7f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:14:50 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x2000005)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="10463fa7", 0x4, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x0, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:14:50 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x2000005)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="10463fa7", 0x4, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x0, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:14:51 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:14:51 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x2000005)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="10463fa7", 0x4, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x0, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:14:51 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x2000005)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="10463fa7", 0x4, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x0, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:14:51 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:14:51 executing program 2:
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x2000005)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r5 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r6=>0xffffffffffffffff}, 0x0)
close(r6)
r7 = epoll_create1(0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}})

06:14:51 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x2000005)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="10463fa7", 0x4, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x0, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:14:51 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:14:51 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, 0x0, 0x0, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:14:51 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x2000005)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="10463fa7", 0x4, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x0, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:14:52 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:14:52 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @local}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000}, 0x0)

06:14:52 executing program 2:
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x2000005)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, 0x0, &(0x7f00000000c0)=""/83, 0x53, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r4=>0xffffffffffffffff}, 0x0)
close(r4)
r5 = epoll_create1(0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}})

06:14:52 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x2000005)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="10463fa7", 0x4, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x0, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:14:52 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, 0x0, 0x0, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:14:52 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:14:52 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x2000005)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="10463fa7", 0x4, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x0, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:14:52 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x2000005)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="10463fa7", 0x4, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x0, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:14:53 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x2000005)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="10463fa7", 0x4, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x0, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:14:53 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:14:53 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, 0x0, 0x0, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:14:53 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, 0x0, 0x0, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:14:53 executing program 2:
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x2000005)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, 0x0, &(0x7f00000000c0)=""/83, 0x53, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r4=>0xffffffffffffffff}, 0x0)
close(r4)
r5 = epoll_create1(0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}})

06:14:53 executing program 0:
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x2000005)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="10463fa7", 0x4, 0xfffffffffffffffe)
r5 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r6=>0xffffffffffffffff}, 0x0)
close(r6)
r7 = epoll_create1(0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}})

06:14:53 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:14:54 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x2000005)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="10463fa7", 0x4, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:14:54 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:14:54 executing program 2:
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x2000005)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, 0x0, &(0x7f00000000c0)=""/83, 0x53, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r4=>0xffffffffffffffff}, 0x0)
close(r4)
r5 = epoll_create1(0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}})

06:14:54 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x2000005)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="10463fa7", 0x4, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:14:54 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x2000005)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="10463fa7", 0x4, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:14:54 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:14:54 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:14:55 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:14:55 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:14:55 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x2000005)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="10463fa7", 0x4, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:14:55 executing program 1:

06:14:55 executing program 2:
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x2000005)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r5 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={0x0, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r6=>0xffffffffffffffff}, 0x0)
close(r6)
r7 = epoll_create1(0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}})

06:14:55 executing program 1:

06:14:55 executing program 1:

06:14:55 executing program 1:

06:14:55 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:14:55 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:14:55 executing program 3:

06:14:55 executing program 1:

06:14:55 executing program 3:

06:14:56 executing program 0:

06:14:56 executing program 1:

06:14:56 executing program 3:

06:14:56 executing program 2:
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x2000005)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r5 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={0x0, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r6=>0xffffffffffffffff}, 0x0)
close(r6)
r7 = epoll_create1(0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}})

06:14:56 executing program 1:

06:14:56 executing program 3:

06:14:56 executing program 0:

06:14:56 executing program 3:

06:14:56 executing program 1:

06:14:56 executing program 0:

06:14:56 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:14:56 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480), 0x0, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:14:56 executing program 1:

06:14:56 executing program 0:

06:14:56 executing program 3:

06:14:57 executing program 1:

06:14:57 executing program 0:

06:14:57 executing program 3:

06:14:57 executing program 2:
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x2000005)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r5 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={0x0, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r6=>0xffffffffffffffff}, 0x0)
close(r6)
r7 = epoll_create1(0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}})

06:14:57 executing program 1:

06:14:57 executing program 0:

06:14:57 executing program 3:

06:14:57 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:14:57 executing program 1:

06:14:57 executing program 3:

06:14:57 executing program 0:

06:14:57 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480), 0x0, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:14:57 executing program 2:
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x2000005)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, 0x0, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r5=>0xffffffffffffffff}, 0x0)
close(r5)
r6 = epoll_create1(0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}})

06:14:57 executing program 3:

06:14:57 executing program 1:

06:14:57 executing program 0:

06:14:57 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480), 0x0, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:14:57 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:14:57 executing program 1:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
write(0xffffffffffffffff, &(0x7f0000000000)="2700000015000707030e0000120f0a", 0xf)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x0, 0x2, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ppp\x00', 0x0, 0x0)
ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000780))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000140)=ANY=[@ANYBLOB='H'], 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

06:14:57 executing program 0:
syz_open_procfs(0x0, 0x0)
syz_open_dev$vcsa(0x0, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, 0xffffffffdffffffa, 0x0, 0x0, 0x20})
ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0)

06:14:57 executing program 3:
syz_open_procfs(0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x606c1, 0x0)
fsetxattr$security_ima(r0, 0x0, &(0x7f00000001c0)=@md5={0x1, "8ff56ef3c490c6bf9e438098f2eee0ce"}, 0x11, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x0)
perf_event_open(&(0x7f0000000540)={0x1, 0x70, 0x3, 0x2, 0x0, 0x40, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x8400, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xe, 0xffffffffffffffff, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)=ANY=[], 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
listen(0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0)
syz_genetlink_get_family_id$net_dm(&(0x7f0000000280)='NET_DM\x00')
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x4)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x1f, 0xff}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40}, {0x0, 0x0, 0xf}, {0x0, 0x0, 0x0, 0x10, 0xfc}, {0x40000}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0xfffffffffffffffd})

06:14:58 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
kexec_load(0x0, 0x0, 0x0, 0x0)

06:14:58 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d8", 0x8, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:14:58 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:14:58 executing program 0:

06:14:58 executing program 1:

06:14:58 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = creat(0x0, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, 0x4, 0x2})
sendto$unix(r2, &(0x7f00000004c0)="661c1bb1c919a6922ffb54bca48eb7ba4ee9477549bd0a73c1cc7bc951dcc19668504496b248e19b8beacbc2a352b3bc1dc8495ffba47b18e0be128cb9cf8e35289d57d9bea83f4dde096286ea72eb6c61c4ebccf50b9ac33aaf702610e167bb95ad289ba293531be4447253a856a4d65565c52ad7d6a0434337862472a32be4ef09dd9c7ca35ccc24a3150e40164977166447712318a4d7a8a4c07f42dff4bd899172997c0f5e", 0xa7, 0x4000400, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000021000/0x3000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x0, 0x0)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000001c0)={0x2, 0x81}, 0xc)
ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000000c00))
vmsplice(r4, &(0x7f0000000b40)=[{&(0x7f0000000680)="f58467cc15083cfce0a334858760d86dea1c4764f04de49c0b58eca5150a1a090ad6ee48677d781911fe04b8e0ccee42dee7c78a4331a9adcf37ebc8bad246750d62b3b1235d21d18fe201c527b72ece377de9e8977763a896e3a963", 0x5c}, {0x0}, {&(0x7f0000000840)="233f5e167fa7b564009cb69694b3d147d720e96554f10e5843d65fd05bfe3355cadffd1e08406fe6a86d7032591cf9a2a5bb488bf80c55dc7e2104e29cf9", 0x3e}, {&(0x7f00000009c0)}], 0x4, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
listen(0xffffffffffffffff, 0xfffffffffffffffd)
epoll_create(0x1)

06:14:58 executing program 2:
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x2000005)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, 0x0, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r5=>0xffffffffffffffff}, 0x0)
close(r5)
r6 = epoll_create1(0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}})

06:14:58 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r2, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r4 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(0xffffffffffffffff, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r5=>0xffffffffffffffff}, 0x0)
close(r5)
r6 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}})

06:14:58 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4041}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)

06:14:58 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffa0}], 0x2df, 0x0, 0x0, 0xfffffe41)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x5, @loopback, 0xd6}, 0x1c)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e, 0xb5f]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x3, 0x0, 0x0, 0x7, 0x0, 0x0, 0x18, 0xc, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  467.469915] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  467.483711] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
06:14:59 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000300)={{}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x10}, {}, {}, 0x0, 0x0, 0x0, 0x20})
ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000080))

[  467.531704] net_ratelimit: 6 callbacks suppressed
[  467.531709] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  467.562741] kvm [26587]: vcpu0, guest rIP: 0xcc ignored wrmsr: 0x11e data 0xbe702110
06:14:59 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffa0}], 0x2df, 0x0, 0x0, 0xfffffe41)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e, 0xb5f]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x3, 0x0, 0x0, 0x7, 0x0, 0x0, 0x18, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

06:14:59 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d8", 0x8, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:14:59 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x200, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x231)
getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xb, &(0x7f0000000100), &(0x7f0000000140)=0x4)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000})
r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6_sctp(0xa, 0x800000000000001, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r4=>0x0]}, &(0x7f000095dffc)=0x8)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={r4}, 0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000040)={0x0, 0x800, 0x8, 0x8612, 0x7, 0x3, 0x4, 0x1f, r4}, &(0x7f00000000c0)=0x20)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

06:14:59 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000003c0)={0xe0003})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000200)="430fc76f44b9800000c00f3235004000000f30c7442400db000000c74424020c000000c7442406000000000f0559142424442400a1000000c7442402de000000c7442406000000000f011c248f4848ed86500000004c643e652e440f0d660842d1747b00f34438f58ed8430f0f17a465640f01c2", 0x74}], 0x1, 0x0, 0x0, 0x3719cb5445035b03)
ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  467.805271] kvm_set_msr_common: 901 callbacks suppressed
[  467.805280] kvm [26602]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc1 data 0x1
06:14:59 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
open$dir(0x0, 0x0, 0x0)
ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000003c0)={0xe0003})
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

06:14:59 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000003c0)={0xe0003})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000200)="430fc76f44b9800000c00f3235004000000f30c7442400db000000c74424020c000000c7442406000000000f0559142424442400a1000000c7442402de000000c7442406000000000f011c248f4848ed86500000004c643e652e440f0d660842d1747b00f34438f58ed8430f0f17a465640f01c2", 0x74}], 0x1, 0x0, 0x0, 0x3719cb5445035b03)
ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

06:14:59 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r2, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r4 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(0xffffffffffffffff, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r5=>0xffffffffffffffff}, 0x0)
close(r5)
r6 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}})

06:14:59 executing program 2:
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x2000005)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, 0x0, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r5=>0xffffffffffffffff}, 0x0)
close(r5)
r6 = epoll_create1(0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}})

06:14:59 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x200, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x231)
getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xb, &(0x7f0000000100), &(0x7f0000000140)=0x4)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000})
r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6_sctp(0xa, 0x800000000000001, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r4=>0x0]}, &(0x7f000095dffc)=0x8)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={r4}, 0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000040)={0x0, 0x800, 0x8, 0x8612, 0x7, 0x3, 0x4, 0x1f, r4}, &(0x7f00000000c0)=0x20)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

06:14:59 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000e4", 0xfffffffffffffed3}], 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x449, 0x0, 0x0, 0x0, 0x4cc], 0x100000})
ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

06:15:00 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d8", 0x8, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:00 executing program 1:
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x0, 0x0)
getpid()
mmap(&(0x7f000005d000/0x400000)=nil, 0x400000, 0x0, 0x392d6ad36ec2c8b2, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x3)
ioctl$KVM_ASSIGN_SET_INTX_MASK(0xffffffffffffffff, 0x4040aea4, &(0x7f0000000080)={0x0, 0x8, 0x0, 0x4})
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0)

06:15:00 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000003c0)={0xe0003})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000200)="470f219b430f01ca0f01f8c7442400ce000000c744240231000000ff1c2466baf80cb8d5f00c82ef66bafc0cec642e64660fec18f30f1af0460f001666b858008ec8c4a20998ff", 0x47}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

06:15:00 executing program 0:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x10000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000000, 0x0)
tkill(0x0, 0x9)
r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='cwd/..\x00\x00\xd8sY\x86W\xb43K\x88\x16\xac\xeb\xdf\xf1\x90\x06E\xe0)@\x05A\a\xcb\"\x89t\xd5L)\x82\xdd*8\x02\xb0D\x9do\x05\x1a\xc1\"\x05\x00G|\x83M\x8e<\xb8\xed;F\xaf\x12\xe4RKa]%\x8b]\xba\x87G\xda\xf1\xdf\xf5\x19j\x13\xfb\xa2\x8dz\x16\xb6n\x81~9\x8bF\t\f0\xd0R\xeaD\xb8\x06\x00\xd0\x18\xc5}\xc5\x03\xdd\x98\xb8\b$\xdf\xf5\xd6j!.\xa1\xc9\xa3\x1c\xe9\xf16\'$\x89F\xb0\xc9\xa4\x1d\xae\x96\xb7\x12\xb8\x86\x93Nbv2\x9dH\xf1B=y\xfa\x17\xd0\x85\x14\xd2\x13\xb36\xb9\xa5=\x9a\xcd\xe0\xd5R\xe0\xfe\x8e(\xce\x8as\xba\xe9RE\x1a7D\x8f\xc2\x80\x84(\xcc\xa3\xd4\x00Ch\xf3\xe1\xa5\x97\xf5;,\x98#\xc7;mS4\x83Pb\x8f\xeb@`0qG\x9f\bF\x02\xce\x96-\xb5\x0f\x95\xf9y\xea\xef\f\xc7\xd3\xb8\x9db\xc2\xbc\x83r\x147\xf1\xe2\xed6~lq\xea\xc4\xe3\xad\xf7(x\xb6\xb9_\xa4^\xb2\x0f\x01DY\x9a\x15j\xed[,\xb9\xdc\x15X}\xf6\xfacg\x1es\x83\xcbnu\xe0tJW\x8cF\xb9\x95?fW \r)K\xcd\x16\x83\xa6\xc2q\xf9\xcb\x89.\x94\xb5=o\xd4\xedj{\xe1\x03\xc6o>\xc6\xf4\xfe5>\xe0P\xe4\xebjM\xb0ZtV\xbeiyk\b*\\\xbb\xfb#\xb4l\t\xac\x00'/374)
lsetxattr$trusted_overlay_opaque(0x0, &(0x7f00000000c0)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r1 = gettid()
getresuid(0x0, &(0x7f00000001c0), 0x0)
capset(&(0x7f0000000100)={0x20080522, r1}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2})
clock_gettime(0x0, 0x0)
fcntl$getflags(r0, 0x0)

06:15:00 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r2, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r4 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(0xffffffffffffffff, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r5=>0xffffffffffffffff}, 0x0)
close(r5)
r6 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}})

06:15:00 executing program 3:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x44000)
io_setup(0x40000100000003, &(0x7f0000000200)=<r1=>0x0)
io_submit(r1, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x804000000000000, 0x0, 0x8, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xc00}])
close(0xffffffffffffffff)

06:15:00 executing program 2:
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x2000005)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r5 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r6=>0xffffffffffffffff}, 0x0)
close(r6)
r7 = epoll_create1(0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}})

06:15:00 executing program 1:
r0 = syz_open_dev$vcsn(&(0x7f0000000340)='/dev/vcs#\x00', 0x0, 0x0)
close(r0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0)
read(r0, &(0x7f0000000140)=""/11, 0xa21d)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040))
clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$KDSKBENT(r0, 0x4b47, 0x0)

06:15:00 executing program 1:
r0 = epoll_create1(0x0)
flock(r0, 0x2)

06:15:00 executing program 3:
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
mmap(&(0x7f000005d000/0x400000)=nil, 0x400000, 0x0, 0x392d6ad36ec2c8b2, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x3)
perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

06:15:00 executing program 1:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
wait4(0x0, 0x0, 0x80000000, 0x0)
tkill(0x0, 0x9)
r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='cwd/..\x00\x00\xd8sY\x86W\xb43K\x88\x16\xac\xeb\xdf\xf1\x90\x06E\xe0)@\x05A\a\xcb\"\x89t\xd5L)\x82\xdd*8\x02\xb0D\x9do\x05\x1a\xc1\"\x05\x00G|\x83M\x8e<\xb8\xed;F\xaf\x12\xe4RKa]%\x8b]\xba\x87G\xda\xf1\xdf\xf5\x19j\x13\xfb\xa2\x8dz\x16\xb6n\x81~9\x8bF\t\f0\xd0R\xeaD\xb8\x06\x00\xd0\x18\xc5}\xc5\x03\xdd\x98\xb8\b$\xdf\xf5\xd6j!.\xa1\xc9\xa3\x1c\xe9\xf16\'$\x89F\xb0\xc9\xa4\x1d\xae\x96\xb7\x12\xb8\x86\x93Nbv2\x9dH\xf1B=y\xfa\x17\xd0\x85\x14\xd2\x13\xb36\xb9\xa5=\x9a\xcd\xe0\xd5R\xe0\xfe\x8e(\xce\x8as\xba\xe9RE\x1a7D\x8f\xc2\x80\x84(\xcc\xa3\xd4\x00Ch\xf3\xe1\xa5\x97\xf5;,\x98#\xc7;mS4\x83Pb\x8f\xeb@`0qG\x9f\bF\x02\xce\x96-\xb5\x0f\x95\xf9y\xea\xef\f\xc7\xd3\xb8\x9db\xc2\xbc\x83r\x147\xf1\xe2\xed6~lq\xea\xc4\xe3\xad\xf7(x\xb6\xb9_\xa4^\xb2\x0f\x01DY\x9a\x15j\xed[,\xb9\xdc\x15X}\xf6\xfacg\x1es\x83\xcbnu\xe0tJW\x8cF\xb9\x95?fW \r)K\xcd\x16\x83\xa6\xc2q\xf9\xcb\x89.\x94\xb5=o\xd4\xedj{\xe1\x03\xc6o>\xc6\xf4\xfe5>\xe0P\xe4\xebjM\xb0ZtV\xbeiyk\b*\\\xbb\xfb#\xb4l\t\xac\x00'/374)
lsetxattr$trusted_overlay_opaque(0x0, &(0x7f00000000c0)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x4)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'team_slave_1\x00', 0xc950})
r1 = gettid()
getresuid(&(0x7f0000000000), &(0x7f00000001c0), 0x0)
capset(&(0x7f0000000100)={0x20080522, r1}, &(0x7f0000000140)={0x0, 0x6, 0x0, 0x2, 0x10000, 0x20})
clock_gettime(0x0, &(0x7f0000000240))
fcntl$getflags(r0, 0x3)

06:15:00 executing program 3:
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
mmap(&(0x7f000005d000/0x400000)=nil, 0x400000, 0x0, 0x392d6ad36ec2c8b2, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x3)
perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

06:15:00 executing program 1:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
wait4(0x0, 0x0, 0x80000000, 0x0)
tkill(0x0, 0x9)
r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='cwd/..\x00\x00\xd8sY\x86W\xb43K\x88\x16\xac\xeb\xdf\xf1\x90\x06E\xe0)@\x05A\a\xcb\"\x89t\xd5L)\x82\xdd*8\x02\xb0D\x9do\x05\x1a\xc1\"\x05\x00G|\x83M\x8e<\xb8\xed;F\xaf\x12\xe4RKa]%\x8b]\xba\x87G\xda\xf1\xdf\xf5\x19j\x13\xfb\xa2\x8dz\x16\xb6n\x81~9\x8bF\t\f0\xd0R\xeaD\xb8\x06\x00\xd0\x18\xc5}\xc5\x03\xdd\x98\xb8\b$\xdf\xf5\xd6j!.\xa1\xc9\xa3\x1c\xe9\xf16\'$\x89F\xb0\xc9\xa4\x1d\xae\x96\xb7\x12\xb8\x86\x93Nbv2\x9dH\xf1B=y\xfa\x17\xd0\x85\x14\xd2\x13\xb36\xb9\xa5=\x9a\xcd\xe0\xd5R\xe0\xfe\x8e(\xce\x8as\xba\xe9RE\x1a7D\x8f\xc2\x80\x84(\xcc\xa3\xd4\x00Ch\xf3\xe1\xa5\x97\xf5;,\x98#\xc7;mS4\x83Pb\x8f\xeb@`0qG\x9f\bF\x02\xce\x96-\xb5\x0f\x95\xf9y\xea\xef\f\xc7\xd3\xb8\x9db\xc2\xbc\x83r\x147\xf1\xe2\xed6~lq\xea\xc4\xe3\xad\xf7(x\xb6\xb9_\xa4^\xb2\x0f\x01DY\x9a\x15j\xed[,\xb9\xdc\x15X}\xf6\xfacg\x1es\x83\xcbnu\xe0tJW\x8cF\xb9\x95?fW \r)K\xcd\x16\x83\xa6\xc2q\xf9\xcb\x89.\x94\xb5=o\xd4\xedj{\xe1\x03\xc6o>\xc6\xf4\xfe5>\xe0P\xe4\xebjM\xb0ZtV\xbeiyk\b*\\\xbb\xfb#\xb4l\t\xac\x00'/374)
lsetxattr$trusted_overlay_opaque(0x0, &(0x7f00000000c0)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x4)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'team_slave_1\x00', 0xc950})
r1 = gettid()
getresuid(&(0x7f0000000000), &(0x7f00000001c0), 0x0)
capset(&(0x7f0000000100)={0x20080522, r1}, &(0x7f0000000140)={0x0, 0x6, 0x0, 0x2, 0x10000, 0x20})
clock_gettime(0x0, &(0x7f0000000240))
fcntl$getflags(r0, 0x3)

06:15:00 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
keyctl$chown(0x4, 0x0, 0x0, 0x0)
clone(0xc75e43cfae22dd4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

06:15:00 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232", 0xc, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

[  469.512822] audit: type=1400 audit(1576563300.933:53): avc:  denied  { sys_admin } for  pid=26729 comm="syz-executor.3" capability=21  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[  469.763599] IPVS: ftp: loaded support on port[0] = 21
06:15:01 executing program 1:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040))
write(r1, &(0x7f00000001c0), 0xfffffef3)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0)

06:15:01 executing program 0:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x10000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000000, 0x0)
tkill(0x0, 0x9)
r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='cwd/..\x00\x00\xd8sY\x86W\xb43K\x88\x16\xac\xeb\xdf\xf1\x90\x06E\xe0)@\x05A\a\xcb\"\x89t\xd5L)\x82\xdd*8\x02\xb0D\x9do\x05\x1a\xc1\"\x05\x00G|\x83M\x8e<\xb8\xed;F\xaf\x12\xe4RKa]%\x8b]\xba\x87G\xda\xf1\xdf\xf5\x19j\x13\xfb\xa2\x8dz\x16\xb6n\x81~9\x8bF\t\f0\xd0R\xeaD\xb8\x06\x00\xd0\x18\xc5}\xc5\x03\xdd\x98\xb8\b$\xdf\xf5\xd6j!.\xa1\xc9\xa3\x1c\xe9\xf16\'$\x89F\xb0\xc9\xa4\x1d\xae\x96\xb7\x12\xb8\x86\x93Nbv2\x9dH\xf1B=y\xfa\x17\xd0\x85\x14\xd2\x13\xb36\xb9\xa5=\x9a\xcd\xe0\xd5R\xe0\xfe\x8e(\xce\x8as\xba\xe9RE\x1a7D\x8f\xc2\x80\x84(\xcc\xa3\xd4\x00Ch\xf3\xe1\xa5\x97\xf5;,\x98#\xc7;mS4\x83Pb\x8f\xeb@`0qG\x9f\bF\x02\xce\x96-\xb5\x0f\x95\xf9y\xea\xef\f\xc7\xd3\xb8\x9db\xc2\xbc\x83r\x147\xf1\xe2\xed6~lq\xea\xc4\xe3\xad\xf7(x\xb6\xb9_\xa4^\xb2\x0f\x01DY\x9a\x15j\xed[,\xb9\xdc\x15X}\xf6\xfacg\x1es\x83\xcbnu\xe0tJW\x8cF\xb9\x95?fW \r)K\xcd\x16\x83\xa6\xc2q\xf9\xcb\x89.\x94\xb5=o\xd4\xedj{\xe1\x03\xc6o>\xc6\xf4\xfe5>\xe0P\xe4\xebjM\xb0ZtV\xbeiyk\b*\\\xbb\xfb#\xb4l\t\xac\x00'/374)
lsetxattr$trusted_overlay_opaque(0x0, &(0x7f00000000c0)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r1 = gettid()
getresuid(0x0, &(0x7f00000001c0), 0x0)
capset(&(0x7f0000000100)={0x20080522, r1}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2})
clock_gettime(0x0, 0x0)
fcntl$getflags(r0, 0x0)

06:15:01 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r3, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r5 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r1, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r6=>0xffffffffffffffff}, 0x0)
close(r6)
r7 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}})

06:15:01 executing program 2:
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x2000005)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r5 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r6=>0xffffffffffffffff}, 0x0)
close(r6)
r7 = epoll_create1(0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}})

06:15:01 executing program 1:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x405a020000000000, &(0x7f0000000040)={0x20000000005, 0x1ff, 0x7880, 0xff, 0x0, 0xffffffffffffffff, 0x0, [0xa003000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13]}, 0x3c)

06:15:01 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232", 0xc, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:01 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r3, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r5 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r1, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r6=>0xffffffffffffffff}, 0x0)
close(r6)
r7 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}})

06:15:01 executing program 1:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
epoll_create(0x9)
write(r1, &(0x7f00000001c0), 0xfffffef3)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0)

06:15:01 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r3, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r5 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r1, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r6=>0xffffffffffffffff}, 0x0)
close(r6)
r7 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}})

06:15:02 executing program 3:
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000001c0)={'ip6erspan0\x00'})
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x1, 0x0, r0}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20)

06:15:02 executing program 0:
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap='cache=mmap'}]}})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

06:15:02 executing program 2:
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x2000005)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r5 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r6=>0xffffffffffffffff}, 0x0)
close(r6)
r7 = epoll_create1(0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}})

06:15:02 executing program 3:
openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x20b)
pipe(&(0x7f0000000140))
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0)

06:15:02 executing program 0:
r0 = socket$inet6(0xa, 0x80003, 0x6b)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071")
r1 = epoll_create(0x6)
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ppoll(&(0x7f0000000000)=[{r1}, {r2}], 0x2, 0x0, 0x0, 0x0)

06:15:02 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232", 0xc, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:02 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r3, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r5 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r1, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r6=>0xffffffffffffffff}, 0x0)
close(r6)
r7 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}})

06:15:02 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671004800020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3"], 0x74}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="7c0000002c00010700"/20, @ANYRES32=r4, @ANYBLOB="000000020000000003000000080001c9627066005000020008000400000000000500050040000200000000080084799c570b75daf6a86081eca80289160000001100000000000000001000"/116], 0x7c}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0)

06:15:03 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671004800020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3"], 0x74}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="7c0000002c00010700"/20, @ANYRES32=r4, @ANYBLOB="000000020000000003000000080001c9627066005000020008000400000000000500050040000200000000080084799c570b75daf6a86081eca80289160000001100000000000000001000"/116], 0x7c}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0)

06:15:03 executing program 1:
syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @random="192bce5e2dfb", [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)

06:15:03 executing program 1:
perf_event_open(&(0x7f0000000040)={0x2, 0x171, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket$inet(0x2, 0x0, 0x0)

06:15:03 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671004800020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3"], 0x74}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="7c0000002c00010700"/20, @ANYRES32=r4, @ANYBLOB="000000020000000003000000080001c9627066005000020008000400000000000500050040000200000000080084799c570b75daf6a86081eca80289160000001100000000000000001000"/116], 0x7c}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0)

[  471.990113] protocol 88fb is buggy, dev hsr_slave_0
[  471.995662] protocol 88fb is buggy, dev hsr_slave_1
06:15:03 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r3, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r5 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r1, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r6=>0xffffffffffffffff}, 0x0)
close(r6)
r7 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}})

06:15:03 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671004800020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3"], 0x74}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="7c0000002c00010700"/20, @ANYRES32=r4, @ANYBLOB="000000020000000003000000080001c9627066005000020008000400000000000500050040000200000000080084799c570b75daf6a86081eca80289160000001100000000000000001000"/116], 0x7c}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0)

06:15:03 executing program 2:
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x2000005)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r5 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, 0x0, 0x0, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r6=>0xffffffffffffffff}, 0x0)
close(r6)
r7 = epoll_create1(0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}})

[  472.160107] protocol 88fb is buggy, dev hsr_slave_0
[  472.165221] protocol 88fb is buggy, dev hsr_slave_1
[  472.230142] protocol 88fb is buggy, dev hsr_slave_0
[  472.235429] protocol 88fb is buggy, dev hsr_slave_1
06:15:03 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd2(0x0, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x4, r2})

06:15:03 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b", 0xe, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:03 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
setxattr$security_evm(0x0, &(0x7f0000000080)='security.evm\x00', &(0x7f00000000c0)=@v2={0x0, 0x0, 0x0, 0x0, 0x1, "dd"}, 0xb, 0x1)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x231)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x161, 0x0, 0x0, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

06:15:03 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671004800020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3"], 0x74}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0)

06:15:04 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671004800020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3"], 0x74}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0)

06:15:04 executing program 3:
r0 = memfd_create(&(0x7f00000000c0)='/dev/vcs\x00', 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)

06:15:04 executing program 3:
r0 = memfd_create(&(0x7f00000000c0)='/dev/vcs\x00', 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)

06:15:04 executing program 3:
r0 = memfd_create(&(0x7f00000000c0)='/dev/vcs\x00', 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)

06:15:04 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671004800020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3"], 0x74}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0)

06:15:04 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r3, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r5 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r1, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r6=>0xffffffffffffffff}, 0x0)
close(r6)
r7 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}})

06:15:04 executing program 2:
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x2000005)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r5 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, 0x0, 0x0, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r6=>0xffffffffffffffff}, 0x0)
close(r6)
r7 = epoll_create1(0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}})

06:15:04 executing program 3:
r0 = memfd_create(&(0x7f00000000c0)='/dev/vcs\x00', 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)

06:15:04 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
setxattr$security_evm(0x0, &(0x7f0000000080)='security.evm\x00', &(0x7f00000000c0)=@v2={0x0, 0x0, 0x0, 0x0, 0x1, "dd"}, 0xb, 0x1)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x231)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x161, 0x0, 0x0, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

06:15:04 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b", 0xe, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:04 executing program 3:
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff)

06:15:04 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="7c0000002c00010700"/20, @ANYRES32=r3, @ANYBLOB="000000020000000003000000080001c9627066005000020008000400000000000500050040000200000000080084799c570b75daf6a86081eca80289160000001100000000000000001000"/116], 0x7c}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0)

06:15:04 executing program 3:
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff)

06:15:04 executing program 3:
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff)

06:15:04 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="7c0000002c00010700"/20, @ANYRES32=r3, @ANYBLOB="000000020000000003000000080001c9627066005000020008000400000000000500050040000200000000080084799c570b75daf6a86081eca80289160000001100000000000000001000"/116], 0x7c}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0)

06:15:05 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
setxattr$security_evm(0x0, &(0x7f0000000080)='security.evm\x00', &(0x7f00000000c0)=@v2={0x0, 0x0, 0x0, 0x0, 0x1, "dd"}, 0xb, 0x1)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x231)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x161, 0x0, 0x0, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

06:15:05 executing program 3:
r0 = memfd_create(0x0, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)

06:15:05 executing program 3:
r0 = memfd_create(0x0, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)

06:15:05 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="7c0000002c00010700"/20, @ANYRES32=r3, @ANYBLOB="000000020000000003000000080001c9627066005000020008000400000000000500050040000200000000080084799c570b75daf6a86081eca80289160000001100000000000000001000"/116], 0x7c}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0)

06:15:05 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
getpid()
r0 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r3, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r5 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r1, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r6=>0xffffffffffffffff}, 0x0)
close(r6)
r7 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}})

06:15:05 executing program 2:
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x2000005)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r5 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, 0x0, 0x0, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r6=>0xffffffffffffffff}, 0x0)
close(r6)
r7 = epoll_create1(0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}})

06:15:05 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b", 0xe, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:05 executing program 3:
r0 = memfd_create(0x0, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)

06:15:05 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
setxattr$security_evm(0x0, &(0x7f0000000080)='security.evm\x00', &(0x7f00000000c0)=@v2={0x0, 0x0, 0x0, 0x0, 0x1, "dd"}, 0xb, 0x1)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x231)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x161, 0x0, 0x0, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

06:15:05 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736671004800020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3"], 0x74}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="7c0000002c00010700"/20, @ANYRES32=r3, @ANYBLOB="000000020000000003000000080001c9627066005000020008000400000000000500050040000200000000080084799c570b75daf6a86081eca80289160000001100000000000000001000"/116], 0x7c}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0)

06:15:05 executing program 3:
memfd_create(&(0x7f00000000c0)='/dev/vcs\x00', 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff)

06:15:05 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736671004800020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3"], 0x74}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="7c0000002c00010700"/20, @ANYRES32=r3, @ANYBLOB="000000020000000003000000080001c9627066005000020008000400000000000500050040000200000000080084799c570b75daf6a86081eca80289160000001100000000000000001000"/116], 0x7c}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0)

06:15:05 executing program 3:
memfd_create(&(0x7f00000000c0)='/dev/vcs\x00', 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff)

06:15:06 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736671004800020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3"], 0x74}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="7c0000002c00010700"/20, @ANYRES32=r3, @ANYBLOB="000000020000000003000000080001c9627066005000020008000400000000000500050040000200000000080084799c570b75daf6a86081eca80289160000001100000000000000001000"/116], 0x7c}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0)

06:15:06 executing program 3:
memfd_create(&(0x7f00000000c0)='/dev/vcs\x00', 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff)

06:15:06 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00')
sendmsg(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
pipe(&(0x7f0000000140)={<r2=>0xffffffffffffffff})
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
write$binfmt_misc(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="73797a31d9121f22a68f7cc607aaee09df7c5d18142cd7bda8e3da1b6a1f9f08f2ee897b1075d1dd8a8f593b6b62996f33d9c823e3f0094f068a7511ea983e4d0cc36d52c929a6d27763bbcbc50d2937c5e600c83c4c5e"], 0x57)
socket(0x0, 0x0, 0x0)
pipe(&(0x7f0000000140)={<r3=>0xffffffffffffffff})
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
pipe(&(0x7f0000000140)={<r4=>0xffffffffffffffff})
vmsplice(r4, 0x0, 0x0, 0x0)
ioctl$UI_SET_SNDBIT(r4, 0x4004556a, 0x6)
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000cfc000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0)

06:15:06 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
getpid()
r0 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r3, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r5 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r1, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r6=>0xffffffffffffffff}, 0x0)
close(r6)
r7 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}})

06:15:06 executing program 2:
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x2000005)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r5 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r6=>0xffffffffffffffff}, 0x0)
close(r6)
r7 = epoll_create1(0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}})

06:15:06 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(0xffffffffffffffff, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:06 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32, @ANYBLOB="00000000ffffffff0000000008000100736671004800020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3"], 0x74}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="7c0000002c00010700"/20, @ANYRES32, @ANYBLOB="000000020000000003000000080001c9627066005000020008000400000000000500050040000200000000080084799c570b75daf6a86081eca80289160000001100000000000000001000"/116], 0x7c}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0)

06:15:06 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00')
sendmsg(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
pipe(&(0x7f0000000140)={<r2=>0xffffffffffffffff})
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
write$binfmt_misc(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="73797a31d9121f22a68f7cc607aaee09df7c5d18142cd7bda8e3da1b6a1f9f08f2ee897b1075d1dd8a8f593b6b62996f33d9c823e3f0094f068a7511ea983e4d0cc36d52c929a6d27763bbcbc50d2937c5e600c83c4c5e"], 0x57)
socket(0x0, 0x0, 0x0)
pipe(&(0x7f0000000140)={<r3=>0xffffffffffffffff})
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0)
ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040))
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
pipe(&(0x7f0000000140)={<r4=>0xffffffffffffffff})
vmsplice(r4, 0x0, 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000cfc000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0)

06:15:06 executing program 1:
syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @empty=[0x6c, 0xd00, 0x689], [], {@ipv4={0x8864, {{0x5, 0x4, 0x0, 0x0, 0x28, 0xffff, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x13}, @remote}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

06:15:06 executing program 1:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmmsg$inet(r2, &(0x7f00000081c0)=[{{&(0x7f0000005280)={0x2, 0x0, @local}, 0x10, &(0x7f0000006500)=[{&(0x7f00000052c0)="8536", 0x2}], 0x1}}], 0x1, 0x0)

06:15:06 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32, @ANYBLOB="00000000ffffffff0000000008000100736671004800020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3"], 0x74}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="7c0000002c00010700"/20, @ANYRES32, @ANYBLOB="000000020000000003000000080001c9627066005000020008000400000000000500050040000200000000080084799c570b75daf6a86081eca80289160000001100000000000000001000"/116], 0x7c}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0)

06:15:06 executing program 1:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$kcm(0xa, 0x2, 0x73)
sendmsg(r2, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x29, 0x37, 'v'}], 0x18}, 0x0)

06:15:06 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00')
sendmsg(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
pipe(&(0x7f0000000140)={<r2=>0xffffffffffffffff})
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
write$binfmt_misc(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="73797a31d9121f22a68f7cc607aaee09df7c5d18142cd7bda8e3da1b6a1f9f08f2ee897b1075d1dd8a8f593b6b62996f33d9c823e3f0094f068a7511ea983e4d0cc36d52c929a6d27763bbcbc50d2937c5e600c83c4c5e"], 0x57)
socket(0x0, 0x0, 0x0)
pipe(&(0x7f0000000140)={<r3=>0xffffffffffffffff})
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0)
ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040))
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
pipe(&(0x7f0000000140)={<r4=>0xffffffffffffffff})
vmsplice(r4, 0x0, 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000cfc000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0)

06:15:07 executing program 1:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$kcm(0xa, 0x2, 0x73)
sendmsg(r2, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x29, 0x37, 'v'}], 0x18}, 0x0)

06:15:07 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32, @ANYBLOB="00000000ffffffff0000000008000100736671004800020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3"], 0x74}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="7c0000002c00010700"/20, @ANYRES32, @ANYBLOB="000000020000000003000000080001c9627066005000020008000400000000000500050040000200000000080084799c570b75daf6a86081eca80289160000001100000000000000001000"/116], 0x7c}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0)

06:15:07 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
getpid()
r0 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r3, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r5 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r1, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r6=>0xffffffffffffffff}, 0x0)
close(r6)
r7 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}})

06:15:07 executing program 1:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$kcm(0xa, 0x2, 0x73)
sendmsg(r2, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x29, 0x37, 'v'}], 0x18}, 0x0)

06:15:07 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(0xffffffffffffffff, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:07 executing program 2:
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x2000005)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r5 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r6=>0xffffffffffffffff}, 0x0)
close(r6)
r7 = epoll_create1(0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}})

06:15:07 executing program 1:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$kcm(0xa, 0x2, 0x73)
sendmsg(r2, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x29, 0x37, 'v'}], 0x18}, 0x0)

06:15:07 executing program 3:
r0 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/context\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000240)="a8", 0x1}], 0x1)

06:15:07 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32, @ANYBLOB="00000000ffffffff0000000008000100736671004800020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3"], 0x74}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="7c0000002c00010700"/20, @ANYRES32, @ANYBLOB="000000020000000003000000080001c9627066005000020008000400000000000500050040000200000000080084799c570b75daf6a86081eca80289160000001100000000000000001000"/116], 0x7c}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0)

06:15:07 executing program 1:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x29, 0x37, 'v'}], 0x18}, 0x0)

06:15:07 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x9)
writev(r0, &(0x7f0000000200)=[{&(0x7f0000000440)="580000001400192340834b80040d8c56", 0x10}], 0x1)

06:15:07 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32, @ANYBLOB="00000000ffffffff0000000008000100736671004800020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3"], 0x74}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="7c0000002c00010700"/20, @ANYRES32, @ANYBLOB="000000020000000003000000080001c9627066005000020008000400000000000500050040000200000000080084799c570b75daf6a86081eca80289160000001100000000000000001000"/116], 0x7c}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0)

06:15:07 executing program 1:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x29, 0x37, 'v'}], 0x18}, 0x0)

06:15:07 executing program 3:
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x1, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x3c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000340), &(0x7f0000000400)}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000c88000)={r0, &(0x7f0000847f95), &(0x7f000089b000)}, 0x18)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, 0x0)

06:15:08 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r3, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r5 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r1, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r6=>0xffffffffffffffff}, 0x0)
close(r6)
r7 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}})

06:15:08 executing program 0:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32, @ANYBLOB="00000000ffffffff0000000008000100736671004800020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3"], 0x74}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="7c0000002c00010700"/20, @ANYRES32, @ANYBLOB="000000020000000003000000080001c9627066005000020008000400000000000500050040000200000000080084799c570b75daf6a86081eca80289160000001100000000000000001000"/116], 0x7c}}, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x332, 0x0)

06:15:08 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(0xffffffffffffffff, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:08 executing program 1:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x29, 0x37, 'v'}], 0x18}, 0x0)

06:15:08 executing program 0:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32, @ANYBLOB="00000000ffffffff0000000008000100736671004800020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3"], 0x74}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="7c0000002c00010700"/20, @ANYRES32, @ANYBLOB="000000020000000003000000080001c9627066005000020008000400000000000500050040000200000000080084799c570b75daf6a86081eca80289160000001100000000000000001000"/116], 0x7c}}, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x332, 0x0)

06:15:08 executing program 3:
r0 = timerfd_create(0x8, 0x0)
clock_gettime(0x0, &(0x7f0000000040)={0x0, <r1=>0x0})
timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{}, {0x0, r1+30000000}}, 0x0)

06:15:08 executing program 2:
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x2000005)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r5 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r6=>0xffffffffffffffff}, 0x0)
close(r6)
r7 = epoll_create1(0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}})

06:15:08 executing program 1:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
dup(r0)
r1 = socket$kcm(0xa, 0x2, 0x73)
sendmsg(r1, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x29, 0x37, 'v'}], 0x18}, 0x0)

06:15:08 executing program 0:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32, @ANYBLOB="00000000ffffffff0000000008000100736671004800020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3"], 0x74}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="7c0000002c00010700"/20, @ANYRES32, @ANYBLOB="000000020000000003000000080001c9627066005000020008000400000000000500050040000200000000080084799c570b75daf6a86081eca80289160000001100000000000000001000"/116], 0x7c}}, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x332, 0x0)

[  476.834646] audit: type=1400 audit(1576563308.253:54): avc:  denied  { wake_alarm } for  pid=27136 comm="syz-executor.3" capability=35  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=capability2 permissive=1
06:15:08 executing program 3:
r0 = timerfd_create(0x8, 0x0)
clock_gettime(0x0, &(0x7f0000000040)={0x0, <r1=>0x0})
timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{}, {0x0, r1+30000000}}, 0x0)

06:15:08 executing program 0:
r0 = socket(0x0, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32, @ANYBLOB="00000000ffffffff0000000008000100736671004800020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3"], 0x74}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="7c0000002c00010700"/20, @ANYRES32, @ANYBLOB="000000020000000003000000080001c9627066005000020008000400000000000500050040000200000000080084799c570b75daf6a86081eca80289160000001100000000000000001000"/116], 0x7c}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0)

06:15:08 executing program 1:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
dup(r0)
r1 = socket$kcm(0xa, 0x2, 0x73)
sendmsg(r1, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x29, 0x37, 'v'}], 0x18}, 0x0)

06:15:08 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r3, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r5 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r1, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r6=>0xffffffffffffffff}, 0x0)
close(r6)
r7 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}})

06:15:08 executing program 3:
r0 = timerfd_create(0x8, 0x0)
clock_gettime(0x0, &(0x7f0000000040)={0x0, <r1=>0x0})
timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{}, {0x0, r1+30000000}}, 0x0)

06:15:09 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x0)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:09 executing program 1:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
dup(r0)
r1 = socket$kcm(0xa, 0x2, 0x73)
sendmsg(r1, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x29, 0x37, 'v'}], 0x18}, 0x0)

06:15:09 executing program 0:
r0 = socket(0x0, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32, @ANYBLOB="00000000ffffffff0000000008000100736671004800020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3"], 0x74}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="7c0000002c00010700"/20, @ANYRES32, @ANYBLOB="000000020000000003000000080001c9627066005000020008000400000000000500050040000200000000080084799c570b75daf6a86081eca80289160000001100000000000000001000"/116], 0x7c}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0)

06:15:09 executing program 3:
r0 = timerfd_create(0x8, 0x0)
clock_gettime(0x0, &(0x7f0000000040)={0x0, <r1=>0x0})
timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{}, {0x0, r1+30000000}}, 0x0)

06:15:09 executing program 2:
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x2000005)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r5 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480), 0x0, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r6=>0xffffffffffffffff}, 0x0)
close(r6)
r7 = epoll_create1(0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}})

06:15:09 executing program 3:
r0 = timerfd_create(0x8, 0x0)
timerfd_settime(r0, 0x0, &(0x7f00000000c0), 0x0)

06:15:09 executing program 1:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r0 = socket$kcm(0xa, 0x2, 0x73)
sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x29, 0x37, 'v'}], 0x18}, 0x0)

06:15:09 executing program 0:
r0 = socket(0x0, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32, @ANYBLOB="00000000ffffffff0000000008000100736671004800020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3"], 0x74}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="7c0000002c00010700"/20, @ANYRES32, @ANYBLOB="000000020000000003000000080001c9627066005000020008000400000000000500050040000200000000080084799c570b75daf6a86081eca80289160000001100000000000000001000"/116], 0x7c}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0)

06:15:09 executing program 3:
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x0)

06:15:09 executing program 1:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r0 = socket$kcm(0xa, 0x2, 0x73)
sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x29, 0x37, 'v'}], 0x18}, 0x0)

06:15:09 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r3, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r5 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r1, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r6=>0xffffffffffffffff}, 0x0)
close(r6)
r7 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}})

06:15:09 executing program 3:
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x0)

06:15:09 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x0)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:09 executing program 0:
r0 = socket(0x10, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32, @ANYBLOB="00000000ffffffff0000000008000100736671004800020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3"], 0x74}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="7c0000002c00010700"/20, @ANYRES32, @ANYBLOB="000000020000000003000000080001c9627066005000020008000400000000000500050040000200000000080084799c570b75daf6a86081eca80289160000001100000000000000001000"/116], 0x7c}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0)

06:15:09 executing program 3:
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x0)

06:15:09 executing program 1:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r0 = socket$kcm(0xa, 0x2, 0x73)
sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x29, 0x37, 'v'}], 0x18}, 0x0)

06:15:09 executing program 2:
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x2000005)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r5 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480), 0x0, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r6=>0xffffffffffffffff}, 0x0)
close(r6)
r7 = epoll_create1(0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}})

06:15:10 executing program 3:
r0 = timerfd_create(0x0, 0x0)
timerfd_settime(r0, 0x0, &(0x7f00000000c0), 0x0)

06:15:10 executing program 1:
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x2, 0x73)
sendmsg(r1, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x29, 0x37, 'v'}], 0x18}, 0x0)

06:15:10 executing program 0:
r0 = socket(0x10, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32, @ANYBLOB="00000000ffffffff0000000008000100736671004800020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3"], 0x74}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="7c0000002c00010700"/20, @ANYRES32, @ANYBLOB="000000020000000003000000080001c9627066005000020008000400000000000500050040000200000000080084799c570b75daf6a86081eca80289160000001100000000000000001000"/116], 0x7c}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0)

06:15:10 executing program 3:
r0 = timerfd_create(0x0, 0x0)
timerfd_settime(r0, 0x0, &(0x7f00000000c0), 0x0)

06:15:10 executing program 1:
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x2, 0x73)
sendmsg(r1, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x29, 0x37, 'v'}], 0x18}, 0x0)

06:15:10 executing program 5:
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:10 executing program 0:
r0 = socket(0x10, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32, @ANYBLOB="00000000ffffffff0000000008000100736671004800020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3"], 0x74}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="7c0000002c00010700"/20, @ANYRES32, @ANYBLOB="000000020000000003000000080001c9627066005000020008000400000000000500050040000200000000080084799c570b75daf6a86081eca80289160000001100000000000000001000"/116], 0x7c}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0)

06:15:10 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x0)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:10 executing program 3:
r0 = timerfd_create(0x0, 0x0)
timerfd_settime(r0, 0x0, &(0x7f00000000c0), 0x0)

06:15:10 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32, @ANYBLOB="00000000ffffffff0000000008000100736671004800020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3"], 0x74}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="7c0000002c00010700"/20, @ANYRES32, @ANYBLOB="000000020000000003000000080001c9627066005000020008000400000000000500050040000200000000080084799c570b75daf6a86081eca80289160000001100000000000000001000"/116], 0x7c}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0)

06:15:10 executing program 1:
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x2, 0x73)
sendmsg(r1, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x29, 0x37, 'v'}], 0x18}, 0x0)

06:15:10 executing program 2:
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x2000005)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r5 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480), 0x0, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r6=>0xffffffffffffffff}, 0x0)
close(r6)
r7 = epoll_create1(0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}})

06:15:10 executing program 1:
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$kcm(0xa, 0x2, 0x73)
sendmsg(r2, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x29, 0x37, 'v'}], 0x18}, 0x0)

06:15:10 executing program 3:
timerfd_create(0x8, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x0)

06:15:10 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="7c0000002c00010700"/20, @ANYRES32, @ANYBLOB="000000020000000003000000080001c9627066005000020008000400000000000500050040000200000000080084799c570b75daf6a86081eca80289160000001100000000000000001000"/116], 0x7c}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0)

06:15:10 executing program 1:
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$kcm(0xa, 0x2, 0x73)
sendmsg(r2, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x29, 0x37, 'v'}], 0x18}, 0x0)

06:15:11 executing program 3:
timerfd_create(0x8, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x0)

06:15:11 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0)

06:15:11 executing program 1:
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$kcm(0xa, 0x2, 0x73)
sendmsg(r2, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x29, 0x37, 'v'}], 0x18}, 0x0)

06:15:11 executing program 5:
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:11 executing program 3:
timerfd_create(0x8, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x0)

06:15:11 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0)

06:15:11 executing program 1:
socketpair$unix(0x1, 0x3, 0x0, 0x0)
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x2, 0x73)
sendmsg(r1, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x29, 0x37, 'v'}], 0x18}, 0x0)

06:15:11 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(0x0, 0x0)
close(0xffffffffffffffff)
r7 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r7}})

06:15:11 executing program 2:
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x2000005)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r5 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d8", 0x8, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r6=>0xffffffffffffffff}, 0x0)
close(r6)
r7 = epoll_create1(0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}})

06:15:11 executing program 1:
socketpair$unix(0x1, 0x3, 0x0, 0x0)
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x2, 0x73)
sendmsg(r1, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x29, 0x37, 'v'}], 0x18}, 0x0)

06:15:11 executing program 3:
r0 = timerfd_create(0x8, 0x0)
timerfd_settime(r0, 0x0, 0x0, 0x0)

06:15:11 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0)

06:15:11 executing program 1:
socketpair$unix(0x1, 0x3, 0x0, 0x0)
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x2, 0x73)
sendmsg(r1, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x29, 0x37, 'v'}], 0x18}, 0x0)

06:15:11 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0)

06:15:11 executing program 3:
r0 = timerfd_create(0x8, 0x0)
timerfd_settime(r0, 0x0, 0x0, 0x0)

[  480.595250] 9pnet: Insufficient options for proto=fd
06:15:12 executing program 5:
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:12 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(0x0, 0x0)
close(0xffffffffffffffff)
r7 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r7}})

06:15:12 executing program 3:
r0 = timerfd_create(0x8, 0x0)
timerfd_settime(r0, 0x0, 0x0, 0x0)

06:15:12 executing program 1:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x2, 0x73)
sendmsg(r1, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x29, 0x37, 'v'}], 0x18}, 0x0)

06:15:12 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0)

06:15:12 executing program 2:
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x2000005)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r5 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d8", 0x8, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r6=>0xffffffffffffffff}, 0x0)
close(r6)
r7 = epoll_create1(0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}})

06:15:12 executing program 3:
r0 = timerfd_create(0x8, 0x0)
clock_gettime(0x0, &(0x7f0000000040)={0x0, <r1=>0x0})
timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{}, {0x0, r1+30000000}}, 0x0)

06:15:12 executing program 1:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x2, 0x73)
sendmsg(r1, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x29, 0x37, 'v'}], 0x18}, 0x0)

06:15:12 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0)

06:15:12 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = getpid()
r3 = getpid()
rt_tgsigqueueinfo(r2, r3, 0x0, &(0x7f0000000040)={0x0, 0x0, 0xfffffffe})

06:15:12 executing program 1:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x2, 0x73)
sendmsg(r1, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x29, 0x37, 'v'}], 0x18}, 0x0)

06:15:12 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0)

[  481.443114] 9pnet: Insufficient options for proto=fd
06:15:13 executing program 5:
prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:13 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(0x0, 0x0)
close(0xffffffffffffffff)
r7 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r7}})

06:15:13 executing program 1:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x2, 0x73)
sendmsg(r1, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x29, 0x37, 'v'}], 0x18}, 0x0)

06:15:13 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000300)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0xfffffffffffffffa})
ioctl$KVM_TRANSLATE(r4, 0xc018ae85, &(0x7f0000000080))

06:15:13 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0)

06:15:13 executing program 2:
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x2000005)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r5 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d8", 0x8, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r6=>0xffffffffffffffff}, 0x0)
close(r6)
r7 = epoll_create1(0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}})

06:15:13 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0)

06:15:13 executing program 1:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x2, 0x73)
sendmsg(r1, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x29, 0x37, 'v'}], 0x18}, 0x0)

06:15:13 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045006, &(0x7f0000000040))

[  482.309511] 9pnet: Insufficient options for proto=fd
06:15:13 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="7c0000002c00010700"/20, @ANYRES32], 0x2}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0)

06:15:13 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(0xffffffffffffffff)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:13 executing program 1:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x2, 0x73)
sendmsg(r1, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x29, 0x37, 'v'}], 0x18}, 0x0)

06:15:14 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="7c0000002c00010700"/20, @ANYRES32], 0x2}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0)

06:15:14 executing program 3:
socket$kcm(0x10, 0x400000002, 0x0)
socket$kcm(0xa, 0x2, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000003c0))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000005c0))
socket$kcm(0x29, 0x2, 0x0)
socket$kcm(0x29, 0x2, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000))
r0 = socket$kcm(0x29, 0x5, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100))
sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x27c, &(0x7f0000000100), 0x10f}, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f00000001c0)='veth0\x00')

06:15:14 executing program 1:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0)
r2 = socket$kcm(0xa, 0x2, 0x73)
sendmsg(r2, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x29, 0x37, 'v'}], 0x18}, 0x0)

06:15:14 executing program 5:
prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:14 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(0xffffffffffffffff)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:14 executing program 2:
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x2000005)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r5 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232", 0xc, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r6=>0xffffffffffffffff}, 0x0)
close(r6)
r7 = epoll_create1(0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}})

06:15:14 executing program 1:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0)
r2 = socket$kcm(0xa, 0x2, 0x73)
sendmsg(r2, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x29, 0x37, 'v'}], 0x18}, 0x0)

06:15:14 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="7c0000002c00010700"/20, @ANYRES32], 0x2}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0)

06:15:14 executing program 1:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0)
r2 = socket$kcm(0xa, 0x2, 0x73)
sendmsg(r2, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x29, 0x37, 'v'}], 0x18}, 0x0)

06:15:14 executing program 3:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x4006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$cgroup_type(0xffffffffffffffff, &(0x7f00000000c0)='cgrou\xb0\xfat\xa9pe\x00', 0x2, 0x0)
r1 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r1, &(0x7f000000c280)={0x0, 0x0, 0x0}, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000007500)={&(0x7f0000006f80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, 0x0, 0x0, 0xffffffffffffffff}, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1802000000000800000000000000000085000000360000009500000000000000e8b6a6f350e4edfd19eac129c4f9d7baa9d3f2729d1db423a1813af64347b04026a2b85b20bec19902e7195f5e2ebd97c2a90a11c24ef59a7011e8063fff73c91906f2b9fc272a8b55685a16fbfb7dfa35dbbb3e802508136058cc7f6ea977019081a799c5c1000c0b4add85af950152ccd6546ba736fafaeb327a3cb22c54020de82ca21121"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1076, &(0x7f0000000300)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000000)="4be624e60b8588ae2b8961abc53c", 0x0}, 0x28)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)

06:15:14 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="7c0000002c00010700"/20, @ANYRES32, @ANYBLOB], 0x3}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0)

06:15:14 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000007800)={0x0, 0x0, &(0x7f0000007740), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x2d2}, 0x0)
r0 = socket$kcm(0xa, 0x5, 0x0)
sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0xffe0}], 0x1, &(0x7f0000000380)=[{0x18, 0x84, 0x0, '\n'}], 0x18}, 0xfc)

06:15:14 executing program 1:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$kcm(0xa, 0x0, 0x73)
sendmsg(r2, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x29, 0x37, 'v'}], 0x18}, 0x0)

06:15:14 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="7c0000002c00010700"/20, @ANYRES32, @ANYBLOB], 0x3}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0)

06:15:14 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
socket$kcm(0xa, 0x5, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0xfffffffffffffe64)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x12, 0xc, 0x4, 0x400, 0x0, 0xffffffffffffffff, 0x0, [0x2e]}, 0x3c)

06:15:15 executing program 5:
prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:15 executing program 1:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$kcm(0xa, 0x0, 0x73)
sendmsg(r2, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x29, 0x37, 'v'}], 0x18}, 0x0)

06:15:15 executing program 2:
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x2000005)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r5 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232", 0xc, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r6=>0xffffffffffffffff}, 0x0)
close(r6)
r7 = epoll_create1(0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}})

06:15:15 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="7c0000002c00010700"/20, @ANYRES32, @ANYBLOB], 0x3}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0)

06:15:15 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'nr0\x01\x00', 0x4009})
r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r1)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x308)
socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-0\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x0)
perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8922, &(0x7f0000000000)='nr0\x01:\xf2%\xa3\'>\xf8]\x81\n?\xfa\xff\x04\x00\x00\xbf\xef\xa9\xac\x03x\xf4D3A}?\a\x8b\x9c[\xdd\x06\xa4\n\xf4\x94\xa8>\xb1\xb1\xa2_&')
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000c88000)={0xffffffffffffffff, &(0x7f0000847f95), &(0x7f000089b000)}, 0x18)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
close(0xffffffffffffffff)
socket$kcm(0x2c, 0x3, 0x0)
socket$kcm(0x2c, 0x0, 0x0)
socket$kcm(0x2c, 0x3, 0x0)

06:15:15 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(0xffffffffffffffff)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:15 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="7c0000002c00010700"/20, @ANYRES32, @ANYBLOB="000000020000000003000000080001c9627066005000020008000400000000000500050040000200000000080084799c570b75daf6a86081eca8"], 0x3}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0)

06:15:15 executing program 1:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$kcm(0xa, 0x0, 0x73)
sendmsg(r2, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x29, 0x37, 'v'}], 0x18}, 0x0)

[  483.980889] device nr0
 entered promiscuous mode
06:15:15 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="7c0000002c00010700"/20, @ANYRES32, @ANYBLOB="000000020000000003000000080001c9627066005000020008000400000000000500050040000200000000080084799c570b75daf6a86081eca8"], 0x3}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0)

06:15:15 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="7c0000002c00010700"/20, @ANYRES32, @ANYBLOB="000000020000000003000000080001c9627066005000020008000400000000000500050040000200000000080084799c570b75daf6a86081eca8"], 0x3}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0)

06:15:15 executing program 1:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
socket$kcm(0xa, 0x2, 0x73)
sendmsg(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x29, 0x37, 'v'}], 0x18}, 0x0)

06:15:15 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="7c0000002c00010700"/20, @ANYRES32, @ANYBLOB="000000020000000003000000080001c9627066005000020008000400000000000500050040000200000000080084799c570b75daf6a86081eca80289160000001100000000000000001000"/87], 0x3}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0)

[  484.444749] device nr0
 entered promiscuous mode
06:15:16 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="7c0000002c00010700"/20, @ANYRES32, @ANYBLOB="000000020000000003000000080001c9627066005000020008000400000000000500050040000200000000080084799c570b75daf6a86081eca80289160000001100000000000000001000"/87], 0x3}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0)

06:15:16 executing program 1:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
socket$kcm(0xa, 0x2, 0x73)
sendmsg(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x29, 0x37, 'v'}], 0x18}, 0x0)

06:15:16 executing program 5:
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:16 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'nr0\x01\x00', 0x4009})
r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r1)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x308)
socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-0\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x0)
perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8922, &(0x7f0000000000)='nr0\x01:\xf2%\xa3\'>\xf8]\x81\n?\xfa\xff\x04\x00\x00\xbf\xef\xa9\xac\x03x\xf4D3A}?\a\x8b\x9c[\xdd\x06\xa4\n\xf4\x94\xa8>\xb1\xb1\xa2_&')
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000c88000)={0xffffffffffffffff, &(0x7f0000847f95), &(0x7f000089b000)}, 0x18)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
close(0xffffffffffffffff)
socket$kcm(0x2c, 0x3, 0x0)
socket$kcm(0x2c, 0x0, 0x0)
socket$kcm(0x2c, 0x3, 0x0)

06:15:16 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:16 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="7c0000002c00010700"/20, @ANYRES32, @ANYBLOB="000000020000000003000000080001c9627066005000020008000400000000000500050040000200000000080084799c570b75daf6a86081eca80289160000001100000000000000001000"/87], 0x3}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0)

06:15:16 executing program 2:
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x2000005)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r5 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232", 0xc, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r6=>0xffffffffffffffff}, 0x0)
close(r6)
r7 = epoll_create1(0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}})

06:15:16 executing program 1:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
socket$kcm(0xa, 0x2, 0x73)
sendmsg(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x29, 0x37, 'v'}], 0x18}, 0x0)

06:15:16 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="7c0000002c00010700"/20, @ANYRES32, @ANYBLOB="000000020000000003000000080001c9627066005000020008000400000000000500050040000200000000080084799c570b75daf6a86081eca80289160000001100000000000000001000"/102], 0x3}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0)

[  484.851297] device nr0
 entered promiscuous mode
06:15:16 executing program 1:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$kcm(0xa, 0x2, 0x73)
sendmsg(r2, 0x0, 0x0)

06:15:16 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="7c0000002c00010700"/20, @ANYRES32, @ANYBLOB="000000020000000003000000080001c9627066005000020008000400000000000500050040000200000000080084799c570b75daf6a86081eca80289160000001100000000000000001000"/102], 0x3}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0)

06:15:16 executing program 1:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$kcm(0xa, 0x2, 0x73)
sendmsg(r2, 0x0, 0x0)

06:15:16 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="7c0000002c00010700"/20, @ANYRES32, @ANYBLOB="000000020000000003000000080001c9627066005000020008000400000000000500050040000200000000080084799c570b75daf6a86081eca80289160000001100000000000000001000"/102], 0x3}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0)

06:15:16 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'nr0\x01\x00', 0x4009})
r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r1)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x308)
socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-0\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x0)
perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8922, &(0x7f0000000000)='nr0\x01:\xf2%\xa3\'>\xf8]\x81\n?\xfa\xff\x04\x00\x00\xbf\xef\xa9\xac\x03x\xf4D3A}?\a\x8b\x9c[\xdd\x06\xa4\n\xf4\x94\xa8>\xb1\xb1\xa2_&')
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000c88000)={0xffffffffffffffff, &(0x7f0000847f95), &(0x7f000089b000)}, 0x18)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
close(0xffffffffffffffff)
socket$kcm(0x2c, 0x3, 0x0)
socket$kcm(0x2c, 0x0, 0x0)
socket$kcm(0x2c, 0x3, 0x0)

[  485.481786] device nr0
 entered promiscuous mode
06:15:17 executing program 5:
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:17 executing program 1:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$kcm(0xa, 0x2, 0x73)
sendmsg(r2, 0x0, 0x0)

06:15:17 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="7c0000002c00010700"/20, @ANYRES32, @ANYBLOB="000000020000000003000000080001c9627066005000020008000400000000000500050040000200000000080084799c570b75daf6a86081eca80289160000001100000000000000001000"/109], 0x3}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0)

06:15:17 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:17 executing program 2:
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x2000005)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r5 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b", 0xe, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r6=>0xffffffffffffffff}, 0x0)
close(r6)
r7 = epoll_create1(0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}})

06:15:17 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'nr0\x01\x00', 0x4009})
r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r1)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x308)
socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-0\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x0)
perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8922, &(0x7f0000000000)='nr0\x01:\xf2%\xa3\'>\xf8]\x81\n?\xfa\xff\x04\x00\x00\xbf\xef\xa9\xac\x03x\xf4D3A}?\a\x8b\x9c[\xdd\x06\xa4\n\xf4\x94\xa8>\xb1\xb1\xa2_&')
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000c88000)={0xffffffffffffffff, &(0x7f0000847f95), &(0x7f000089b000)}, 0x18)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
close(0xffffffffffffffff)
socket$kcm(0x2c, 0x3, 0x0)
socket$kcm(0x2c, 0x0, 0x0)
socket$kcm(0x2c, 0x3, 0x0)

06:15:17 executing program 1:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$kcm(0xa, 0x2, 0x73)
sendmsg(r2, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x29, 0x37, 'v'}], 0x18}, 0x0)

06:15:17 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="7c0000002c00010700"/20, @ANYRES32, @ANYBLOB="000000020000000003000000080001c9627066005000020008000400000000000500050040000200000000080084799c570b75daf6a86081eca80289160000001100000000000000001000"/109], 0x3}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0)

06:15:17 executing program 1:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$kcm(0xa, 0x2, 0x73)
sendmsg(r2, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x29, 0x37, 'v'}], 0x18}, 0x0)

06:15:17 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="7c0000002c00010700"/20, @ANYRES32, @ANYBLOB="000000020000000003000000080001c9627066005000020008000400000000000500050040000200000000080084799c570b75daf6a86081eca80289160000001100000000000000001000"/109], 0x3}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0)

[  485.843219] device nr0
 entered promiscuous mode
06:15:17 executing program 1:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$kcm(0xa, 0x2, 0x73)
sendmsg(r2, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x29, 0x37, 'v'}], 0x18}, 0x0)

06:15:17 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="7c0000002c00010700"/20, @ANYRES32, @ANYBLOB="000000020000000003000000080001c9627066005000020008000400000000000500050040000200000000080084799c570b75daf6a86081eca80289160000001100000000000000001000"/113], 0x3}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0)

06:15:17 executing program 1:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$kcm(0xa, 0x2, 0x73)
sendmsg(r2, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0}, 0x0)

06:15:17 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="7c0000002c00010700"/20, @ANYRES32, @ANYBLOB="000000020000000003000000080001c9627066005000020008000400000000000500050040000200000000080084799c570b75daf6a86081eca80289160000001100000000000000001000"/113], 0x3}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0)

06:15:17 executing program 5:
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:18 executing program 1:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$kcm(0xa, 0x2, 0x73)
sendmsg(r2, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0}, 0x0)

06:15:18 executing program 3:
r0 = creat(&(0x7f0000000140)='./file1\x00', 0x0)
r1 = creat(&(0x7f0000000140)='./file1\x00', 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x402c5828, &(0x7f0000000180)={0x580000, 0x0, 0x0, 0x2, 0xc00, 0x3000, [0xff0f, 0x3800000, 0xa]})
fchmod(r1, 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x402c5828, &(0x7f0000000000)={0x580000, 0x0, 0x1001000200000000, 0x0, 0xc00, 0x3000, [0xff0f, 0x3800000, 0xa]})

06:15:18 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="7c0000002c00010700"/20, @ANYRES32, @ANYBLOB="000000020000000003000000080001c9627066005000020008000400000000000500050040000200000000080084799c570b75daf6a86081eca80289160000001100000000000000001000"/113], 0x3}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0)

06:15:18 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:18 executing program 2:
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x2000005)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r5 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b", 0xe, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r6=>0xffffffffffffffff}, 0x0)
close(r6)
r7 = epoll_create1(0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}})

06:15:18 executing program 3:
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r0, &(0x7f0000007300)=[{{&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@ip_retopts={{0xc}}], 0xc}}], 0x1, 0x0)

06:15:18 executing program 1:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$kcm(0xa, 0x2, 0x73)
sendmsg(r2, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0}, 0x0)

06:15:18 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="7c0000002c00010700"/20, @ANYRES32, @ANYBLOB="000000020000000003000000080001c9627066005000020008000400000000000500050040000200000000080084799c570b75daf6a86081eca80289160000001100000000000000001000"/115], 0x3}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0)

06:15:18 executing program 1:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$kcm(0xa, 0x2, 0x73)
sendmsg(r2, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000000)}, 0x0)

06:15:18 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="7c0000002c00010700"/20, @ANYRES32, @ANYBLOB="000000020000000003000000080001c9627066005000020008000400000000000500050040000200000000080084799c570b75daf6a86081eca80289160000001100000000000000001000"/115], 0x3}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0)

06:15:18 executing program 3:
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup3(r1, r0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x15)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00')
sendmsg$DEVLINK_CMD_PORT_SET(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000a00)={0x104, r4, 0x1, 0x0, 0x0, {}, [{{@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@nsim={{0x10, 0x1, 'n\x00\x02\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}]}, 0x104}}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)

[  487.058491] audit: type=1400 audit(1576563318.473:55): avc:  denied  { write } for  pid=27742 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1
06:15:18 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="7c0000002c00010700"/20, @ANYRES32, @ANYBLOB="000000020000000003000000080001c9627066005000020008000400000000000500050040000200000000080084799c570b75daf6a86081eca80289160000001100000000000000001000"/115], 0x3}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0)

06:15:18 executing program 1:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$kcm(0xa, 0x2, 0x73)
sendmsg(r2, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000000)}, 0x0)

06:15:18 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:18 executing program 3:
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$nl_generic(r0, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001400070000000000000000000aff0006b9bd37539b8aefa825fbe7f7cb62a65d63b977973cd4f92fcb902b7b40ee5833f7872d82bac71cff93d1812a26f97fd4ccd5a4394d22b86e5923d5bfff9a8608619c29ecac06298b75059dc8143a8b91a6ad600eda8cbbe2570611bde3b2545d9e46c9b82b245dc6f2cd0cfd868c4d0000000000"], 0x48}}, 0x0)

06:15:18 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x0, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:18 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="7c0000002c00010700"/20, @ANYBLOB="000000020000000003000000080001c9627066005000020008000400000000000500050040000200000000080084799c570b75daf6a86081eca80289160000001100000000000000001000"/116], 0x2}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0)

06:15:18 executing program 1:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$kcm(0xa, 0x2, 0x73)
sendmsg(r2, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000000)}, 0x0)

06:15:18 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffa0}], 0x2df, 0x0, 0x0, 0xfffffe41)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x3, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

06:15:18 executing program 2:
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x2000005)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r5 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b", 0xe, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r6=>0xffffffffffffffff}, 0x0)
close(r6)
r7 = epoll_create1(0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}})

06:15:19 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="7c0000002c00010700"/20, @ANYBLOB="000000020000000003000000080001c9627066005000020008000400000000000500050040000200000000080084799c570b75daf6a86081eca80289160000001100000000000000001000"/116], 0x2}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0)

06:15:19 executing program 1:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$kcm(0xa, 0x2, 0x73)
sendmsg(r2, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x0, 0x37, 'v'}], 0x18}, 0x0)

[  487.623317] kvm [27770]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc2 data 0x1
06:15:19 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="7c0000002c00010700"/20, @ANYBLOB="000000020000000003000000080001c9627066005000020008000400000000000500050040000200000000080084799c570b75daf6a86081eca80289160000001100000000000000001000"/116], 0x2}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0)

06:15:19 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000000))
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

06:15:19 executing program 1:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$kcm(0xa, 0x2, 0x73)
sendmsg(r2, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x0, 0x37, 'v'}], 0x18}, 0x0)

06:15:19 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYRES32, @ANYBLOB="000000020000000003000000080001c9627066005000020008000400000000000500050040000200000000080084799c570b75daf6a86081eca80289160000001100000000000000001000"/116], 0x2}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0)

06:15:19 executing program 1:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$kcm(0xa, 0x2, 0x73)
sendmsg(r2, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x0, 0x37, 'v'}], 0x18}, 0x0)

06:15:19 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:19 executing program 3:

06:15:19 executing program 1:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$kcm(0xa, 0x2, 0x73)
sendmsg(r2, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x29, 0x0, 'v'}], 0x18}, 0x0)

06:15:19 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYRES32, @ANYBLOB="000000020000000003000000080001c9627066005000020008000400000000000500050040000200000000080084799c570b75daf6a86081eca80289160000001100000000000000001000"/116], 0x2}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0)

06:15:19 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x0, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:19 executing program 2:
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x2000005)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r5 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(0xffffffffffffffff, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r6=>0xffffffffffffffff}, 0x0)
close(r6)
r7 = epoll_create1(0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}})

06:15:19 executing program 1:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$kcm(0xa, 0x2, 0x73)
sendmsg(r2, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x29, 0x0, 'v'}], 0x18}, 0x0)

06:15:19 executing program 3:

06:15:19 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYRES32, @ANYBLOB="000000020000000003000000080001c9627066005000020008000400000000000500050040000200000000080084799c570b75daf6a86081eca80289160000001100000000000000001000"/116], 0x2}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0)

06:15:19 executing program 3:

06:15:19 executing program 1:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$kcm(0xa, 0x2, 0x73)
sendmsg(r2, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x29, 0x0, 'v'}], 0x18}, 0x0)

06:15:20 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="000000020000000003000000080001c9627066005000020008000400000000000500050040000200000000080084799c570b75daf6a86081eca80289160000001100000000000000001000"/116], 0x3}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0)

06:15:20 executing program 3:

06:15:20 executing program 1:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$kcm(0xa, 0x2, 0x73)
sendmsg(r2, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[{0x10, 0x29, 0x37}], 0x10}, 0x0)

06:15:20 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="000000020000000003000000080001c9627066005000020008000400000000000500050040000200000000080084799c570b75daf6a86081eca80289160000001100000000000000001000"/116], 0x3}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0)

06:15:20 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:20 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x0, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:20 executing program 2:
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x2000005)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r5 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(0xffffffffffffffff, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r6=>0xffffffffffffffff}, 0x0)
close(r6)
r7 = epoll_create1(0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}})

06:15:20 executing program 3:

06:15:20 executing program 3:

06:15:20 executing program 1:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$kcm(0xa, 0x2, 0x73)
sendmsg(r2, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[{0x10, 0x29, 0x37}], 0x10}, 0x0)

06:15:20 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="000000020000000003000000080001c9627066005000020008000400000000000500050040000200000000080084799c570b75daf6a86081eca80289160000001100000000000000001000"/116], 0x3}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0)

06:15:20 executing program 3:

06:15:20 executing program 1:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$kcm(0xa, 0x2, 0x73)
sendmsg(r2, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[{0x10, 0x29, 0x37}], 0x10}, 0x0)

06:15:21 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="7c0000002c0001070000", @ANYRES32, @ANYBLOB="000000020000000003000000080001c9627066005000020008000400000000000500050040000200000000080084799c570b75daf6a86081eca80289160000001100000000000000001000"/116], 0x3}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0)

06:15:21 executing program 3:

06:15:21 executing program 1:

06:15:21 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:21 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="7c0000002c0001070000", @ANYRES32, @ANYBLOB="000000020000000003000000080001c9627066005000020008000400000000000500050040000200000000080084799c570b75daf6a86081eca80289160000001100000000000000001000"/116], 0x3}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0)

06:15:21 executing program 3:

06:15:21 executing program 1:

06:15:21 executing program 2:
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x2000005)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r5 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(0xffffffffffffffff, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r6=>0xffffffffffffffff}, 0x0)
close(r6)
r7 = epoll_create1(0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}})

06:15:21 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x0, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:21 executing program 3:

06:15:21 executing program 1:

06:15:21 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="7c0000002c0001070000", @ANYRES32, @ANYBLOB="000000020000000003000000080001c9627066005000020008000400000000000500050040000200000000080084799c570b75daf6a86081eca80289160000001100000000000000001000"/116], 0x3}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0)

06:15:21 executing program 3:

06:15:21 executing program 1:

06:15:21 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="7c0000002c00010700000000000000", @ANYRES32, @ANYBLOB="000000020000000003000000080001c9627066005000020008000400000000000500050040000200000000080084799c570b75daf6a86081eca80289160000001100000000000000001000"/116], 0x3}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0)

06:15:22 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:22 executing program 3:

06:15:22 executing program 1:

06:15:22 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x0, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:22 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x0, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:22 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="7c0000002c00010700000000000000", @ANYRES32, @ANYBLOB="000000020000000003000000080001c9627066005000020008000400000000000500050040000200000000080084799c570b75daf6a86081eca80289160000001100000000000000001000"/116], 0x3}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0)

06:15:22 executing program 2:
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x2000005)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r5 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x0)
pipe2$9p(&(0x7f0000000240)={<r6=>0xffffffffffffffff}, 0x0)
close(r6)
r7 = epoll_create1(0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}})

06:15:22 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:22 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x0, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:22 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="7c0000002c00010700000000000000", @ANYRES32, @ANYBLOB="000000020000000003000000080001c9627066005000020008000400000000000500050040000200000000080084799c570b75daf6a86081eca80289160000001100000000000000001000"/116], 0x3}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0)

06:15:22 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="7c0000002c00010700"/18, @ANYRES32, @ANYBLOB="000000020000000003000000080001c9627066005000020008000400000000000500050040000200000000080084799c570b75daf6a86081eca80289160000001100000000000000001000"/116], 0x3}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0)

06:15:22 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="7c0000002c00010700"/18, @ANYRES32, @ANYBLOB="000000020000000003000000080001c9627066005000020008000400000000000500050040000200000000080084799c570b75daf6a86081eca80289160000001100000000000000001000"/116], 0x3}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0)

06:15:22 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x0, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:22 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:23 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="7c0000002c00010700"/18, @ANYRES32, @ANYBLOB="000000020000000003000000080001c9627066005000020008000400000000000500050040000200000000080084799c570b75daf6a86081eca80289160000001100000000000000001000"/116], 0x3}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0)

06:15:23 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="7c0000002c00010700"/19, @ANYRES32, @ANYBLOB="000000020000000003000000080001c9627066005000020008000400000000000500050040000200000000080084799c570b75daf6a86081eca80289160000001100000000000000001000"/116], 0x3}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0)

06:15:23 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="7c0000002c00010700"/19, @ANYRES32, @ANYBLOB="000000020000000003000000080001c9627066005000020008000400000000000500050040000200000000080084799c570b75daf6a86081eca80289160000001100000000000000001000"/116], 0x3}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0)

06:15:23 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:23 executing program 2:
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x2000005)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r5 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x0)
pipe2$9p(&(0x7f0000000240)={<r6=>0xffffffffffffffff}, 0x0)
close(r6)
r7 = epoll_create1(0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}})

06:15:23 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x0, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:23 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r3, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r5 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r1, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r6=>0xffffffffffffffff}, 0x0)
close(r6)
r7 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}})

06:15:23 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="7c0000002c00010700"/19, @ANYRES32, @ANYBLOB="000000020000000003000000080001c9627066005000020008000400000000000500050040000200000000080084799c570b75daf6a86081eca80289160000001100000000000000001000"/116], 0x3}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0)

06:15:23 executing program 0:
socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="7c0000002c00010700"/20, @ANYRES32, @ANYBLOB="000000020000000003000000080001c9627066005000020008000400000000000500050040000200000000080084799c570b75daf6a86081eca80289160000001100000000000000001000"/116], 0x7c}}, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x332, 0x0)

06:15:23 executing program 0:
socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="7c0000002c00010700"/20, @ANYRES32, @ANYBLOB="000000020000000003000000080001c9627066005000020008000400000000000500050040000200000000080084799c570b75daf6a86081eca80289160000001100000000000000001000"/116], 0x7c}}, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x332, 0x0)

06:15:23 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x0, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:23 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:23 executing program 0:
socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="7c0000002c00010700"/20, @ANYRES32, @ANYBLOB="000000020000000003000000080001c9627066005000020008000400000000000500050040000200000000080084799c570b75daf6a86081eca80289160000001100000000000000001000"/116], 0x7c}}, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x332, 0x0)

06:15:23 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="7c0000002c00010700"/20, @ANYRES32, @ANYBLOB="000000020000000003000000080001c9627066005000020008000400000000000500050040000200000000080084799c570b75daf6a86081eca80289160000001100000000000000001000"/116], 0x7c}}, 0x0)
sendmmsg$alg(r0, 0x0, 0x0, 0x0)

06:15:24 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="7c0000002c00010700"/20, @ANYRES32, @ANYBLOB="000000020000000003000000080001c9627066005000020008000400000000000500050040000200000000080084799c570b75daf6a86081eca80289160000001100000000000000001000"/116], 0x7c}}, 0x0)
sendmmsg$alg(r0, 0x0, 0x0, 0x0)

06:15:24 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x0, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:24 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r3, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r5 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r1, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r6=>0xffffffffffffffff}, 0x0)
close(r6)
r7 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}})

06:15:24 executing program 2:
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x2000005)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r5 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x0)
pipe2$9p(&(0x7f0000000240)={<r6=>0xffffffffffffffff}, 0x0)
close(r6)
r7 = epoll_create1(0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}})

06:15:24 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="7c0000002c00010700"/20, @ANYRES32, @ANYBLOB="000000020000000003000000080001c9627066005000020008000400000000000500050040000200000000080084799c570b75daf6a86081eca80289160000001100000000000000001000"/116], 0x7c}}, 0x0)
sendmmsg$alg(r0, 0x0, 0x0, 0x0)

06:15:24 executing program 0:
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x2000005)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r5 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(0xffffffffffffffff, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r6=>0xffffffffffffffff}, 0x0)
close(r6)
r7 = epoll_create1(0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}})

06:15:24 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x0, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:24 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:25 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x0, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:25 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r3, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r5 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r1, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r6=>0xffffffffffffffff}, 0x0)
close(r6)
r7 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}})

06:15:25 executing program 2:
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x2000005)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r5 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(0x0, 0x0)
close(0xffffffffffffffff)
r6 = epoll_create1(0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r6}})

06:15:25 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r3, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r5 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r1, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r6=>0xffffffffffffffff}, 0x0)
close(r6)
r7 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}})

06:15:25 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:25 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:26 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x0, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:26 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:26 executing program 2:
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x2000005)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r5 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(0x0, 0x0)
close(0xffffffffffffffff)
r6 = epoll_create1(0x0)
mount$9p_fd(0x0, 0x0, &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r6}})

06:15:26 executing program 0:
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x2000005)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r5 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(0x0, 0x0)
close(0xffffffffffffffff)
r6 = epoll_create1(0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r6}})

06:15:26 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r3, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r5 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r1, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r6=>0xffffffffffffffff}, 0x0)
close(r6)
r7 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}})

06:15:26 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x0, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

[  495.394646] 9pnet: Insufficient options for proto=fd
06:15:27 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x0, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:27 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:27 executing program 2:
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x2000005)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r5 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(0x0, 0x0)
close(0xffffffffffffffff)
r6 = epoll_create1(0x0)
mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r6}})

06:15:27 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x0, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:27 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:27 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:27 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x0, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:27 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:27 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x0, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:27 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:28 executing program 1:
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x2000005)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r5 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b", 0xe, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r6=>0xffffffffffffffff}, 0x0)
close(r6)
r7 = epoll_create1(0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}})

06:15:28 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:28 executing program 2:
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x2000005)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r5 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(0x0, 0x0)
close(0xffffffffffffffff)
epoll_create1(0x0)
mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0)

06:15:28 executing program 2:
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x2000005)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r5 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(0x0, 0x0)
close(0xffffffffffffffff)
epoll_create1(0x0)
mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0)

06:15:28 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:28 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x0, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:28 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:28 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:29 executing program 1:
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

[  498.016664] syz-executor.3 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null),  order=1, oom_score_adj=0
[  498.030872] syz-executor.3 cpuset=syz3 mems_allowed=0-1
[  498.036979] CPU: 0 PID: 21988 Comm: syz-executor.3 Not tainted 4.14.158-syzkaller #0
[  498.044876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  498.054235] Call Trace:
[  498.056893]  dump_stack+0x142/0x197
[  498.060602]  dump_header+0x177/0x6cd
[  498.064472]  ? _raw_spin_unlock_irqrestore+0xa4/0xe0
[  498.069620]  ? ___ratelimit+0x55/0x537
[  498.073510]  oom_kill_process.cold+0x10/0xadd
[  498.078039]  ? rcu_read_unlock_special+0x895/0xd40
[  498.083130]  ? lock_downgrade+0x740/0x740
[  498.087391]  out_of_memory+0x2ee/0x1180
[  498.091366]  ? lock_acquire+0x16f/0x430
[  498.095343]  ? oom_killer_disable+0x1d0/0x1d0
[  498.099836]  ? __alloc_pages_slowpath+0xca4/0x2930
[  498.104855]  __alloc_pages_slowpath+0x2251/0x2930
[  498.109716]  ? warn_alloc+0xf0/0xf0
[  498.113523]  ? __might_sleep+0x93/0xb0
[  498.117419]  __alloc_pages_nodemask+0x62c/0x7a0
[  498.122086]  ? __alloc_pages_slowpath+0x2930/0x2930
[  498.127159]  ? ____cache_alloc_node+0x1be/0x1d0
[  498.131830]  ? cache_grow_begin+0x335/0x400
[  498.136153]  cache_grow_begin+0x80/0x400
[  498.140267]  ? __cpuset_node_allowed+0xff/0x450
[  498.144942]  fallback_alloc+0x1fd/0x2c0
[  498.148940]  ____cache_alloc_node+0x1be/0x1d0
[  498.153437]  kmem_cache_alloc+0x1f3/0x780
[  498.157652]  getname_flags+0xcb/0x580
[  498.161459]  user_path_mountpoint_at+0x29/0x50
[  498.166106]  SyS_umount+0x10c/0x380
[  498.169746]  ? __detach_mounts+0x2f0/0x2f0
[  498.173981]  ? do_syscall_64+0x53/0x640
[  498.177960]  ? __detach_mounts+0x2f0/0x2f0
[  498.182194]  do_syscall_64+0x1e8/0x640
[  498.186081]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  498.190934]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  498.196123] RIP: 0033:0x45d347
[  498.199309] RSP: 002b:00007ffd7fc96468 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6
[  498.207016] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000045d347
[  498.214284] RDX: 0000000000403720 RSI: 0000000000000002 RDI: 00007ffd7fc96510
[  498.221537] RBP: 0000000000000358 R08: 0000000000000000 R09: 000000000000000c
[  498.228786] R10: 0000000000000006 R11: 0000000000000202 R12: 00007ffd7fc975a0
[  498.236054] R13: 0000000002578940 R14: 0000000000000000 R15: 00007ffd7fc975a0
[  498.291646] Mem-Info:
[  498.294283] active_anon:1334242 inactive_anon:194 isolated_anon:0
[  498.294283]  active_file:312 inactive_file:332 isolated_file:33
[  498.294283]  unevictable:0 dirty:8 writeback:17 unstable:0
[  498.294283]  slab_reclaimable:13145 slab_unreclaimable:137856
[  498.294283]  mapped:52755 shmem:242 pagetables:13789 bounce:0
[  498.294283]  free:27500 free_pcp:18 free_cma:0
[  498.336592] Node 0 active_anon:1901196kB inactive_anon:744kB active_file:1100kB inactive_file:1044kB unevictable:0kB isolated(anon):0kB isolated(file):132kB mapped:210920kB dirty:32kB writeback:64kB shmem:936kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1161216kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[  498.366446] Node 1 active_anon:3435772kB inactive_anon:32kB active_file:48kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:4kB shmem:32kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[  498.394182] Node 0 DMA free:10440kB min:216kB low:268kB high:320kB active_anon:4644kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  498.421507] lowmem_reserve[]: 0 2569 2569 2569 2569
[  498.428313] Node 0 DMA32 free:45776kB min:36380kB low:45472kB high:54564kB active_anon:1896552kB inactive_anon:744kB active_file:1100kB inactive_file:1008kB unevictable:0kB writepending:96kB present:3129332kB managed:2634384kB mlocked:0kB kernel_stack:10944kB pagetables:26676kB bounce:0kB free_pcp:392kB local_pcp:44kB free_cma:0kB
[  498.497910] lowmem_reserve[]: 0 0 0 0 0
[  498.502107] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  498.529212] lowmem_reserve[]: 0 0 0 0 0
[  498.533501] Node 1 Normal free:54084kB min:53508kB low:66884kB high:80260kB active_anon:3435660kB inactive_anon:32kB active_file:56kB inactive_file:20kB unevictable:0kB writepending:4kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:9536kB pagetables:28480kB bounce:0kB free_pcp:124kB local_pcp:0kB free_cma:0kB
[  498.593304] lowmem_reserve[]: 0 0 0 0 0
[  498.601795] Node 0 DMA: 8*4kB (UMEH) 31*8kB (UH) 27*16kB (UMEH) 28*32kB (UEH) 16*64kB (UMEH) 9*128kB (UMEH) 4*256kB (UME) 1*512kB (E) 3*1024kB (MEH) 1*2048kB (E) 0*4096kB = 10440kB
[  498.625145] Node 0 DMA32: 3807*4kB (UME) 269*8kB (UM) 1053*16kB (UM) 352*32kB (UME) 3*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 45684kB
[  498.639571] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  498.652518] Node 1 Normal: 1357*4kB (UMEH) 275*8kB (UMH) 111*16kB (UMH) 63*32kB (UMEH) 24*64kB (UMEH) 9*128kB (ME) 28*256kB (UME) 23*512kB (UEH) 7*1024kB (UME) 1*2048kB (U) 3*4096kB (M) = 54556kB
[  498.670558] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  498.679593] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  498.688496] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  498.697605] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  498.706417] 559 total pagecache pages
[  498.710790] 0 pages in swap cache
[  498.714447] Swap cache stats: add 0, delete 0, find 0/0
[  498.720122] Free swap  = 0kB
[  498.723210] Total swap = 0kB
[  498.726539] 1965979 pages RAM
[  498.729705] 0 pages HighMem/MovableOnly
[  498.733793] 335858 pages reserved
[  498.737294] 0 pages cma reserved
[  498.741730] Out of memory: Kill process 25612 (syz-executor.1) score 1007 or sacrifice child
[  498.751617] Killed process 25612 (syz-executor.1) total-vm:73116kB, anon-rss:16560kB, file-rss:34868kB, shmem-rss:0kB
[  498.844198] oom_reaper: reaped process 25612 (syz-executor.1), now anon-rss:0kB, file-rss:4kB, shmem-rss:0kB
06:15:30 executing program 2:
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x2000005)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r5 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(0x0, 0x0)
close(0xffffffffffffffff)
epoll_create1(0x0)
mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0)

06:15:30 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x0, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:30 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:30 executing program 3:
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x2000005)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r5 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232", 0xc, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r6=>0xffffffffffffffff}, 0x0)
close(r6)
r7 = epoll_create1(0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}})

06:15:30 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:30 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x0, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

[  499.706825] syz-fuzzer invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null),  order=0, oom_score_adj=0
[  499.725346] syz-fuzzer cpuset=/ mems_allowed=0-1
[  499.731077] CPU: 0 PID: 6871 Comm: syz-fuzzer Not tainted 4.14.158-syzkaller #0
[  499.738552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  499.747911] Call Trace:
[  499.750496]  dump_stack+0x142/0x197
[  499.754135]  dump_header+0x177/0x6cd
[  499.757958]  ? _raw_spin_unlock_irqrestore+0xa4/0xe0
[  499.763065]  ? ___ratelimit+0x55/0x537
[  499.766955]  oom_kill_process.cold+0x10/0xadd
[  499.771442]  ? rcu_read_unlock_special+0x895/0xd40
[  499.776391]  ? lock_downgrade+0x740/0x740
[  499.780546]  out_of_memory+0x2ee/0x1180
[  499.784535]  ? lock_acquire+0x16f/0x430
[  499.788524]  ? oom_killer_disable+0x1d0/0x1d0
[  499.793017]  ? __alloc_pages_slowpath+0xca4/0x2930
[  499.797953]  __alloc_pages_slowpath+0x2251/0x2930
[  499.802801]  ? warn_alloc+0xf0/0xf0
[  499.806430]  ? __might_sleep+0x93/0xb0
[  499.810313]  __alloc_pages_nodemask+0x62c/0x7a0
[  499.814983]  ? save_trace+0x290/0x290
[  499.818769]  ? __alloc_pages_slowpath+0x2930/0x2930
[  499.823769]  ? __lock_acquire+0x5f7/0x4620
[  499.827997]  ? __lock_acquire+0x5f7/0x4620
[  499.832222]  ? trace_hardirqs_on+0x10/0x10
[  499.836500]  ? get_task_policy.part.0+0x85/0xa0
[  499.841157]  alloc_pages_vma+0xc9/0x4c0
[  499.845128]  __handle_mm_fault+0x186c/0x33d0
[  499.849520]  ? copy_page_range+0x1de0/0x1de0
[  499.853909]  ? find_held_lock+0x35/0x130
[  499.858112]  ? handle_mm_fault+0x1b6/0x7c0
[  499.862354]  handle_mm_fault+0x293/0x7c0
[  499.866408]  __do_page_fault+0x4c1/0xb80
[  499.870452]  ? firmware_map_remove+0x196/0x196
[  499.875018]  ? vmalloc_fault+0xe30/0xe30
[  499.879125]  ? page_fault+0x2f/0x50
[  499.882742]  do_page_fault+0x71/0x511
[  499.886520]  ? page_fault+0x2f/0x50
[  499.890129]  page_fault+0x45/0x50
[  499.893562] RIP: 0033:0x45a2a3
[  499.896731] RSP: 002b:00007fffeba45aa8 EFLAGS: 00010287
[  499.902072] RAX: 0000000000000000 RBX: 0000000000002000 RCX: 0000000000002000
[  499.909319] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000c434600000
[  499.916567] RBP: 00007fffeba45af0 R08: 000000c000000000 R09: 000000000000a300
[  499.923817] R10: 00007f12fbca9310 R11: 0000000000000000 R12: 0000000000000040
[  499.931063] R13: 0000000000000040 R14: 0000000000000013 R15: 0000000000000100
[  499.945182] Mem-Info:
[  499.949756] active_anon:1338001 inactive_anon:192 isolated_anon:0
[  499.949756]  active_file:547 inactive_file:457 isolated_file:91
[  499.949756]  unevictable:0 dirty:39 writeback:0 unstable:0
[  499.949756]  slab_reclaimable:13147 slab_unreclaimable:137836
[  499.949756]  mapped:53256 shmem:242 pagetables:13798 bounce:0
[  499.949756]  free:23081 free_pcp:170 free_cma:0
[  500.023018] Node 0 active_anon:1914260kB inactive_anon:744kB active_file:1204kB inactive_file:1288kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:211292kB dirty:136kB writeback:0kB shmem:936kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1161216kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[  500.065436] Node 1 active_anon:3437744kB inactive_anon:24kB active_file:72kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:20kB writeback:0kB shmem:32kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[  500.097682] Node 0 DMA free:10440kB min:216kB low:268kB high:320kB active_anon:4644kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  500.178520] lowmem_reserve[]: 0 2569 2569 2569 2569
[  500.188630] Node 0 DMA32 free:33136kB min:36380kB low:45472kB high:54564kB active_anon:1909624kB inactive_anon:744kB active_file:816kB inactive_file:832kB unevictable:0kB writepending:80kB present:3129332kB managed:2634384kB mlocked:0kB kernel_stack:11008kB pagetables:26696kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  500.218621] lowmem_reserve[]: 0 0 0 0 0
[  500.222676] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  500.248432] lowmem_reserve[]: 0 0 0 0 0
[  500.252873] Node 1 Normal free:55312kB min:53508kB low:66884kB high:80260kB active_anon:3437680kB inactive_anon:32kB active_file:144kB inactive_file:0kB unevictable:0kB writepending:12kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:9440kB pagetables:28588kB bounce:0kB free_pcp:284kB local_pcp:244kB free_cma:0kB
[  500.282321] lowmem_reserve[]: 0 0 0 0 0
[  500.286320] Node 0 DMA: 8*4kB (UME) 31*8kB (UH) 27*16kB (UMEH) 28*32kB (UEH) 16*64kB (UMEH) 9*128kB (UMEH) 4*256kB (UME) 1*512kB (E) 3*1024kB (MEH) 1*2048kB (E) 0*4096kB = 10440kB
[  500.310656] Node 0 DMA32: 1087*4kB (UMH) 145*8kB (UM) 1080*16kB (UM) 341*32kB (UME) 6*64kB (M) 5*128kB (M) 4*256kB (M) 2*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 36772kB
[  500.326122] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  500.337300] Node 1 Normal: 520*4kB (UMH) 232*8kB (UMEH) 147*16kB (UMEH) 85*32kB (UMEH) 63*64kB (UME) 18*128kB (UMH) 28*256kB (UME) 23*512kB (UE) 7*1024kB (UME) 1*2048kB (U) 3*4096kB (M) = 55792kB
[  500.355038] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  500.364524] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  500.378904] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  500.387972] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  500.396678] 499 total pagecache pages
[  500.400682] 0 pages in swap cache
[  500.404136] Swap cache stats: add 0, delete 0, find 0/0
[  500.409593] Free swap  = 0kB
[  500.412879] Total swap = 0kB
[  500.416020] 1965979 pages RAM
[  500.419118] 0 pages HighMem/MovableOnly
[  500.423281] 335858 pages reserved
[  500.426727] 0 pages cma reserved
[  500.430646] Out of memory: Kill process 28387 (syz-executor.1) score 1007 or sacrifice child
06:15:32 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x0, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:32 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(0xffffffffffffffff)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:32 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x0, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:32 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:32 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(0xffffffffffffffff)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:32 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x0, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

[  502.717833] device bridge_slave_1 left promiscuous mode
[  502.723532] bridge0: port 2(bridge_slave_1) entered disabled state
[  502.770816] device bridge_slave_0 left promiscuous mode
[  502.776357] bridge0: port 1(bridge_slave_0) entered disabled state
[  503.452149] device hsr_slave_1 left promiscuous mode
[  503.502834] device hsr_slave_0 left promiscuous mode
[  503.554025] team0 (unregistering): Port device team_slave_1 removed
[  503.567363] team0 (unregistering): Port device team_slave_0 removed
[  503.585422] bond0 (unregistering): Releasing backup interface bond_slave_1
[  503.623271] bond0 (unregistering): Releasing backup interface bond_slave_0
[  503.685168] bond0 (unregistering): Released all slaves
[  505.580838] IPVS: ftp: loaded support on port[0] = 21
[  506.415052] chnl_net:caif_netlink_parms(): no params data found
[  506.682069] bridge0: port 1(bridge_slave_0) entered blocking state
[  506.688658] bridge0: port 1(bridge_slave_0) entered disabled state
[  506.695998] device bridge_slave_0 entered promiscuous mode
[  506.702948] bridge0: port 2(bridge_slave_1) entered blocking state
[  506.709402] bridge0: port 2(bridge_slave_1) entered disabled state
[  506.716513] device bridge_slave_1 entered promiscuous mode
[  506.735213] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  506.744187] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  506.763733] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  506.770972] team0: Port device team_slave_0 added
[  506.777256] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  506.784675] team0: Port device team_slave_1 added
[  506.790405] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  506.797993] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  506.872515] device hsr_slave_0 entered promiscuous mode
[  506.930327] device hsr_slave_1 entered promiscuous mode
[  507.010671] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[  507.017714] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[  507.033283] bridge0: port 2(bridge_slave_1) entered blocking state
[  507.039621] bridge0: port 2(bridge_slave_1) entered forwarding state
[  507.046486] bridge0: port 1(bridge_slave_0) entered blocking state
[  507.052854] bridge0: port 1(bridge_slave_0) entered forwarding state
[  507.081721] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready
[  507.087890] 8021q: adding VLAN 0 to HW filter on device bond0
[  507.096167] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  507.105505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  507.112908] bridge0: port 1(bridge_slave_0) entered disabled state
[  507.129880] bridge0: port 2(bridge_slave_1) entered disabled state
[  507.138999] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[  507.145231] 8021q: adding VLAN 0 to HW filter on device team0
[  507.154105] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  507.162081] bridge0: port 1(bridge_slave_0) entered blocking state
[  507.168492] bridge0: port 1(bridge_slave_0) entered forwarding state
[  507.177839] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  507.185581] bridge0: port 2(bridge_slave_1) entered blocking state
[  507.191960] bridge0: port 2(bridge_slave_1) entered forwarding state
[  507.207902] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  507.215684] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  507.226519] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  507.236246] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  507.247451] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  507.257806] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[  507.264596] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  507.271723] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  507.287288] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready
[  507.294649] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  507.301765] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  507.312334] 8021q: adding VLAN 0 to HW filter on device batadv0
[  507.400355] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
06:15:40 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:40 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x0, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:40 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x0, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:40 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(0xffffffffffffffff)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:40 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:40 executing program 2:
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x2000005)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r5 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(0x0, 0x0)
close(0xffffffffffffffff)
epoll_create1(0x0)
mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}})

06:15:40 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(0x0, 0x0)
close(0xffffffffffffffff)
r7 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r7}})

06:15:40 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x0, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:40 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:40 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:40 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:40 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x0, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:40 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:40 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(0x0, 0x0)
close(0xffffffffffffffff)
r7 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r7}})

06:15:41 executing program 2:
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x2000005)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r5 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(0x0, 0x0)
close(0xffffffffffffffff)
epoll_create1(0x0)
mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}})

[  509.811389] 9pnet: Insufficient options for proto=fd
06:15:41 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:41 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x0, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:41 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(0x0, 0x0)
close(0xffffffffffffffff)
r7 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r7}})

06:15:41 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:41 executing program 3:
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x2000005)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r5 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(0x0, 0x0)
close(0xffffffffffffffff)
epoll_create1(0x0)
mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}})

06:15:41 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x0, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:42 executing program 2:
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x2000005)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r5 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(0x0, 0x0)
close(0xffffffffffffffff)
epoll_create1(0x0)
mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}})

06:15:42 executing program 0:
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x2000005)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r5 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(0x0, 0x0)
close(0xffffffffffffffff)
epoll_create1(0x0)
mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}})

06:15:42 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x0, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno'}})

06:15:42 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

[  510.953731] 9pnet: Insufficient options for proto=fd
06:15:42 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x0, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno'}})

06:15:42 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:42 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x0, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:42 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

[  511.446695] 9pnet: Insufficient options for proto=fd
06:15:42 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:42 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:42 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x0, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno'}})

06:15:43 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x0, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:43 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:43 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x0, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

[  511.899755] 9pnet: Insufficient options for proto=fd
06:15:43 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x0, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:43 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:43 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:43 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:43 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x0, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:43 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r3, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r5 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r1, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r6=>0xffffffffffffffff}, 0x0)
close(r6)
r7 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}})

06:15:43 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x0, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno'}})

06:15:43 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x0, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

[  512.835052] 9pnet: Insufficient options for proto=fd
06:15:44 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x0, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:44 executing program 2:
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x2000005)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r5 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(0x0, 0x0)
close(0xffffffffffffffff)
epoll_create1(0x0)
mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}})

06:15:44 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "", [[], []]}, 0x220)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:44 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x0, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:44 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r3, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r5 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r1, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r6=>0xffffffffffffffff}, 0x0)
close(r6)
r7 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}})

06:15:44 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:44 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
close(0xffffffffffffffff)
r7 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x0, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r7}})

06:15:44 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x0, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:44 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "", [[], []]}, 0x220)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

[  513.644199] 9pnet: Insufficient options for proto=fd
06:15:45 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
close(0xffffffffffffffff)
r7 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x0, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r7}})

06:15:45 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r3, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r5 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r1, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r6=>0xffffffffffffffff}, 0x0)
close(r6)
r7 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}})

06:15:45 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:45 executing program 2:
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x2000005)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r5 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d8", 0x8, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r6=>0xffffffffffffffff}, 0x0)
close(r6)
r7 = epoll_create1(0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}})

06:15:45 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(0x0, 0x0)
close(0xffffffffffffffff)
r7 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r7}})

[  514.204353] 9pnet: Insufficient options for proto=fd
06:15:45 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
close(0xffffffffffffffff)
r7 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x0, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r7}})

06:15:45 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x0)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:45 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "", [[], []]}, 0x220)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:46 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:46 executing program 2:
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r0, 0x20000003)
r1 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @ipv4={[0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0xfc00], [], @local}}, 0x1c)

06:15:46 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x0)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:46 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x0, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

[  514.897757] audit: type=1400 audit(1576563346.313:56): avc:  denied  { name_bind } for  pid=28965 comm="syz-executor.2" src=20000 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:port_t:s0 tclass=dccp_socket permissive=1
06:15:46 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @broadcast=0xe0000001}, @icmp}}}}, 0x0)
setsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0)
recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x800e0038f)

06:15:46 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000540)=0x2000000000000074, 0x56c)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='nv\t', 0x2)
sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
write(r0, &(0x7f00000001c0)="ee0107200c9f8fbf5ca312794d57d7c84858f6d02ac7044478a1ceaba80c756a581354e1c3bc0f39ab71266531e5c6b4d607559441a2a1492bc86146e4a205b0b8db310441cf08c043a775bb5e3a82dbc589f50c52e15266c634790cab6745980751ca698dbd91bc", 0x7f37)

[  514.940534] audit: type=1400 audit(1576563346.313:57): avc:  denied  { node_bind } for  pid=28965 comm="syz-executor.2" src=20000 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:node_t:s0 tclass=dccp_socket permissive=1
[  514.964459] audit: type=1400 audit(1576563346.313:58): avc:  denied  { name_connect } for  pid=28965 comm="syz-executor.2" dest=20000 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:port_t:s0 tclass=dccp_socket permissive=1
06:15:46 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:46 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x0)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:46 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab83", [[], []]}, 0x299)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:46 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@bridge_delneigh={0x1b, 0x1c, 0xf07, 0x0, 0x0, {0x7}, [@NDA_LLADDR={0xc, 0x2, @local}]}, 0x28}}, 0x0)

06:15:46 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x0, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:46 executing program 2:
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000))
r0 = creat(0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90)
fcntl$lock(r1, 0x7, &(0x7f0000027000))
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/109, 0x0})
pipe(&(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write$apparmor_exec(r3, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0)
r4 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, 0x0)
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000380)=""/107, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000480)=ANY=[])
ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f00000006c0))
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000300)={0x2, 0x0, [{0x0, 0x12, &(0x7f0000000000)=""/18}, {0x0, 0x0, 0x0}]})
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000040)={0x1, 0x0, 0x0, &(0x7f0000000180)=""/109, 0x0})
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000480)=ANY=[])
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000300)={0x1, 0x0, [{0x0, 0x0, 0x0}]})
socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000040)={0x1, 0x0, 0x0, &(0x7f0000000180)=""/109, 0x0})
ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f00000006c0)=0x5)
ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000300))
r6 = inotify_init1(0x0)
fcntl$getownex(r6, 0x10, &(0x7f0000000140)={0x0, <r7=>0x0})
ptrace$setopts(0x4206, r7, 0x0, 0x0)
rt_sigqueueinfo(r7, 0x200000000012, 0x0)
ptrace$getregset(0x4204, r7, 0x0, &(0x7f0000000540)={0x0})
socket$inet_udplite(0x2, 0x2, 0x88)
r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r8, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r8, 0x4008af03, 0x0)
fstat(r8, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0})
rt_sigqueueinfo(0x0, 0x0, 0x0)
ptrace$getregset(0x4204, 0x0, 0x0, &(0x7f0000000540)={0x0})
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000b40)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000c40)=0xe8)
stat(&(0x7f0000000c80)='./file0\x00', 0x0)
r10 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000040)={0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xf000})
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r10, 0x4008af03, 0x0)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000480)=ANY=[])
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000d40)={{{@in=@broadcast, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0}}, {{@in=@dev}, 0x0, @in=@multicast2}}, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000f40)=[{0x0, 0x0, &(0x7f0000000a80), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="2400000001000000010000", @ANYRES32=r2, @ANYRES32, @ANYRES32, @ANYRES32=r2, @ANYBLOB="140000000100000008000000", @ANYRES32, @ANYRES32, @ANYBLOB="1800000001000000020000", @ANYRES32=0x0, @ANYRES32=r11, @ANYRES32=0x0], 0x46, 0x20000091}], 0x1, 0x4001)
write$FUSE_ATTR(r0, &(0x7f0000000200)={0x78, 0xffffffffffffffda, 0x4, {0x5, 0x7, 0x0, {0x6, 0x9, 0x9b, 0x0, 0x6ac, 0x2, 0x0, 0xd5a, 0x4eb9, 0x0, 0x0, 0x0, r9, 0x40, 0x7fff}}}, 0x78)
epoll_create(0x0)
syz_open_procfs(0x0, 0x0)

06:15:47 executing program 3:
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000001880)=[{{&(0x7f00000001c0)={0xa, 0x4e20, 0x68120863, @mcast1, 0x6}, 0x1c, &(0x7f00000007c0)=[{&(0x7f0000000200)="daeeeb55b8", 0x5}, {&(0x7f0000000240)="f64249640d8d6ebb8e4feefe929566132567d31d6b6c4a435611512a96a6981c355ff21aaa898b72c57bf3226f8860b65e9bb251be8ca85741151bc28d912c67a9e0981c153120b117c3ebda1e087b0d611738653fcaffce21d5e3ea352e95827234876271658f262ec8df62d9522645b1f3c3e3b8ab79e5c665571a9fdd0cab7b80ed896705c07ca2fc8371448ec4117f34f00bf5e1cb5e60d98497234448dc2f9d78f4bd4bed6b8668646804e44c21c883afd807c6ae", 0xb7}, {&(0x7f0000000300)="8eb027ec232b4a190ff0b38eb7fa01bcbdd5eb098b3b56f54d772147", 0x1c}, {&(0x7f0000000340)="22f6979fb94c7ed3575733e48164139a2d5e0ae0c87f5691948e887739ca081473333e2aa42b57d11ba2a4c893137a2fd64e29b23155ade1ff9449847d56db04d8d06a6bbe1cfb69db7755652099a58ee4089245a2becf75b20f4b46a56f0db9c233c25166f99f2967504c8a47e02202816067497724198db6869e245ef6a1e73c6d74a6579dcd14005f916f5177a0bc84dab73487c81d2272cf2a1030d5ccbeabfd5b7ad974f0afede00d8d80febbca1dfe2d7e22a819c2a4857a902b7a9c60b32352ca64a873bda1905ab5d3b7dfb78d1cbb29f139651ae5673e94c2edbda9e464d4db8839373aa2edf24143c9f3b1", 0xf0}, {&(0x7f00000004c0)="3b7329e31799ac3cdb5ff345fa713210808d1c9717168e02bd6a22d40fca3081e2a5b4c541794591536e7d", 0x2b}, {&(0x7f0000000500)="f4cd2a08100864e8c512cdbf5a12d5ec400c13efcee814ee0ba703dcd9c1b78c97d9e7a57427f232b2bc68615c4c4a701707169a321e6c581bf20559da1611a85b541319fa78f6adb23bf1f1da1fa9c72518d026b78c7704b82b79ca4cba11edd718c7aa2f1b5cd71a932c931984f1d63bff090d6bc234e71ecbfeb995cdb20daf705ecda4fe7c158c79b39ba39a47b1ce6ce3da8fd38b623e9e9935d83fd0e5df8bbeab8a51fa5bc19bacb1dd915f4c8d425a45720a8bf506cf25b4a1d8b49a7852eabe74ac99", 0xc7}, {&(0x7f0000000600)="a323e91b8589463d2602ceeb2afe86a69ebb298f5908d02008481fa564042214419bdc96417ee2779f449f9ccc072283e389c882ae946254c52b82e363b96e02dc41da03f1302ff9b1772ad98c14c0cdd97c2ae02e649d67f8361b190124dfbe35bbd6da7e756183e272e1cb1c3faad40409e54c6e4007b7c063190675c48bff73696c75436fb23b1d936f8b0c85362975bcfaee93dc054fbdfc7e88a71aa980bf8c457c915f17894a1c57111af0219f11826e1e5dc140a6be2509d59eac3c83ec985e24b2ba9ff5121d9c19b18c61d21f22a95c5d7b7320", 0xd8}, {&(0x7f0000000700)="b93adcaec9e67a57dac1314d2903e3c5180880f9e5f9a253c4cecdc0349af713860aea8775209d555e5d8f52add9b3dc971e68cc580879f0a8c782e5c1179bf27dd80b0b13269c76f3ac57354f43b161e249e97fb33fbb383d4a65d0addb48b85c3d5c62d7579a688010ca508b45ff909dc9caf702c5c9fe83e8", 0x7a}, {&(0x7f0000000780)="81ebae647b7a070210a26f", 0xb}], 0x9, &(0x7f0000000840)}}, {{&(0x7f0000000880)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000000a00)=[@flowinfo={{0x10, 0x29, 0xb, 0x9}}, @hopopts={{0x4c, 0x29, 0x36, {0xc, 0x6, [], [@jumbo={0xc2, 0x4, 0x1ff}, @enc_lim={0x4, 0x1, 0x70}, @jumbo={0xc2, 0x4, 0x1}, @ra={0x5, 0x2, 0x3}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @enc_lim={0x4, 0x1, 0x1f}, @ra={0x5, 0x2, 0x2}]}}}], 0x5c}}], 0x2, 0x4000)

06:15:47 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x0, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:47 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab83", [[], []]}, 0x299)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:47 executing program 3:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="38aa791afcc6982a123813d249a1fb46dfdb91bc31cc4ac408e9d85b0f7e6c2885e67800100000000000004bb9d64f00a8d0578ad80d633c51e86de2e6c1bc534bf9eb54534f7a22c168064549e08059b87161645f491dbdfecb67a373883c8138b8dfabbf25c63fa883e411113f294f4889", 0x72}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

06:15:47 executing program 0:

06:15:47 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:47 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab83", [[], []]}, 0x299)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:47 executing program 0:

06:15:47 executing program 0:

06:15:47 executing program 2:
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000))
r0 = creat(0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90)
fcntl$lock(r1, 0x7, &(0x7f0000027000))
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/109, 0x0})
pipe(&(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write$apparmor_exec(r3, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0)
r4 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, 0x0)
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000380)=""/107, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000480)=ANY=[])
ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f00000006c0))
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000300)={0x2, 0x0, [{0x0, 0x12, &(0x7f0000000000)=""/18}, {0x0, 0x0, 0x0}]})
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000040)={0x1, 0x0, 0x0, &(0x7f0000000180)=""/109, 0x0})
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000480)=ANY=[])
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000300)={0x1, 0x0, [{0x0, 0x0, 0x0}]})
socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000040)={0x1, 0x0, 0x0, &(0x7f0000000180)=""/109, 0x0})
ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f00000006c0)=0x5)
ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000300))
r6 = inotify_init1(0x0)
fcntl$getownex(r6, 0x10, &(0x7f0000000140)={0x0, <r7=>0x0})
ptrace$setopts(0x4206, r7, 0x0, 0x0)
rt_sigqueueinfo(r7, 0x200000000012, 0x0)
ptrace$getregset(0x4204, r7, 0x0, &(0x7f0000000540)={0x0})
socket$inet_udplite(0x2, 0x2, 0x88)
r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r8, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r8, 0x4008af03, 0x0)
fstat(r8, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0})
rt_sigqueueinfo(0x0, 0x0, 0x0)
ptrace$getregset(0x4204, 0x0, 0x0, &(0x7f0000000540)={0x0})
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000b40)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000c40)=0xe8)
stat(&(0x7f0000000c80)='./file0\x00', 0x0)
r10 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000040)={0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xf000})
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r10, 0x4008af03, 0x0)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000480)=ANY=[])
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000d40)={{{@in=@broadcast, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0}}, {{@in=@dev}, 0x0, @in=@multicast2}}, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000f40)=[{0x0, 0x0, &(0x7f0000000a80), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="2400000001000000010000", @ANYRES32=r2, @ANYRES32, @ANYRES32, @ANYRES32=r2, @ANYBLOB="140000000100000008000000", @ANYRES32, @ANYRES32, @ANYBLOB="1800000001000000020000", @ANYRES32=0x0, @ANYRES32=r11, @ANYRES32=0x0], 0x46, 0x20000091}], 0x1, 0x4001)
write$FUSE_ATTR(r0, &(0x7f0000000200)={0x78, 0xffffffffffffffda, 0x4, {0x5, 0x7, 0x0, {0x6, 0x9, 0x9b, 0x0, 0x6ac, 0x2, 0x0, 0xd5a, 0x4eb9, 0x0, 0x0, 0x0, r9, 0x40, 0x7fff}}}, 0x78)
epoll_create(0x0)
syz_open_procfs(0x0, 0x0)

06:15:47 executing program 0:

06:15:48 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x0, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:48 executing program 0:

06:15:48 executing program 0:

06:15:48 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r2, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r4 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(0xffffffffffffffff, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r5=>0xffffffffffffffff}, 0x0)
close(r5)
r6 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}})

06:15:50 executing program 3:
clone(0x7f7ffc, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0)

06:15:50 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5", [[], []]}, 0x2d5)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:50 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffa0}], 0x2df, 0x0, 0x0, 0xfffffe41)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e, 0xb5f]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x3, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

06:15:50 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000003c0)={0xe0003})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

06:15:50 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r2, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r4 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(0xffffffffffffffff, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r5=>0xffffffffffffffff}, 0x0)
close(r5)
r6 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}})

06:15:50 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x0, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

[  518.927686] syz-executor.0: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null)
[  518.938573] syz-executor.2: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null)
[  518.939450] syz-executor.0 cpuset=syz0 mems_allowed=0-1
[  518.966347] CPU: 1 PID: 29134 Comm: syz-executor.0 Not tainted 4.14.158-syzkaller #0
[  518.973416] syz-executor.2 cpuset=
[  518.974257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  518.974259] syz2
[  518.977791] Call Trace:
[  518.977807]  dump_stack+0x142/0x197
[  518.977822]  warn_alloc.cold+0x96/0x1af
[  518.999397]  ? zone_watermark_ok_safe+0x2b0/0x2b0
[  519.001844]  mems_allowed=0-1
[  519.004242]  ? wait_for_completion+0x420/0x420
[  519.004258]  __alloc_pages_slowpath+0x23c6/0x2930
[  519.016764]  ? warn_alloc+0xf0/0xf0
[  519.020389]  ? __might_sleep+0x93/0xb0
[  519.024278]  __alloc_pages_nodemask+0x62c/0x7a0
[  519.028996]  ? rcu_read_lock_sched_held+0x110/0x130
[  519.034009]  ? __alloc_pages_slowpath+0x2930/0x2930
[  519.039040]  alloc_pages_current+0xec/0x1e0
[  519.043364]  kvm_mmu_create+0xdf/0x1e0
[  519.047250]  kvm_arch_vcpu_init+0x29c/0x8e0
[  519.051565]  kvm_vcpu_init+0x272/0x360
[  519.055442]  vmx_create_vcpu+0xfc/0x2aa0
[  519.059489]  ? mutex_trylock+0x1c0/0x1c0
[  519.063550]  ? handle_rdmsr+0x6e0/0x6e0
[  519.067525]  ? wait_for_completion+0x420/0x420
[  519.072109]  kvm_arch_vcpu_create+0x8c/0xc0
[  519.076516]  kvm_vm_ioctl+0x501/0x1600
[  519.080403]  ? __lock_acquire+0x5f7/0x4620
[  519.084631]  ? find_held_lock+0x35/0x130
[  519.088686]  ? kvm_vcpu_release+0xa0/0xa0
[  519.092820]  ? trace_hardirqs_on+0x10/0x10
[  519.097043]  ? trace_hardirqs_on+0x10/0x10
[  519.101270]  ? __might_fault+0x110/0x1d0
[  519.105327]  ? save_trace+0x290/0x290
[  519.109120]  ? __might_fault+0x110/0x1d0
[  519.113172]  ? __fget+0x210/0x370
[  519.116610]  ? find_held_lock+0x35/0x130
[  519.120665]  ? __fget+0x210/0x370
[  519.124122]  ? kvm_vcpu_release+0xa0/0xa0
[  519.128271]  do_vfs_ioctl+0x7ae/0x1060
[  519.132209]  ? selinux_file_mprotect+0x5d0/0x5d0
[  519.136959]  ? lock_downgrade+0x740/0x740
[  519.141113]  ? ioctl_preallocate+0x1c0/0x1c0
[  519.145515]  ? __fget+0x237/0x370
[  519.149001]  ? security_file_ioctl+0x89/0xb0
[  519.153400]  SyS_ioctl+0x8f/0xc0
[  519.156756]  ? do_vfs_ioctl+0x1060/0x1060
[  519.160899]  do_syscall_64+0x1e8/0x640
[  519.164778]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  519.169616]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  519.174794] RIP: 0033:0x45a919
[  519.177978] RSP: 002b:00007f1167db7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  519.185675] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a919
[  519.192937] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004
[  519.200198] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  519.207452] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1167db86d4
[  519.214727] R13: 00000000004c3cd2 R14: 00000000004d92d8 R15: 00000000ffffffff
[  519.222006] CPU: 0 PID: 29135 Comm: syz-executor.2 Not tainted 4.14.158-syzkaller #0
[  519.224818] Mem-Info:
[  519.229889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  519.229893] Call Trace:
[  519.229907]  dump_stack+0x142/0x197
[  519.229922]  warn_alloc.cold+0x96/0x1af
[  519.229932]  ? zone_watermark_ok_safe+0x2b0/0x2b0
[  519.229951]  ? wait_for_completion+0x420/0x420
[  519.232624] active_anon:1271218 inactive_anon:194 isolated_anon:0
[  519.232624]  active_file:1609 inactive_file:2572 isolated_file:32
[  519.232624]  unevictable:0 dirty:238 writeback:0 unstable:0
[  519.232624]  slab_reclaimable:13168 slab_unreclaimable:136280
[  519.232624]  mapped:56056 shmem:242 pagetables:13030 bounce:0
[  519.232624]  free:88667 free_pcp:270 free_cma:0
[  519.241690]  __alloc_pages_slowpath+0x23c6/0x2930
[  519.241715]  ? warn_alloc+0xf0/0xf0
[  519.241735]  ? __might_sleep+0x93/0xb0
[  519.241746]  __alloc_pages_nodemask+0x62c/0x7a0
[  519.244465] Node 0 active_anon:1847872kB inactive_anon:744kB active_file:6216kB inactive_file:10084kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:224224kB dirty:876kB writeback:0kB shmem:936kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1142784kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[  519.247915]  ? rcu_read_lock_sched_held+0x110/0x130
[  519.247927]  ? __alloc_pages_slowpath+0x2930/0x2930
[  519.247949]  alloc_pages_current+0xec/0x1e0
[  519.247963]  kvm_mmu_create+0xdf/0x1e0
[  519.252159] Node 1 active_anon:3237000kB inactive_anon:32kB active_file:220kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:76kB writeback:0kB shmem:32kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[  519.256829]  kvm_arch_vcpu_init+0x29c/0x8e0
[  519.256844]  kvm_vcpu_init+0x272/0x360
[  519.256857]  vmx_create_vcpu+0xfc/0x2aa0
[  519.256865]  ? mutex_trylock+0x1c0/0x1c0
[  519.256881]  ? handle_rdmsr+0x6e0/0x6e0
[  519.261570] Node 0 
[  519.295283]  ? wait_for_completion+0x420/0x420
[  519.295300]  kvm_arch_vcpu_create+0x8c/0xc0
[  519.295314]  kvm_vm_ioctl+0x501/0x1600
[  519.295327]  ? __lock_acquire+0x5f7/0x4620
[  519.295337]  ? get_unused_fd_flags+0xd0/0xd0
[  519.295348]  ? kvm_vcpu_release+0xa0/0xa0
[  519.295357]  ? trace_hardirqs_on+0x10/0x10
[  519.295369]  ? trace_hardirqs_on+0x10/0x10
[  519.295381]  ? __might_fault+0x110/0x1d0
[  519.302525] DMA free:10432kB min:216kB low:268kB high:320kB active_anon:4568kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  519.303852]  ? save_trace+0x290/0x290
[  519.303863]  ? __might_fault+0x110/0x1d0
[  519.303876]  ? __fget+0x210/0x370
[  519.303886]  ? find_held_lock+0x35/0x130
[  519.303900]  ? __fget+0x210/0x370
[  519.307933] lowmem_reserve[]:
[  519.312426]  ? kvm_vcpu_release+0xa0/0xa0
[  519.312438]  do_vfs_ioctl+0x7ae/0x1060
[  519.312450]  ? selinux_file_mprotect+0x5d0/0x5d0
[  519.312460]  ? lock_downgrade+0x740/0x740
[  519.312470]  ? ioctl_preallocate+0x1c0/0x1c0
[  519.312484]  ? __fget+0x237/0x370
[  519.341097]  0
[  519.345854]  ? security_file_ioctl+0x89/0xb0
[  519.345870]  SyS_ioctl+0x8f/0xc0
[  519.345885]  ? do_vfs_ioctl+0x1060/0x1060
[  519.345897]  do_syscall_64+0x1e8/0x640
[  519.352306]  2569
[  519.355199]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  519.355218]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  519.355227] RIP: 0033:0x45a919
[  519.355235] RSP: 002b:00007f04d2a98c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  519.359242]  2569
[  519.385814] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a919
[  519.385821] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004
[  519.385826] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  519.385830] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f04d2a996d4
[  519.385835] R13: 00000000004c3cd2 R14: 00000000004d92d8 R15: 00000000ffffffff
[  519.612610]  2569 2569
[  519.630887] Node 0 DMA32 free:44708kB min:36380kB low:45472kB high:54564kB active_anon:1843304kB inactive_anon:744kB active_file:4088kB inactive_file:7168kB unevictable:0kB writepending:876kB present:3129332kB managed:2634384kB mlocked:0kB kernel_stack:10432kB pagetables:23724kB bounce:0kB free_pcp:824kB local_pcp:120kB free_cma:0kB
[  519.672362] lowmem_reserve[]: 0 0 0 0 0
[  519.676614] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  519.747884] kvm [29130]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc1 data 0x1
[  519.777226] lowmem_reserve[]: 0 0 0 0 0
[  519.786526] Node 1 Normal free:303568kB min:53508kB low:66884kB high:80260kB active_anon:3236800kB inactive_anon:32kB active_file:220kB inactive_file:704kB unevictable:0kB writepending:76kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:9184kB pagetables:28248kB bounce:0kB free_pcp:1168kB local_pcp:712kB free_cma:0kB
[  519.822552] lowmem_reserve[]: 0 0 0 0 0
[  519.826817] Node 0 DMA: 2*4kB (UE) 25*8kB (UMH) 27*16kB (UMEH) 28*32kB (UMEH) 17*64kB (UMEH) 9*128kB (UMEH) 4*256kB (UME) 1*512kB (E) 3*1024kB (MEH) 1*2048kB (E) 0*4096kB = 10432kB
[  519.848390] Node 0 DMA32: 4889*4kB (UMEH) 1203*8kB (UME) 316*16kB (UME) 117*32kB (UME) 11*64kB (UM) 8*128kB (UM) 7*256kB (UME) 3*512kB (UME) 2*1024kB (UE) 1*2048kB (M) 0*4096kB = 47132kB
[  519.908463] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  519.923839] Node 1 Normal: 41*4kB (UMH) 91*8kB (UMEH) 1650*16kB (UMEH) 553*32kB (UMEH) 1433*64kB (UMEH) 457*128kB (UM) 131*256kB (UME) 79*512kB (UME) 15*1024kB (UME) 4*2048kB (UM) 3*4096kB (M) = 305020kB
[  519.981029] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  519.991976] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  520.000792] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  520.010325] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  520.032550] 2526 total pagecache pages
[  520.036870] 0 pages in swap cache
[  520.040552] Swap cache stats: add 0, delete 0, find 0/0
[  520.046253] Free swap  = 0kB
[  520.049422] Total swap = 0kB
[  520.053088] 1965979 pages RAM
[  520.056459] 0 pages HighMem/MovableOnly
[  520.060653] 335858 pages reserved
[  520.064440] 0 pages cma reserved
06:15:51 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r2, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r4 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(0xffffffffffffffff, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r5=>0xffffffffffffffff}, 0x0)
close(r5)
r6 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}})

06:15:51 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5", [[], []]}, 0x2d5)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:51 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x0, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:51 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000003c0)={0xe0003})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

06:15:51 executing program 0:
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x50000}]})
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
setsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0)

06:15:51 executing program 3:
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x50000}]})
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$VT_RESIZEX(r0, 0x560a, 0x0)

06:15:51 executing program 2:
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x50000}]})
r0 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
getsockopt(r0, 0x0, 0x0, 0x0, 0x0)

06:15:51 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="0a4800002a000517d25a80648c63940d0824fc60100004400a000000053582c137153e370935018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x0, &(0x7f0000000100)=ANY=[], &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

06:15:52 executing program 0:
io_setup(0x1, &(0x7f00000001c0)=<r0=>0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500)='/dev/net/tun\x00', 0x101a06, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000004c0)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002})
mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)='logfs\x00', 0x0, &(0x7f0000000140)='/dev/net/tun\x00')
io_submit(r0, 0x1, &(0x7f0000000600)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000040), 0x24}])

06:15:52 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
pipe2$9p(&(0x7f0000000240)={<r5=>0xffffffffffffffff}, 0x0)
close(r5)
r6 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x0, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}})

06:15:52 executing program 3:
r0 = socket$kcm(0x2, 0x2, 0x73)
bind(r0, &(0x7f0000000080)=@pppol2tpv3in6={0x2, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80)
r1 = socket$kcm(0x2, 0x2, 0x73)
bind(r1, &(0x7f0000000080)=@pppol2tpv3in6={0x2, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80)
pipe(0x0)

06:15:52 executing program 0:
io_setup(0x1, &(0x7f00000001c0)=<r0=>0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500)='/dev/net/tun\x00', 0x101a06, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000004c0)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002})
mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)='logfs\x00', 0x0, &(0x7f0000000140)='/dev/net/tun\x00')
io_submit(r0, 0x1, &(0x7f0000000600)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000040), 0x24}])

06:15:52 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cpuset.effective_mems\x00', 0x275a, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000300))

06:15:52 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5", [[], []]}, 0x2d5)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:52 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:52 executing program 3:
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, <r2=>0x0}, &(0x7f0000000280)=0x5)
setuid(r2)
fcntl$setlease(r0, 0x400, 0x0)

06:15:52 executing program 2:
io_setup(0x1, &(0x7f00000001c0)=<r0=>0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500)='/dev/net/tun\x00', 0x101a06, 0x0)
io_submit(r0, 0x1, &(0x7f0000000600)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000040), 0x24}])

06:15:52 executing program 0:
io_setup(0x1, &(0x7f00000001c0)=<r0=>0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500)='/dev/net/tun\x00', 0x101a06, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000004c0)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002})
mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)='logfs\x00', 0x0, &(0x7f0000000140)='/dev/net/tun\x00')
io_submit(r0, 0x1, &(0x7f0000000600)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000040), 0x24}])

06:15:52 executing program 2:
io_setup(0x1, &(0x7f00000001c0)=<r0=>0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500)='/dev/net/tun\x00', 0x101a06, 0x0)
io_submit(r0, 0x1, &(0x7f0000000600)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000040), 0x24}])

06:15:52 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00')
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
pipe(&(0x7f0000000140)={<r2=>0xffffffffffffffff})
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
write$binfmt_misc(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="73797a31d9121f22a68f7cc607aaee09df7c5d18142cd7bda8e3da1b6a1f9f08f2ee897b1075d1dd8a8f593b6b62996f33d9c823e3f0094f068a7511ea983e4d0cc36d52c929a6d27763bbcbc50d2937c5e600c83c4c5e"], 0x57)
socket(0x0, 0x0, 0x0)
pipe(&(0x7f0000000140)={<r3=>0xffffffffffffffff})
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0)
ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040))
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
pipe(&(0x7f0000000140)={<r4=>0xffffffffffffffff})
vmsplice(r4, 0x0, 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000cfc000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0)

06:15:52 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
pipe2$9p(&(0x7f0000000240)={<r5=>0xffffffffffffffff}, 0x0)
close(r5)
r6 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x0, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}})

06:15:52 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:53 executing program 2:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "c22df7", 0x10, 0x21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x3800000000000000]}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]}, {[], @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, "0087ae", 0x0, "ca8345"}}}}}}}, 0x0)

06:15:53 executing program 0:
io_setup(0x1, &(0x7f00000001c0)=<r0=>0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500)='/dev/net/tun\x00', 0x101a06, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000004c0)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002})
mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)='logfs\x00', 0x0, &(0x7f0000000140)='/dev/net/tun\x00')
io_submit(r0, 0x1, &(0x7f0000000600)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000040), 0x24}])

06:15:53 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc64", [[], []]}, 0x2f3)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

[  521.885634] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0
06:15:53 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

[  521.946509] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0
06:15:53 executing program 2:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x12, 0xc, 0x4, 0x400, 0x0, 0xffffffffffffffff, 0x0, [0x2e]}, 0x3c)

06:15:53 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00')
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
pipe(&(0x7f0000000140)={<r2=>0xffffffffffffffff})
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
write$binfmt_misc(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="73797a31d9121f22a68f7cc607aaee09df7c5d18142cd7bda8e3da1b6a1f9f08f2ee897b1075d1dd8a8f593b6b62996f33d9c823e3f0094f068a7511ea983e4d0cc36d52c929a6d27763bbcbc50d2937c5e600c83c4c5e"], 0x57)
socket(0x0, 0x0, 0x0)
pipe(&(0x7f0000000140)={<r3=>0xffffffffffffffff})
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0)
ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040))
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
pipe(&(0x7f0000000140)={<r4=>0xffffffffffffffff})
vmsplice(r4, 0x0, 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000cfc000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0)

06:15:53 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00')
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
pipe(&(0x7f0000000140)={<r2=>0xffffffffffffffff})
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
write$binfmt_misc(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="73797a31d9121f22a68f7cc607aaee09df7c5d18142cd7bda8e3da1b6a1f9f08f2ee897b1075d1dd8a8f593b6b62996f33d9c823e3f0094f068a7511ea983e4d0cc36d52c929a6d27763bbcbc50d2937c5e600c83c4c5e"], 0x57)
socket(0x0, 0x0, 0x0)
pipe(&(0x7f0000000140)={<r3=>0xffffffffffffffff})
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0)
ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040))
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
pipe(&(0x7f0000000140)={<r4=>0xffffffffffffffff})
vmsplice(r4, 0x0, 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000cfc000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0)

06:15:53 executing program 0:
io_setup(0x1, &(0x7f00000001c0)=<r0=>0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500)='/dev/net/tun\x00', 0x101a06, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000004c0)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002})
io_submit(r0, 0x1, &(0x7f0000000600)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000040), 0x24}])

06:15:53 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
pipe2$9p(&(0x7f0000000240)={<r5=>0xffffffffffffffff}, 0x0)
close(r5)
r6 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x0, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}})

06:15:53 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:53 executing program 3:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffe1a}, 0x48)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = dup(r1)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000080)=r0, 0x4)
sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=@bridge_newneigh={0x1c, 0x1c, 0x3}, 0x1c}}, 0x0)

06:15:54 executing program 0:
io_setup(0x1, &(0x7f00000001c0)=<r0=>0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500)='/dev/net/tun\x00', 0x101a06, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000004c0)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002})
io_submit(r0, 0x1, &(0x7f0000000600)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000040), 0x24}])

06:15:54 executing program 2:
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
write$P9_RVERSION(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e75"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x26f)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
open$dir(&(0x7f0000000240)='./file0\x00', 0x91080, 0x0)

06:15:54 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc64", [[], []]}, 0x2f3)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:54 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r4, 0x4004ae99, &(0x7f0000000300))

06:15:54 executing program 2:

06:15:54 executing program 2:

06:15:54 executing program 3:
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f2, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740))
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg(r0, &(0x7f0000031540)={0x0, 0x0, &(0x7f0000031400)=[{&(0x7f00000300c0)=""/216, 0xd8}, {0x0}, {&(0x7f00000312c0)=""/55, 0x37}], 0x3, &(0x7f0000031480)=""/189, 0xbd}, 0x180e0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1802000000000800000000000000000085000000360000009500000000000000e8b6a6f350e4edfd19eac129c4f9d7baa9d3f2729d1db423a1813af64347b04026a2b85b20bec19902e7195f5e2ebd97c2a90a11c24ef59a7011e8063fff73c91906f2b9fc272a8b55685a16fbfb7dfa35dbbb3e802508136058cc7f6ea977019081a799c5c1000c0b4add85af950152ccd6546ba736fafaeb327a3cb22c54020de82ca21121"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1076, &(0x7f0000000300)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="4be624e60b8588ae2b8961abc53c", 0x0}, 0x28)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

06:15:54 executing program 0:
io_setup(0x1, &(0x7f00000001c0)=<r0=>0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500)='/dev/net/tun\x00', 0x101a06, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000004c0)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002})
io_submit(r0, 0x1, &(0x7f0000000600)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000040), 0x24}])

06:15:54 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, 0x0, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
pipe2$9p(&(0x7f0000000240)={<r6=>0xffffffffffffffff}, 0x0)
close(r6)
r7 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x0, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}})

06:15:54 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:54 executing program 2:
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
perf_event_open$cgroup(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x800, 0x0, 0x101, 0x0, 0x685}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x2b, 0x1, 0x0)
close(r0)

06:15:54 executing program 3:
r0 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000040)=@nfc={0x3b, 0x3}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000200)="c109004d000800000001001aac141412e0", 0x18}], 0x1}, 0x0)

06:15:54 executing program 2:
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x40086607, &(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}})
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000))

06:15:54 executing program 0:
io_setup(0x1, &(0x7f00000001c0)=<r0=>0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500)='/dev/net/tun\x00', 0x101a06, 0x0)
mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)='logfs\x00', 0x0, &(0x7f0000000140)='/dev/net/tun\x00')
io_submit(r0, 0x1, &(0x7f0000000600)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000040), 0x24}])

06:15:55 executing program 3:

06:15:55 executing program 2:
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x40086607, &(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}})
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000))

06:15:55 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc64", [[], []]}, 0x2f3)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:55 executing program 3:

06:15:55 executing program 2:
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x40086607, &(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}})
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000))

06:15:55 executing program 3:

06:15:55 executing program 0:
io_setup(0x1, &(0x7f00000001c0)=<r0=>0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500)='/dev/net/tun\x00', 0x101a06, 0x0)
mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)='logfs\x00', 0x0, &(0x7f0000000140)='/dev/net/tun\x00')
io_submit(r0, 0x1, &(0x7f0000000600)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000040), 0x24}])

06:15:55 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:55 executing program 2:
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x40086607, &(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}})
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0xa, 0x6, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000))

06:15:55 executing program 3:

06:15:55 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, 0x0, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
pipe2$9p(&(0x7f0000000240)={<r6=>0xffffffffffffffff}, 0x0)
close(r6)
r7 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x0, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}})

06:15:55 executing program 2:

06:15:55 executing program 3:

06:15:55 executing program 0:
io_setup(0x1, &(0x7f00000001c0)=<r0=>0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500)='/dev/net/tun\x00', 0x101a06, 0x0)
mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)='logfs\x00', 0x0, &(0x7f0000000140)='/dev/net/tun\x00')
io_submit(r0, 0x1, &(0x7f0000000600)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000040), 0x24}])

06:15:56 executing program 2:

06:15:56 executing program 3:

06:15:56 executing program 0:
io_setup(0x1, &(0x7f00000001c0)=<r0=>0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000004c0)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002})
mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)='logfs\x00', 0x0, &(0x7f0000000140)='/dev/net/tun\x00')
io_submit(r0, 0x1, &(0x7f0000000600)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x800000000001, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x24}])

06:15:56 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b2", [[], []]}, 0x302)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:56 executing program 2:

06:15:56 executing program 2:

06:15:56 executing program 3:

06:15:56 executing program 0:
io_setup(0x1, &(0x7f00000001c0)=<r0=>0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000004c0)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002})
mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)='logfs\x00', 0x0, &(0x7f0000000140)='/dev/net/tun\x00')
io_submit(r0, 0x1, &(0x7f0000000600)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x800000000001, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x24}])

06:15:56 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, 0x0, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
pipe2$9p(&(0x7f0000000240)={<r6=>0xffffffffffffffff}, 0x0)
close(r6)
r7 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x0, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}})

06:15:56 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, 0x0, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:56 executing program 3:

06:15:56 executing program 2:

06:15:56 executing program 0:
io_setup(0x1, &(0x7f00000001c0)=<r0=>0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000004c0)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002})
mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)='logfs\x00', 0x0, &(0x7f0000000140)='/dev/net/tun\x00')
io_submit(r0, 0x1, &(0x7f0000000600)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x800000000001, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x24}])

06:15:56 executing program 3:

06:15:56 executing program 2:

06:15:56 executing program 3:

06:15:56 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b2", [[], []]}, 0x302)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:57 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500)='/dev/net/tun\x00', 0x101a06, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002})
mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)='logfs\x00', 0x0, &(0x7f0000000140)='/dev/net/tun\x00')
io_submit(0x0, 0x1, &(0x7f0000000600)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000040), 0x24}])

06:15:57 executing program 2:

06:15:57 executing program 3:

06:15:57 executing program 2:

06:15:57 executing program 3:

06:15:57 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500)='/dev/net/tun\x00', 0x101a06, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002})
mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)='logfs\x00', 0x0, &(0x7f0000000140)='/dev/net/tun\x00')
io_submit(0x0, 0x1, &(0x7f0000000600)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000040), 0x24}])

06:15:57 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, 0x0, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:57 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={0x0, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
pipe2$9p(&(0x7f0000000240)={<r6=>0xffffffffffffffff}, 0x0)
close(r6)
r7 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x0, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}})

06:15:57 executing program 2:

06:15:57 executing program 3:

06:15:57 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500)='/dev/net/tun\x00', 0x101a06, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002})
mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)='logfs\x00', 0x0, &(0x7f0000000140)='/dev/net/tun\x00')
io_submit(0x0, 0x1, &(0x7f0000000600)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000040), 0x24}])

06:15:57 executing program 2:

06:15:57 executing program 3:

06:15:57 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, 0x0, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:57 executing program 0:
io_setup(0x0, &(0x7f00000001c0)=<r0=>0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500)='/dev/net/tun\x00', 0x101a06, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000004c0)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002})
mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)='logfs\x00', 0x0, &(0x7f0000000140)='/dev/net/tun\x00')
io_submit(r0, 0x1, &(0x7f0000000600)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000040), 0x24}])

06:15:57 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b2", [[], []]}, 0x302)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:15:57 executing program 2:

06:15:57 executing program 3:

06:15:58 executing program 0:
io_setup(0x0, &(0x7f00000001c0)=<r0=>0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500)='/dev/net/tun\x00', 0x101a06, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000004c0)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002})
mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)='logfs\x00', 0x0, &(0x7f0000000140)='/dev/net/tun\x00')
io_submit(r0, 0x1, &(0x7f0000000600)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000040), 0x24}])

06:15:58 executing program 2:

06:15:58 executing program 3:

06:15:58 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={0x0, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
pipe2$9p(&(0x7f0000000240)={<r6=>0xffffffffffffffff}, 0x0)
close(r6)
r7 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x0, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}})

06:15:58 executing program 0:
io_setup(0x0, &(0x7f00000001c0)=<r0=>0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500)='/dev/net/tun\x00', 0x101a06, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000004c0)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002})
mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)='logfs\x00', 0x0, &(0x7f0000000140)='/dev/net/tun\x00')
io_submit(r0, 0x1, &(0x7f0000000600)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000040), 0x24}])

06:15:58 executing program 2:
io_setup(0x1, &(0x7f00000001c0)=<r0=>0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500)='/dev/net/tun\x00', 0x0, 0x0)
io_submit(r0, 0x1, &(0x7f0000000600)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x7, 0x0, r1, &(0x7f0000000040), 0x24}])

06:15:58 executing program 3:
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000001880)=[{{&(0x7f00000001c0)={0xa, 0x4e20, 0x68120863, @mcast1, 0x6}, 0x1c, &(0x7f00000007c0)=[{&(0x7f0000000200)="daeeeb55b8", 0x5}, {&(0x7f0000000240)="f64249640d8d6ebb8e4feefe929566132567d31d6b6c4a435611512a96a6981c355ff21aaa898b72c57bf3226f8860b65e9bb251be8ca85741151bc28d912c67a9e0981c153120b117c3ebda1e087b0d611738653fcaffce21d5e3ea352e95827234876271658f262ec8df62d9522645b1f3c3e3b8ab79e5c665571a9fdd0cab7b80ed896705c07ca2fc8371448ec4117f34f00bf5e1cb5e60d98497234448dc2f9d78f4bd4bed6b8668646804e44c21c883afd807c6ae", 0xb7}, {&(0x7f0000000300)="8eb027ec232b4a190ff0b38eb7fa01bcbdd5eb098b3b56f54d772147", 0x1c}, {&(0x7f0000000340)="22f6979fb94c7ed3575733e48164139a2d5e0ae0c87f5691948e887739ca081473333e2aa42b57d11ba2a4c893137a2fd64e29b23155ade1ff9449847d56db04d8d06a6bbe1cfb69db7755652099a58ee4089245a2becf75b20f4b46a56f0db9c233c25166f99f2967504c8a47e02202816067497724198db6869e245ef6a1e73c6d74a6579dcd14005f916f5177a0bc84dab73487c81d2272cf2a1030d5ccbeabfd5b7ad974f0afede00d8d80febbca1dfe2d7e22a819c2a4857a902b7a9c60b32352ca64a873bda1905ab5d3b7dfb78d1cbb29f139651ae5673e94c2edbda9e464d4db8839373aa2edf24143c9f3b1", 0xf0}, {&(0x7f00000004c0)="3b7329e31799ac3cdb5ff345fa713210808d1c9717168e02bd6a22d40fca3081e2a5b4c541794591536e7d", 0x2b}, {&(0x7f0000000500)="f4cd2a08100864e8c512cdbf5a12d5ec400c13efcee814ee0ba703dcd9c1b78c97d9e7a57427f232b2bc68615c4c4a701707169a321e6c581bf20559da1611a85b541319fa78f6adb23bf1f1da1fa9c72518d026b78c7704b82b79ca4cba11edd718c7aa2f1b5cd71a932c931984f1d63bff090d6bc234e71ecbfeb995cdb20daf705ecda4fe7c158c79b39ba39a47b1ce6ce3da8fd38b623e9e9935d83fd0e5df8bbeab8a51fa5bc19bacb1dd915f4c8d425a45720a8bf506cf25b4a1d8b49a7852eabe74ac99", 0xc7}, {&(0x7f0000000600)="a323e91b8589463d2602ceeb2afe86a69ebb298f5908d02008481fa564042214419bdc96417ee2779f449f9ccc072283e389c882ae946254c52b82e363b96e02dc41da03f1302ff9b1772ad98c14c0cdd97c2ae02e649d67f8361b190124dfbe35bbd6da7e756183e272e1cb1c3faad40409e54c6e4007b7c063190675c48bff73696c75436fb23b1d936f8b0c85362975bcfaee93dc054fbdfc7e88a71aa980bf8c457c915f17894a1c57111af0219f11826e1e5dc140a6be2509d59eac3c83ec985e24b2ba9ff5121d9c19b18c61d21f22a95c5d7b7320", 0xd8}, {&(0x7f0000000700)="b93adcaec9e67a57dac1314d2903e3c5180880f9e5f9a253c4cecdc0349af713860aea8775209d555e5d8f52add9b3dc971e68cc580879f0a8c782e5c1179bf27dd80b0b13269c76f3ac57354f43b161e249e97fb33fbb383d4a65d0addb48b85c3d5c62d7579a688010ca508b45ff909dc9caf702c5c9fe83e8", 0x7a}, {&(0x7f0000000780)="81ebae647b7a070210a26f", 0xb}], 0x9, &(0x7f0000000840)}}, {{&(0x7f0000000880)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xe6fc}, 0x1c, &(0x7f00000009c0)=[{&(0x7f00000008c0)="80bb56df6ef1f3383d383ddd442e9cd473d29803e9d0ced0dad3e9193f8ce59377b3c1ad5d984dfc092939fe2fbf434a43cdad89006dceb98f74c85740f044762db99e41dcc7af70cc0d0fb30e0c9593c763c752c4f942522382", 0x5a}, {&(0x7f0000000940)="8a69f1bdf3072894323469c7984a14d432fe21f0231426791327449a09cdca4205ba486d28b6862fb66a076b0cffb17a7db158adabe27ff4ac14385a95efc89ca76e7ddf17aa", 0x46}], 0x2, &(0x7f0000000a00)=[@flowinfo={{0x10, 0x29, 0xb, 0x9}}, @hopopts={{0x4c, 0x29, 0x36, {0xc, 0x6, [], [@jumbo={0xc2, 0x4, 0x1ff}, @enc_lim={0x4, 0x1, 0x70}, @jumbo={0xc2, 0x4, 0x1}, @ra={0x5, 0x2, 0x3}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @enc_lim={0x4, 0x1, 0x1f}, @ra={0x5, 0x2, 0x2}]}}}], 0x5c}}], 0x2, 0x4000)

[  527.414833] udevd invoked oom-killer: gfp_mask=0x14200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null),  order=0, oom_score_adj=-1000
[  527.442203] udevd cpuset=/ mems_allowed=0-1
[  527.451799] CPU: 0 PID: 29590 Comm: udevd Not tainted 4.14.158-syzkaller #0
[  527.458923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  527.468258] Call Trace:
[  527.470830]  dump_stack+0x142/0x197
[  527.474439]  dump_header+0x177/0x6cd
[  527.478130]  ? _raw_spin_unlock_irqrestore+0xa4/0xe0
[  527.483216]  ? ___ratelimit+0x55/0x537
[  527.487086]  oom_kill_process.cold+0x10/0xadd
[  527.491562]  ? rcu_read_unlock_special+0x895/0xd40
[  527.496472]  ? lock_downgrade+0x740/0x740
[  527.500603]  out_of_memory+0x2ee/0x1180
[  527.504557]  ? lock_acquire+0x16f/0x430
[  527.508525]  ? oom_killer_disable+0x1d0/0x1d0
[  527.513001]  ? __alloc_pages_slowpath+0xca4/0x2930
[  527.517908]  __alloc_pages_slowpath+0x2251/0x2930
[  527.522737]  ? warn_alloc+0xf0/0xf0
[  527.526351]  ? __might_sleep+0x93/0xb0
[  527.530216]  __alloc_pages_nodemask+0x62c/0x7a0
[  527.534864]  ? __alloc_pages_slowpath+0x2930/0x2930
[  527.539858]  ? trace_hardirqs_on_caller+0x400/0x590
[  527.544856]  ? save_trace+0x290/0x290
[  527.548636]  ? get_task_policy.part.0+0x85/0xa0
[  527.553288]  alloc_pages_vma+0xc9/0x4c0
[  527.557260]  wp_page_copy+0x1f8/0x13d0
[  527.561141]  ? follow_pfn+0x220/0x220
[  527.564926]  ? do_raw_spin_unlock+0x16b/0x260
[  527.569401]  do_wp_page+0x24b/0x1250
[  527.573097]  ? finish_mkwrite_fault+0x620/0x620
[  527.577751]  __handle_mm_fault+0x1cc3/0x33d0
[  527.582158]  ? copy_page_range+0x1de0/0x1de0
[  527.586559]  ? find_held_lock+0x35/0x130
[  527.590601]  ? handle_mm_fault+0x1b6/0x7c0
[  527.594837]  handle_mm_fault+0x293/0x7c0
[  527.598885]  __do_page_fault+0x4c1/0xb80
[  527.602930]  ? firmware_map_remove+0x196/0x196
[  527.607497]  ? vmalloc_fault+0xe30/0xe30
[  527.611538]  ? page_fault+0x2f/0x50
[  527.615144]  do_page_fault+0x71/0x511
[  527.618924]  ? page_fault+0x2f/0x50
[  527.622532]  page_fault+0x45/0x50
[  527.625965] RIP: 0033:0x7fdbeea9fa1a
[  527.629657] RSP: 002b:00007ffcb9395ae0 EFLAGS: 00010246
[  527.634999] RAX: 00007fdbee38b200 RBX: 00007fdbeecaa000 RCX: 0000000000000000
[  527.642262] RDX: 0000000000000002 RSI: 00007fdbee2e8e20 RDI: 00007fdbee2f2e0e
[  527.649509] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000005
[  527.656758] R10: 0000000000000000 R11: 00007ffcb9395910 R12: 0000000000625208
[  527.664016] R13: 0000000000000000 R14: 0000000000bb2030 R15: 0000000000000005
[  527.910945] Mem-Info:
[  527.913408] active_anon:1338622 inactive_anon:194 isolated_anon:0
[  527.913408]  active_file:230 inactive_file:152 isolated_file:23
[  527.913408]  unevictable:0 dirty:0 writeback:16 unstable:0
[  527.913408]  slab_reclaimable:13504 slab_unreclaimable:137191
[  527.913408]  mapped:52474 shmem:242 pagetables:13658 bounce:0
[  527.913408]  free:23234 free_pcp:228 free_cma:0
[  527.954037] Node 0 active_anon:1871228kB inactive_anon:744kB active_file:84kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208944kB dirty:4kB writeback:40kB shmem:936kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1144832kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[  527.986887] Node 1 active_anon:3483260kB inactive_anon:32kB active_file:396kB inactive_file:816kB unevictable:0kB isolated(anon):0kB isolated(file):220kB mapped:752kB dirty:0kB writeback:24kB shmem:32kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[  528.019439] Node 0 DMA free:10440kB min:216kB low:268kB high:320kB active_anon:4568kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  528.050708] lowmem_reserve[]: 0 2569 2569 2569 2569
[  528.055843] Node 0 DMA32 free:28696kB min:36380kB low:45472kB high:54564kB active_anon:1866660kB inactive_anon:744kB active_file:240kB inactive_file:24kB unevictable:0kB writepending:44kB present:3129332kB managed:2634384kB mlocked:0kB kernel_stack:10624kB pagetables:23768kB bounce:0kB free_pcp:644kB local_pcp:644kB free_cma:0kB
[  528.087866] lowmem_reserve[]: 0 0 0 0 0
[  528.091894] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  528.117496] lowmem_reserve[]: 0 0 0 0 0
[  528.121528] Node 1 Normal free:54336kB min:53508kB low:66884kB high:80260kB active_anon:3483328kB inactive_anon:16kB active_file:0kB inactive_file:468kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:9664kB pagetables:30848kB bounce:0kB free_pcp:392kB local_pcp:120kB free_cma:0kB
[  528.150613] lowmem_reserve[]: 0 0 0 0 0
[  528.154596] Node 0 DMA: 2*4kB (UE) 24*8kB (UMH) 26*16kB (UMEH) 27*32kB (UMEH) 18*64kB (UMEH) 9*128kB (UMEH) 4*256kB (UME) 1*512kB (E) 3*1024kB (MEH) 1*2048kB (E) 0*4096kB = 10440kB
[  528.171171] Node 0 DMA32: 1253*4kB (UME) 1154*8kB (UME) 384*16kB (UME) 112*32kB (UME) 17*64kB (UME) 7*128kB (M) 5*256kB (M) 1*512kB (M) 1*1024kB (E) 0*2048kB 0*4096kB = 28772kB
[  528.187496] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  528.198454] Node 1 Normal: 271*4kB (UMEH) 190*8kB (UMEH) 84*16kB (UMEH) 956*32kB (UMEH) 226*64kB (UMEH) 17*128kB (UM) 12*256kB (UE) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 54252kB
[  528.221397] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  528.231373] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  528.240886] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  528.253463] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  528.262771] 398 total pagecache pages
[  528.278082] 0 pages in swap cache
[  528.282627] Swap cache stats: add 0, delete 0, find 0/0
[  528.291353] Free swap  = 0kB
[  528.298604] Total swap = 0kB
[  528.302150] 1965979 pages RAM
[  528.305338] 0 pages HighMem/MovableOnly
[  528.309360] 335858 pages reserved
[  528.312912] 0 pages cma reserved
[  528.316325] Out of memory: Kill process 29492 (syz-executor.1) score 1007 or sacrifice child
[  528.329805] Killed process 29492 (syz-executor.1) total-vm:72984kB, anon-rss:16552kB, file-rss:34816kB, shmem-rss:0kB
[  528.437562] oom_reaper: reaped process 29492 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB
06:16:00 executing program 3:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mkdir(&(0x7f0000000180)='./file0//ile0\x00', 0x0)
rmdir(&(0x7f0000000340)='./file0//ile0\x00')

06:16:00 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628", [[], []]}, 0x30a)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:16:00 executing program 0:
io_setup(0x1, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500)='/dev/net/tun\x00', 0x101a06, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002})
mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)='logfs\x00', 0x0, &(0x7f0000000140)='/dev/net/tun\x00')
io_submit(0x0, 0x1, &(0x7f0000000600)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000040), 0x24}])

06:16:00 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={0x0, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
pipe2$9p(&(0x7f0000000240)={<r6=>0xffffffffffffffff}, 0x0)
close(r6)
r7 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x0, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}})

06:16:01 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:16:01 executing program 2:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @local}, 0x4}, 0x1c)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c)
r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00')
sendfile(r0, r1, 0x0, 0xedc0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00')
sendfile(0xffffffffffffffff, r2, 0x0, 0xedc0)
syz_open_procfs(0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
ioctl$RTC_WKALM_RD(r2, 0x80287010, &(0x7f0000000240))
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x4}, 0x0, 0x98d5, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00')
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r6=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @local}, 0x14)
write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x3f00)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000280)={'hsr0\x00', 0x20d})
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r7, @ANYBLOB="0001000000100000"], 0x20}}, 0x0)

[  530.418716] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null),  order=0, oom_score_adj=0
[  530.437212] syz-fuzzer cpuset=/ mems_allowed=0-1
[  530.447828] CPU: 1 PID: 6887 Comm: syz-fuzzer Not tainted 4.14.158-syzkaller #0
[  530.455277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  530.464622] Call Trace:
[  530.467306]  dump_stack+0x142/0x197
[  530.470936]  dump_header+0x177/0x6cd
[  530.474646]  ? _raw_spin_unlock_irqrestore+0xa4/0xe0
[  530.479750]  ? ___ratelimit+0x55/0x537
[  530.483751]  oom_kill_process.cold+0x10/0xadd
[  530.488249]  ? rcu_read_unlock_special+0x895/0xd40
[  530.493182]  ? lock_downgrade+0x740/0x740
[  530.497336]  out_of_memory+0x2ee/0x1180
[  530.501317]  ? lock_acquire+0x16f/0x430
[  530.505297]  ? oom_killer_disable+0x1d0/0x1d0
[  530.509790]  ? __alloc_pages_slowpath+0xca4/0x2930
[  530.514725]  __alloc_pages_slowpath+0x2251/0x2930
[  530.519574]  ? __alloc_pages_nodemask+0x639/0x7a0
[  530.524421]  ? warn_alloc+0xf0/0xf0
[  530.528059]  ? __might_sleep+0x93/0xb0
[  530.531945]  __alloc_pages_nodemask+0x62c/0x7a0
[  530.536616]  ? __alloc_pages_slowpath+0x2930/0x2930
[  530.541634]  ? lock_downgrade+0x740/0x740
[  530.545789]  alloc_pages_current+0xec/0x1e0
[  530.550211]  __page_cache_alloc+0x248/0x3e0
[  530.554538]  filemap_fault+0xcef/0x1de0
[  530.558512]  ? radix_tree_next_chunk+0x43e/0x9a0
[  530.563424]  ? __lock_page_or_retry+0x8d0/0x8d0
[  530.568093]  ? lock_acquire+0x16f/0x430
[  530.572122]  ? ext4_filemap_fault+0x7b/0xb0
[  530.576452]  ext4_filemap_fault+0x83/0xb0
[  530.580599]  __do_fault+0x104/0x390
[  530.584222]  __handle_mm_fault+0x23bd/0x33d0
[  530.588620]  ? copy_page_range+0x1de0/0x1de0
[  530.593056]  ? find_held_lock+0x35/0x130
[  530.597096]  ? handle_mm_fault+0x1b6/0x7c0
[  530.601328]  handle_mm_fault+0x293/0x7c0
[  530.605387]  __do_page_fault+0x4c1/0xb80
[  530.609445]  ? vmalloc_fault+0xe30/0xe30
[  530.613502]  ? page_fault+0x2f/0x50
[  530.617115]  do_page_fault+0x71/0x511
[  530.620900]  ? page_fault+0x2f/0x50
[  530.624512]  page_fault+0x45/0x50
[  530.627944] RIP: 0033:0x457340
[  530.631110] RSP: 002b:000000c4330e8f70 EFLAGS: 00010217
[  530.636460] RAX: 000000c4330e8f60 RBX: 00000000000004c0 RCX: 000000c420000180
[  530.643718] RDX: 0000000000853100 RSI: 0000000000853100 RDI: 000000c4200001b0
[  530.650980] RBP: 000000c4330e8fa0 R08: 000000c420000180 R09: 000000c436c869d7
[  530.658234] R10: 0000000000000002 R11: 000000c436c86948 R12: 000000c436c8694f
[  530.665484] R13: 000000000000001a R14: 0000000000000006 R15: 0000000000000001
[  530.699810] Mem-Info:
[  530.702293] active_anon:1338813 inactive_anon:194 isolated_anon:0
[  530.702293]  active_file:98 inactive_file:228 isolated_file:29
[  530.702293]  unevictable:0 dirty:0 writeback:0 unstable:0
[  530.702293]  slab_reclaimable:13523 slab_unreclaimable:137514
[  530.702293]  mapped:52452 shmem:242 pagetables:13701 bounce:0
[  530.702293]  free:22782 free_pcp:156 free_cma:0
[  530.735969] Node 0 active_anon:1872748kB inactive_anon:744kB active_file:104kB inactive_file:92kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:209104kB dirty:0kB writeback:0kB shmem:936kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1144832kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[  530.763844] Node 1 active_anon:3482504kB inactive_anon:32kB active_file:236kB inactive_file:324kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:504kB dirty:0kB writeback:0kB shmem:32kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[  530.790740] Node 0 DMA free:10440kB min:216kB low:268kB high:320kB active_anon:4568kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  530.818332] lowmem_reserve[]: 0 2569 2569 2569 2569
[  530.823477] Node 0 DMA32 free:27516kB min:36380kB low:45472kB high:54564kB active_anon:1868180kB inactive_anon:744kB active_file:4kB inactive_file:92kB unevictable:0kB writepending:0kB present:3129332kB managed:2634384kB mlocked:0kB kernel_stack:10528kB pagetables:23768kB bounce:0kB free_pcp:492kB local_pcp:124kB free_cma:0kB
[  530.852543] lowmem_reserve[]: 0 0 0 0 0
[  530.856534] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  530.882177] lowmem_reserve[]: 0 0 0 0 0
[  530.886166] Node 1 Normal free:54192kB min:53508kB low:66884kB high:80260kB active_anon:3482512kB inactive_anon:32kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:20kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:9824kB pagetables:31036kB bounce:0kB free_pcp:56kB local_pcp:0kB free_cma:0kB
[  530.914851] lowmem_reserve[]: 0 0 0 0 0
[  530.918868] Node 0 DMA: 2*4kB (UE) 24*8kB (UMH) 26*16kB (UMEH) 27*32kB (UMEH) 18*64kB (UMEH) 9*128kB (UMEH) 4*256kB (UME) 1*512kB (E) 3*1024kB (MEH) 1*2048kB (E) 0*4096kB = 10440kB
[  530.935891] Node 0 DMA32: 1134*4kB (UM) 1137*8kB (UME) 387*16kB (UME) 113*32kB (UME) 15*64kB (UM) 7*128kB (M) 5*256kB (M) 1*512kB (M) 1*1024kB (E) 0*2048kB 0*4096kB = 28112kB
[  530.951726] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  530.964355] Node 1 Normal: 256*4kB (UMH) 139*8kB (UMH) 91*16kB (UMH) 919*32kB (UMH) 247*64kB (UMH) 19*128kB (UM) 9*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53544kB
[  530.979788] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  530.989148] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  530.997805] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  531.008211] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  531.016854] 266 total pagecache pages
[  531.020924] 0 pages in swap cache
[  531.024920] Swap cache stats: add 0, delete 0, find 0/0
[  531.031089] Free swap  = 0kB
[  531.034658] Total swap = 0kB
[  531.038231] 1965979 pages RAM
[  531.042311] 0 pages HighMem/MovableOnly
[  531.046286] 335858 pages reserved
[  531.049727] 0 pages cma reserved
[  531.054874] Out of memory: Kill process 11282 (syz-executor.5) score 1007 or sacrifice child
[  531.064271] Killed process 11282 (syz-executor.5) total-vm:73116kB, anon-rss:16564kB, file-rss:34816kB, shmem-rss:0kB
[  531.098921] oom_reaper: reaped process 11282 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB
06:16:02 executing program 0:
io_setup(0x1, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500)='/dev/net/tun\x00', 0x101a06, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002})
mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)='logfs\x00', 0x0, &(0x7f0000000140)='/dev/net/tun\x00')
io_submit(0x0, 0x1, &(0x7f0000000600)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000040), 0x24}])

[  531.439872] init invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null),  order=1, oom_score_adj=0
[  531.456691] init cpuset=/ mems_allowed=0-1
[  531.461098] CPU: 0 PID: 1 Comm: init Not tainted 4.14.158-syzkaller #0
[  531.467753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  531.477090] Call Trace:
[  531.479659]  dump_stack+0x142/0x197
[  531.483272]  dump_header+0x177/0x6cd
[  531.486963]  ? _raw_spin_unlock_irqrestore+0xa4/0xe0
[  531.492060]  ? ___ratelimit+0x55/0x537
[  531.496036]  oom_kill_process.cold+0x10/0xadd
[  531.500512]  ? oom_unkillable_task+0x294/0x390
[  531.505089]  ? lock_downgrade+0x740/0x740
[  531.509225]  out_of_memory+0x2ee/0x1180
[  531.513192]  ? lock_acquire+0x16f/0x430
[  531.517164]  ? oom_killer_disable+0x1d0/0x1d0
[  531.521642]  ? __alloc_pages_slowpath+0xca4/0x2930
[  531.526575]  __alloc_pages_slowpath+0x2251/0x2930
[  531.531421]  ? warn_alloc+0xf0/0xf0
[  531.535033]  ? __might_sleep+0x93/0xb0
[  531.538919]  __alloc_pages_nodemask+0x62c/0x7a0
[  531.543583]  ? __alloc_pages_slowpath+0x2930/0x2930
[  531.548582]  ? ____cache_alloc_node+0x1be/0x1d0
[  531.553238]  ? cache_grow_begin+0x335/0x400
[  531.557555]  cache_grow_begin+0x80/0x400
[  531.561600]  ? __cpuset_node_allowed+0xff/0x450
[  531.566250]  fallback_alloc+0x1fd/0x2c0
[  531.570208]  ____cache_alloc_node+0x1be/0x1d0
[  531.574688]  kmem_cache_alloc+0x1f3/0x780
[  531.578825]  getname_flags+0xcb/0x580
[  531.582611]  user_path_at_empty+0x2f/0x50
[  531.586799]  vfs_statx+0xcd/0x160
[  531.590238]  ? vfs_statx_fd+0xa0/0xa0
[  531.594032]  ? find_held_lock+0x35/0x130
[  531.598074]  SYSC_newstat+0x95/0x100
[  531.601769]  ? cp_new_stat+0x5a0/0x5a0
[  531.605635]  ? lock_downgrade+0x740/0x740
[  531.609764]  ? up_read+0x1a/0x40
[  531.613113]  ? __do_page_fault+0x358/0xb80
[  531.617349]  ? do_syscall_64+0x53/0x640
[  531.621300]  ? SyS_fstat+0x30/0x30
[  531.624818]  SyS_newstat+0x1e/0x30
[  531.628336]  do_syscall_64+0x1e8/0x640
[  531.632203]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  531.637030]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  531.642196] RIP: 0033:0x7fa5aa133c65
[  531.645890] RSP: 002b:00007fffb1925718 EFLAGS: 00000246 ORIG_RAX: 0000000000000004
[  531.653582] RAX: ffffffffffffffda RBX: 00007fffb1925950 RCX: 00007fa5aa133c65
[  531.660828] RDX: 00007fffb1925950 RSI: 00007fffb1925950 RDI: 0000000000407545
[  531.668078] RBP: 0000000000000000 R08: 0000000000f2bb60 R09: 0000000000000001
[  531.675326] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
[  531.682573] R13: 00007fffb1925e50 R14: 0000000000000000 R15: 0000000000000000
[  531.698229] Mem-Info:
[  531.701306] active_anon:1334653 inactive_anon:194 isolated_anon:0
[  531.701306]  active_file:255 inactive_file:269 isolated_file:45
[  531.701306]  unevictable:0 dirty:2 writeback:0 unstable:0
[  531.701306]  slab_reclaimable:13525 slab_unreclaimable:137444
[  531.701306]  mapped:52670 shmem:242 pagetables:13643 bounce:0
[  531.701306]  free:26632 free_pcp:144 free_cma:0
[  531.740414] Node 0 active_anon:1856240kB inactive_anon:744kB active_file:472kB inactive_file:708kB unevictable:0kB isolated(anon):0kB isolated(file):52kB mapped:209548kB dirty:24kB writeback:0kB shmem:936kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1128448kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[  531.772943] Node 1 active_anon:3482384kB inactive_anon:32kB active_file:28kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:32kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[  531.800095] Node 0 DMA free:10440kB min:216kB low:268kB high:320kB active_anon:4568kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  531.830370] lowmem_reserve[]: 0 2569 2569 2569 2569
[  531.835429] Node 0 DMA32 free:43276kB min:36380kB low:45472kB high:54564kB active_anon:1851672kB inactive_anon:744kB active_file:372kB inactive_file:300kB unevictable:0kB writepending:52kB present:3129332kB managed:2634384kB mlocked:0kB kernel_stack:10496kB pagetables:23640kB bounce:0kB free_pcp:664kB local_pcp:56kB free_cma:0kB
[  531.865372] lowmem_reserve[]: 0 0 0 0 0
[  531.869797] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  531.895596] lowmem_reserve[]: 0 0 0 0 0
[  531.900153] Node 1 Normal free:54744kB min:53508kB low:66884kB high:80260kB active_anon:3482384kB inactive_anon:32kB active_file:28kB inactive_file:28kB unevictable:0kB writepending:4kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:9664kB pagetables:30932kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  531.929383] lowmem_reserve[]: 0 0 0 0 0
[  531.934051] Node 0 DMA: 2*4kB (UE) 24*8kB (UMH) 26*16kB (UMEH) 27*32kB (UMEH) 18*64kB (UMEH) 9*128kB (UMEH) 4*256kB (UME) 1*512kB (E) 3*1024kB (MEH) 1*2048kB (E) 0*4096kB = 10440kB
[  531.950396] Node 0 DMA32: 1021*4kB (UM) 940*8kB (UMH) 401*16kB (UME) 112*32kB (UM) 16*64kB (UME) 8*128kB (ME) 6*256kB (ME) 2*512kB (ME) 0*1024kB 8*2048kB (M) 0*4096kB = 42596kB
[  531.966819] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  531.977775] Node 1 Normal: 432*4kB (UMH) 181*8kB (UMH) 95*16kB (UMH) 922*32kB (UMH) 247*64kB (UMH) 19*128kB (UM) 9*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 54744kB
[  531.994075] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  532.003565] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  532.012988] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  532.022789] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  532.032047] 828 total pagecache pages
[  532.036793] 0 pages in swap cache
[  532.041159] Swap cache stats: add 0, delete 0, find 0/0
[  532.047099] Free swap  = 0kB
[  532.050745] Total swap = 0kB
[  532.054202] 1965979 pages RAM
[  532.057787] 0 pages HighMem/MovableOnly
[  532.062261] 335858 pages reserved
[  532.065832] 0 pages cma reserved
[  532.069332] Out of memory: Kill process 18150 (syz-executor.4) score 1007 or sacrifice child
[  532.078471] Killed process 18150 (syz-executor.4) total-vm:73116kB, anon-rss:16564kB, file-rss:34816kB, shmem-rss:0kB
[  532.144126] oom_reaper: reaped process 18150 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB
06:16:03 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628", [[], []]}, 0x30a)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:16:03 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x0, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:16:03 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

[  532.550132] protocol 88fb is buggy, dev hsr_slave_0
[  532.555428] protocol 88fb is buggy, dev hsr_slave_1
[  532.731340] protocol 88fb is buggy, dev hsr_slave_0
06:16:05 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x0, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:16:05 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x161, 0x0, 0x0, 0x0)
ioctl$KVM_DEASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x4040ae72, &(0x7f0000000000)={0x9, 0x0, 0x0, 0x2})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

06:16:05 executing program 2:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @local}, 0x4}, 0x1c)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c)
r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00')
sendfile(r0, r1, 0x0, 0xedc0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00')
sendfile(0xffffffffffffffff, r2, 0x0, 0xedc0)
syz_open_procfs(0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
ioctl$RTC_WKALM_RD(r2, 0x80287010, &(0x7f0000000240))
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x4}, 0x0, 0x98d5, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00')
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r6=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @local}, 0x14)
write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x3f00)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000280)={'hsr0\x00', 0x20d})
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r7, @ANYBLOB="0001000000100000"], 0x20}}, 0x0)

06:16:05 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:16:05 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628", [[], []]}, 0x30a)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

[  533.820696] device bridge_slave_1 left promiscuous mode
[  533.829537] bridge0: port 2(bridge_slave_1) entered disabled state
[  533.881197] device bridge_slave_0 left promiscuous mode
[  534.028912] bridge0: port 1(bridge_slave_0) entered disabled state
06:16:05 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8", [[], []]}, 0x30e)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:16:05 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628", [[], []]}, 0x30a)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

[  534.142901] device hsr_slave_1 left promiscuous mode
[  534.183484] device hsr_slave_0 left promiscuous mode
[  534.234318] team0 (unregistering): Port device team_slave_1 removed
[  534.245783] team0 (unregistering): Port device team_slave_0 removed
[  534.256544] bond0 (unregistering): Releasing backup interface bond_slave_1
06:16:05 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628", [[], []]}, 0x30a)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

[  534.446575] bond0 (unregistering): Releasing backup interface bond_slave_0
[  534.623235] bond0 (unregistering): Released all slaves
[  537.181020] IPVS: ftp: loaded support on port[0] = 21
[  537.969015] chnl_net:caif_netlink_parms(): no params data found
[  538.162444] bridge0: port 1(bridge_slave_0) entered blocking state
[  538.178113] bridge0: port 1(bridge_slave_0) entered disabled state
[  538.185613] device bridge_slave_0 entered promiscuous mode
[  538.199700] bridge0: port 2(bridge_slave_1) entered blocking state
[  538.206246] bridge0: port 2(bridge_slave_1) entered disabled state
[  538.213540] device bridge_slave_1 entered promiscuous mode
[  538.239232] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  538.253020] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  538.285749] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  538.295759] team0: Port device team_slave_0 added
[  538.302934] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  538.314448] team0: Port device team_slave_1 added
[  538.319993] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  538.328940] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  538.392146] device hsr_slave_0 entered promiscuous mode
[  538.444666] device hsr_slave_1 entered promiscuous mode
[  538.511841] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[  538.518962] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[  538.536478] bridge0: port 2(bridge_slave_1) entered blocking state
[  538.542970] bridge0: port 2(bridge_slave_1) entered forwarding state
[  538.549678] bridge0: port 1(bridge_slave_0) entered blocking state
[  538.556136] bridge0: port 1(bridge_slave_0) entered forwarding state
[  538.589683] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready
[  538.596079] 8021q: adding VLAN 0 to HW filter on device bond0
[  538.605862] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  538.616088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  538.624134] bridge0: port 1(bridge_slave_0) entered disabled state
[  538.631191] bridge0: port 2(bridge_slave_1) entered disabled state
[  538.644356] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[  538.650964] 8021q: adding VLAN 0 to HW filter on device team0
[  538.659722] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  538.667615] bridge0: port 1(bridge_slave_0) entered blocking state
[  538.674013] bridge0: port 1(bridge_slave_0) entered forwarding state
[  538.687546] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  538.695341] bridge0: port 2(bridge_slave_1) entered blocking state
[  538.701791] bridge0: port 2(bridge_slave_1) entered forwarding state
[  538.720904] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  538.728384] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  538.748305] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  538.758296] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  538.768646] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[  538.775278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  538.782906] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  538.791120] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  538.799312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  538.808715] device bridge_slave_1 left promiscuous mode
[  538.814322] bridge0: port 2(bridge_slave_1) entered disabled state
[  538.860651] device bridge_slave_0 left promiscuous mode
[  538.866127] bridge0: port 1(bridge_slave_0) entered disabled state
[  538.993562] device hsr_slave_1 left promiscuous mode
[  539.032825] device hsr_slave_0 left promiscuous mode
[  539.072425] team0 (unregistering): Port device team_slave_1 removed
[  539.083034] team0 (unregistering): Port device team_slave_0 removed
[  539.092473] bond0 (unregistering): Releasing backup interface bond_slave_1
[  539.124778] bond0 (unregistering): Releasing backup interface bond_slave_0
[  539.183709] bond0 (unregistering): Released all slaves
[  539.219502] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready
[  539.226277] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  539.235003] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[  539.241782] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  539.248533] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  539.261936] 8021q: adding VLAN 0 to HW filter on device batadv0
06:16:10 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, 0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:16:10 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8", [[], []]}, 0x30e)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:16:10 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x0, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:16:10 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x0, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:16:10 executing program 0:
io_setup(0x1, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500)='/dev/net/tun\x00', 0x101a06, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002})
mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)='logfs\x00', 0x0, &(0x7f0000000140)='/dev/net/tun\x00')
io_submit(0x0, 0x1, &(0x7f0000000600)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000040), 0x24}])

06:16:11 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8", [[], []]}, 0x30e)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

[  541.471343] IPVS: ftp: loaded support on port[0] = 21
[  542.386621] chnl_net:caif_netlink_parms(): no params data found
[  542.426517] bridge0: port 1(bridge_slave_0) entered blocking state
[  542.433088] bridge0: port 1(bridge_slave_0) entered disabled state
[  542.440407] device bridge_slave_0 entered promiscuous mode
[  542.447227] bridge0: port 2(bridge_slave_1) entered blocking state
[  542.453834] bridge0: port 2(bridge_slave_1) entered disabled state
[  542.462254] device bridge_slave_1 entered promiscuous mode
[  542.481505] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  542.490689] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  542.509494] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  542.516759] team0: Port device team_slave_0 added
[  542.522386] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  542.529579] team0: Port device team_slave_1 added
[  542.535110] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  542.542555] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  542.602399] device hsr_slave_0 entered promiscuous mode
[  542.650461] device hsr_slave_1 entered promiscuous mode
[  542.690973] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[  542.698020] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[  542.714864] bridge0: port 2(bridge_slave_1) entered blocking state
[  542.721240] bridge0: port 2(bridge_slave_1) entered forwarding state
[  542.727847] bridge0: port 1(bridge_slave_0) entered blocking state
[  542.734234] bridge0: port 1(bridge_slave_0) entered forwarding state
[  542.765416] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready
[  542.771954] 8021q: adding VLAN 0 to HW filter on device bond0
[  542.779937] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  542.790592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  542.797767] bridge0: port 1(bridge_slave_0) entered disabled state
[  542.804556] bridge0: port 2(bridge_slave_1) entered disabled state
[  542.813885] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[  542.819994] 8021q: adding VLAN 0 to HW filter on device team0
[  542.830181] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  542.837774] bridge0: port 1(bridge_slave_0) entered blocking state
[  542.844226] bridge0: port 1(bridge_slave_0) entered forwarding state
[  542.853549] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  542.861681] bridge0: port 2(bridge_slave_1) entered blocking state
[  542.868022] bridge0: port 2(bridge_slave_1) entered forwarding state
[  542.889873] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  542.899914] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  542.911013] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[  542.918056] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  542.926109] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  542.933981] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  542.942046] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  542.949771] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  542.956864] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  542.969695] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready
[  542.977615] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  542.984457] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  542.998111] 8021q: adding VLAN 0 to HW filter on device batadv0
[  543.370352] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
06:16:15 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8", [[], []]}, 0x30e)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:16:15 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, 0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:16:15 executing program 0:
io_setup(0x1, &(0x7f00000001c0)=<r0=>0x0)
r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x101a06, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000004c0)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002})
mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)='logfs\x00', 0x0, &(0x7f0000000140)='/dev/net/tun\x00')
io_submit(r0, 0x1, &(0x7f0000000600)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000040), 0x24}])

06:16:15 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x0, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:16:15 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x0, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:16:15 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8", [[], []]}, 0x310)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:16:16 executing program 0:
io_setup(0x1, &(0x7f00000001c0)=<r0=>0x0)
r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x101a06, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000004c0)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002})
mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)='logfs\x00', 0x0, &(0x7f0000000140)='/dev/net/tun\x00')
io_submit(r0, 0x1, &(0x7f0000000600)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000040), 0x24}])

06:16:16 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, 0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:16:16 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8", [[], []]}, 0x310)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:16:16 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x0, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:16:16 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8", [[], []]}, 0x30e)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:16:16 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8", [[], []]}, 0x30e)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:16:16 executing program 0:
io_setup(0x1, &(0x7f00000001c0)=<r0=>0x0)
r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x101a06, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000004c0)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002})
mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)='logfs\x00', 0x0, &(0x7f0000000140)='/dev/net/tun\x00')
io_submit(r0, 0x1, &(0x7f0000000600)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000040), 0x24}])

06:16:16 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

[  545.670324] device bridge_slave_1 left promiscuous mode
[  545.675928] bridge0: port 2(bridge_slave_1) entered disabled state
[  545.730900] device bridge_slave_0 left promiscuous mode
[  545.736455] bridge0: port 1(bridge_slave_0) entered disabled state
06:16:17 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628", [[], []]}, 0x30a)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:16:17 executing program 0:
io_setup(0x1, &(0x7f00000001c0)=<r0=>0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000004c0)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002})
mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)='logfs\x00', 0x0, &(0x7f0000000140)='/dev/net/tun\x00')
io_submit(r0, 0x1, &(0x7f0000000600)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000040), 0x24}])

06:16:17 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8", [[], []]}, 0x310)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:16:17 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x0, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:16:17 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

[  545.840199] device hsr_slave_1 left promiscuous mode
[  545.894557] device hsr_slave_0 left promiscuous mode
[  545.926407] team0 (unregistering): Port device team_slave_1 removed
[  545.951606] team0 (unregistering): Port device team_slave_0 removed
[  545.977017] bond0 (unregistering): Releasing backup interface bond_slave_1
06:16:17 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[]]}, 0x211)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:16:17 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

06:16:17 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628", [[], []]}, 0x30a)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

[  546.252442] bond0 (unregistering): Releasing backup interface bond_slave_0
[  546.399929] bond0 (unregistering): Released all slaves
06:16:18 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0xc004743e, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
clone(0x1103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="1046", 0x2, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000480)="4b1191e277d8a2d89afc9232402b5c", 0xf, 0xfffffffffffffffa)
syz_open_pts(r2, 0x6801)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
close(r7)
r8 = epoll_create1(0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)={{0x108, 0x1, 0x3, 0x2bb, 0x244, 0x9, 0x31c, 0x101}, "56fe64d815088e0f6c399a5a89a537fef24320b1e7fdb8c4e2bfa52ff07f124fdcab1050382a1857be9fa027cbe8270cab8638b61871d86de6c9f0cd89379f14a9bdf30223f0939d809980d68df0098138a4e1f3358e0a121cd4da9e68fdfbb4fbea3490918e64bd4cb7d32d3feb8164ad8601b8935658ab8348378dd3210994a28f1028b519fe4c282ac4e08bdfc880bebc81c597cf3d4669fd8cb400d27fec17a481696296c62c6002b44473e624f42aab1262b5aaf5caa70c553aac9cb8a23e12a5ad96dcfd5a9fc06820b86e5e25d1bc647f392f52492882a9501dd2090739b29e870f457e2c2628d178b2e8deb8ec", [[], []]}, 0x311)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}})

[  548.330482] syz-executor.2 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null),  order=1, oom_score_adj=0
[  548.346348] syz-executor.2 cpuset=/ mems_allowed=0-1
[  548.351997] CPU: 0 PID: 29921 Comm: syz-executor.2 Not tainted 4.14.158-syzkaller #0
[  548.359872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  548.369214] Call Trace:
[  548.371789]  dump_stack+0x142/0x197
[  548.375407]  dump_header+0x177/0x6cd
[  548.379111]  ? _raw_spin_unlock_irqrestore+0xa4/0xe0
[  548.384201]  ? ___ratelimit+0x55/0x537
[  548.388224]  oom_kill_process.cold+0x10/0xadd
[  548.392701]  ? oom_unkillable_task+0x294/0x390
[  548.397260]  ? lock_downgrade+0x740/0x740
[  548.401389]  out_of_memory+0x2ee/0x1180
[  548.405338]  ? lock_acquire+0x16f/0x430
[  548.409288]  ? oom_killer_disable+0x1d0/0x1d0
[  548.413991]  ? __alloc_pages_slowpath+0xca4/0x2930
[  548.418897]  __alloc_pages_slowpath+0x2251/0x2930
[  548.423731]  ? warn_alloc+0xf0/0xf0
[  548.427407]  ? __might_sleep+0x93/0xb0
[  548.431273]  __alloc_pages_nodemask+0x62c/0x7a0
[  548.435917]  ? __alloc_pages_slowpath+0x2930/0x2930
[  548.440909]  ? ____cache_alloc_node+0x1be/0x1d0
[  548.445559]  ? cache_grow_begin+0x335/0x400
[  548.449858]  cache_grow_begin+0x80/0x400
[  548.453896]  ? __cpuset_node_allowed+0xff/0x450
[  548.458538]  fallback_alloc+0x1fd/0x2c0
[  548.462490]  ____cache_alloc_node+0x1be/0x1d0
[  548.466960]  kmem_cache_alloc+0x1f3/0x780
[  548.471125]  ? vm_mmap_pgoff+0x198/0x1d0
[  548.475165]  getname_flags+0xcb/0x580
[  548.478939]  ? vma_is_stack_for_current+0xa0/0xa0
[  548.483761]  getname+0x1a/0x20
[  548.486932]  do_sys_open+0x1e7/0x430
[  548.490623]  ? filp_open+0x70/0x70
[  548.494263]  ? find_mergeable_anon_vma+0x2c0/0x2c0
[  548.499191]  SyS_open+0x2d/0x40
[  548.502467]  ? do_sys_open+0x430/0x430
[  548.506337]  do_syscall_64+0x1e8/0x640
[  548.510203]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  548.515027]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  548.520192] RIP: 0033:0x414690
[  548.523362] RSP: 002b:00007fffbe3b60c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[  548.531050] RAX: ffffffffffffffda RBX: 000000000075c788 RCX: 0000000000414690
[  548.538300] RDX: 0000000000000003 RSI: 0000000000000002 RDI: 00000000004bf5f1
[  548.545545] RBP: 000000000075c6e0 R08: 00000000000000f2 R09: 0000000000000000
[  548.552807] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000416420
[  548.560058] R13: 00007fffbe3b6358 R14: 0000000000000000 R15: 0000000000000000
[  548.568454] Mem-Info:
[  548.571177] active_anon:1335052 inactive_anon:194 isolated_anon:0
[  548.571177]  active_file:1885 inactive_file:3290 isolated_file:0
[  548.571177]  unevictable:0 dirty:36 writeback:0 unstable:0
[  548.571177]  slab_reclaimable:13593 slab_unreclaimable:136893
[  548.571177]  mapped:53625 shmem:242 pagetables:13495 bounce:0
[  548.571177]  free:25640 free_pcp:99 free_cma:0
[  548.605024] Node 0 active_anon:1901576kB inactive_anon:752kB active_file:7496kB inactive_file:13096kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:194612kB dirty:104kB writeback:0kB shmem:944kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1132544kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[  548.633392] Node 1 active_anon:3438632kB inactive_anon:24kB active_file:44kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:19888kB dirty:40kB writeback:0kB shmem:24kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[  548.660476] Node 0 DMA free:10496kB min:216kB low:268kB high:320kB active_anon:4452kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  548.687069] lowmem_reserve[]: 0 2569 2569 2569 2569
[  548.692730] Node 0 DMA32 free:37016kB min:36380kB low:45472kB high:54564kB active_anon:1897124kB inactive_anon:752kB active_file:7496kB inactive_file:13020kB unevictable:0kB writepending:92kB present:3129332kB managed:2634384kB mlocked:0kB kernel_stack:10336kB pagetables:24016kB bounce:0kB free_pcp:400kB local_pcp:280kB free_cma:0kB
[  548.722498] lowmem_reserve[]: 0 0 0 0 0
[  548.726554] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  548.751910] lowmem_reserve[]: 0 0 0 0 0
[  548.756013] Node 1 Normal free:55048kB min:53508kB low:66884kB high:80260kB active_anon:3438632kB inactive_anon:24kB active_file:188kB inactive_file:124kB unevictable:0kB writepending:40kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:9600kB pagetables:29964kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[  548.785187] lowmem_reserve[]: 0 0 0 0 0
[  548.789249] Node 0 DMA: 18*4kB (UME) 25*8kB (UMH) 23*16kB (UMEH) 28*32kB (UMEH) 18*64kB (UMEH) 9*128kB (UMEH) 4*256kB (UME) 1*512kB (E) 3*1024kB (MEH) 1*2048kB (E) 0*4096kB = 10496kB
[  548.805841] Node 0 DMA32: 347*4kB (UME) 956*8kB (UME) 1173*16kB (UME) 286*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36956kB
[  548.819781] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  548.831319] Node 1 Normal: 3409*4kB (MH) 1646*8kB (UMEH) 520*16kB (UMH) 563*32kB (UMEH) 33*64kB (UMEH) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 55252kB
[  548.846292] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  548.855237] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  548.863874] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  548.872844] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  548.881519] 5410 total pagecache pages
[  548.885457] 0 pages in swap cache
[  548.888984] Swap cache stats: add 0, delete 0, find 0/0
[  548.894427] Free swap  = 0kB
[  548.897479] Total swap = 0kB
[  548.900615] 1965979 pages RAM
[  548.903767] 0 pages HighMem/MovableOnly
[  548.907773] 335858 pages reserved
[  548.911359] 0 pages cma reserved
[  548.914775] Out of memory: Kill process 29909 (syz-executor.3) score 1007 or sacrifice child
[  548.923451] Killed process 29909 (syz-executor.3) total-vm:73116kB, anon-rss:16560kB, file-rss:35864kB, shmem-rss:0kB
[  548.990772] oom_reaper: reaped process 29909 (syz-executor.3), now anon-rss:0kB, file-rss:100kB, shmem-rss:0kB
[  549.240853] IPVS: ftp: loaded support on port[0] = 21
[  550.072673] chnl_net:caif_netlink_parms(): no params data found
[  550.081875] syz-executor.2: page allocation failure: order:5, mode:0x1084020(GFP_ATOMIC|__GFP_COMP), nodemask=(null)
[  550.092559] syz-executor.2 cpuset=/ mems_allowed=0-1
[  550.097780] CPU: 0 PID: 29922 Comm: syz-executor.2 Not tainted 4.14.158-syzkaller #0
[  550.105634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  550.114962] Call Trace:
[  550.117617]  dump_stack+0x142/0x197
[  550.121227]  warn_alloc.cold+0x96/0x1af
[  550.125179]  ? zone_watermark_ok_safe+0x2b0/0x2b0
[  550.129998]  ? wakeup_kswapd+0x19b/0x4e0
[  550.134043]  ? wake_all_kswapds+0x189/0x3c0
[  550.138355]  ? lock_downgrade+0x740/0x740
[  550.142486]  __alloc_pages_slowpath+0x23c6/0x2930
[  550.147309]  ? warn_alloc+0xf0/0xf0
[  550.150922]  ? trace_hardirqs_on+0x10/0x10
[  550.155134]  __alloc_pages_nodemask+0x62c/0x7a0
[  550.159786]  ? __alloc_pages_slowpath+0x2930/0x2930
[  550.164782]  ? ____cache_alloc_node+0x1be/0x1d0
[  550.169429]  cache_grow_begin+0x80/0x400
[  550.173467]  ? __cpuset_node_allowed+0xff/0x450
[  550.178123]  fallback_alloc+0x1fd/0x2c0
[  550.182089]  ____cache_alloc_node+0x1be/0x1d0
[  550.186566]  __kmalloc+0x21a/0x7a0
[  550.190122]  ? kmem_cache_alloc_trace+0x623/0x790
[  550.194953]  ? lockdep_init_map+0x9/0x10
[  550.199051]  ? batadv_hash_new+0xae/0x280
[  550.203185]  batadv_hash_new+0xae/0x280
[  550.207192]  ? batadv_v_ogm_packet_recv+0xc80/0xc80
[  550.212198]  batadv_originator_init+0x5e/0x2b0
[  550.216762]  batadv_mesh_init+0x494/0x670
[  550.220924]  batadv_softif_init_late+0xa33/0xca0
[  550.225658]  ? batadv_interface_stats+0x190/0x190
[  550.230483]  ? __lockdep_init_map+0x10c/0x570
[  550.234968]  ? batadv_interface_stats+0x190/0x190
[  550.239871]  register_netdevice+0x28e/0xca0
[  550.244186]  ? netdev_change_features+0x80/0x80
[  550.248981]  ? rtnl_create_link+0x12c/0x850
[  550.253301]  ? __netlink_ns_capable+0xe2/0x130
[  550.257864]  rtnl_newlink+0x1441/0x1700
[  550.261813]  ? rtnl_newlink+0x3f5/0x1700
[  550.265858]  ? rtnl_link_unregister+0x200/0x200
[  550.270506]  ? avc_has_perm_noaudit+0x2b2/0x420
[  550.275194]  ? rtnetlink_rcv_msg+0x339/0xb70
[  550.279599]  ? rtnl_link_unregister+0x200/0x200
[  550.284244]  rtnetlink_rcv_msg+0x3da/0xb70
[  550.288461]  ? rtnl_bridge_getlink+0x7a0/0x7a0
[  550.293023]  ? netlink_deliver_tap+0x93/0x8f0
[  550.297497]  netlink_rcv_skb+0x14f/0x3c0
[  550.301797]  ? rtnl_bridge_getlink+0x7a0/0x7a0
[  550.306357]  ? lock_downgrade+0x740/0x740
[  550.310602]  ? netlink_ack+0x9a0/0x9a0
[  550.314483]  ? netlink_deliver_tap+0xba/0x8f0
[  550.318958]  rtnetlink_rcv+0x1d/0x30
[  550.322648]  netlink_unicast+0x44d/0x650
[  550.326722]  ? netlink_attachskb+0x6a0/0x6a0
[  550.331112]  ? security_netlink_send+0x81/0xb0
[  550.335674]  netlink_sendmsg+0x7c4/0xc60
[  550.339715]  ? netlink_unicast+0x650/0x650
[  550.343927]  ? security_socket_sendmsg+0x89/0xb0
[  550.348673]  ? netlink_unicast+0x650/0x650
[  550.352905]  sock_sendmsg+0xce/0x110
[  550.356602]  SYSC_sendto+0x206/0x310
[  550.360295]  ? SYSC_connect+0x2d0/0x2d0
[  550.364286]  ? errseq_sample+0x4d/0x60
[  550.368203]  ? sock_poll+0x220/0x220
[  550.371900]  ? fd_install+0x4d/0x60
[  550.375502]  ? sock_map_fd+0x56/0x80
[  550.379223]  ? SyS_socket+0x103/0x170
[  550.383004]  SyS_sendto+0x40/0x50
[  550.386450]  ? SyS_getpeername+0x30/0x30
[  550.390491]  do_syscall_64+0x1e8/0x640
[  550.394353]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  550.399172]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  550.404341] RIP: 0033:0x414613
[  550.407507] RSP: 002b:00007fffbe3b5c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  550.415190] RAX: ffffffffffffffda RBX: 0000000000a72200 RCX: 0000000000414613
[  550.422565] RDX: 000000000000003c RSI: 0000000000a72250 RDI: 0000000000000003
[  550.429856] RBP: 0000000000000000 R08: 00007fffbe3b5c80 R09: 000000000000000c
[  550.437103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  550.444362] R13: 0000000000000000 R14: 0000000000a72250 R15: 0000000000000003
[  550.451690] warn_alloc_show_mem: 1 callbacks suppressed
[  550.451692] Mem-Info:
[  550.459423] active_anon:1330928 inactive_anon:194 isolated_anon:0
[  550.459423]  active_file:1864 inactive_file:3305 isolated_file:0
[  550.459423]  unevictable:0 dirty:10 writeback:4 unstable:0
[  550.459423]  slab_reclaimable:13576 slab_unreclaimable:137126
[  550.459423]  mapped:56706 shmem:242 pagetables:13507 bounce:0
[  550.459423]  free:26286 free_pcp:319 free_cma:0
[  550.493072] Node 0 active_anon:1890640kB inactive_anon:752kB active_file:7440kB inactive_file:13200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:204752kB dirty:28kB writeback:16kB shmem:944kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1132544kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[  550.521259] Node 1 active_anon:3433072kB inactive_anon:24kB active_file:16kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:22072kB dirty:12kB writeback:0kB shmem:24kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[  550.548223] Node 0 DMA free:10476kB min:216kB low:268kB high:320kB active_anon:4412kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  550.574671] lowmem_reserve[]: 0 2569 2569 2569 2569
[  550.579676] Node 0 DMA32 free:36764kB min:36380kB low:45472kB high:54564kB active_anon:1886228kB inactive_anon:752kB active_file:7440kB inactive_file:13124kB unevictable:0kB writepending:44kB present:3129332kB managed:2634384kB mlocked:0kB kernel_stack:10336kB pagetables:24096kB bounce:0kB free_pcp:516kB local_pcp:188kB free_cma:0kB
[  550.609257] lowmem_reserve[]: 0 0 0 0 0
[  550.613224] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  550.638454] lowmem_reserve[]: 0 0 0 0 0
[  550.642424] Node 1 Normal free:57904kB min:53508kB low:66884kB high:80260kB active_anon:3433072kB inactive_anon:24kB active_file:16kB inactive_file:20kB unevictable:0kB writepending:12kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:9632kB pagetables:29932kB bounce:0kB free_pcp:760kB local_pcp:644kB free_cma:0kB
[  550.671473] lowmem_reserve[]: 0 0 0 0 0
[  550.675436] Node 0 DMA: 19*4kB (ME) 22*8kB (UMH) 23*16kB (UMEH) 28*32kB (UMEH) 18*64kB (UMEH) 9*128kB (UMEH) 4*256kB (UME) 1*512kB (E) 3*1024kB (MEH) 1*2048kB (E) 0*4096kB = 10476kB
[  550.691765] Node 0 DMA32: 314*4kB (UME) 901*8kB (UME) 1188*16kB (UMEH) 286*32kB (UMEH) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36624kB
[  550.705740] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  550.716409] Node 1 Normal: 3518*4kB (UMH) 2231*8kB (UMEH) 531*16kB (UMH) 478*32kB (UMEH) 33*64kB (UMEH) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 57824kB
[  550.731264] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  550.740081] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  550.748762] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  550.757573] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  550.766128] 5448 total pagecache pages
[  550.769999] 0 pages in swap cache
[  550.773431] Swap cache stats: add 0, delete 0, find 0/0
[  550.778774] Free swap  = 0kB
[  550.781775] Total swap = 0kB
[  550.784856] 1965979 pages RAM
[  550.787943] 0 pages HighMem/MovableOnly
[  550.791900] 335858 pages reserved
[  550.795327] 0 pages cma reserved
[  550.800530] ODEBUG: assert_init not available (active state 0) object type: timer_list hint:           (null)
[  550.810712] ------------[ cut here ]------------
[  550.815505] WARNING: CPU: 0 PID: 29922 at lib/debugobjects.c:287 debug_print_object.cold+0xa7/0xdb
[  550.824586] Kernel panic - not syncing: panic_on_warn set ...
[  550.824586] 
[  550.831930] CPU: 0 PID: 29922 Comm: syz-executor.2 Not tainted 4.14.158-syzkaller #0
[  550.839794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  550.849138] Call Trace:
[  550.851707]  dump_stack+0x142/0x197
[  550.855395]  panic+0x1f9/0x42d
[  550.858566]  ? add_taint.cold+0x16/0x16
[  550.862524]  ? debug_print_object.cold+0xa7/0xdb
[  550.867402]  ? debug_print_object.cold+0xa7/0xdb
[  550.872131]  __warn.cold+0x2f/0x2f
[  550.875647]  ? ist_end_non_atomic+0x10/0x10
[  550.880036]  ? debug_print_object.cold+0xa7/0xdb
[  550.884771]  report_bug+0x216/0x254
[  550.888407]  do_error_trap+0x1bb/0x310
[  550.892274]  ? math_error+0x360/0x360
[  550.896083]  ? vprintk_emit+0x171/0x600
[  550.900153]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  550.905090]  do_invalid_op+0x1b/0x20
[  550.908778]  invalid_op+0x1b/0x40
[  550.912206] RIP: 0010:debug_print_object.cold+0xa7/0xdb
[  550.917547] RSP: 0018:ffff88820f6af148 EFLAGS: 00010086
[  550.922887] RAX: 0000000000000061 RBX: 0000000000000005 RCX: 0000000000000000
[  550.930146] RDX: 0000000000000000 RSI: ffffffff86cc43c0 RDI: ffffed1041ed5e1f
[  550.937391] RBP: ffff88820f6af170 R08: 0000000000000061 R09: 0000000000000001
[  550.944637] R10: 0000000000000000 R11: ffff8880906fa680 R12: ffffffff86cbf6a0
[  550.951881] R13: 0000000000000000 R14: 0000000000000000 R15: ffff8881fedae0b0
[  550.959137]  ? debug_print_object.cold+0xa7/0xdb
[  550.963868]  debug_object_assert_init+0x22f/0x300
[  550.968831]  ? debug_object_init_on_stack+0x20/0x20
[  550.973830]  ? batadv_v_mesh_free+0x16/0x20
[  550.978123]  ? batadv_mesh_free+0x6d/0x160
[  550.982337]  ? trace_hardirqs_on+0x10/0x10
[  550.986579]  del_timer+0x67/0xf0
[  550.989920]  ? trigger_dyntick_cpu.isra.0+0x190/0x190
[  550.995084]  ? batadv_tvlv_handler_get+0x1c5/0x2d0
[  551.000029]  try_to_grab_pending+0x263/0x620
[  551.004434]  __cancel_work_timer+0xb4/0x480
[  551.008729]  ? cancel_delayed_work+0x20/0x20
[  551.013115]  ? batadv_tvlv_handler_get+0x1ec/0x2d0
[  551.018020]  ? trace_hardirqs_on+0xd/0x10
[  551.022144]  cancel_delayed_work_sync+0x1b/0x20
[  551.026789]  batadv_nc_mesh_free+0x46/0x11e
[  551.031085]  batadv_mesh_free+0x75/0x160
[  551.035122]  batadv_mesh_init+0x59a/0x670
[  551.039243]  batadv_softif_init_late+0xa33/0xca0
[  551.043975]  ? batadv_interface_stats+0x190/0x190
[  551.048792]  ? __lockdep_init_map+0x10c/0x570
[  551.053259]  ? batadv_interface_stats+0x190/0x190
[  551.058077]  register_netdevice+0x28e/0xca0
[  551.062376]  ? netdev_change_features+0x80/0x80
[  551.067027]  ? rtnl_create_link+0x12c/0x850
[  551.071323]  ? __netlink_ns_capable+0xe2/0x130
[  551.075885]  rtnl_newlink+0x1441/0x1700
[  551.080007]  ? rtnl_newlink+0x3f5/0x1700
[  551.084056]  ? rtnl_link_unregister+0x200/0x200
[  551.088715]  ? avc_has_perm_noaudit+0x2b2/0x420
[  551.093367]  ? rtnetlink_rcv_msg+0x339/0xb70
[  551.097768]  ? rtnl_link_unregister+0x200/0x200
[  551.102410]  rtnetlink_rcv_msg+0x3da/0xb70
[  551.106621]  ? rtnl_bridge_getlink+0x7a0/0x7a0
[  551.111178]  ? netlink_deliver_tap+0x93/0x8f0
[  551.115652]  netlink_rcv_skb+0x14f/0x3c0
[  551.119684]  ? rtnl_bridge_getlink+0x7a0/0x7a0
[  551.124239]  ? lock_downgrade+0x740/0x740
[  551.128360]  ? netlink_ack+0x9a0/0x9a0
[  551.132223]  ? netlink_deliver_tap+0xba/0x8f0
[  551.136696]  rtnetlink_rcv+0x1d/0x30
[  551.140399]  netlink_unicast+0x44d/0x650
[  551.144450]  ? netlink_attachskb+0x6a0/0x6a0
[  551.148843]  ? security_netlink_send+0x81/0xb0
[  551.153403]  netlink_sendmsg+0x7c4/0xc60
[  551.157444]  ? netlink_unicast+0x650/0x650
[  551.161658]  ? security_socket_sendmsg+0x89/0xb0
[  551.166390]  ? netlink_unicast+0x650/0x650
[  551.170602]  sock_sendmsg+0xce/0x110
[  551.174291]  SYSC_sendto+0x206/0x310
[  551.177984]  ? SYSC_connect+0x2d0/0x2d0
[  551.181938]  ? errseq_sample+0x4d/0x60
[  551.185806]  ? sock_poll+0x220/0x220
[  551.189499]  ? fd_install+0x4d/0x60
[  551.193107]  ? sock_map_fd+0x56/0x80
[  551.196795]  ? SyS_socket+0x103/0x170
[  551.200577]  SyS_sendto+0x40/0x50
[  551.204033]  ? SyS_getpeername+0x30/0x30
[  551.208074]  do_syscall_64+0x1e8/0x640
[  551.211968]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  551.216790]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  551.221956] RIP: 0033:0x414613
[  551.225122] RSP: 002b:00007fffbe3b5c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  551.232827] RAX: ffffffffffffffda RBX: 0000000000a72200 RCX: 0000000000414613
[  551.240075] RDX: 000000000000003c RSI: 0000000000a72250 RDI: 0000000000000003
[  551.247322] RBP: 0000000000000000 R08: 00007fffbe3b5c80 R09: 000000000000000c
[  551.254915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  551.262160] R13: 0000000000000000 R14: 0000000000a72250 R15: 0000000000000003
[  551.270908] Kernel Offset: disabled
[  551.274535] Rebooting in 86400 seconds..