  pppol2tp_connect+0x1154/0x17b0
[  267.823150]  ? pppol2tp_session_sock_put+0x70/0x70
[  267.828465]  ? lock_acquire+0x170/0x3f0
[  267.832526]  ? lock_downgrade+0x6e0/0x6e0
[  267.836756]  ? security_socket_connect+0x83/0xb0
[  267.841784]  ? pppol2tp_session_sock_put+0x70/0x70
[  267.846789]  SYSC_connect+0x1c6/0x250
[  267.850598]  ? SYSC_bind+0x1e0/0x1e0
[  267.854326]  ? fput+0xb/0x140
[  267.857439]  ? SyS_write+0x14d/0x210
[  267.861244]  ? SyS_read+0x210/0x210
[  267.864959]  ? do_syscall_64+0x4c/0x640
[  267.868935]  ? SyS_accept+0x30/0x30
[  267.872557]  do_syscall_64+0x1d5/0x640
[  267.876451]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  267.881637] RIP: 0033:0x45c889
[  267.884837] RSP: 002b:00007f2aff90bc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  267.892543] RAX: ffffffffffffffda RBX: 00007f2aff90c6d4 RCX: 000000000045c889
[  267.901901] RDX: 000000000000002e RSI: 00000000200000c0 RDI: 0000000000000003
18:14:05 executing program 1 (fault-call:1 fault-nth:1):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r0, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e)

[  267.909421] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000
[  267.916762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  267.924042] R13: 000000000000008f R14: 00000000004c32b3 R15: 0000000000000000
18:14:05 executing program 5:
getpid()
sched_setscheduler(0x0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x80)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x71)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x7ff, 0x97e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001]})
openat$nvram(0xffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x4101, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:14:05 executing program 1:
socket$pppl2tp(0x18, 0x1, 0x1)

18:14:05 executing program 4:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000080007, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
mlock2(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r4 = open(&(0x7f0000000100)='./bus\x00', 0x101, 0xb8)
ftruncate(r4, 0x200004)
sendfile(r1, r4, 0x0, 0x80001d00c0d0)

18:14:05 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = add_key$user(0x0, &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000340)='user\x00', &(0x7f00000005c0)={'syz', 0x2}, &(0x7f0000000300)="ed", 0x1, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x3d})
keyctl$read(0xb, r0, &(0x7f0000000100)=""/5, 0x5)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r3, &(0x7f0000002bc0)=[{{&(0x7f00000001c0)=@ax25={{0x3, @null}, [@default, @netrom, @rose, @remote, @default, @rose, @netrom, @rose]}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000300)=""/81, 0x51}, {&(0x7f0000000440)=""/129, 0x81}], 0x2, &(0x7f0000000380)=""/21, 0x15}, 0x1}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/24, 0x18}], 0x1, &(0x7f0000000580)=""/100, 0x64}, 0x1de4}, {{&(0x7f00000006c0)=@nl=@proc, 0x80, &(0x7f0000002b40)=[{&(0x7f0000000740)=""/116, 0x74}, {&(0x7f0000000800)=""/187, 0xbb}, {&(0x7f00000019c0)=""/250, 0xfa}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/210, 0xd2}, {0x0}, {0x0}], 0x7}, 0x5}], 0x3, 0x0, 0x0)
pipe(&(0x7f0000000400)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x68, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000540)='./file0\x00', 0x0, 0x881000, 0x0)
open(&(0x7f0000000500)='./file0\x00', 0x0, 0x140)

18:14:05 executing program 0:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
close(0xffffffffffffffff)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x3, 0x1, 0x1, {0xa, 0x4e20, 0x9, @mcast1, 0x1f9c}}}, 0x32)
connect$inet6(r1, 0x0, 0x0)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1c1843, 0x80)
pipe(&(0x7f0000000340)={<r3=>0xffffffffffffffff})
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
getsockopt$IP_SET_OP_GET_BYINDEX(r3, 0x1, 0x53, &(0x7f0000000300)={0x7, 0x7, 0x4}, &(0x7f0000000340)=0x28)
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = openat$cgroup_ro(r4, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm-monitor\x00', 0x20202, 0x0)
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
fcntl$setpipe(r6, 0x407, 0x0)
ftruncate(r2, 0x200004)
connect$nfc_llcp(r5, &(0x7f0000000280)={0x27, 0x1, 0x0, 0x6, 0x3f, 0x3f, "6a0dfd05cfd4d94218170e67ac668610c9e1ab76fc26e8468580d738d2386742eedf3d6d386a121be4830fce0c5af94ef562317f0f4b04785cc00cfa9e79f7", 0x3e}, 0x60)
sendfile(0xffffffffffffffff, r2, 0x0, 0x80001d00c0d0)

18:14:05 executing program 1:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$VIDIOC_ENUMAUDIO(0xffffffffffffffff, 0xc0345641, &(0x7f0000000000)={0x0, "87ef7d968658563e3b527bbce422eddc79a49f501f679da31500f7292e8e4e44", 0x0, 0x1})
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$setpipe(r1, 0x407, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
ioctl$SNDCTL_DSP_POST(r1, 0x5008, 0x0)
connect$pppl2tp(r0, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e)

18:14:05 executing program 3:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700)
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
ioctl$DRM_IOCTL_ADD_BUFS(r4, 0xc0206416, &(0x7f0000000080)={0xb34, 0x8, 0xffff, 0x6, 0x8, 0x40})
splice(r0, 0x0, r3, 0x0, 0x100000800ffe0, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffc8f)
sched_setattr(0x0, 0x0, 0x0)
splice(r0, 0x0, r2, 0x0, 0x1870b0a0, 0x0)

18:14:06 executing program 4:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setregid(0x0, 0x0)
ioctl$sock_SIOCGIFBR(r4, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='veth1_macvtap\x00'})
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000b40)='NLBL_MGMT\x00')
sendmsg$NLBL_MGMT_C_LISTDEF(r4, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000029bd7000000000000600000008000200070000001400060020010000000000000000f19f000000100000ac1e0101"], 0x40}, 0x1, 0x0, 0x0, 0x84}, 0x40000)
sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x5c, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_MGMT_A_DOMAIN={0xb, 0x1, '/bdev/\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010102}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4044800}, 0x44)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r6 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r6, 0x200004)
sendfile(r1, r6, 0x0, 0x80001d00c0d0)

18:14:06 executing program 5:
getpid()
sched_setscheduler(0x0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x80)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x71)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x7ff, 0x97e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001]})
openat$nvram(0xffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x4101, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:14:06 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x0, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x80)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x71)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x7ff, 0x97e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001]})
openat$nvram(0xffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x4101, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

18:14:06 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x0, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x80)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x71)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x7ff, 0x97e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001]})
openat$nvram(0xffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x4101, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

18:14:06 executing program 4:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
prlimit64(r0, 0x9, 0x0, &(0x7f0000000100))
r1 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r1, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r2)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r3, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r5 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r5, 0x200004)
sendfile(r2, r5, 0x0, 0x80001d00c0d0)

18:14:06 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = add_key$user(0x0, &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000340)='user\x00', &(0x7f00000005c0)={'syz', 0x2}, &(0x7f0000000300)="ed", 0x1, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x3d})
keyctl$read(0xb, r0, &(0x7f0000000100)=""/5, 0x5)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r3, &(0x7f0000002bc0)=[{{&(0x7f00000001c0)=@ax25={{0x3, @null}, [@default, @netrom, @rose, @remote, @default, @rose, @netrom, @rose]}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000300)=""/81, 0x51}, {&(0x7f0000000440)=""/129, 0x81}], 0x2, &(0x7f0000000380)=""/21, 0x15}, 0x1}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/24, 0x18}], 0x1, &(0x7f0000000580)=""/100, 0x64}, 0x1de4}, {{&(0x7f00000006c0)=@nl=@proc, 0x80, &(0x7f0000002b40)=[{&(0x7f0000000740)=""/116, 0x74}, {&(0x7f0000000800)=""/187, 0xbb}, {&(0x7f00000019c0)=""/250, 0xfa}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/210, 0xd2}, {0x0}, {0x0}], 0x7}, 0x5}], 0x3, 0x0, 0x0)
pipe(&(0x7f0000000400)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x68, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000540)='./file0\x00', 0x0, 0x881000, 0x0)
open(&(0x7f0000000500)='./file0\x00', 0x0, 0x140)

18:14:06 executing program 1:
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
fcntl$setpipe(r0, 0x407, 0x0)
write(r0, &(0x7f0000000340), 0x41395527)
ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000040)={0xa00000, 0x7, 0x0, <r1=>r0, 0x0, &(0x7f0000000000)={0x9a0919, 0x7, [], @ptr=0x40b2e499}})
ioctl$SG_SET_DEBUG(r1, 0x227e, &(0x7f0000000080)=0x1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e)

18:14:06 executing program 0:
r0 = openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0205647, &(0x7f0000000140)={0x9a0000, 0x800, 0xaf2e, r0, 0x0, &(0x7f0000000100)={0x980910, 0x7, [], @ptr=0x100}})
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, 0x0, 0x0)
r5 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r5, 0x200004)
sendfile(r1, r5, 0x0, 0x80001d00c0d0)

18:14:06 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x0, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x80)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x71)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x7ff, 0x97e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001]})
openat$nvram(0xffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x4101, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

18:14:06 executing program 3:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r0, r1, 0x80000)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='cpuset.effective_mems\x00', 0x26e1, 0x0)
getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040), &(0x7f0000000100)=0x4)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.usage_sys\x00', 0x7a05, 0x1700)
pipe(&(0x7f0000000340)={<r4=>0xffffffffffffffff})
vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
bind$phonet(r4, &(0x7f0000000300)={0x23, 0x5, 0x9, 0x4}, 0x10)
splice(r0, 0x0, r3, 0x0, 0x100000800ffe0, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffc8f)
sched_setattr(0x0, 0x0, 0x0)
splice(r0, 0x0, r2, 0x0, 0x1870b0a0, 0x0)
r5 = getpid()
sched_setattr(r5, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
sched_setattr(r5, &(0x7f0000000180)={0x38, 0x2, 0x1, 0x2386, 0x1, 0x84, 0x0, 0x401, 0x1, 0x6}, 0x0)
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
fcntl$setpipe(r6, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000380)="276323bba58a0ac7f1e7245e710c69663f9a6e272ffeec278aebf0408a8b5cbf8e7073d16d5ca98b4a944e3949b35af8c8f8438d6c5861ff39ae9874323d7e9f1d95a9795b58a0bfe8ab87f2a373fe21a0e8a757aec9418c9d107917307d341bdd3a8b03faa87c420962350d94a6970c880dafe921f89e8f03052269a6e0b5d0f42b60b9ee669e766019c4f680dd747567d670c1ffea5705749f158f824233cfe1360a1915eb99d7bdf820834f1b604fa8e65c71c36467570c23fd953d4d99ccd2bcc9ffeba7e3a90d6c8b315a568b31a3f0b8e9c6de36e752b6f44acf9d9684767ecc6615297674e7fd2543ab8593", 0xef)
getsockopt$inet_dccp_buf(r6, 0x21, 0xf, &(0x7f00000001c0)=""/245, &(0x7f00000002c0)=0xf5)

18:14:07 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x80)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x71)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x7ff, 0x97e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001]})
openat$nvram(0xffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x4101, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

18:14:07 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x80)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x71)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x7ff, 0x97e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001]})
openat$nvram(0xffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x4101, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

18:14:07 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = add_key$user(&(0x7f00000001c0)='user\x00', 0x0, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000340)='user\x00', &(0x7f00000005c0)={'syz', 0x2}, &(0x7f0000000300)="ed", 0x1, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x3d})
keyctl$read(0xb, r0, &(0x7f0000000100)=""/5, 0x5)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r3, &(0x7f0000002bc0)=[{{&(0x7f00000001c0)=@ax25={{0x3, @null}, [@default, @netrom, @rose, @remote, @default, @rose, @netrom, @rose]}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000300)=""/81, 0x51}, {&(0x7f0000000440)=""/129, 0x81}], 0x2, &(0x7f0000000380)=""/21, 0x15}, 0x1}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/24, 0x18}], 0x1, &(0x7f0000000580)=""/100, 0x64}, 0x1de4}, {{&(0x7f00000006c0)=@nl=@proc, 0x80, &(0x7f0000002b40)=[{&(0x7f0000000740)=""/116, 0x74}, {&(0x7f0000000800)=""/187, 0xbb}, {&(0x7f00000019c0)=""/250, 0xfa}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/210, 0xd2}, {0x0}, {0x0}], 0x7}, 0x5}], 0x3, 0x0, 0x0)
pipe(&(0x7f0000000400)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x68, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000540)='./file0\x00', 0x0, 0x881000, 0x0)
open(&(0x7f0000000500)='./file0\x00', 0x0, 0x140)

18:14:07 executing program 4:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x8000000001fff, 0x448000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x20080, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00')
ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x7f)
sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0500000000000000000001000000050005000000000005000600000000000800030099040000"], 0x2c}, 0x1, 0x6c}, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r7, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRET={0xc, 0x4, [0x400, 0xe1]}]}, 0x20}, 0x1, 0x0, 0x0, 0x44040}, 0x40)
sendfile(r1, r4, 0x0, 0x80001d00c0d0)

18:14:07 executing program 0:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x1)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r2, 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f00000002c0), 0x0)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000001380)=<r4=>0x0)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, <r6=>0x0}, &(0x7f0000000280)=0x5)
setuid(r6)
syz_mount_image$reiserfs(&(0x7f0000000200)='reiserfs\x00', &(0x7f0000000240)='./bus\x00', 0x77e, 0x2, &(0x7f0000001340), 0x800040, &(0x7f00000002c0)=ANY=[@ANYBLOB="c45cff3c4f5589000000007cc537", @ANYRESDEC=r4, @ANYBLOB=',hash,seclabel,euid>', @ANYRESDEC=r6, @ANYBLOB=',\x00'])
ftruncate(r3, 0x200004)
sendmsg$IPSET_CMD_SAVE(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000053000df03a08c64900"], 0x1c}}, 0x4048080)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)

18:14:07 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x80)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x71)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x7ff, 0x97e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001]})
openat$nvram(0xffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x4101, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

18:14:07 executing program 3:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700)
splice(r0, 0x0, r3, 0x0, 0x100000800ffe0, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000000100)=""/222, 0xde, 0xffffffff)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffc8f)
sched_setattr(0x0, 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x48080, 0x0)
mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x8001)
splice(r0, 0x0, r2, 0x0, 0x1870b0a0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

18:14:07 executing program 1:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00')
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYRES16, @ANYRESHEX=r3, @ANYBLOB=',rootmode000040000,user_id=\x00'/42, @ANYRESDEC=0x0, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYPTR64, @ANYRES64=r2], @ANYPTR=&(0x7f00000008c0)=ANY=[@ANYBLOB="0709b969d00256e03f44cee06c1346e3f7b02db765e65257cd34d3c0866fdd2b8214ea049c950ece5bad10d90b2ea1c797c16d330a87763289d6b1509198c0f09950801ca33143779f252a19216cb5ec68e5e88a774d366b44c515e9ccc1de495f96b657e93ee6b6e54ed327480675ca", @ANYRES16, @ANYRES16, @ANYRES64, @ANYBLOB="b9913e54b3a6afd3", @ANYPTR, @ANYBLOB="72b6caa09386d9a0d9b84aaa2d79b379d8dff7603f3ef89a02418cc3cd89892603569c0b46b96648b54277621fca9166f1f8d140fbd927f664f395502299963e65505dc65eed7618f1db3f909786209411a28c62343ba032122ad07059d2fd0af3b1b3352351bf44b6313e5939bb026210cbd1e930fd7955dad794dd15680730cd66c62ef5dd4935430f586fa5c6dff4ef0bf45e91e3325b4da81bdc925420c24e4cb82d8d5233a309"]], @ANYRESDEC=0x0, @ANYBLOB="2384a5df6147c0f9000f5f4cdf5b676316effd07000000123c6c0000c0b84befc736cf2039ab24b92dee080573a94221ac9fbe48c2c5140fd897c26b13969a1b241115df21dba33453cf53ee681f859aebf19c0bd19d8d6c421596cddec40ce59dbf306b"])
sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x68, r2, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x1f, @media='udp\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x68}}, 0x24040004)
connect$pppl2tp(r0, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e)

18:14:07 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x80)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x71)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x7ff, 0x97e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001]})
openat$nvram(0xffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x4101, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

18:14:08 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x80)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x71)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x7ff, 0x97e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001]})
openat$nvram(0xffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x4101, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

18:14:08 executing program 0:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="00000016010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@private1={0xfc, 0x1, [], 0x1}, 0x21, r5})
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r2, 0x0, 0x0)
r7 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r7, 0x200004)
sendfile(r0, r7, 0x0, 0x80001d00c0d0)

18:14:08 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = add_key$user(&(0x7f00000001c0)='user\x00', 0x0, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000340)='user\x00', &(0x7f00000005c0)={'syz', 0x2}, &(0x7f0000000300)="ed", 0x1, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x3d})
keyctl$read(0xb, r0, &(0x7f0000000100)=""/5, 0x5)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r3, &(0x7f0000002bc0)=[{{&(0x7f00000001c0)=@ax25={{0x3, @null}, [@default, @netrom, @rose, @remote, @default, @rose, @netrom, @rose]}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000300)=""/81, 0x51}, {&(0x7f0000000440)=""/129, 0x81}], 0x2, &(0x7f0000000380)=""/21, 0x15}, 0x1}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/24, 0x18}], 0x1, &(0x7f0000000580)=""/100, 0x64}, 0x1de4}, {{&(0x7f00000006c0)=@nl=@proc, 0x80, &(0x7f0000002b40)=[{&(0x7f0000000740)=""/116, 0x74}, {&(0x7f0000000800)=""/187, 0xbb}, {&(0x7f00000019c0)=""/250, 0xfa}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/210, 0xd2}, {0x0}, {0x0}], 0x7}, 0x5}], 0x3, 0x0, 0x0)
pipe(&(0x7f0000000400)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x68, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000540)='./file0\x00', 0x0, 0x881000, 0x0)
open(&(0x7f0000000500)='./file0\x00', 0x0, 0x140)

18:14:08 executing program 3:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000100)={<r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
ioctl$VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000040)={0xc, 0x0, 0x101, 0x40000, r3})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700)
splice(r0, 0x0, r5, 0x0, 0x100000800ffe0, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffc8f)
sched_setattr(0x0, 0x0, 0x0)
splice(r0, 0x0, r4, 0x0, 0x1870b0a0, 0x0)

18:14:08 executing program 4:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x3, 0x40, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r1, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r2)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r3, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
r5 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r5, 0x200004)
sendfile(r2, r5, 0x0, 0x80001d00c0d0)

18:14:08 executing program 1:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000002ac0)=[{{&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)=""/59, 0x3b}, {&(0x7f00000001c0)=""/6, 0x6}], 0x2, &(0x7f0000000300)=""/40, 0x28}, 0x800}, {{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000001d80)=""/130, 0x82}, {&(0x7f0000000480)=""/173, 0xad}, {&(0x7f0000000540)=""/7, 0x7}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000000400)=""/28, 0x1c}], 0x5, &(0x7f0000001640)=""/91, 0x5b}, 0x8}, {{&(0x7f00000016c0)=@nl=@proc, 0x80, 0x0, 0x0, &(0x7f0000001980)=""/96, 0x60}, 0x5}, {{&(0x7f0000001a00)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000002040)=[{&(0x7f0000001b80)=""/244, 0xf4}, {&(0x7f0000001c80)=""/217, 0xd9}, {&(0x7f0000000040)=""/102, 0x66}, {&(0x7f0000002680)=""/117, 0x75}, {&(0x7f0000001f80)=""/129, 0x81}], 0x5}, 0xa6}, {{&(0x7f00000020c0)=@nl=@proc, 0x80, &(0x7f0000002400)=[{&(0x7f0000002a40)=""/93, 0x5d}, {&(0x7f00000021c0)=""/47, 0x2f}, {&(0x7f0000002200)=""/197, 0xc5}, {&(0x7f0000002300)=""/205, 0xcd}], 0x4, &(0x7f0000002440)=""/11, 0xb}, 0xffff}, {{&(0x7f0000002480)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f00000027c0)=[{&(0x7f0000002500)=""/86, 0x56}, {&(0x7f0000002580)=""/54, 0x36}, {&(0x7f00000025c0)=""/100, 0x64}, {&(0x7f0000002640)=""/31, 0x1f}, {&(0x7f0000002900)=""/135, 0x87}, {&(0x7f0000002740)=""/66, 0x42}], 0x6, &(0x7f0000001e40)=""/180, 0xb4}, 0x3ff}, {{0x0, 0x0, &(0x7f0000003f80), 0x0, &(0x7f0000004040)=""/200, 0xc8}}, {{0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000004140)=""/116, 0x74}, {0x0}, {0x0}], 0x3, &(0x7f00000029c0)=""/104, 0x68}, 0x7ff}, {{&(0x7f0000000280)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast1}}, 0x80, &(0x7f0000001900)=[{&(0x7f00000000c0)=""/21, 0x15}, {&(0x7f0000000200)=""/55, 0x37}, {&(0x7f0000001740)=""/201, 0xc9}, {&(0x7f0000000380)=""/109, 0x6d}, {&(0x7f0000001840)=""/134, 0x86}, {&(0x7f0000001a80)=""/166, 0xa6}], 0x6, &(0x7f0000001b40)=""/11, 0xb}}], 0x9, 0x0, 0x0)
pipe(&(0x7f0000000340)={<r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x3, 0xffff, 0x2, 0x2, {0xa, 0x4e24, 0x10000, @private1={0xfc, 0x1, [], 0x1}, 0x6}}}, 0x32)

18:14:08 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x80)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x71)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x7ff, 0x97e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001]})
openat$nvram(0xffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x4101, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

18:14:08 executing program 0:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r2, 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
write$P9_RVERSION(r3, &(0x7f0000000100)={0x13, 0x65, 0xffff, 0x100, 0x6, '9P2000'}, 0x13)
ftruncate(r3, 0x200004)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)

18:14:09 executing program 4:
openat$vfio(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1fff, 0x40000)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x20000, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0xffffffff)
close(r1)
connect$nfc_llcp(r0, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x7, 0x0, 0x2, "c6184ecdb46c09f184cfc3d59f00ba9fa404fe6025ff65793a9b140ad37d9f2b1b121fb2ae1c6e9f062c1951899e94e33210a729aa77dc10dc0c7f96de51c2", 0x25}, 0x60)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4, 0x1, @private1={0xfc, 0x1, [], 0x1}, 0xa}, 0x1c)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r4, 0x200004)
sendfile(r1, r4, 0x0, 0x80001d00c0d0)

18:14:09 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = add_key$user(&(0x7f00000001c0)='user\x00', 0x0, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000340)='user\x00', &(0x7f00000005c0)={'syz', 0x2}, &(0x7f0000000300)="ed", 0x1, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={'crct10dif\x00'}, 0x0, 0x3d})
keyctl$read(0xb, r0, &(0x7f0000000100)=""/5, 0x5)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r3, &(0x7f0000002bc0)=[{{&(0x7f00000001c0)=@ax25={{0x3, @null}, [@default, @netrom, @rose, @remote, @default, @rose, @netrom, @rose]}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000300)=""/81, 0x51}, {&(0x7f0000000440)=""/129, 0x81}], 0x2, &(0x7f0000000380)=""/21, 0x15}, 0x1}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/24, 0x18}], 0x1, &(0x7f0000000580)=""/100, 0x64}, 0x1de4}, {{&(0x7f00000006c0)=@nl=@proc, 0x80, &(0x7f0000002b40)=[{&(0x7f0000000740)=""/116, 0x74}, {&(0x7f0000000800)=""/187, 0xbb}, {&(0x7f00000019c0)=""/250, 0xfa}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/210, 0xd2}, {0x0}, {0x0}], 0x7}, 0x5}], 0x3, 0x0, 0x0)
pipe(&(0x7f0000000400)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x68, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000540)='./file0\x00', 0x0, 0x881000, 0x0)
open(&(0x7f0000000500)='./file0\x00', 0x0, 0x140)

[  271.700595] ------------[ cut here ]------------
[  271.705517] WARNING: CPU: 1 PID: 12098 at kernel/locking/lockdep.c:722 register_lock_class+0xd7e/0x1600
[  271.715143] Kernel panic - not syncing: panic_on_warn set ...
[  271.715143] 
[  271.722519] CPU: 1 PID: 12098 Comm: syz-executor.4 Not tainted 4.14.176-syzkaller #0
[  271.730495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  271.739941] Call Trace:
[  271.742542]  dump_stack+0x13e/0x194
[  271.746178]  panic+0x1f9/0x42d
[  271.749437]  ? add_taint.cold+0x16/0x16
[  271.753489]  ? register_lock_class+0xd7e/0x1600
[  271.758166]  ? __warn.cold+0x14/0x30
[  271.761900]  ? register_lock_class+0xd7e/0x1600
[  271.766699]  __warn.cold+0x2f/0x30
[  271.770251]  ? ist_end_non_atomic+0x10/0x10
[  271.774801]  ? register_lock_class+0xd7e/0x1600
[  271.779820]  report_bug+0x20a/0x248
[  271.783459]  do_error_trap+0x195/0x2d0
[  271.787482]  ? math_error+0x2d0/0x2d0
[  271.791308]  ? _raw_spin_unlock_irq+0x5a/0x80
[  271.796094]  ? finish_task_switch+0x178/0x620
[  271.800618]  ? finish_task_switch+0x14d/0x620
[  271.805130]  ? switch_mm_irqs_off+0x5db/0xec0
[  271.809644]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  271.814819]  invalid_op+0x1b/0x40
[  271.818303] RIP: 0010:register_lock_class+0xd7e/0x1600
[  271.823778] RSP: 0018:ffff8880360dfa68 EFLAGS: 00010087
[  271.829234] RAX: dffffc0000000000 RBX: ffffffff8a588b00 RCX: ffff88808eb4d8e0
[  271.836798] RDX: 1ffff11011d69b1f RSI: 0000000000000000 RDI: ffff88808eb4d8f8
[  271.844078] RBP: 1ffff11006c1bf57 R08: 0000000000000000 R09: 0000000000000000
[  271.851356] R10: ffffffff8a0a1108 R11: 0000000000000000 R12: ffffffff8a114ee0
[  271.858827] R13: ffffffff87381580 R14: 0000000000000000 R15: ffffffff8b0271b0
[  271.866462]  ? drop_futex_key_refs.isra.0+0x17/0x80
[  271.871496]  ? futex_wait+0x3f3/0x540
[  271.875438]  ? check_noncircular+0x20/0x20
[  271.879688]  __lock_acquire+0x147/0x4620
[  271.883757]  ? wake_up_q+0x90/0xe0
[  271.887428]  ? drop_futex_key_refs.isra.0+0x17/0x80
[  271.892481]  ? sock_has_perm+0x1c0/0x230
[  271.896641]  ? selinux_tun_dev_create+0xc0/0xc0
[  271.901452]  ? trace_hardirqs_on+0x10/0x10
[  271.905703]  ? save_trace+0x290/0x290
[  271.909614]  ? selinux_netlbl_socket_connect+0x6f/0x1b0
[  271.915016]  ? selinux_socket_connect+0x125/0x3f0
[  271.919871]  ? find_held_lock+0x2d/0x110
[  271.923940]  ? selinux_socket_setsockopt+0x80/0x80
[  271.928873]  lock_acquire+0x170/0x3f0
[  271.932686]  ? lock_sock_nested+0x39/0x100
[  271.937284]  ? inet_autobind+0x180/0x180
[  271.941356]  _raw_spin_lock_bh+0x2f/0x40
[  271.945576]  ? lock_sock_nested+0x39/0x100
[  271.949833]  lock_sock_nested+0x39/0x100
[  271.953991]  inet_autobind+0x1a/0x180
[  271.957797]  inet_dgram_connect+0x134/0x1f0
[  271.962123]  SYSC_connect+0x1c6/0x250
[  271.965946]  ? SYSC_bind+0x1e0/0x1e0
[  271.969760]  ? put_timespec64+0xaa/0xf0
[  271.973750]  ? SyS_clock_gettime+0xf5/0x180
[  271.978093]  ? SyS_clock_settime+0x1a0/0x1a0
[  271.982505]  ? do_syscall_64+0x4c/0x640
[  271.986478]  ? SyS_accept+0x30/0x30
[  271.990105]  do_syscall_64+0x1d5/0x640
[  271.994292]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  271.999577] RIP: 0033:0x45c889
[  272.002752] RSP: 002b:00007ff7fb1a6c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  272.010454] RAX: ffffffffffffffda RBX: 00007ff7fb1a76d4 RCX: 000000000045c889
[  272.017723] RDX: 000000000000001c RSI: 0000000020000040 RDI: 0000000000000006
[  272.024986] RBP: 000000000076bfa0 R08: 0000000000000000 R09: 0000000000000000
[  272.032252] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
[  272.039518] R13: 0000000000000084 R14: 00000000004c320f R15: 000000000076bfac
[  272.048251] Kernel Offset: disabled
[  272.051872] Rebooting in 86400 seconds..