MA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aee0f15290b73fca56cd5ec1eb"}, 0x6, 0x1, 0x7f0f}}}, 0x118) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) fstat(r1, &(0x7f0000000500)) getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0x1, &(0x7f0000000840)=[0x0]) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) getegid() getuid() fstat(r0, &(0x7f00000014c0)) getuid() getresgid(&(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80)) 05:54:49 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getgroups(0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010207031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b3562406b20cd37ed01cc00000000000000000000000000000", 0x4c}], 0x1}, 0x6000) 05:54:49 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:54:49 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x6c000000}]}, 0x78) 05:54:49 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x6800}]}, 0x78) 05:54:49 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:54:49 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getgroups(0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010207031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b3562406b20cd37ed01cc00000000000000000000000000000", 0x4c}], 0x1}, 0x7a) 05:54:50 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r2 = memfd_create(&(0x7f0000000180)="ac0000", 0x1) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1) ioctl$UI_END_FF_UPLOAD(r1, 0x406855c9, &(0x7f0000000040)={0x1, 0xe84, {0x51, 0x0, 0xfffffffffffffffb, {0x7fffffff, 0x95f2}, {0xcfe}, @ramp={0x0, 0x8000, {0x7fe0000, 0x7f, 0x800, 0x6}}}, {0x0, 0x1, 0x200, {0x5, 0x5}, {0x8, 0x101}, @const={0x7f65cd31, {0x9, 0x4, 0xfffffffffffffffe, 0x791}}}}) ftruncate(r2, 0x1000000) sendfile(r1, r2, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) 05:54:50 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x10}]}, 0x78) 05:54:50 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:54:50 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getgroups(0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010207031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b3562406b20cd37ed01cc00000000000000000000000000000", 0x4c}], 0x1}, 0x4) 05:54:50 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getgroups(0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010207031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b3562406b20cd37ed01cc00000000000000000000000000000", 0x4c}], 0x1}, 0x9effffff00000000) 05:54:50 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000002700)=ANY=[], 0x0) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0xa, 0x1, 0x7f0f}}}, 0x118) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) fstat(r1, &(0x7f0000000500)) getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0x1, &(0x7f0000000840)=[0x0]) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) getegid() getuid() fstat(r0, &(0x7f00000014c0)) getuid() getresgid(&(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80)) 05:54:50 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r3 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) fadvise64(r1, 0x17, 0x4000, 0x2) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0) ftruncate(r3, 0x1000000) sendfile(r2, r3, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) 05:54:50 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:54:50 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x7}]}, 0x78) 05:54:50 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getgroups(0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010207031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b3562406b20cd37ed01cc00000000000000000000000000000", 0x4c}], 0x1}, 0xf0ffffff00000000) 05:54:50 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xb3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:54:50 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x2}]}, 0x78) 05:54:51 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:54:51 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getgroups(0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010207031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b3562406b20cd37ed01cc00000000000000000000000000000", 0x4c}], 0x1}, 0x5000000) 05:54:51 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x6}]}, 0x78) 05:54:51 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000040)) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000080)={r1, 0x80000000, 0x738, "981d8715cf2f24a3281c78546ca790c47fbcec5bfaf308fda68b1e4fb81f57f5f1fdce56edae3340"}) r2 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1) ftruncate(r2, 0x1000000) sendfile(r1, r2, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) 05:54:51 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000002700)=ANY=[], 0x0) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0xf, 0x1, 0x7f0f}}}, 0x118) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) fstat(r1, &(0x7f0000000500)) getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0x1, &(0x7f0000000840)=[0x0]) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) getegid() getuid() fstat(r0, &(0x7f00000014c0)) getuid() getresgid(&(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80)) 05:54:51 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getgroups(0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010207031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b3562406b20cd37ed01cc00000000000000000000000000000", 0x4c}], 0x1}, 0x4c00) 05:54:51 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:54:51 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0xa0008000}]}, 0x78) 05:54:51 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getgroups(0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010207031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b3562406b20cd37ed01cc00000000000000000000000000000", 0x4c}], 0x1}, 0xf0) 05:54:51 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r3 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) fadvise64(r1, 0x17, 0x4000, 0x2) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0) ftruncate(r3, 0x1000000) sendfile(r2, r3, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) 05:54:51 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000002700)=ANY=[], 0x0) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x10, 0x1, 0x7f0f}}}, 0x118) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) fstat(r1, &(0x7f0000000500)) getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0x1, &(0x7f0000000840)=[0x0]) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) getegid() getuid() fstat(r0, &(0x7f00000014c0)) getuid() getresgid(&(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80)) 05:54:51 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x100000000000000}]}, 0x78) 05:54:51 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:54:51 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getgroups(0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010207031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b3562406b20cd37ed01cc00000000000000000000000000000", 0x4c}], 0x1}, 0x7a00) 05:54:51 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x4000000}]}, 0x78) 05:54:52 executing program 3: socketpair(0x9, 0x0, 0x3, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000140)={r1}) r2 = socket$inet(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getgroups(0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010207031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b3562406b20cd37ed01cc00000000000000000000000000000", 0x4c}], 0x1}, 0x0) 05:54:52 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:54:52 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x1000000}]}, 0x78) 05:54:52 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r2 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x800000000002) ftruncate(r2, 0x1000000) bind$llc(r2, &(0x7f0000000040)={0x1a, 0x32d, 0x8, 0x3ff, 0x1, 0x4, @local}, 0x10) sendfile(r1, r2, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) 05:54:52 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000002700)=ANY=[], 0x0) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0x5, 0x7f0f}}}, 0x118) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) fstat(r1, &(0x7f0000000500)) getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0x1, &(0x7f0000000840)=[0x0]) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) getegid() getuid() fstat(r0, &(0x7f00000014c0)) getuid() getresgid(&(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80)) 05:54:52 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x74}]}, 0x78) [ 1595.887817] __nla_parse: 24 callbacks suppressed [ 1595.887827] netlink: 20 bytes leftover after parsing attributes in process `syz-executor3'. 05:54:52 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:54:52 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x7a}]}, 0x78) 05:54:52 executing program 3: r0 = socket$inet(0x10, 0x80005, 0x101) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getgroups(0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010207031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b3562406b20cd37ed01cc00000000000000000000000000000", 0x4c}], 0x1}, 0x0) 05:54:52 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r3 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) fadvise64(r1, 0x17, 0x4000, 0x2) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) ftruncate(0xffffffffffffffff, 0x1000000) sendfile(r2, r3, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) 05:54:52 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000002700)=ANY=[], 0x0) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0x4, 0x7f0f}}}, 0x118) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) fstat(r1, &(0x7f0000000500)) getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0x1, &(0x7f0000000840)=[0x0]) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) getegid() getuid() fstat(r0, &(0x7f00000014c0)) getuid() getresgid(&(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80)) 05:54:52 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x3}]}, 0x78) 05:54:52 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x500000000000000}]}, 0x78) 05:54:52 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getgroups(0x10f, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x541042, 0x0) ioctl$UI_SET_RELBIT(r2, 0x40045566, 0xf) ioctl$KVM_SET_BOOT_CPU_ID(r3, 0xae78, &(0x7f0000000140)=0x1) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x12) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fcntl$getownex(r3, 0x10, &(0x7f0000000180)={0x0, 0x0}) ptrace$setregs(0xf, r4, 0xc5, &(0x7f00000001c0)="02e733cc0b6a25b48642a69997e81ce62ed9e1ad07853bf699696fffa921a117de419ef3ba63497eb4f3ad858ddb8a403b1093196eba804c0cfb7d23181f1914d2ebc1d72ca3e53505f7c138f36148add559bcb2b6967c39cf8cbb07da5163f7af0def4da02c4ff62f6c7465e76aec040929c67ec5a3800b875bdb31f5193448b334e658c67faddab7b8ad2e819b4600c7d8a606b83fe8d65f18dd9fa408c81771dd67d0dc93964e170d825c56ce4f1e2d644814d46544a218a9a2bec63c402e87410e4e86fc60be2cb9673b8b8fdc35") fsetxattr$security_selinux(r0, &(0x7f00000002c0)='security.selinux\x00', &(0x7f0000000300)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x3) syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x9, 0x240e00) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010207031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b3562406b20cd37ed01cc00000000000000000000000000000", 0x4c}], 0x1000000000000218}, 0x0) ioctl$VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f00000003c0)={0x100, 0x5, 0x4, 0x20, {0x0, 0x7530}, {0x7, 0x1, 0x3ff, 0x8, 0x2, 0x2, "fe278dfd"}, 0x10000, 0x1, @planes=&(0x7f0000000380)={0x9, 0x2, @mem_offset=0x4, 0x4}, 0x4}) pipe2(&(0x7f0000000440), 0x4800) r5 = getgid() getgroups(0x1, &(0x7f0000000480)=[r5]) 05:54:52 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x300000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:54:52 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r2 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1) syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x3, 0x9e9a48b3634d9bba) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ftruncate(r2, 0x1000000) sendfile(r1, r2, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) 05:54:52 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r3 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) fadvise64(r1, 0x17, 0x4000, 0x2) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) ftruncate(0xffffffffffffffff, 0x1000000) sendfile(r2, r3, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) 05:54:52 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000002700)=ANY=[], 0x0) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0xf0, 0x7f0f}}}, 0x118) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) fstat(r1, &(0x7f0000000500)) getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0x1, &(0x7f0000000840)=[0x0]) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) getegid() getuid() fstat(r0, &(0x7f00000014c0)) getuid() getresgid(&(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80)) 05:54:52 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0xc) writev(r1, 0x0, 0x0) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={"00ac7200004000", 0x2001}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$addseals(r0, 0x409, 0xb) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getgroups(0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010207031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b3562406b20cd37ed01cc00000000000000000000000000000", 0x4c}], 0x1}, 0x0) 05:54:52 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x3000000}]}, 0x78) 05:54:52 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:54:53 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x68000000}]}, 0x78) 05:54:53 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x8000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) [ 1596.829329] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 05:54:53 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r3 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) fadvise64(r1, 0x17, 0x4000, 0x2) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) ftruncate(0xffffffffffffffff, 0x1000000) sendfile(r2, r3, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) 05:54:53 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x6c00}]}, 0x78) [ 1596.906576] IPv6: ADDRCONF(NETDEV_UP): bond_slave_1: link is not ready [ 1596.944097] netlink: 20 bytes leftover after parsing attributes in process `syz-executor3'. 05:54:53 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x4c000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) [ 1597.029611] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 1597.038081] sg_write: 65 callbacks suppressed [ 1597.052822] sg_write: data in/out 196572/74 bytes for SCSI command 0xff-- guessing data in; [ 1597.052822] program syz-executor4 not setting count and/or reply_len properly [ 1597.069085] sg_write: data in/out 393180/74 bytes for SCSI command 0xff-- guessing data in; 05:54:53 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r3 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) fadvise64(r1, 0x17, 0x4000, 0x2) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) ftruncate(r3, 0x0) sendfile(r2, r3, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) [ 1597.069085] program syz-executor5 not setting count and/or reply_len properly [ 1597.096616] sg_write: data in/out 196572/74 bytes for SCSI command 0xff-- guessing data in; [ 1597.096616] program syz-executor4 not setting count and/or reply_len properly [ 1597.134589] sg_write: data in/out 393180/74 bytes for SCSI command 0xff-- guessing data in; [ 1597.134589] program syz-executor5 not setting count and/or reply_len properly [ 1597.152582] netlink: 20 bytes leftover after parsing attributes in process `syz-executor3'. [ 1597.193112] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 05:54:53 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r2 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1) ftruncate(r2, 0x1000000) sendfile(r1, r2, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x5, 0x400) 05:54:53 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000002700)=ANY=[], 0x0) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0xe0, 0x7f0f}}}, 0x118) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) fstat(r1, &(0x7f0000000500)) getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0x1, &(0x7f0000000840)=[0x0]) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) getegid() getuid() fstat(r0, &(0x7f00000014c0)) getuid() getresgid(&(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80)) 05:54:53 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:54:53 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x6000}]}, 0x78) 05:54:53 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r3 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) fadvise64(r1, 0x17, 0x4000, 0x2) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) ftruncate(r3, 0x0) sendfile(r2, r3, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) 05:54:53 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getgroups(0x0, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) ioctl$RNDADDENTROPY(r2, 0x40085203, &(0x7f00000001c0)={0x2, 0xe3, "dfe869e2c8f9de7475927dae22084ba7694ab607c0c8bfad28d2cb7ab4a678f4f6ca140295ec4eecf76012d6cf5343b992f57b72357acfe37398a02677dd10b05e72023bf514098154fb3b6b4c347ebf8b6d8f19221b4adbe4afa08abf9254f46838477a9e8d96be1a01143ce4d60730986810a30eeca9769e38069587a285cd61fe4d28624c7210e4de6833a5a0b2921c1e49f4e318639792da9de8e92a6bcc7d42d77f266cdfe7c4fd4c73a3e8ab92bcdd25a54f8eb576becbf96c0e18b9d2fb3d1cb5b6f4e344822b9538a67fc7ad6d9b5dc87c023a4479a00ceb681021cdc52ae0"}) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010207031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b3562406b20cd37ed01cc00000000000000000000000000000", 0x4c}], 0x1}, 0x0) r3 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x82e, 0x488002) ioctl$TUNSETSNDBUF(r3, 0x400454d4, &(0x7f0000000140)=0x20) [ 1597.624409] sg_write: data in/out 393180/74 bytes for SCSI command 0xff-- guessing data in; [ 1597.624409] program syz-executor5 not setting count and/or reply_len properly [ 1597.651215] sg_write: data in/out 196572/74 bytes for SCSI command 0xff-- guessing data in; [ 1597.651215] program syz-executor4 not setting count and/or reply_len properly [ 1597.670033] netlink: 20 bytes leftover after parsing attributes in process `syz-executor3'. 05:54:53 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r3 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) fadvise64(r1, 0x17, 0x4000, 0x2) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) ftruncate(r3, 0x0) sendfile(r2, r3, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) 05:54:53 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f00000001c0)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) socketpair$unix(0x1, 0x74ec38c73b877520, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getgroups(0x0, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x1f, 0x0, 0xef) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400203) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x101040, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[0x8]}) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010207031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b3562406b20cd37ed01cc00000000000000000000000000000", 0x4c}], 0x1}, 0x0) [ 1597.703274] sg_write: data in/out 393180/74 bytes for SCSI command 0xff-- guessing data in; [ 1597.703274] program syz-executor5 not setting count and/or reply_len properly [ 1597.785036] sg_write: data in/out 196572/74 bytes for SCSI command 0xff-- guessing data in; [ 1597.785036] program syz-executor4 not setting count and/or reply_len properly 05:54:54 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r2 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) fadvise64(r1, 0x17, 0x4000, 0x2) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) ftruncate(r2, 0x1000000) sendfile(0xffffffffffffffff, r2, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) 05:54:54 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x7}]}, 0x78) [ 1597.838180] QAT: Invalid ioctl [ 1597.854431] netlink: 20 bytes leftover after parsing attributes in process `syz-executor3'. [ 1597.879710] QAT: Invalid ioctl 05:54:54 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000002700)=ANY=[], 0x0) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0xffff8000, 0x7f0f}}}, 0x118) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) fstat(r1, &(0x7f0000000500)) getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0x1, &(0x7f0000000840)=[0x0]) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) getegid() getuid() fstat(r0, &(0x7f00000014c0)) getuid() getresgid(&(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80)) 05:54:54 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x2711}, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getgroups(0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) times(&(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x4000) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r3, 0xc0105303, &(0x7f0000000180)={0x7fffffff, 0x6f4}) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010207031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b3562406b20cd37ed01cc00000000000000000000000000000", 0x4c}], 0x1}, 0x0) [ 1597.939510] sg_write: data in/out 393180/74 bytes for SCSI command 0xff-- guessing data in; [ 1597.939510] program syz-executor5 not setting count and/or reply_len properly [ 1598.030450] netlink: 20 bytes leftover after parsing attributes in process `syz-executor3'. [ 1598.049619] sg_write: data in/out 393180/74 bytes for SCSI command 0xff-- guessing data in; [ 1598.049619] program syz-executor5 not setting count and/or reply_len properly [ 1598.087750] netlink: 20 bytes leftover after parsing attributes in process `syz-executor3'. 05:54:54 executing program 1: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x80000, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0, 0x1000}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000001c0)={r1, 0xdb, "652626928e35684e587a21c9001ef94cef8de38538d4a5dc533cb62ae6fc6e18efb95a47961fc8a15a0799ef5e79d61b81ab3df32cd7b94187da51bb193e5d7a3901cbec80add413021e9655ebea3c21c74c72d46d579ac869dcfbfaa43a334147ad5dc2122defd0abe6a6afb987713244e2b65010a2722be26d2796472d82296d5024a89985b2c5eb0b00add6fea30466eedf865380f9a8fc634e9f277e1174237c2f9aa166c617a96ec002d8ebf4a460996a95f8dcf6ce85dd0f4c8fd20e306e86c0be82151cc04e3cd6ff52fb10865279d35c17b8548420de8a"}, &(0x7f00000002c0)=0xe3) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r4 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r4, 0x4008af14, &(0x7f0000000040)={0x3, 0x8}) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40042409, 0x1) ftruncate(r4, 0x1000000) sendfile(r3, r4, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000300)={'syz_tun\x00', {0x2, 0x4e23, @empty}}) 05:54:54 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r3 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) fadvise64(r1, 0x17, 0x4000, 0x2) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) ftruncate(r3, 0x1000000) sendfile(r2, 0xffffffffffffffff, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) 05:54:54 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0xffffff7f00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:54:54 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x6000000000000000}]}, 0x78) 05:54:54 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getgroups(0x0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.opaque\x00', &(0x7f0000000080)='y\x00', 0x2, 0x2) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsetxattr$security_evm(r0, &(0x7f0000000140)='security.evm\x00', &(0x7f0000000180)=@v1={0x2, "e6cb"}, 0x3, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009ff0)}, 0x0) 05:54:54 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000002700)=ANY=[], 0x0) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0xf000, 0x7f0f}}}, 0x118) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) fstat(r1, &(0x7f0000000500)) getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0x1, &(0x7f0000000840)=[0x0]) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) getegid() getuid() fstat(r0, &(0x7f00000014c0)) getuid() getresgid(&(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80)) 05:54:54 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS(0xffffffffffffffff, 0x80605414, &(0x7f0000000200)=""/75) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000180)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r3 = accept$alg(r2, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r3, &(0x7f0000000800)={0x0, 0x8000a0, &(0x7f0000000700)=[{&(0x7f00000023c0)=""/4096, 0x1000}], 0x1, &(0x7f0000000100)=""/16, 0x10}, 0x0) socket(0x10, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000002c0)={"7465616d3000000f00"}) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) write$P9_RWSTAT(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x7f, 0x1}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) getgroups(0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010207031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b3562406b20cd37ed01cc00000000000000000000000000000", 0x4c}], 0x1}, 0x0) r4 = accept(r1, &(0x7f0000000140)=@vsock={0x28, 0x0, 0x0, @my}, &(0x7f00000000c0)=0x80) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r5, 0x310, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) r6 = syz_open_dev$admmidi(&(0x7f0000000300)='/dev/admmidi#\x00', 0x2, 0x400000) setsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f00000003c0)=0x2000000, 0x4) ioctl$PIO_UNIMAP(r6, 0x4b67, &(0x7f0000000380)={0x8, &(0x7f0000000340)=[{0x8, 0x3}, {0xd03, 0xfffffffffffffffc}, {0x1, 0x3}, {0x7ff, 0x876}, {0x8, 0x72}, {0x4, 0xffffffff}, {0x1, 0x8}, {0x3ff, 0x4}]}) 05:54:54 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x4800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:54:54 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x300000000000000}]}, 0x78) 05:54:54 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r3 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) fadvise64(r1, 0x17, 0x4000, 0x2) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) ftruncate(r3, 0x1000000) sendfile(r2, r3, 0x0, 0xeffffdef) [ 1598.642939] QAT: Invalid ioctl 05:54:54 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000002700)=ANY=[], 0x0) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0xffff8801cf18b468, 0x7f0f}}}, 0x118) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) fstat(r1, &(0x7f0000000500)) getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0x1, &(0x7f0000000840)=[0x0]) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) getegid() getuid() fstat(r0, &(0x7f00000014c0)) getuid() getresgid(&(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80)) 05:54:55 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x6c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) [ 1598.765407] netlink: 20 bytes leftover after parsing attributes in process `syz-executor3'. 05:54:55 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r2 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1) ftruncate(r2, 0x1000000) sendfile(r1, r2, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x208100) 05:54:55 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x6c000000}]}, 0x78) 05:54:55 executing program 3: r0 = socket$inet(0x10, 0x1040080000, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x800, 0x0) ioctl$EVIOCGBITKEY(r2, 0x80404521, &(0x7f0000000140)=""/246) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getgroups(0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010207031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b3562406b20cd37ed01cc00000000000000000000000000000", 0x4c}], 0x1}, 0x0) 05:54:55 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:54:55 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000002700)=ANY=[], 0x0) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0xf, 0x7f0f}}}, 0x118) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) fstat(r1, &(0x7f0000000500)) getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0x1, &(0x7f0000000840)=[0x0]) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) getegid() getuid() fstat(r0, &(0x7f00000014c0)) getuid() getresgid(&(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80)) [ 1599.366301] QAT: Invalid ioctl 05:54:55 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x20000000}]}, 0x78) 05:54:55 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x48000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:54:55 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000140)={0x0, 0x64, "8c6a633351595b342ddd47262d36efa1dfa454abd735cfce6b95072f96b2f1e2cc3d0cb8f1cc36a22a259bd50ccc55fe49c539e1641f6264e961fd7db2cd1ce84ce3f72c50132eb76b3849d6f8989a2cd1fcd484c3e2cb421be0077dd2b9b645f5664146"}, &(0x7f00000000c0)=0x6c) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f00000001c0)={r1, 0x401, 0x30, 0x0, 0x81}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getgroups(0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010207031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b3562406b20cd37ed01cc00000000000000000000000000000", 0x4c}], 0x1}, 0x0) 05:54:55 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r3 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) fadvise64(r1, 0x17, 0x4000, 0x2) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) ftruncate(r3, 0x1000000) sendfile(r2, r3, &(0x7f00000000c0), 0xeffffdef) 05:54:55 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x700}]}, 0x78) 05:54:55 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0xd000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) [ 1599.603272] netlink: 20 bytes leftover after parsing attributes in process `syz-executor3'. [ 1599.641755] netlink: 20 bytes leftover after parsing attributes in process `syz-executor3'. 05:54:55 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getgroups(0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='gid_map\x00') write$P9_RATTACH(r2, &(0x7f0000000140)={0xfffffffffffffd22, 0x69, 0x2, {0x0, 0x4, 0x7}}, 0x14) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010207031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b3562406b20cd37ed01cc00000000000000000000000000000", 0x4c}], 0x1}, 0x0) 05:54:56 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r2 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1) openat$cgroup_ro(r2, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x0, 0x0) ftruncate(r2, 0x1000000) sendfile(r1, r2, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) 05:54:56 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getgroups(0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010207031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b3562406b20cd37ed01cc00000000000000000000000000000", 0x4c}], 0x1}, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x20000, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) 05:54:56 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000002700)=ANY=[], 0x0) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0x2, 0x7f0f}}}, 0x118) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) fstat(r1, &(0x7f0000000500)) getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0x1, &(0x7f0000000840)=[0x0]) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) getegid() getuid() fstat(r0, &(0x7f00000014c0)) getuid() getresgid(&(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80)) 05:54:56 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x4c}]}, 0x78) 05:54:56 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:54:56 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x6c}]}, 0x78) 05:54:56 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:54:56 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getgroups(0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f00000000c0), 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010207031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b3562406b20cd37ed01cc00000000000000000000000000000", 0x4c}], 0x1}, 0x0) 05:54:56 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x10000000000000}]}, 0x78) 05:54:56 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x3100, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:54:56 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={r0}) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f00000001c0)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f00000002c0)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f00000003c0)={{{@in6, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@remote}}, &(0x7f00000004c0)=0xe8) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000580)={@loopback, 0x0}, &(0x7f00000005c0)=0x14) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000600)={{{@in6=@mcast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@dev}}, &(0x7f0000000700)=0xe8) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000780)={@dev, 0x0}, &(0x7f00000007c0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000800)={{{@in=@empty, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@loopback}}, &(0x7f0000000900)=0xe8) getsockname$packet(0xffffffffffffffff, &(0x7f0000001d80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001dc0)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000001e00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001e40)=0x14) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001f40)={{{@in6=@mcast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000002040)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000002640)={'vcan0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000026c0)={{{@in, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6}}, &(0x7f00000027c0)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000002800)={'team0\x00', 0x0}) accept$packet(0xffffffffffffffff, &(0x7f0000002840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002880)=0x14) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000002a40)={{{@in6=@ipv4={[], [], @local}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@mcast1}}, &(0x7f0000002b40)=0xe8) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000002c00)={@broadcast, @multicast2, 0x0}, &(0x7f0000002c40)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000002c80)={{{@in=@multicast2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000002d80)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000002dc0)={'team0\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000002f40)={0x11, 0x0, 0x0}, &(0x7f0000002f80)=0x14) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000002fc0)={'bpq0\x00', 0x0}) getsockname$packet(0xffffffffffffff9c, &(0x7f0000003000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000003040)=0x14) getpeername(r0, &(0x7f00000030c0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003140)=0x80) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000003180)={'bridge0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000031c0)={'team0\x00', 0x0}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000032c0)={0x0, @dev, @empty}, &(0x7f0000003300)=0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000004800)={'veth0_to_bond\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000004840)={'bond_slave_1\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r3, &(0x7f0000005100)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000008}, 0xc, &(0x7f00000050c0)={&(0x7f0000004880)={0x824, r4, 0x4, 0x70bd2d, 0x25dfdbff, {}, [{{0x8, 0x1, r5}, {0x25c, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x1ff}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r12}}}]}}, {{0x8, 0x1, r13}, {0xcc, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r14}}}, {0x54, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x24, 0x4, [{0x1, 0x2, 0x5, 0x285}, {0x5, 0xb1e, 0x4, 0x3}, {0x0, 0x2ab, 0x3}, {0x7, 0x8, 0x7fffffff}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x1000}}}]}}, {{0x8, 0x1, r15}, {0xb4, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r16}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x1f}}}]}}, {{0x8, 0x1, r17}, {0x1e8, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r18}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r19}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x7f}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r20}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r21}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0xde2}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r22}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r23}}, {0x8}}}]}}, {{0x8, 0x1, r24}, {0x3c, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x1000}}}]}}, {{0x8, 0x1, r25}, {0x1e0, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r26}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r27}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0xb19}}, {0x8, 0x6, r28}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r29}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r30}}}]}}]}, 0x824}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000040) getgroups(0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010207031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b3562406b20cd37ed01cc00000000000000000000000000000", 0x4c}], 0x1}, 0x0) 05:54:56 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r3 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) fadvise64(r1, 0x17, 0x4000, 0x2) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) ftruncate(r3, 0x1000000) sendfile(r2, r3, &(0x7f00000000c0)=0xf1050f, 0x0) 05:54:57 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:54:57 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000002700)=ANY=[], 0x0) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0x9, 0x7f0f}}}, 0x118) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) fstat(r1, &(0x7f0000000500)) getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0x1, &(0x7f0000000840)=[0x0]) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) getegid() getuid() fstat(r0, &(0x7f00000014c0)) getuid() getresgid(&(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80)) 05:54:57 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x5000000}]}, 0x78) 05:54:57 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r2 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x20080, 0x0) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000040)) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000140)={r0, 0x0, 0x2, 0x9d, 0x1}) ftruncate(r3, 0x41) sendfile(r1, r2, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) 05:54:57 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r3 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) fadvise64(r1, 0x17, 0x4000, 0x2) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) ftruncate(r3, 0x1000000) sendfile(r2, r3, &(0x7f00000000c0)=0xf1050f, 0x0) 05:54:57 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getgroups(0x0, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x0, 0x0, 0xfffffffffffffee5) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000880)={0x0, {0x2, 0x0, @dev}, {0x2, 0x0, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x400}) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x4e24, @loopback}, 0x10) r3 = getpgrp(0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r3, 0x10, &(0x7f0000000640)={0x200}) r4 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x7f, 0x200000) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f0000000680)={0x30, 0x5, 0x0, {0x0, 0x3, 0x8, 0x4}}, 0x30) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, 0x0, 0x0) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000180)) r5 = shmget$private(0x0, 0x1000, 0x200, &(0x7f0000ffc000/0x1000)=nil) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f00000009c0)={0x6, {{0x2, 0x4e21, @multicast1}}, {{0x2, 0x4e21, @loopback}}}, 0x108) shmctl$IPC_INFO(r5, 0x3, &(0x7f0000000900)=""/184) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote, [0x3f000004, 0x700, 0xfc00, 0xc0fe, 0x100000004000000, 0x0, 0x0, 0x100000000000000]}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="480000000000000014010000010000000000000000000000", @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="8903080000000000", @ANYPTR=&(0x7f00000006c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB=',\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000005bb8fe320019000000000000000000001f7f4f77ff495c000000000000000000000000000000000000000000"], @ANYBLOB='C\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="c600000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="0f00000000000000", @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="ffff070000000000", @ANYPTR=&(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='*\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='M\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="f400000000000000", @ANYPTR=&(0x7f0000000540)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="db00000000000000"], @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010207031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b3562406b20cd37ed01cc00000000000000000000000000000", 0x4c}], 0x1}, 0x0) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000200)=0x1) [ 1601.161840] rdma_op 000000007c1984d5 conn xmit_rdma (null) [ 1601.199390] __nla_parse: 6 callbacks suppressed 05:54:57 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:54:57 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x60000000}]}, 0x78) 05:54:57 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r3 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) fadvise64(r1, 0x17, 0x4000, 0x2) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) ftruncate(r3, 0x1000000) sendfile(r2, r3, &(0x7f00000000c0)=0xf1050f, 0x0) 05:54:57 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x2e, &(0x7f00000001c0)='{vmnet1@vmnet0user\'(posix_acl_accesscgroupGPL\x00'}, 0x30) perf_event_open(&(0x7f0000000140)={0x5, 0x70, 0x7f, 0x7, 0x73, 0xfff, 0x0, 0x9, 0x8, 0x2, 0x100, 0x100000001, 0x4, 0x3, 0x3f, 0x81, 0x2, 0x9, 0x3190, 0x7, 0x6, 0x0, 0x0, 0x200, 0xe1, 0x8, 0x7, 0xfffffffffffff134, 0x4a, 0x6, 0xd348, 0x0, 0x8, 0x2, 0x1, 0x7, 0x0, 0xd9b5, 0x0, 0x3, 0x1, @perf_bp={&(0x7f00000000c0), 0x2}, 0x80, 0x4, 0x7fff, 0x9, 0x5, 0x10000, 0x3cb79083}, r2, 0xd, 0xffffffffffffffff, 0x9) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getgroups(0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010207031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b3562406b20cd37ed01cc00000000000000000000000000000", 0x4c}], 0x1}, 0x0) [ 1601.199400] netlink: 20 bytes leftover after parsing attributes in process `syz-executor3'. 05:54:57 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r2 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1) write(r1, &(0x7f0000000140)="67fba1dffc4990843e97a5ab76eba6cbba3c4e5abedd5aac0edeaf63225a170297a7011e38d63ee4bc1016bb5070774fc240a5f6c12c528bbf95552d4cc781ee53b7f7f45d55ccf6018f6a8d212fa982a233238ef0dc3354feba9a7cf361c0e494aad0f9004b389d06ce4bb9cf02753db981113d606ab99d6162b407eb9c4dfa15253e452d38fd6191b76b6c8320dd2c5ce1404229c6527ca244dbddfbf8c193b1730dfb98573cb730bcd2f60e86094d02e3c9cc128af2d9bd917c11926028ab97df2ed840de93b94d7d1673c837e35ed29061beb9ade612", 0xd8) ftruncate(r2, 0x1000000) sendfile(r1, r2, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) 05:54:57 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x6000000}]}, 0x78) 05:54:57 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) [ 1601.407733] netlink: 20 bytes leftover after parsing attributes in process `syz-executor3'. [ 1601.479396] netlink: 20 bytes leftover after parsing attributes in process `syz-executor3'. 05:54:57 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000002700)=ANY=[], 0x0) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0xfffffff0, 0x7f0f}}}, 0x118) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) fstat(r1, &(0x7f0000000500)) getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0x1, &(0x7f0000000840)=[0x0]) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) getegid() getuid() fstat(r0, &(0x7f00000014c0)) getuid() getresgid(&(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80)) 05:54:57 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r3 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) fadvise64(r1, 0x17, 0x4000, 0x2) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) ftruncate(r3, 0x1000000) sendfile(r2, r3, &(0x7f00000000c0)=0xf1050f, 0x0) 05:54:57 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x68}]}, 0x78) 05:54:57 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:54:57 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$gfs2(&(0x7f00000000c0)='gfs2\x00', &(0x7f0000000140)='./file0\x00', 0x9c1, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000180)="e93c108435d9844f09c678dfe000bfdeba3849c6d7ab02a228c6f9218b4eb7d1fda910967b65cc80243943da225fb9c513e5e6aef0fa28eadc3e", 0x3a, 0x10000}], 0x4, &(0x7f0000000200)={[{@norgrplvb='norgrplvb'}, {@upgrade='upgrade'}, {@quota_on='quota=on'}, {@errors_withdraw='errors=withdraw'}, {@loccookie='loccookie'}, {@norgrplvb='norgrplvb'}], [{@dont_measure='dont_measure'}, {@fsmagic={'fsmagic', 0x3d, 0x2}}]}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getgroups(0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010207031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b3562406b20cd37ed01cc00000000000000000000000000000", 0x4c}], 0x1}, 0x0) 05:54:57 executing program 0: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x700}]}, 0x78) [ 1601.681840] netlink: 20 bytes leftover after parsing attributes in process `syz-executor3'. 05:54:57 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x700000000000000}]}, 0x78) 05:54:57 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:54:58 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS(0xffffffffffffffff, 0x80605414, &(0x7f0000000200)=""/75) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000180)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r3 = accept$alg(r2, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r3, &(0x7f0000000800)={0x0, 0x8000a0, &(0x7f0000000700)=[{&(0x7f00000023c0)=""/4096, 0x1000}], 0x1, &(0x7f0000000100)=""/16, 0x10}, 0x0) socket(0x10, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000002c0)={"7465616d3000000f00"}) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) write$P9_RWSTAT(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x7f, 0x1}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) getgroups(0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010207031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b3562406b20cd37ed01cc00000000000000000000000000000", 0x4c}], 0x1}, 0x0) r4 = accept(r1, &(0x7f0000000140)=@vsock={0x28, 0x0, 0x0, @my}, &(0x7f00000000c0)=0x80) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r5, 0x310, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) r6 = syz_open_dev$admmidi(&(0x7f0000000300)='/dev/admmidi#\x00', 0x2, 0x400000) setsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f00000003c0)=0x2000000, 0x4) ioctl$PIO_UNIMAP(r6, 0x4b67, &(0x7f0000000380)={0x8, &(0x7f0000000340)=[{0x8, 0x3}, {0xd03, 0xfffffffffffffffc}, {0x1, 0x3}, {0x7ff, 0x876}, {0x8, 0x72}, {0x4, 0xffffffff}, {0x1, 0x8}, {0x3ff, 0x4}]}) [ 1601.978004] netlink: 20 bytes leftover after parsing attributes in process `syz-executor0'. 05:54:58 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x3f00000000000000}]}, 0x78) 05:54:58 executing program 3: r0 = socket$inet(0x10, 0x6, 0x61) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getgroups(0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xfffffffffffffffc, 0x0, 0xffffffffffffffc4) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010207031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b3562406b20cd37ed01cc00000000000000000000000000000", 0x4c}], 0x1}, 0x0) fstat(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x1, &(0x7f00000000c0)=[r2]) 05:54:58 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x7400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:54:58 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000002700)=ANY=[], 0x0) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0xffffffffffffffe0, 0x7f0f}}}, 0x118) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) fstat(r1, &(0x7f0000000500)) getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0x1, &(0x7f0000000840)=[0x0]) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) getegid() getuid() fstat(r0, &(0x7f00000014c0)) getuid() getresgid(&(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80)) 05:54:58 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') r2 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1) ftruncate(r2, 0x1000000) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8c000c}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="280a27bd7000fcdbdf250e00000008000500080000001c000200080004000900000008f005001b0b0000080009000900000008000600ff7f0000"], 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendfile(r1, r2, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) getsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @rand_addr, @loopback}, &(0x7f0000000080)=0xc) 05:54:58 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r2 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1) ftruncate(r2, 0x1000000) sendfile(r1, r2, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x5, 0x400) [ 1602.262208] sg_write: 55 callbacks suppressed [ 1602.262222] sg_write: data in/out 196572/74 bytes for SCSI command 0xff-- guessing data in; [ 1602.262222] program syz-executor4 not setting count and/or reply_len properly [ 1602.290835] sg_write: data in/out 393180/74 bytes for SCSI command 0xff-- guessing data in; [ 1602.290835] program syz-executor5 not setting count and/or reply_len properly 05:54:58 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0xffffff7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:54:58 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getgroups(0x191, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) uselib(&(0x7f00000000c0)='./file0\x00') ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010207031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b3562406b20cd37ed01cc00000000000000000000000000000", 0x4c}], 0x1}, 0x0) [ 1602.344799] sg_write: data in/out 393180/74 bytes for SCSI command 0xff-- guessing data in; [ 1602.344799] program syz-executor5 not setting count and/or reply_len properly [ 1602.454399] sg_write: data in/out 2130903004/74 bytes for SCSI command 0xff-- guessing data in; [ 1602.454399] program syz-executor4 not setting count and/or reply_len properly [ 1602.472591] netlink: 20 bytes leftover after parsing attributes in process `syz-executor3'. [ 1602.491195] sg_write: data in/out 2130903004/74 bytes for SCSI command 0xff-- guessing data in; 05:54:58 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x2000000000000000}]}, 0x78) [ 1602.491195] program syz-executor4 not setting count and/or reply_len properly 05:54:58 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:54:58 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x60000) r1 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x1, 0x201) ioctl$FICLONE(r0, 0x40049409, r1) r2 = socket$inet(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getgroups(0x0, 0x0) memfd_create(&(0x7f00000000c0)='cgroupselfppp1[{\x00', 0x4) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010207031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b3562406b20cd37ed01cc00000000000000000000000000000", 0x4c}], 0x1}, 0x0) [ 1602.605288] sg_write: data in/out 393180/74 bytes for SCSI command 0xff-- guessing data in; [ 1602.605288] program syz-executor5 not setting count and/or reply_len properly [ 1602.617033] netlink: 20 bytes leftover after parsing attributes in process `syz-executor3'. [ 1602.644957] sg_write: data in/out 393180/74 bytes for SCSI command 0xff-- guessing data in; 05:54:58 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000002700)=ANY=[], 0x0) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0xfff0, 0x7f0f}}}, 0x118) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) fstat(r1, &(0x7f0000000500)) getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0x1, &(0x7f0000000840)=[0x0]) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) getegid() getuid() fstat(r0, &(0x7f00000014c0)) getuid() getresgid(&(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80)) [ 1602.644957] program syz-executor5 not setting count and/or reply_len properly [ 1602.667251] sg_write: data in/out 196572/74 bytes for SCSI command 0xff-- guessing data in; [ 1602.667251] program syz-executor4 not setting count and/or reply_len properly [ 1602.696287] sg_write: data in/out 196572/74 bytes for SCSI command 0xff-- guessing data in; [ 1602.696287] program syz-executor4 not setting count and/or reply_len properly 05:54:58 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x7400000000000000}]}, 0x78) 05:54:59 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getgroups(0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xfffffffffffffffe, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010207031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b3562406b20cd37ed01cc00000000000000000000000000000", 0x4c}], 0x1}, 0x0) 05:54:59 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x9000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) [ 1602.805111] sg_write: data in/out 393180/74 bytes for SCSI command 0xff-- guessing data in; [ 1602.805111] program syz-executor5 not setting count and/or reply_len properly 05:54:59 executing program 3: r0 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x2000) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000140)=""/242) r1 = socket$inet(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getgroups(0xfffffe75, 0x0) syz_mount_image$gfs2(&(0x7f0000000240)='gfs2\x00', &(0x7f0000000280)='./file0\x00', 0x1, 0x2, &(0x7f00000013c0)=[{&(0x7f00000002c0)="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", 0x1000, 0x7f}, {&(0x7f00000012c0)="6d4389a456e8af863974402f8b5993e189ec8a4bce818daf8df7735f8381b985c32879c9918924685db77791e07a86fa7f01c4157afdda4c597adf2a22213b3763de106c2d795e42412e2f2d5c6093a48f5544722913b2308b1f2d160e4ff6e4a777388b07bbf6e010c156d8d7c3014883369449ce52719112a7d06db0e26b36a8abf8787616d8fa8052c1ccc58d03286c8a863f77194c612c2cae33be95d018f88a78fc620d9728aa98e46db1ea9fc80d17e27a5b57d5ab5d9a23c1cdeeeea1a96f0d9f06d3ac76fdd381ca4f4ac83a6027", 0xd2}], 0x840008, &(0x7f0000001400)={[{@suiddir='suiddir'}, {@loccookie='loccookie'}, {@loccookie='loccookie'}, {@lockproto_dlm='lockproto=dlm'}], [{@dont_appraise='dont_appraise'}, {@fsuuid={'fsuuid', 0x3d, {[0x7c, 0x65, 0x7e, 0x0, 0x0, 0x34, 0x32, 0x77], 0x2d, [0x33, 0x35, 0x73, 0x61], 0x2d, [0x63, 0x31, 0x63, 0x32], 0x2d, [0x33, 0x36, 0x76, 0x32], 0x2d, [0x62, 0x7b, 0x37, 0x66, 0x787a6b84c57b0897, 0x71, 0x7f, 0x37]}}}, {@obj_role={'obj_role', 0x3d, '/dev/input/mice\x00'}}, {@dont_measure='dont_measure'}]}) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010207031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b3562406b20cd37ed01cc00000000000000000000000000000", 0x4c}], 0x1}, 0x0) [ 1602.854097] netlink: 20 bytes leftover after parsing attributes in process `syz-executor3'. [ 1602.887832] netlink: 20 bytes leftover after parsing attributes in process `syz-executor3'. [ 1603.004829] netlink: 20 bytes leftover after parsing attributes in process `syz-executor3'. 05:54:59 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r2 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1) ftruncate(r2, 0xfe) sendfile(r1, r2, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) 05:54:59 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:54:59 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x7a000000}]}, 0x78) 05:54:59 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000002700)=ANY=[], 0x0) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0x4e00, 0x7f0f}}}, 0x118) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) fstat(r1, &(0x7f0000000500)) getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0x1, &(0x7f0000000840)=[0x0]) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) getegid() getuid() fstat(r0, &(0x7f00000014c0)) getuid() getresgid(&(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80)) 05:54:59 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r2 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1) syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x3, 0x9e9a48b3634d9bba) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ftruncate(r2, 0x1000000) sendfile(r1, r2, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) 05:54:59 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) getgroups(0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010207031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b3562406b20cd37ed01cc00000000000000000000000000000", 0x4c}], 0x1}, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x1, 0x400000) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x101, 0x1000, 0x0, 0x12, 0xd, 0x0, "568d5c4d175c3dedf0790abf52fa923f7fe5ab8fc4972e00b19be2870d9f57afc5c92b10f36d816cff7350c84256354cb5db0d180039fa7e48e919c68ecb7aca", "59df5e86a3b59545a63573a3096637ef37c2def011628b83c01c4bc5ed3cf30fd121e017d5867edf064fdd72e30a0d26c6b5d6deeb805827da9f1e856774f214", "84b55e49a27ef633405b0ef457d09ee121dd4b3052adace9d5fc71ba6940854e", [0x8, 0x3f]}) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000240)={0x4, {{0xa, 0x4e22, 0x1, @empty, 0x6ab}}, {{0xa, 0x4e20, 0x2, @empty, 0x4}}}, 0x108) 05:54:59 executing program 3: r0 = socket$inet(0x10, 0x400000000a, 0x400000c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getgroups(0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010207031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b3562406b20cd37ed01cc00000000000000000000000000000", 0x4c}], 0x1}, 0x0) 05:54:59 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0xd00, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:54:59 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x8000a0}]}, 0x78) 05:54:59 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:54:59 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r2 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000040), &(0x7f0000000080)=0x4) ftruncate(r2, 0x1000000) sendfile(r1, r2, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) 05:54:59 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000100)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getgroups(0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0xc4, 0x2000) accept4$llc(r1, &(0x7f0000000280)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f00000002c0)=0x10, 0x80000) r2 = perf_event_open$cgroup(&(0x7f0000000140)={0x3, 0x70, 0x10000, 0x7, 0x8001, 0x8001, 0x0, 0x1, 0x100, 0x9, 0xfa, 0x8, 0xfffffffffffffffa, 0x8, 0x3ff, 0x4, 0x5, 0x9, 0x0, 0x3, 0x13b, 0x101, 0x98a, 0x10000, 0x6, 0x1ff, 0x6, 0xff, 0x3, 0x4, 0x44cc, 0x8, 0x1000, 0x1000, 0x6, 0x0, 0x4, 0x4, 0x0, 0x3f, 0x4, @perf_bp={&(0x7f00000000c0), 0x1}, 0x1000, 0x2, 0x1314, 0x2, 0x80, 0x3, 0x9}, 0xffffffffffffff9c, 0xe, r0, 0x2) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f00000003c0)) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp\x00', 0x400000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r4, 0x2}}, 0x10) r5 = creat(&(0x7f0000000200)='./file0\x00', 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000380)={0x7, 0x8, 0xfa00, {r6, 0x3}}, 0x10) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010207031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b3562406b20cd37ed01cc00000000000000000000000000000", 0x4c}], 0x1}, 0x0) 05:54:59 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000002700)=ANY=[], 0x0) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0x6, 0x7f0f}}}, 0x118) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) fstat(r1, &(0x7f0000000500)) getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0x1, &(0x7f0000000840)=[0x0]) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) getegid() getuid() fstat(r0, &(0x7f00000014c0)) getuid() getresgid(&(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80)) 05:54:59 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x48000000}]}, 0x78) 05:54:59 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:54:59 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getgroups(0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) lsetxattr$security_selinux(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='security.selinux\x00', &(0x7f0000000180)='system_u:object_r:system_cron_spool_t:s0\x00', 0x29, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010207031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b3562406b20cd37ed01cc00000000000000000000000000000", 0x4c}], 0x1}, 0x0) 05:55:00 executing program 0: socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000002700)=ANY=[], 0x0) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0x4e00, 0x7f0f}}}, 0x118) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) fstat(r1, &(0x7f0000000500)) getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0x1, &(0x7f0000000840)=[0x0]) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) getegid() getuid() fstat(r0, &(0x7f00000014c0)) getuid() getresgid(&(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80)) 05:55:00 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x3000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:00 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x60}]}, 0x78) 05:55:00 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) rt_sigtimedwait(&(0x7f00000001c0)={0x2}, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x1c9c380}, 0x8) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, 0x0) getgroups(0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000440)='/dev/mixer\x00', 0x2000, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000480)={0x0, 0x1ff, 0x36b47193, 0x1, 0x4, 0x1, 0xfffffffffffffffc, 0x0, {0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xb}}}, 0x8, 0x5, 0x0, 0x8, 0x8}}, &(0x7f0000000540)=0xb0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f00000002c0)=@assoc_value={r3}, 0x8) syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x80000001, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010207031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b3562406b20cd37ed01cc00000000000000000000000000000", 0x4c}], 0x1}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x8100, 0x0) mkdirat$cgroup(r4, &(0x7f0000000140)='syz0\x00', 0x1ff) 05:55:00 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000002700)=ANY=[], 0x0) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0x223, 0x7f0f}}}, 0x118) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) fstat(r1, &(0x7f0000000500)) getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0x1, &(0x7f0000000840)=[0x0]) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) getegid() getuid() fstat(r0, &(0x7f00000014c0)) getuid() getresgid(&(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80)) 05:55:00 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x6800, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:00 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x2}]}, 0x78) 05:55:00 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getgroups(0x0, 0x0) r2 = getpid() r3 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x9, 0x40) ioctl$NBD_DO_IT(r3, 0xab03) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x70, 0x3, 0x837, 0x1f, 0x40, 0x0, 0x0, 0xc, 0xb, 0x8, 0x16, 0x7f, 0x10000, 0x6, 0x7fffffff, 0x2, 0x80000001, 0x9, 0xe17, 0x1, 0xfffffffffffffff9, 0x1ff, 0x5, 0x400, 0x9, 0x80000000, 0x6, 0xce, 0xdd9, 0x5, 0x7ff, 0x4, 0x3, 0x100, 0x8, 0x7ff, 0x0, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000340), 0x2}, 0x80, 0x0, 0x74d8, 0xb, 0x9, 0x9, 0x5}, r2, 0x4, r3, 0xa) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x6, 0x2}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000280)={r4, 0xb6, "faf0927ffbe655f0fd399e96bf9a8429cccd5145b018f807a7759836e9f9eb105d68875c22497622055235a15d8b0c95116fa0027892ee24fe9d71289ee260feb3b2db8421bbd94bb23c0524d7322797c22b40cb510328bd0c2a6cf3152a46d1cc97ff6ad30287bb584f1b499aee21f831b7ef91baadef52c9f0c8a004baddbb394f1d6b9c33184b6489781ca3d9f06f47c35614b37e6ded6d11d3d55324a3417587a193f9ec8e6919177ef22e85d7024e2326db9c24"}, &(0x7f0000000200)=0xbe) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$inet6_int(r3, 0x29, 0xdf, &(0x7f00000000c0), &(0x7f0000000140)=0x4) sendmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0xffffff81}, 0x80000) 05:55:00 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r2 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1) getsockopt$inet6_opts(r1, 0x29, 0x3f, &(0x7f0000000140)=""/196, &(0x7f0000000040)=0xc4) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080), 0x4) ftruncate(r2, 0x1000000) sendfile(r1, r2, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) 05:55:00 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:00 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x2000, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000140)={0x7fffffff, 0xfffffffffffffff8}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getgroups(0x0, 0x0) r3 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_tcp_TLS_RX(r3, 0x6, 0x2, &(0x7f00000001c0), 0x1) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$nfs4(&(0x7f0000000080)='nfs4\x00', &(0x7f0000000200)='./file0\x00', 0xa73, 0x1, &(0x7f0000000300)=[{&(0x7f0000000240)="f110cdd3de201d2d08f43d1888066b7531ae027ca3cca8b87894158678e468e7a1825e85e81082f7fb609cfb01f4789c93b76dab0cff212595a7503866acf612c912d76a12ec1046b217b39989ac4eed849aaeabe7f0d1071d05374dde40b1ba4000d94e1358eff97b3a5f209b080c4fb2190014427656580fca84143592fa16ed74", 0x82, 0x80}], 0x230000, &(0x7f0000000340)='selinux\x00') sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010207031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b3562406b20cd37ed01cc00000000000000000000000000000", 0x4c}], 0x1, 0x0, 0x0, 0x2}, 0x0) 05:55:00 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x4}]}, 0x78) 05:55:00 executing program 0: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x7a000000}]}, 0x78) 05:55:00 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:00 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000002700)=ANY=[], 0x0) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0xfffffffffffffff0, 0x7f0f}}}, 0x118) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) fstat(r1, &(0x7f0000000500)) getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0x1, &(0x7f0000000840)=[0x0]) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) getegid() getuid() fstat(r0, &(0x7f00000014c0)) getuid() getresgid(&(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80)) 05:55:00 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x7a00000000000000}]}, 0x78) 05:55:00 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0xffffffffa0008000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:00 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getgroups(0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x2000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010207031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b3562406b20cd37ed01cc00000000000000000000000000000", 0x4c}], 0x1}, 0x0) 05:55:00 executing program 0: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x6c00}]}, 0x78) 05:55:00 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x700000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:01 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r3 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) fadvise64(r1, 0x17, 0x4000, 0x2) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0) ftruncate(r3, 0x1000000) sendfile(r2, r3, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) 05:55:01 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x3f00}]}, 0x78) 05:55:01 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$amidi(&(0x7f0000000180)='/dev/amidi#\x00', 0x62, 0x82800) write$P9_RATTACH(r2, &(0x7f00000001c0)={0x14, 0x69, 0x2, {0x8, 0x4, 0x6}}, 0x14) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x40240, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r3, 0x40045402, &(0x7f0000000140)=0x1) getgroups(0xfffffe8f, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000240)=[@in={0x2, 0x4e21, @loopback}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000300)={r4, 0x8}, &(0x7f0000000340)=0x8) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_TREAD(r2, 0x40045402, &(0x7f0000000200)=0x1) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010207031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b3562406b20cd37ed01cc00000000000000000000000000000", 0x4c}], 0x1}, 0x0) 05:55:01 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0xa00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:01 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r2 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x80, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1) ftruncate(r2, 0x1000000) sendfile(r1, r2, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) 05:55:01 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000002700)=ANY=[], 0x0) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0x10, 0x7f0f}}}, 0x118) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) fstat(r1, &(0x7f0000000500)) getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0x1, &(0x7f0000000840)=[0x0]) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) getegid() getuid() fstat(r0, &(0x7f00000014c0)) getuid() getresgid(&(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80)) 05:55:01 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x7a00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:01 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x1300000000000000}]}, 0x78) 05:55:01 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x8, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getgroups(0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = semget(0x1, 0x4, 0x14) r3 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x9, 0x401) ioctl$TUNGETVNETHDRSZ(r3, 0x800454d7, &(0x7f0000000100)) ioctl$SCSI_IOCTL_GET_IDLUN(r3, 0x5382, &(0x7f0000000240)) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@known='trusted.overlay.nlink\x00', &(0x7f00000001c0)='cgroup\x00', 0x7, 0x2) semctl$GETVAL(r2, 0x3, 0xc, &(0x7f00000000c0)=""/1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010207031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b3562406b20cd37ed01cc00000000000000000000000000000", 0x4c}], 0x1}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000002c0)={0xffffffffffffffff}, 0x106, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000340)={0x9, 0x108, 0xfa00, {r4, 0x9c, "396604", "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"}}, 0x110) 05:55:01 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x74000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:01 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x7000000}]}, 0x78) 05:55:01 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getgroups(0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x6000, 0x0) ioctl$KVM_SET_DEBUGREGS(r3, 0x4080aea2, &(0x7f0000000140)={[0x4000, 0xd002, 0x3000], 0x3, 0x0, 0x6}) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$BLKGETSIZE64(r3, 0x80081272, &(0x7f00000001c0)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010207031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b3562406b20cd37ed01cc00000000000000000000000000000", 0x4c}], 0x1}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000280)={{{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@dev}}, &(0x7f0000000380)=0xe8) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x38f340cf964ac765, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any'}, {@access_client='access=client'}], [{@smackfshat={'smackfshat', 0x3d, '/dev/vcs\x00'}}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r4}}, {@subj_type={'subj_type', 0x3d, "19626465766c6f6c6f73656c667b6b657972696e672d"}}]}}) 05:55:02 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r3 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) fadvise64(r1, 0x17, 0x4000, 0x2) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0) ftruncate(r3, 0x1000000) sendfile(r2, r3, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) 05:55:02 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000002700)=ANY=[], 0x0) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0x23, 0x7f0f}}}, 0x118) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) fstat(r1, &(0x7f0000000500)) getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0x1, &(0x7f0000000840)=[0x0]) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) getegid() getuid() fstat(r0, &(0x7f00000014c0)) getuid() getresgid(&(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80)) 05:55:02 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x900, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:02 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x2000000}]}, 0x78) 05:55:02 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r2 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1) ftruncate(r2, 0x1000000) ioctl$sock_bt_hci(r0, 0x800448f0, &(0x7f0000000040)="e9c57743d51ae275dd3323ded52500ad907ac59df3dca01c8c7a55df5cf3c0a3363060d942bcf56b619856b9d72755ee495a8ecd") sendfile(r1, r2, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) 05:55:02 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) getgroups(0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010207031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b3562406b20cd37ed01cc00000000000000000000000000000", 0x4c}], 0x1}, 0x0) syz_open_dev$swradio(&(0x7f00000001c0)='/dev/swradio#\x00', 0x0, 0x2) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x800, 0x0) getsockopt$XDP_STATISTICS(r2, 0x11b, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x18) 05:55:02 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x4c00000000000000}]}, 0x78) 05:55:02 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:02 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:02 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getgroups(0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f00000001c0)={0x3, 0x3f}) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x6) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010207031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b3562406b20cd37ed01cc00000000000000000000000000000", 0x4c}], 0x1}, 0x0) setxattr$security_smack_transmute(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000180)='TRUE', 0x4, 0x2) 05:55:02 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0xffffff7f00000000}]}, 0x78) 05:55:02 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0xfbffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) [ 1606.377551] __nla_parse: 12 callbacks suppressed [ 1606.377564] netlink: 20 bytes leftover after parsing attributes in process `syz-executor3'. [ 1606.405291] netlink: 20 bytes leftover after parsing attributes in process `syz-executor3'. 05:55:02 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r2 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x80, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1) ftruncate(r2, 0x1000000) sendfile(r1, r2, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) 05:55:02 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000002700)=ANY=[], 0x0) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0x8, 0x7f0f}}}, 0x118) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) fstat(r1, &(0x7f0000000500)) getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0x1, &(0x7f0000000840)=[0x0]) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) getegid() getuid() fstat(r0, &(0x7f00000014c0)) getuid() getresgid(&(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80)) 05:55:02 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getgroups(0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009ff0), 0x12ce, 0x0, 0x1129cc06, 0x4000040}, 0x1) 05:55:02 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x4c000000}]}, 0x78) 05:55:03 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x408102, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x4000, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, 0x0, 0x18c) socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r3 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40042409, 0x1) ftruncate(r3, 0x1000000) sendfile(r2, r3, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) fstat(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x1000, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@debug={'debug', 0x3d, 0xf71}}, {@debug={'debug', 0x3d, 0x7}}, {@access_user='access=user'}, {@dfltgid={'dfltgid', 0x3d, r4}}, {@cache_none='cache=none'}], [{@fsmagic={'fsmagic', 0x3d, 0xff}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@uid_lt={'uid<', r5}}, {@appraise='appraise'}, {@measure='measure'}]}}) 05:55:03 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x600000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:03 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x6c00000000000000}]}, 0x78) 05:55:03 executing program 3: r0 = socket$inet(0x10, 0xb, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getgroups(0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup3(r0, r1, 0x80000) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f00000000c0)={0x16, 0x99, &(0x7f0000000140)="8a145c16cd1e2ac46814172c74b89721e6634a8ec9bc80d57d62bbda2f91f3a7d05f303671902ad2e512ea16bb34ddba7f0e371db9caa766514880fae148592cd69333bbfb596f6da428b738809895cae72366d32463474c563e1655e0a1f26f848e49697bdc168941415f45a0b0f45f5485410d040471a0e5ec0c013c6d52a3a136456b3ca5d663e0c5d7c0199b5d4d5a6533faf8cb273a17"}) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010207031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b3562406b20cd37ed01cc00000000000000000000000000000", 0x4c}], 0x1}, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000002c0)=0x0) exit(0x4) perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x3ff, 0x177f, 0x2, 0x80000001, 0x0, 0x6, 0x80000, 0xc, 0x2, 0x7, 0xa0c3, 0x8, 0x7ff, 0xcc5, 0xd2, 0xfffffffffffffffd, 0x1, 0x7fff, 0xe320, 0x3, 0x6bf, 0x2a7, 0x8, 0x9, 0x80, 0x81, 0xfffffffffffffff7, 0x5, 0x9, 0x4, 0xc5e5, 0x8, 0x5, 0x1ff, 0x7, 0x4, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000200)}, 0x8000, 0x7, 0x6d, 0x6, 0x80000000, 0x20, 0xff}, r3, 0xa, r2, 0x8) r4 = msgget$private(0x0, 0x0) msgsnd(r4, &(0x7f0000000300)={0x3, "678710112021829172b43eaefa4907caa5636f1aaa122b00087bf8339fc35e615d8d2c6190afdbd6a37eb926183cf36b059e0d5d21857a87156343d9e41476b71872fbb0b6b6e8ea21a69efa5e329780b79511f8a7add9e9f364b2df99884ab02d48faad6cc82db6b7b761140ceb951d0f0dc364d79c39b74374c6c4db66e5b15aaf370607b9e4a173a4dd5ab8cc8b6ffc78881c44a1b99d766c3d01987cdfafd57a4d1d8d6d82509ff1211bb08b9973b89ccf74416d382ef49484fd68e68d9a323d8430e9f984a62d70032b791daff67477c25590f9a2034a53d32bee1638e95a0c0707025536db97b9203ab65c0e6513a25b3135b20f8aa1"}, 0x101, 0x800) 05:55:03 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x31000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:03 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000002700)=ANY=[], 0x0) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0xfffffffe, 0x7f0f}}}, 0x118) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) fstat(r1, &(0x7f0000000500)) getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0x1, &(0x7f0000000840)=[0x0]) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) getegid() getuid() fstat(r0, &(0x7f00000014c0)) getuid() getresgid(&(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80)) 05:55:03 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x600}]}, 0x78) 05:55:03 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) [ 1607.305645] sg_write: 75 callbacks suppressed [ 1607.305661] sg_write: data in/out 196572/74 bytes for SCSI command 0xff-- guessing data in; [ 1607.305661] program syz-executor4 not setting count and/or reply_len properly [ 1607.365764] sg_write: data in/out 196572/74 bytes for SCSI command 0xff-- guessing data in; [ 1607.365764] program syz-executor4 not setting count and/or reply_len properly 05:55:03 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000040)) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000080)={r1, 0x80000000, 0x738, "981d8715cf2f24a3281c78546ca790c47fbcec5bfaf308fda68b1e4fb81f57f5f1fdce56edae3340"}) r2 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1) ftruncate(r2, 0x1000000) sendfile(r1, r2, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) 05:55:03 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x13}]}, 0x78) 05:55:03 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:03 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000002700)=ANY=[], 0x0) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0xfffffffffffff000, 0x7f0f}}}, 0x118) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) fstat(r1, &(0x7f0000000500)) getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0x1, &(0x7f0000000840)=[0x0]) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) getegid() getuid() fstat(r0, &(0x7f00000014c0)) getuid() getresgid(&(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80)) [ 1607.671643] sg_write: data in/out 196572/74 bytes for SCSI command 0xff-- guessing data in; [ 1607.671643] program syz-executor4 not setting count and/or reply_len properly [ 1607.692488] sg_write: data in/out 393180/74 bytes for SCSI command 0xff-- guessing data in; [ 1607.692488] program syz-executor5 not setting count and/or reply_len properly [ 1607.695762] sg_write: data in/out 196572/74 bytes for SCSI command 0xff-- guessing data in; [ 1607.695762] program syz-executor4 not setting count and/or reply_len properly [ 1607.745572] sg_write: data in/out 393180/74 bytes for SCSI command 0xff-- guessing data in; [ 1607.745572] program syz-executor5 not setting count and/or reply_len properly 05:55:04 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x57) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r2 = memfd_create(&(0x7f00000001c0)="ac0000", 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1) r3 = accept$nfc_llcp(r0, &(0x7f0000000040), &(0x7f0000000140)=0x60) ftruncate(r1, 0x3) sendfile(r1, r2, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) fchdir(r3) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000180)={0x7ff, 0x0, 0x13, 0xffffffffabeeea9e, 0x8}) 05:55:04 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x48}]}, 0x78) 05:55:04 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:04 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getgroups(0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010207031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b3562406b20cd37ed01cc00000000000000000000000000000", 0x4c}], 0x1}, 0x0) 05:55:04 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000002700)=ANY=[], 0x0) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0x1e1, 0x7f0f}}}, 0x118) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) fstat(r1, &(0x7f0000000500)) getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0x1, &(0x7f0000000840)=[0x0]) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) getegid() getuid() fstat(r0, &(0x7f00000014c0)) getuid() getresgid(&(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80)) [ 1608.058941] sg_write: data in/out 1275264988/74 bytes for SCSI command 0xff-- guessing data in; [ 1608.058941] program syz-executor4 not setting count and/or reply_len properly [ 1608.083613] netlink: 20 bytes leftover after parsing attributes in process `syz-executor3'. [ 1608.092931] sg_write: data in/out 393180/74 bytes for SCSI command 0xff-- guessing data in; [ 1608.092931] program syz-executor5 not setting count and/or reply_len properly [ 1608.126406] sg_write: data in/out 1275264988/74 bytes for SCSI command 0xff-- guessing data in; [ 1608.126406] program syz-executor4 not setting count and/or reply_len properly [ 1608.136040] sg_write: data in/out 393180/74 bytes for SCSI command 0xff-- guessing data in; [ 1608.136040] program syz-executor5 not setting count and/or reply_len properly [ 1608.159662] netlink: 20 bytes leftover after parsing attributes in process `syz-executor3'. 05:55:04 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:04 executing program 3: socket$inet(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x400, 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000140)={0x4a20db44, 0x4, 0x1, 0x8, 0xfffffffffffffff7, 0x3, 0x8, 0x7, 0x1, 0x1, 0x29, 0x81}) getgroups(0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010207031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b3562406b20cd37ed01cc00000000000000000000000000000", 0x4c}], 0x1}, 0x0) 05:55:04 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x74000000}]}, 0x78) 05:55:04 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000040)) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000080)={r1, 0x80000000, 0x738, "981d8715cf2f24a3281c78546ca790c47fbcec5bfaf308fda68b1e4fb81f57f5f1fdce56edae3340"}) r2 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1) ftruncate(r2, 0x1000000) sendfile(r1, r2, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) 05:55:04 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r2 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1) ftruncate(r2, 0x1000000) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000040)={0x3a}, 0x4) sendfile(r1, r2, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) 05:55:04 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000002700)=ANY=[], 0x0) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0xa, 0x7f0f}}}, 0x118) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) fstat(r1, &(0x7f0000000500)) getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0x1, &(0x7f0000000840)=[0x0]) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) getegid() getuid() fstat(r0, &(0x7f00000014c0)) getuid() getresgid(&(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80)) 05:55:04 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:04 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x500}]}, 0x78) 05:55:04 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$inet(r0, &(0x7f0000000140)="db2f768c530bf1a2b198ba5b1694ad6e9193a20adb64fceec75ad704ee6cdb14d42e497b2f82c529d3edc811e3e503048e884bb680898f9c695a6fb0213eddfb88fad28aecc6ca1c6bcb62f3ec00ecc8df0dfdb961a9300bd7a455e55bc0569bae05a20b2cd48d0b20c55d1e653e8a60618109da0e57c63b4abca388a6a3ee73907aea27b9d29aedfa6245edb0d555fab36a923582d49d10935f132e236567305e71dd785f9a3e0756481cd9810cbb6dad83d27a37fdc7bcb4a3215c7345460e47554533523ce1fa80b9d11ac0f4d1adc867086b469c99226d", 0x2c, 0x1, &(0x7f00000000c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0xfffffffffffffe1f) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getgroups(0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010207031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b3562406b20cd37ed01cc00000000000000000000000000000", 0x4c}], 0x1}, 0x0) [ 1608.600993] netlink: 20 bytes leftover after parsing attributes in process `syz-executor3'. 05:55:04 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:04 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getgroups(0x0, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f00000002c0)={'ipvs\x00'}, &(0x7f0000000300)=0x1e) r2 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x0, 0x2) getsockopt$inet6_int(r2, 0x29, 0xdf, &(0x7f0000000100), &(0x7f0000000280)=0x4) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000140)={0x401, 0x7, 0x3, {0xf, @sdr={0x32315241, 0x7}}}) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010207031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b3562406b20cd37ed01cc00000000000000000000000000000", 0x4c}], 0x1}, 0x0) 05:55:04 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x200000000000000}]}, 0x78) 05:55:05 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getgroups(0xffffffffffffff02, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010207031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b3562406b20cd37ed01cc00000000000000000000000000000", 0x4c}], 0x1}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@dev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000340)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000380)={{{@in, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@remote}}, &(0x7f0000000480)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@loopback}}, &(0x7f00000005c0)=0xe8) syz_mount_image$ntfs(&(0x7f00000000c0)='ntfs\x00', &(0x7f0000000140)='./file0\x00', 0x200, 0x2, &(0x7f0000000200)=[{&(0x7f0000000180)="4852c4a6dedd7f862db0b4a083c838ad8f55937ba0bf60f7832e0f01638697a1", 0x20, 0x7ff}, {&(0x7f00000001c0)="076ecac810b2797ce15d9f99887b59e19e2ed218223cd6cd54b9126a66361ed7dbe9d6207100765207b15ae5870e38c33f6aa84e29ec19", 0x37, 0x100000000}], 0x100000, &(0x7f0000000840)=ANY=[@ANYBLOB="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", @ANYRESHEX=r2, @ANYBLOB=',uid=', @ANYRESHEX=r3, @ANYBLOB=',errors=continue,case_sensitive=yes,errors=recover,dmask=00000000000000000114761,case_sensitive=no,dont_hash,smackfsroot=,fscontext=root,fowner=', @ANYRESDEC=r4, @ANYBLOB=',smackfsfloor=,fsuuid=8vac\x009se-b4\x00s-v~\x004-t135-swdcy79s,\x00']) 05:55:05 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x8000a0ffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) [ 1608.875168] netlink: 20 bytes leftover after parsing attributes in process `syz-executor3'. 05:55:05 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000002700)=ANY=[], 0x0) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0xffffffe0, 0x7f0f}}}, 0x118) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) fstat(r1, &(0x7f0000000500)) getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0x1, &(0x7f0000000840)=[0x0]) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) getegid() getuid() fstat(r0, &(0x7f00000014c0)) getuid() getresgid(&(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80)) [ 1608.980344] netlink: 20 bytes leftover after parsing attributes in process `syz-executor3'. 05:55:05 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r3 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) fadvise64(r1, 0x17, 0x4000, 0x2) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0) ftruncate(r3, 0x1000000) sendfile(r2, r3, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) 05:55:05 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_FPEXC(0xc, 0x40003) r2 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r3 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40042409, 0x1) ioctl$sock_bt_bnep_BNEPCONNDEL(r0, 0x400442c9, &(0x7f0000000140)={0x6, @random="b622bd037c06"}) r4 = fcntl$getown(r1, 0x9) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000080)) r5 = getpgid(0xffffffffffffffff) kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r2, &(0x7f0000000040)={r0, r0, 0x20}) ftruncate(r3, 0x1000000) sendfile(r2, r3, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) 05:55:05 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x13000000}]}, 0x78) 05:55:05 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:05 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getgroups(0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0xffffffffffff8000, 0x200000) ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010207031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b3562406b20cd37ed01cc00000000000000000000000000000", 0x4c}], 0x1}, 0x0) 05:55:05 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000002700)=ANY=[], 0x0) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0xfffff000, 0x7f0f}}}, 0x118) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) fstat(r1, &(0x7f0000000500)) getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0x1, &(0x7f0000000840)=[0x0]) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) getegid() getuid() fstat(r0, &(0x7f00000014c0)) getuid() getresgid(&(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80)) 05:55:05 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x100000}]}, 0x78) [ 1609.499379] netlink: 20 bytes leftover after parsing attributes in process `syz-executor3'. 05:55:05 executing program 3: r0 = socket$inet(0x10, 0xffffffffffffffff, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getgroups(0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x80000) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r1) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010207031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b3562406b20cd37ed01cc00000000000000000000000000000", 0x4c}], 0x1}, 0x0) 05:55:05 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x6800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:05 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x30000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:05 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x10}]}, 0x78) 05:55:05 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000240)='/dev/vbi#\x00', 0x3, 0x2) ioctl$RTC_WIE_ON(r3, 0x700f) getgroups(0xe0b52ef628ced75f, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) getsockname(r1, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000000c0)=0x80) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000200)={0x3, &(0x7f00000001c0)=[{0xffffffffffff78fd, 0x9, 0x62ff, 0x7}, {0x2, 0x7e0000000, 0x5, 0x3f}, {0xa98, 0x10001, 0x8, 0x4}]}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000280)={{{@in6, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@remote}}, &(0x7f0000000380)=0xe8) ioctl$sock_inet6_SIOCDIFADDR(r4, 0x8936, &(0x7f00000003c0)={@ipv4={[], [], @broadcast}, 0x0, r5}) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010207031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b3562406b20cd37ed01cc00000000000000000000000000000", 0x4c}], 0x1}, 0x0) [ 1609.820424] netlink: 20 bytes leftover after parsing attributes in process `syz-executor3'. 05:55:06 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, &(0x7f00000000c0)=0x7, 0x9, 0x0) 05:55:06 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f00000001c0)={0x0, 0x0}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5cea, 0x100, 0x853, 0x1, 0x0, 0x1f, 0x800, 0x0, 0x4, 0x80000001, 0x5, 0x10001, 0x2, 0xffffffff, 0x3, 0x139, 0x1ff, 0x2, 0xd445, 0x1, 0x5, 0x6, 0x8, 0x3, 0x4, 0x0, 0x5f, 0x37, 0x9, 0x45, 0x5, 0x1ff, 0x800, 0xffffffffffffe184, 0x100, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x5, 0xd387}, 0x80, 0x9, 0x1f, 0x4, 0x61c, 0x5, 0x2}, r1, 0x3, r0, 0x9) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x0, 0x4) r2 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x3) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000140)=ANY=[@ANYBLOB="07000000090000000000000000000000000000007915eb1a16638f066fd643446531033f16504f89135dc6aa9a98f3579ee9fc775ed80e1f6dc4e963353b0568ec314f07513bd652cf5e239dc30cbcd056d501"]) r3 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40042409, 0x1) ftruncate(r3, 0x1000000) sendfile(r2, r3, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) 05:55:06 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000002700)=ANY=[], 0x0) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0xffe0, 0x7f0f}}}, 0x118) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) fstat(r1, &(0x7f0000000500)) getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0x1, &(0x7f0000000840)=[0x0]) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) getegid() getuid() fstat(r0, &(0x7f00000014c0)) getuid() getresgid(&(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80)) 05:55:06 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0xffffff7f}]}, 0x78) 05:55:06 executing program 3: socket$inet(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getgroups(0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="24000000010207031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b3562406b20cd37ed01cc00000000000000000000000000000", 0x4c}], 0x1}, 0x0) 05:55:06 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x7a000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:06 executing program 0: r0 = socket(0x80000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000058001f02ff07f4f9dd2204000a04f51108000100020100020800028001000000", 0x24) 05:55:06 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff}) fdatasync(r1) 05:55:06 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getgroups(0x84f6dbee3e07b6ca, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010207031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b3562406b20cd37ed01cc00000000000000000000000000000", 0x4c}], 0x1}, 0x0) 05:55:06 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x68000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:06 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x7400}]}, 0x78) [ 1610.631513] netlink: 20 bytes leftover after parsing attributes in process `syz-executor3'. 05:55:06 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x300}]}, 0x78) 05:55:06 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getgroups(0x23a, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010207031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b3562406b20cd37ed01cc00000000000000000000000000000", 0x4c}], 0x1}, 0x0) 05:55:07 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000007100)=[{{&(0x7f0000000040)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f00000042c0)=[{&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f00000022c0)=""/4096, 0x1000}, {&(0x7f0000001140)=""/129, 0x81}, {&(0x7f0000001200)=""/62, 0x3e}, {&(0x7f00000032c0)=""/4096, 0x1000}, {&(0x7f0000001240)=""/62, 0x3e}], 0x7, &(0x7f0000004340)=""/54, 0x36, 0x800}, 0x2}, {{&(0x7f0000004380)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f00000055c0)=[{&(0x7f0000004400)=""/81, 0x51}, {&(0x7f0000004480)=""/67, 0x43}, {&(0x7f0000004500)=""/4096, 0x1000}, {&(0x7f0000005500)=""/183, 0xb7}], 0x4, &(0x7f0000005600)=""/17, 0x11, 0x212}, 0x1}, {{&(0x7f0000005640), 0x80, &(0x7f0000005840)=[{&(0x7f00000056c0)=""/46, 0x2e}, {&(0x7f0000005700)=""/158, 0x9e}, {&(0x7f00000057c0)=""/108, 0x6c}], 0x3, 0x0, 0x0, 0x9bf7}, 0xff}, {{&(0x7f0000005880)=@alg, 0x80, &(0x7f0000005bc0)=[{&(0x7f0000005900)=""/44, 0x2c}, {&(0x7f0000005940)=""/201, 0xc9}, {&(0x7f0000005a40)=""/167, 0xa7}, {&(0x7f0000005b00)=""/164, 0xa4}], 0x4, &(0x7f0000005c00)=""/163, 0xa3, 0x1}, 0x100000000}, {{&(0x7f0000005cc0)=@can, 0x80, &(0x7f0000007040)=[{&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/146, 0x92}, {&(0x7f0000006e00)=""/12, 0xc}, {&(0x7f0000006e40)=""/246, 0xf6}, {&(0x7f0000006f40)=""/200, 0xc8}], 0x5, &(0x7f00000070c0)=""/38, 0x26, 0x4}, 0x4}], 0x5, 0x12000, &(0x7f0000007240)={0x0, 0x989680}) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r2 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1) ftruncate(r2, 0x1000000) sendfile(r1, r2, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) 05:55:07 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000002700)=ANY=[], 0x0) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0x3, 0x7f0f}}}, 0x118) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) fstat(r1, &(0x7f0000000500)) getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0x1, &(0x7f0000000840)=[0x0]) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) getegid() getuid() fstat(r0, &(0x7f00000014c0)) getuid() getresgid(&(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80)) 05:55:07 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:07 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getgroups(0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x3, 0x200100) r3 = getpgrp(0x0) sendmsg$nl_netfilter(r2, &(0x7f0000000c40)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20800}, 0xc, &(0x7f0000000c00)={&(0x7f00000001c0)={0xa0c, 0x6, 0x6, 0x100, 0x70bd25, 0x25dfdbfe, {0x7}, [@generic="63b49c74bcc791cbfb918d4074d622335197f505f194e6a929ed1ed050ae5c70d3c7701c417f66e3fd317b8d8417672e59a2e39c2343eaf1a632713323e6431f66c10931a658d49b76d222ebe77cbd6e8cd1f7499f299e5b3e4422f34e1961d09c1387d7119855ca5e25f0071606b451b9ad84b162f29c9317b909d1ff4b779ed9f99109b9ce2725da21023f4153f3f4c7548c417d1e431fd061786d13fbc570b1dcf1f78a02146ca8ee65997544903a918f74466d6085f461e34fef171e65df33", @typed={0x18, 0x8f, @str='cgroup]cgroupwlan1\x00'}, @typed={0xc, 0x95, @str='%{*/!,:\x00'}, @generic, @nested={0x198, 0x12, [@typed={0x84, 0x9, @binary="de1b1100f1f79fa882ab713cd4fdbf7a1c715ca958759660c9e9df37dc47d56946af5c4b8a7125393e2917cbf6d6202946580d73ea8d353edafa415cce90ed15347674571fbfc36455406b0e062dc76d5b63f3ecce52940578b4aadd6177c9badd0f837a534d9f08c17e9e8736adad0fcbce5bb580960b6d22c752748d"}, @typed={0x8, 0x12, @pid=r3}, @generic="e9bcca4e9707daf99c5963fb97ffdda842fdc8a67573873c1f85c3f115e17bcffdedb08302f533f9d7a2ee9eca8859d345703a0f48a8fb48e97a8525b17d3f2f4afd05063512bf983d71ebb684d3d485d0382c32af07887d7651bfe1ecafcf81f610fa653131b09349a1121c5df898c823f7cfaefebe86948e4b59216ef64890ad07048655afbdb2faac42be2aeefb7c43a327161cb16e0e326a29d225e0e0333684bcd3a7b5db6c2973de45331f581b0fced69f29a9fba18b0d575f1e2e8a0a99a7a8b6b5c956ea261537f44b97be09bf64bf96c2b046f81b8ddb93f2563ef576b1d4f5313b2c05688f2e691ee032b2127a1c42", @generic="7b9cedea5fa979c28a471bbe306a15c4421af689"]}, @typed={0x14, 0x61, @ipv6=@mcast2}, @generic="b888eb9e16e45d94b6762a26d679d9b29d7cfbe6e0c6469bc6aa150baf0221fd7d0fa10acaadc73a378e9c8a261a8c094be79e1f913af4bbaee2f72c9cc1ada919d91c1e4818160bcabba7f574e9026bb3a230dcc6ede6d5448d3f1f742906e025b1cad8a1d5", @generic="dcaa914316b39d8278846145ce7f74dc1093ff22584d2b4f36f8c32f11ffa61ca8c5752454c79082fb989960d9a6ef74a0463ed2527e4eb0f6b964425979d3c1f20023950f8221e117ddfc499b0b8a9f475f3774c826fb13f76e68091bb317d956f68c9a252ff7d5b0fc39069b400123fa2e6f6543d15f664f9364393f25fd0751807a3756d76b7ed874deef36e167db8195bf5530512123511d3aa44917240bece24e23c351b0de8243c9ae995eb0e2567eeca47400105f4a8bc6b53c7cc732d21838d30176ae840ae9af9477df26ac03b3b606c065f7c599eeb0137af6bf0946e9d225391b10", @generic="f9c68b16deb1402f2e31946ec55cc884ababc4db9759478372184bcbf47fef3924abe74565533085a5da2d9138c333f6c4918fcb847a112252985fc938e1d309cc48004a2bd9cbb04ef39aa587716faa681a57eaa055a5d1f7d11cf4916a0def512c65504881bfb087b8245bdb434f0e258df7a31011f5f61ce96f7469b93de56ae54cbfda2ef507659bcd8f59c9fa91dd6d3c1ffdd4caaf09dc8eb6afa4996eec80480efc9c31fa7b1cc3642fcb9c06fee889de8a1d904aebaa7b4689166fe8db4464add7bace9d29463e512c43d0d981be254b33a51392", @nested={0x540, 0x7d, [@generic="b79809d2102cb370ef600d2e83ac39dc929d56171878f921b6eea7a3db44db69334e9ce0b60245749fd499914feedd231fcc54db6705a80a460c4258ae6472f15fa2416f5232743a49480320f904d172227df4f0baabc06637dd20615287fe864b7a66723dbf134609e212fdf152e55f0c15e780c02537f605592aa14b7156002c2f2e94c44620d7fd194235e6912757a938252c51f49d6bc1dd54c8b153f30c6b7f20a4f41874369ac39fb201157be4f3db83f46b2cb9635d12556293f2b7142c949e1b08825c5b", @generic="5dfdb046f91cd0ee9d558f8b9fe54546a899509af4137ed17dc8bfb3d177598085d8f1f6f77c872eb15b374e763626dc400adf1dff266e2dd483f7eec26c6a7e0de264fe9fc5bfe98a4c47838bdb6e38820c73e21b436d1fecd76ea94a43da40c4de7f8df38d3f3b7f2fd9c697257d56dc5afd883cd40123d3c80b7aa81ba556ce1f63a1eeb891755aa72634ebe8cd53edcf8d7bb198cf81a7a6c06c255efc760e116602f545", @typed={0xfc, 0x8d, @binary="b7ddfb3dbd5517aef2b9a6bc6221ae4df73531978576b107dd91eccc7c087c5a91786dbdfc68aad12b222fa485104a8c42e3bf91e69043f68d783e6f7b96a97f4916c60fcca734425ec65feacf8200cbae49a1b481397012d99e50ec477495af2a1697429d909f240db3e67a289555ce26473d042573c899b22e283a309766efbd3eb5d2aa7d3616f604decf00206e1e771c3dfdfb38ddde5f85a4711103ecf962ad0d9c62f1e305690be7baa70b3e81f5fcc1a661fe69d781eaefd3594a289f22e43bca480dd8a8751817c3694e305e1922d36f7a15b57db9197ed79522818c982c5887c26485875b97244bf6fbd699096a0d4fefe6"}, @generic="e2231405a05153edcf3544e235775289d79703f03fe2d9d4dbfcc89299bc1d56fd00b2febad013c0e895d4d9f4c9e47c17da35cf9c02802b039aebb1ed23569292590cc4e663d28ac82e3af759cd020ad48121817988fb64a822dbf74c685a7955ccb81471ce7221ae75d0e315feb632b19b692f7c5a26d782bfcf67c9e194c27875c3cef046a9c233b3bc25c968e10ee9c8ebd9e3987b6ba13291559ee862", @generic="f12563b460d58b48d19b16405f3abb620b176e019d3f5cc9dd8aff46739108f02c014fa58f1ce9103f77dec6298b52614853de221a961960c3f9fa6810f7ec4e3da0a958107b1949419c4e99ad6b7b86e855a205e68a37f118704cb1cd0ae6739284", @generic="7c25ad7b6edbbd08c9ea25fd54c97ed1e1e05d757f6164511921fd155acd9adf6110b0feeb6561c897ff18a508ccd934b4aea12749339cef1867ffa888bd6c90fbdc9c696d5993e4c2b7", @generic="d3f8c9d47f0e83fb489d31fa3a2b30b46c7040d85fe6df310efb5a131f112fdac2bfc5a75346fb47951cdb481f7e1872abd6eb9f453fbc38129b0db6f11cfad4197c888d81c49a4d68c0f6594c5844828362e29131b1fe388ae0472930433173252e63a97640c90a0b281afe8ba7a97fad1d2bb3d79f666d2a245327778319c1561dcb", @generic="35b340777957b38d91dfb9cee0594bec0a412f105f15d5bc4f5e0fc7d02cb81644797a2cf83310ed97ec429c679397d3540954521ad8f1a01a9ec3fafd463dcc0e7ad8b33ef3b8bd7e487d69a0b51daba582580ada6930e466648b2bb402357f2a14a1e31be115d7adc88a5972600d35638bcfbaf7863cb2f6a45f5676fa092c8b4f077933c6e5ccf5f6d426e5980ac3f0b9739b2709923d1c709745441cd5287879ed2c525713d20feaaad67fae3d2720f0107998f322544eb4742c02ef3930f0a95b682d9f0ffde1e137eb0751bcbbbcf31a6bcacada6ddabd0a7ec78bb40da84aa0e45a9df5e858a341974f11", @typed={0x14, 0x6b, @ipv6=@loopback}]}]}, 0xa0c}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000000c0)=@int=0x40, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010207031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b3562406b20cd37ed01cc00000000000000000000000000000", 0x4c}], 0x1}, 0x0) 05:55:07 executing program 0: unshare(0x10000) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x2003}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 05:55:07 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x1300}]}, 0x78) 05:55:07 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x5}]}, 0x78) 05:55:07 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:07 executing program 3: r0 = socket$inet(0x10, 0x3, 0x932) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getgroups(0x0, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x404800, 0x0) ioctl$KDGKBMODE(r2, 0x4b44, &(0x7f0000000140)) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010207031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b3562406b20cd37ed01cc00000000000000000000000000000", 0x4c}], 0x1}, 0x0) 05:55:07 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0x1}, 0x8) sendto$inet6(r0, &(0x7f0000000100)='F', 0x1, 0x0, 0x0, 0x0) 05:55:07 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) r1 = fcntl$dupfd(r0, 0x0, r0) mkdirat$cgroup(r1, &(0x7f0000000140)='syz0\x00', 0x1ff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) fcntl$getownex(r1, 0x10, &(0x7f00000000c0)) pwrite64(r1, &(0x7f0000000380)="291e816536363e9863b3f0410e8386ceb3e96f3c6298ff310b18f2a6c3710610b1855b55dabf99ca4a50f92b9fb855f842117ab98c72672d4fea0d2ce499530c4cbe0f6df0e1b57dcb790b9e3395d72dce9866dcaeffb6ac6addd93a81f9fb84d5cb7946578de2491d80177ee78adc553f95212c689fe57b79dbd4b6b0e30eb0fa534c7c9e3188385bc11e9c7fdf9f71e73265768718c6075a6af331475f708c95f8ebe8f9670eb386e98c4ca5ea1c7992855b580066cc7c28e9c94c659203f49d64bbe00474e93de895eaa9700d5a177b8a05d84fc8f960f1", 0xd9, 0x0) ioctl$RTC_WKALM_RD(r1, 0x80287010, &(0x7f0000000180)) lsetxattr$security_smack_entry(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='security.SMACK64MMAP\x00', &(0x7f0000000340)='+{vmnet0\\\x00', 0xa, 0x3) getgroups(0x1e3, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pwrite64(r0, &(0x7f0000000240)="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", 0xfa, 0x10000) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010207031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b3562406b20cd37ed01cc00000000000000000000000000000", 0x4c}], 0x1}, 0x0) 05:55:07 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x6800000000000000}]}, 0x78) [ 1611.706961] __nla_parse: 4 callbacks suppressed [ 1611.706973] netlink: 20 bytes leftover after parsing attributes in process `syz-executor3'. 05:55:08 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000002700)=ANY=[], 0x0) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0x7, 0x7f0f}}}, 0x118) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) fstat(r1, &(0x7f0000000500)) getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0x1, &(0x7f0000000840)=[0x0]) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) getegid() getuid() fstat(r0, &(0x7f00000014c0)) getuid() getresgid(&(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80)) 05:55:08 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:08 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r0, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x0) 05:55:08 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r2 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000040)={0x1000, {0x80000001, 0xffffffffffffffb6}}) ftruncate(r2, 0x1000000) sendfile(r1, r2, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) 05:55:08 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x4800000000000000}]}, 0x78) 05:55:08 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000180), &(0x7f0000000200)=0x68) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getgroups(0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x5, 0x440) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010207031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b3562406b20cd37ed01cc00000000000000000000000000000", 0x4c}], 0x1}, 0x0) r3 = fcntl$getown(r1, 0x9) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r3, 0x10, &(0x7f00000000c0)={0x8}) 05:55:08 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x400000000000000}]}, 0x78) 05:55:08 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) [ 1612.183365] netlink: 20 bytes leftover after parsing attributes in process `syz-executor3'. [ 1612.227387] netlink: 20 bytes leftover after parsing attributes in process `syz-executor3'. 05:55:08 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000400)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}}) 05:55:08 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x6c00, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:08 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getgroups(0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010207031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b3562406b20cd37ed01cc00000000000000000000000000000", 0x4c}], 0x1}, 0x0) 05:55:08 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x8000a0ffffffff}]}, 0x78) [ 1612.423522] sg_write: 52 callbacks suppressed [ 1612.423537] sg_write: data in/out 196572/74 bytes for SCSI command 0xff-- guessing data in; [ 1612.423537] program syz-executor4 not setting count and/or reply_len properly 05:55:08 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000002700)=ANY=[], 0x0) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0x1, 0x7f10}}}, 0x118) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) fstat(r1, &(0x7f0000000500)) getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0x1, &(0x7f0000000840)=[0x0]) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) getegid() getuid() fstat(r0, &(0x7f00000014c0)) getuid() getresgid(&(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80)) 05:55:08 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000400)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}}) [ 1612.471061] sg_write: data in/out 196572/74 bytes for SCSI command 0xff-- guessing data in; [ 1612.471061] program syz-executor4 not setting count and/or reply_len properly 05:55:08 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x4c00, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) [ 1612.537990] sg_write: data in/out 393180/74 bytes for SCSI command 0xff-- guessing data in; [ 1612.537990] program syz-executor5 not setting count and/or reply_len properly [ 1612.554894] netlink: 20 bytes leftover after parsing attributes in process `syz-executor3'. [ 1612.605547] netlink: 20 bytes leftover after parsing attributes in process `syz-executor3'. [ 1612.626661] sg_write: data in/out 393180/74 bytes for SCSI command 0xff-- guessing data in; [ 1612.626661] program syz-executor5 not setting count and/or reply_len properly [ 1612.693662] sg_write: data in/out 196572/74 bytes for SCSI command 0xff-- guessing data in; [ 1612.693662] program syz-executor4 not setting count and/or reply_len properly [ 1612.745449] sg_write: data in/out 196572/74 bytes for SCSI command 0xff-- guessing data in; [ 1612.745449] program syz-executor4 not setting count and/or reply_len properly 05:55:09 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000400)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}}) 05:55:09 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x3f000000}]}, 0x78) 05:55:09 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getgroups(0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x101800, 0x0) ioctl$PPPOEIOCDFWD(r1, 0xb101, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x8) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010207031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b3562406b20cd37ed01cc00000000000000000000000000000", 0x4c}], 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000140)={0xffffffffffffff43, 0x3a3, 0x3, 0x80000000, 0x3054, 0x4138, 0xf4f4, 0xffff, 0x0}, &(0x7f0000000180)=0x20) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f00000001c0)={r2, 0x8, 0xb6, "57173e29f1e37c5c23d4647323b440201fb51805c076ef68d5bf3007fbce4dfb3eddb7f5e22672779228e9ec39813441ef20485356871a6f534388153c867012ffc2c75a84d9965d36ee066584528adf940ae4c1c7d6469d5db5199b4aba016a5d20706ce65807f62a4c2aff0e1e382ec8adff0f44aa119b2aeb188bde798115e1478cd10a8b1472b8d37edc1c259348b368e80620e007eb5a42aeea8881bc911046ab5a12e0e25f9383ff24602045d1e3da1c68c1de"}, 0xbe) 05:55:09 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:09 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x200, 0x0) ustat(0xffffffffffff0001, &(0x7f0000000380)) ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f0000000140)=ANY=[@ANYBLOB="050000000000000000000010f1ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000011710000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"]) r3 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r4 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000240)=0x7) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xa0102, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0xffffffffffffffff) getdents(r2, &(0x7f0000000280)=""/254, 0xfe) ftruncate(r4, 0x8003) sendfile(r3, r4, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) 05:55:09 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000002700)=ANY=[], 0x0) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0x1, 0x7f0f}}}, 0x200002d8) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) fstat(r1, &(0x7f0000000500)) getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0x1, &(0x7f0000000840)=[0x0]) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) getegid() getuid() fstat(r0, &(0x7f00000014c0)) getuid() getresgid(&(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80)) [ 1613.088325] sg_write: data in/out 84082652/74 bytes for SCSI command 0xff-- guessing data in; [ 1613.088325] program syz-executor4 not setting count and/or reply_len properly [ 1613.124961] sg_write: data in/out 393180/74 bytes for SCSI command 0xff-- guessing data in; [ 1613.124961] program syz-executor5 not setting count and/or reply_len properly [ 1613.140002] sg_write: data in/out 84082652/74 bytes for SCSI command 0xff-- guessing data in; [ 1613.140002] program syz-executor4 not setting count and/or reply_len properly [ 1613.159160] netlink: 20 bytes leftover after parsing attributes in process `syz-executor3'. [ 1613.164647] sg_write: data in/out 393180/74 bytes for SCSI command 0xff-- guessing data in; [ 1613.164647] program syz-executor5 not setting count and/or reply_len properly 05:55:09 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000400)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}}) 05:55:09 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x7a00}]}, 0x78) [ 1613.222232] netlink: 20 bytes leftover after parsing attributes in process `syz-executor3'. 05:55:09 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x900000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:09 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r2 = syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x0, 0x2) epoll_pwait(r2, &(0x7f0000000140)=[{}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000180)={0xc111}, 0x8) getgroups(0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010207031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b3562406b20cd37ed01cc00000000000000000000000000000", 0x4c}], 0x1}, 0x0) 05:55:09 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x1, 0x2) r2 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1) ftruncate(r2, 0x1000000) sendfile(r1, r2, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000140)=""/215) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f00000002c0)=[@in6={0xa, 0x4e24, 0xa9d, @mcast1, 0x101}], 0x1c) r4 = getegid() chown(&(0x7f0000000040)='./file0\x00', r3, r4) 05:55:09 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000400)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}}) [ 1613.392996] netlink: 20 bytes leftover after parsing attributes in process `syz-executor3'. 05:55:09 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000002700)=ANY=[], 0x0) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0x1, 0x7f0f}}}, 0x118) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) fstat(r1, &(0x7f0000000500)) getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0x1, &(0x7f0000000840)=[0x0]) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) getegid() getuid() fstat(r1, &(0x7f0000000c80)) getuid() getresgid(&(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80)) 05:55:09 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:09 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x2000}]}, 0x78) 05:55:09 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000003a80)="b86013bbdbade5bcfddd065aa82167d7", 0x10) getgroups(0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={r0}) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000140)=0x6ae, 0x4) getpeername$packet(r3, &(0x7f0000003ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000003b00)=0x14) setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000003b40)={r4, 0x1, 0x6, @local}, 0x10) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f00000039c0)='/dev/dsp\x00', 0x141080, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r5, 0x81785501, &(0x7f0000003a00)=""/15) io_setup(0x800, &(0x7f0000000180)=0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/ip_vs\x00') ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000003980)) r8 = dup(r0) ioctl$DRM_IOCTL_AGP_ENABLE(r5, 0x40086432, &(0x7f0000003a40)=0x1) r9 = syz_open_dev$sndpcmp(&(0x7f0000001380)='/dev/snd/pcmC#D#p\x00', 0x1000, 0x8000) r10 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000002400)='/dev/rfkill\x00', 0x121000, 0x0) r11 = syz_open_dev$media(&(0x7f0000002540)='/dev/media#\x00', 0x8, 0x0) r12 = syz_open_dev$audion(&(0x7f0000002640)='/dev/audio#\x00', 0x2, 0x200) r13 = syz_open_dev$adsp(&(0x7f0000002800)='/dev/adsp#\x00', 0xfffffffffffffff7, 0x400000) r14 = syz_open_dev$cec(&(0x7f0000003880)='/dev/cec#\x00', 0x2, 0x2) io_submit(r6, 0x9, &(0x7f0000003900)=[&(0x7f0000001200)={0x0, 0x0, 0x0, 0x7, 0xfd1, r0, &(0x7f00000001c0)="0a9d126dce297651610bd6f11747e0819936b75bafa39b605b744e7e3c76d2a5aa014cc840c503053eedf822979deb9c059a17237e398839316eca4afe905fff12bb31405a1fd44900f68ff62712fe5626b7a594b6ca0d0b663a2d5ccd058ce14476bfcbd06e648d99811c9b6b78596c4f9762ebeb1cd27d1c005cb07da631320b85ce3b5588be91da4165f01774b0635517a83c976f2cee369aef78617ce6adde604d9c8811ef790c05c51fa0c87bd216b978db9f3d3ddd27f826734623afd425130b3a4235f6c6b827efb199132c64a4f032d3149f5abad697339a640cd65e484f579899f053036ef6a60f948aa65bc19ad7e8a3c0aacdc3b69b5ca707dc359e20c9bf946b21104ad792680bee657a7b7c179836a00060b7ad6af6adee2594f1cce97f2dafaad915ae326e223b14aa1147586951c7428058ad6b40224df402da2f8bfa9fdb5c5c9ea4917e8b1eaf1518177ba730c2f4937a07f15d442351db0d1b9acc062d5d35f45273af910ef4ac2998cd47e640c2a816afbea30c7d781b33aa1b3b824953c1848185ae3a5d3a3b17cd4da582f2e574ab768c20f281d2d0d3c2fd00448d9a791835a90db08f4493aceea5f8ad243bda9297e43ea0b5aac25fe7c403ef12f5105b03154c078ed717bc2b33ec422e8f3874a2af716e2a247210ff0313b57332ddbafaf854e036f0b17bb0103586af3371e7e5abaac53f068b86212b0f44431a0b557167f413d08967600283bc6652fc318450911baa19130266377c73691cf3f0c90583a56caa5b2574c99f82c3798a85cd7ce5ff3fc08e00ff1c1537c0350fdd9a2afb89f90936b18fa07143e576a273614a7725bf6037bab32a844ad1a614569f50f809a524a4ea11c4774a6fa18db9a943d0b02563b49eae75600d0ce94501960ed15540f71a7db54acd99740a82842f4ecc843e9a5c4cf7490ea7c4563ce56a3a6cb433f0d7f8887956b3cb529900b4469276123d71880a6cba766612b2d55caf3350b7f922f959c1d3af1fc2901111b8b393f238c1e39d8b67897400bf6a7ada93c6e51e8e7a8ab83c9a83e2616877a9735ad0c6e3ce11c84c994776283f77ad054b7340121c45fefccb4c812042047ce5ad17c2a5af7a6c3dc6f15d18b55873012a2fd67db8f3990a9012c3d7ca88fd9fe7b14308a375cb623873177cf87c748c7a89e51b509ad704b8f86a03d2943587a391d63fd5d1596006af0686ed4bf4b3821424dbb337cac3bbebd207cc030a47a6f8cbb895b7fb44a5f9197ba368dcb2f3eb390ec6e506dfb2d54e699dae014ff4a335faf5ad41456d74d1672128c1cd57a3eeb0756472f13e69b9eab6ed5c98b0d784cce41422455de128878d5328f5238407ea9a20d7b3a0b729bbc8841a523fcd2f1456a475fc56f8728314939666eef02c74d9b0ea30e97b5a746be107fb8647b7ef613c87b880281e5c7a9e20b723ea145a8fbdb7c0fabd8350bbd65beca5011d0371040902ebdd42927c4519c8ec3cefda62dbae5880f480968c5707e46f5553498db7f6adc00445a091c48051801da1f483538601e9e7a68864de271f51b98f70a271c5e648fc13765844fc299a731b3ea0d85515c758ac380a3ddc105e9b282742eab33e2cd7dec2d0d186afb45053f12c5f567d081e839f491f4ddbf1b37a390de2fb3e9fe7e42c03c8a98b48fedae789951e852ae31745c96b9fe78db8daa8639fe9bdc2e57d0f8907e6653dd47c6edea98c6cb4ff6ee231d124d81a8739a5981081e5bf89fc2a51d656709336e8adcaa1720f71617bf6b3635f1aa5894d796b22be91f540b83fdfa64dbb2e771fb077da923b84d3c11f10c03096ca615b9d64fc772d270c7059ad6a0aaba39f23175d32d8b922ad6d54a334f9acba25fed277ed4337cd81b4eb1167ebceca8ee3ced346f39130a366ad183a38db21460070054c9f1f485f10e6ff11e3739292cbacb6a16d9133ca1d557ad529aa415c19cab80c161b06247061907e3e073f3419e01bdcf44351f0aea84acd716e60f759f666f8c28ef01f9a7c1bbdacc765d7cfcad4e4e7b3360aeab6c1394f4d1d1f3eafb9e3f52434316a0490be1f22fbb1948ddf2d63a4a894ec4a12934f8d5d088d1226d9ee3165ce7a124a0d8417c45395ff8b9ff033ba0ef39ad953264b14c830dd5a0be6df8442c89c1f7430b7bd9339c2ddde13fdfbae2a6f2d3c3efe93b34303c49a1ff01cac5b4f7238b5531bd14bf6bd3caf17e451c738ddc7bc4979d3b479bbd32f2eb1943182e73a9be89de799d783611e2cb327f520cc18627115817d450a5bff74b94fffe04b38f15bc536a1902ebc0d99ddccb0cbbd5bfe8974af963cb1bfa4596e765d999a939d16e631367ba66765961087bbfdb99863ae5c937ea7981189b54896903f6dcb1ef18b02ebdd4aecf9ab7597a8ff5a42dcfe81f448713c9acb2fb0498043fabd63e9c1385dde870ef8bd7de16975416cce7dbe23d9d777936c907b8657bd1b994304ddb1f9b9727c56f64fe96dc33298e975ca3e8da3e186dd8f1b9e3af76383de6e49eeafba73799011c39b879108bf5cbd70973c9d62c69bd6e379beb47613a17cd3102222ad5006d4ef8b8f8c209610cfdb5477e4073f216fa1e17b190f3438508061817e1a2de2a08f2d8be4e547544171ea6104f942f3146c6b67d5c61ad491e93432f51f9d9783477b6e0fa07ccfbbbd21d3058ca6ea35a64d255d36c707a22897c7f46f8978c607dcca01ce9440583be503ad69e99e3317c473cc64a5662e3c3f6152ed8ba3ba58ae44a87aa5a640388c73f12aea0b420b867da8113eb56e914da1fe13a92bfffacd9ffa182468a446da0316eb9d2afee1ed43faf380740db2d704f4b36cd7bd802a2fa18a8d07a4fc37a860b1340a4716e9668980de5f4e4c99086288c83a149a0655fc30b2d0fb8e889d699e699ec5422d9f174f27e2586f04241ccbc56a436bcfc3d148c6a0ff84602248fb9b826ca3699dda9aa4add52370530383f772dc7d957b556c35804c18b13fdc8a010d67e257c9ab5915fe12d5abad3ee30d3feec397da9511041868442d38f68f3f8db330a2cae04855d0ea8d091891413cbece866e850325f3108076dc1182c79eb72a5b385eb13b6a7cde40d4bc860f8816525b0de43fe4c7177cafba856cadec005d09578e90e16c016c76d91ca1ae3883e90ebb523a030fc72a1e278a52bdb8039a7658673a8eb63a4fd57d56a97d50343a869ceafd93572fd0a0317e9c063c211f5311699c6ca97f93a6e814f24cabe080debfe8c0cc5ddce143940b45fc54f8ea5e1b4a50b9949c9134eb66257796261ba7aca3e1841da5a07b48db9caf3755e6cac28ddf6a8bca7eb17e1994c45292d156112dd072831a7813b114358960878e7bb88cdfd84ba4ca3ac86bb2561a13d00269e9d16ab6d36eaa114810057ee32367814b51a8b381eb78664fe54795147c3fbf2feb775925ab3f04ed1fd063ab5faf028795385d4390e2f75b2cb0aa3f4757e71d43f890abeec9a1d9b5c8029c82bdc3e3ab5ab85800b1e2afa409447047d877672f0cb028be8d49dfa947986d2a36341988020ab1f0c1e51cf9db367e0a76405935cecf0f7534d92abf931c844bfef9684fa2fa856b1001836c28a9f679ce98bae44113eab71f1ad93fdc58edeb065c67f9ff81cb6e2fe4921fef2753f3b8fd1663742138e26b370151c3a1950808eaa79762f82b5877803c8e0886f5d610f963176c722fc7b659decbc9ce99a8bbbc9aadaed2d267111c139cfdc4752194d0b4bd92a9473252d8320a1cf4e056fea28139f94d0e4273cf2d13d570c24ef32b53931849b3064b9bae4a80c902b7e6dd99c990252e481b92077016424028f52b57f4cab8aa5c4121d4e52dbd11219e20927759f7a2819976e0bcc208f1601a9858f4b073209d2dead83ee497f8a0eaa258af84dc9bb5c7a5da21e50667f498bc373e7b128b27cdd268e3989360da43d5f294a04aad5049f0603a47a96edf58e3394d17b9773526956e31582806ffd15c289b50437f60913cbc88776041fca758976b09c7abea95b93650d7f2c1ca4b1f37a51aae700e5fc1e17fa2f7dc1ca4f3e73aee92c9cb89f61c42ca29a648e77a95d0c1eb06d6afcb4c2b76a94f7868a47d660a8bb315fc1d610ff1f5afd33dde206e512e3a7b1db9fda9a0420f8702a18406579eed8a8b4f6bdd4b2b568c11800abe1ee3c864846530729c139b58c913ad0c4daa9d41f930c891d19dd1bbe1820a303f6e82e425add42a00418e148b88f2fd2d2d664d92e286e53aa62b58e165ea00a8315e99037cd020d4f8143860198ed009aa87dabab4c4ab85906517f620516f9bbfa36d1f28fe188ed7dab8c16119ea244b3976f122a5283de42b2ca23b8e93056fb92817d53a7776c870df77388c344c79010daa71e60421e48b7830c0e19976bbb76dd0b1b3128756fd380aa45505742923a4e88a81749b2742da150d43893474fedacd0d6244ecc1a274e1a15ed7e4aba326f0890a2983649555d5d09e7ce8d6f9e2f98f3c503745e968d0534294908a11a6b21f0bc04b364a1871aa39e7fe82f7640ac8de736340016686759777304eaa7ebe6331f94136bc561463c15cde1f12ae5e0ccdc55646bf658c963f9cd986a0d5bd57b7f01ee0978cb60dc1eb4a3b70da1cc0f55c55fcf41e8434f8024a5c37aa34b1c751ead6b0fa15fae31ef537f2a36dc125dbedc5b95b424e141c28451be58ff40e2cd6a0f979d854d873e2c7ccd2edd2df68312e4445c4fa303e06260ce613f0131e0f6f695a81d0e81111e72ec9b38592cc0a88d9233567fe5dac01e2844038954ca6e730400efc38f550217a6d9548c5c81d09069bbe4e5a5a43abaa246f3b3fbb6df2c173d1093caf1a640c3463ad128189c4603dae6c3ba74394c18f9c30df1443f90f348708f85c4300997168939eaeb82752ef0b59e42879c84d815b260aa99d0a89e8e11c455962372459490a8ea7a390af24fa91c9cce891340eccbf1cbebb0619fd44ad0491cb1402be8ebb0158322e679a2e3b13198a38c5fb29889e4188ab89069e8ef317e512c0bb1064246464852f790ec20630c99279ecd43553f679bf809bdd4d7f538bab2a4192631e0e6d64b48402cb5205a048145fb574b7190e5c8725abaefbd96f65bf1063e311e71723a7c97310a0f1bb99c1e87e7830175d709fcf4487d79a1c4f6f02ad3f51242381a0f1a127e75d4189986b903a7002ac4835a9d74ce160cafcd4c1f9aab3b584ddd138ac5d3e88281c71b7a549b13366143d90fd9006b262fa0191415043666a403119d8dc0e6d8566a581fce90839d5fa0267fc4ee3189c77a21b8ebd6bf66a407e6a8a3ff32a04055d15e25333120b39e684f4980eb2a3e2742e9d08105303a46eea518642941cddbab5de997c4c8f7d46d9446722119b819dd0c307fc02818912107b360524668f917f1f415e669a20dc43dcd01fe450db41d7f9a1faa93d39240d311dea59da2b80e8984a543dee05f16b92c4b69c4110233120abd00d16037b0b5aa4b04635a610f3c22b34fbbec71ebcc3562e9529ae3d2eaaa3531edd16cbe21e58a3ffe03734fef6bb6c27c41dfb78467a9aca250e5c853e6fa3a230f08efaa3088be886d6e3e7b20cc8c224ed375309946e4f7057e5253c3815bbbc3f3872f8fcedb2b4457f42c9d69ce94e9a813f1611d25f8fffd43ac9c1b22543db96c0b657a926c4469b1156cd78d9e92bb44f73c6ef0e8e113ac0c2f4d5bdd66c7695f1303f52466471115e7d1c534c", 0x1000, 0x5, 0x0, 0x3, r7}, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x8, 0xffff, r3, &(0x7f0000001240)="e9da8aaee902f64a44d6d5a69d077685ea0d971560b6af573669ba35aeb56ddcea0ea399a3866b569f20a6a5dd41d5070c4cb9beec59b9a00919994ebc9659f6622058e68f9881ed402d7fc987f828a29a1164fd9acddd5eb1a82f9eab2eab0b78c76215cad98b79a2fd4498803b133a6e12faf589b2feb8163aa89fe1fb4d45e747cbc3f4dfe5cbb7ab", 0x8a, 0x93, 0x0, 0x1, r8}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x20f70b2cca7df524, 0x8001, r0, &(0x7f0000001340)="e9276b64753ac45f6e78846e0d98b773229808", 0x13, 0x4, 0x0, 0x1, r9}, &(0x7f0000002440)={0x0, 0x0, 0x0, 0x2, 0x7a5, r3, &(0x7f0000001400)="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", 0x1000, 0x62cc, 0x0, 0x1, r10}, &(0x7f0000002580)={0x0, 0x0, 0x0, 0x1, 0x800, r3, &(0x7f0000002480)="72d9e7cd3cb2f003759e524216e872b1a6d64698a98171f1b8f40fb9a44c1b407fd3539e7f0f4262d12f5d035434602ea9192b0210e9a7f4bd655b5f1980e7e7b6cf4b398aec45f367d6d282c737f3f3833b40ece956a31466044e34f9a7a9da5d5ec37818f6236c1333239c61bc85f2ed8163ad0422db6a9eb510fd541cd864e061f5c1133d3ced3026b5311edcdf0c7978", 0x92, 0x9, 0x0, 0x1, r11}, &(0x7f0000002680)={0x0, 0x0, 0x0, 0x1, 0x7, r3, &(0x7f00000025c0)="bea0e7d2d91b40b1ef3954d543da89c753705f643281c85204f1d09bc3cf94d635921893d76c9c2507db7f92b350b47f8487c9829c4b638da51bc57b4d3b3748807cc3a6df2e", 0x46, 0x1, 0x0, 0x0, r12}, &(0x7f0000002740)={0x0, 0x0, 0x0, 0x2, 0x6, r2, &(0x7f00000026c0)="00b61fa33d9d801aa81693a7c3bb141f57684481de060176632a7c9a4ab467d9969022fcea58d0d8b17fe893a187942baa758e4c4006ae102efa6ae1856d4c648e981ab6bf313d3c1a70b01bad67d346e52e91d19cd6acd950b2ac5cbd176fba5c0ca3a53ea8a8a85a8dc06d5b8547ed9ad2bc81974ad3993b85", 0x7a, 0x100000001, 0x0, 0x3, r1}, &(0x7f0000002840)={0x0, 0x0, 0x0, 0x7, 0xffffffffffffff80, r2, &(0x7f0000002780)="a1b9e9d308e35e22394efddf31aaa20cc13a4d94dda1ee71ebab5c473c0892c018eea3e1e72af50d51dc312016fd8fb7a7a8644ef87330c912b85d6b829fbb45dfea6d14859e46f0411e1374259bef46839e7167f855b8d2677515002a4496358897ebed3c32c330bb1bdf109b7d8da83277780568f8b499a7c8ecce0715fae3", 0x80, 0x6, 0x0, 0x1, r13}, &(0x7f00000038c0)={0x0, 0x0, 0x0, 0x7, 0x3, r2, &(0x7f0000002880)="c5f8a1ab11b8cc06f5e5ff8ad3abcfebe18835b030ef0005535527916201f9da010eb0e05576e81a7fa40300610a9907c1284274773da7bed2d9e0c6245769cc9bd12e787b155704bc2485d7a64ecf6c6209955b750d5b8f4c74ae19fef2de796ea16c91c967454a85c4955471bef45b76552761bf93a0641ffe773bc403571f90c88b69c0b415a9262fee5096b06e1c2179cef3d760184dce4918eb3bffa0cb2ac1379245c939223979302bb56c71200c81d002ae797133200d65c4d758baeb5430c71af2fadf59051d6e208055c69b9c5740e6ec1a0f40f8e7f6fc8c327a51e40b5691e9cd91481eae0ebf6d7cad1b16344f7b41cadedfa19a4270e4bcf2619f14c63f27d0b67523ad167b0c669b55528bd6d402007e4706ac05a2c8712bea94f71cdd74eb03205dbc99a86f6803703e2b8a4a2b09ddc2b00fc700ebb9da71b94011d516ffd1d26947672c072b067afb953c0ffee961bb92553f3b97d88b0b87d2bab108dce1a2747b057fb6d59eb8c9204dc94fe0d600a691673a9219669cb6031694bd45da8dfff2bbf8d30ed6f05a15c0657fd887e48bea6e38d2cf19d009a2917d8bee9496d87b33d6a7180c85b1ca9c1d74e149dbdc234c390e148eaa6f096002ad5186336d6ea14366c5c9a697b077042285bbf748a9fe554a75631777ce7757e47cd2b7e85d36ef70bdfb8d094277d831a41371338bc3935eb46dee3a29a874173110627e12013bc69d8e5ad6b514f084bd063e0d0f9b53adcf965670319c71528fa8b1be7eb16d9b7c0ad3b281c524f36fce7ae69cad53aeab516fa88762f5d2fa270fdf0039518b31f2dd10f4526d429f54a1b004c16b179a74cb729c404ec8caef57a192df13e667c36c94bd83eaa108e235f89b0c6881b0af9fc67901a33f37fa55a4aa91c8442c2128c5f8788ed16404ad67dfb9df4f3ddb72c2898e3b7ad6dd430810c11486a13c7bda9efd078be77ee10a869531c886927b261e5c6585ba2cce9f7177bef703700500966b20954db6a631e4aa6646bde55a6e221a38b9372ee22737f99405b992849045c14eb7fcc9a001014871ee1188264f41d5bca16ac74ceb64b77900cfd4796f0a2c57ee8964316fe3d7d9938188e28a9ed006eb63170b5b7b301ba8736a33adb118898c61d0a199b57b3e9f15ceefdf0913aff184b8ec29f45b1bd05cc667a3f803a3c0b1d9c8aa21711d0d7e9392f1d734793df815784ec680cdd1b2efc6574871434e4612f503a635a88412525764b09af8d5a52940f192447cd08420eecb51c42dad1dfaab656bab7d821f9ddb69d7cd8e8da2376ef5ce0cc00a55b7d707ff998c25dc916f98484c59ec11acc34e945005e36d8af35c0f054b06673e5b9b74e7ab465bbad25f07ab0ad85e9f2608172a286670dab598ecdd7d741dae40702f889911401bb9cc956fcb631f8a9b2622c34d3d4c93a11b35d8f08afb963af0eb5f499eea46a36f389dc68d8e794483d00cd9a874bcd29f11273e9f5c271f9302a2f28ba75b5fb459d17b910b8be2012508fc055e19b8fecfa4ecfb9ba3d73156e1445404f5eb78ed88bacf3e4a00914c6d1ad4d01357daac5c37bb9cd86a4706c8b83743362287e91a2d9c680960f8f4bac3d2f6f8d174b414d0248fe605d92ad48e68a31f0fdc9ee6f32722f4c9752d479627d42dd9ab9ebd36af74fdaecfbb440f2de243e772b63a235a7f212974474d615714333302785b33c0b07e4080d27ff10ec6a2828f697887fbb60705d59d1826e241b15e7df1cfef36fa87651e80a5fc8c6a1d419551cc2cba508f71cafe6b026fee8324ca8eaaf66d9f9b653a24294f35bc2e9d27b166a1761c76bd594d51e404cab9e514e6f695c9fd947adaeef0a1265f1aedb74a776dfb85b69642ad3b5b2ab9898397aeeed63524901c28c374c0f9ceff1aba474193fd84c2f219071382af1b51e04f2f66888aa4b7ba0bbda45ca43902833bb286efb8437f6308180cb41c4f4f929eb805c2a1079bb612117d4725a2979186f0f2b3e6f37fc60eecd9c6122090490437bab74fee8998c279d10747019cd7fb1cbccbb54206ee8604358208435a92aef2830cd649457972e68b9ba86a0936d93720e0461308e2f11bca549637069314d4e5490b1ca4d35799cac544ddec16c9286f520fd4d5f03ceb0f339ec3d91210a211d68271289770638b90df015e1c6d16e797081963e9fa8a290dbdbfb08aad2dfc6d09b578123240f89840be9d19ecbff1cff469239c91051757110015b3da94c7ec8baac627c5ca474c9b46735519067a52f5bfc0b63eec11b10d8d6f1b4f9337cb8f94bfb3de7851b26df5bfc018ecf6f31703e83b8b17964dd1600ba29462f0254ce0631365aa0a985b78ae04eb6f3397ce2dea9ddc1b0e82a53f5b96602bdcee4f89cab11def312dca080b08368cf289f59aee1be42f94a6d85b587784575477678eac4ef54ebc6cc63e65e27bc8202074dfaa3e6d2caa5d92a03b7debed0745702c18e10cc5a932f7b647e232fac70d6bffe51a009f30f19971b698b5875f1fc70c83a5ac81fb3d15e2ab4bc84ac66c55a49a9ddfbec5e3a412346095c94aa847865ae4bb797c38d35f413ff425b4f82410bb4db04a67dbd9f21c1a0bbcaf27ca7bce411d3602a3c22f42aa05a7c1823d1b1b902530cdb73b1f6a3de3c3fde7f29125fada683c476e3b2a97ccb634ade706511800305c557d27dbd4a70f82bff1ab7ec3297cb9bdaceb4ec2ec0cd0ebab0377a6c1a1063552e4fb46b2da4668bb5e49136150db0850a45a15dda1bfda73127ce4b83072e1491be95a389d147c2dad54f9d9898c38dfdade94290a470dbbe6f1b5670203d9bb15d0049b818bc2281096bc50ea73d0002a31c16edea1ed38eff226cde58bbc5288004b1aecb116fbf597a794d2a778f23549b1b571521461cefa09a9e103038070745a3e4c569cb59b1d0c836a596d4dad490e97b6a990bb50684c0086cd1370daf35613da6ebf14c9e313e77a0fabb8c508e6437a0ebefba06b0b2d2c6aa1679b42524d177d43f365b28cf4b1c0acb99a3cd754cb5b0501557a1f850475f9061ec6d8c5c9243d6360198358f9c89d131a40c79498df762914470fc840d3cbbec19f2856b3f85c96722a3c7008eea27bc539144c2c2c3c287c1588ff7301e995c0bfaaa9156d4e6e32c55b5c09e3dfd708dc01472e902b8015e8df116fd65d98eb7c73f7193094ee1efa5760719a5e526a19bc73ce185af012ae72d85e6c19105bc191ed4bcdf17703a10f16fe1356c45e9036d70c76a7b1ea107cd728787fd34bacce0909e9b9a20e1cf058664ec942e553f0235f6ccb7c60da8a392ec7ec0d882b34fb9ffc1abcd4317512aab8c5c9b7bd2651dae7d9bff9e4e4b2176ca91d6f5ebe6da299d5ca7f45178c28697f8313e70a9d1383d3e78e02924ab99465bfedfad2a19e73a38b5c3a3698013c4958485dbafd79c1494e1eadc9cdc0d4a18f30354c8343c0aaf1f7566445cae495fa006ca4d017353578b102506d3ebf29c2e6031dd849141fcd4d76f0f13bba6f24c0588c61ddc35454c04bc68bb85f6007b2dc8311c9ee81d6fed8125bca2d8349e6ad6880c805dc9865c4bbf866a7ed424db0cc97ba37d4b939260fc2b366bdbe6a719e33ac254003f4e7594088df5c72adb9c9d3eb89a45406e4e9056360585ab2e0d6d85117a4a094c384f25b400adf12eaee71af2294dc131d2a74adfec7173f4a9a129d8d3509affafe5b9e660b4dc902d71203f1e2ce56a178b7598f5fdf6721132fbfb7fba3c588eff9902be9f0f86d2556f4b0396f059b86fca426e21208fc92894a2f2ff3f4a83abc6614ad244c9f71956c39d51232319544dd6c8d67981778c79202bc4a5d038491af6b4c303c52b9bc4e5b299b2b3ef7012dea79c3ffbe58e8334f1674486cfcf56734c18dea981d55861b26b56e43a4bf5355727b4879711cf04017961d0da1522f95eb45e80f041c78249b4ec3a135c3e60922b37c62fdf9c4f76050cfc22583c49dfc7e7e151ab3a0fa9473c84f43632368b6654eaf01f8641709b93de5f559dcc0f944d726d7ef09e605c39aec23f58dba9275f9cf5ebd8a0912a78a85f589e1c70e23d8d038e5df8e0438abbf10fc6ef42b69de00dae489aaa3cddfd379a130d963aa8b352b1d1979590ac0b5e15647596dcf43e99185c3bf2c994a8fd4b4c390346a3e3cf7328564ec03246abbe4752bde64e172f04c7c46f9cff717e4acb08689fdc556841a6168cd3b90758facfb2fef5f1747f0cd3f2143b79ebd88b09692a966bed15ff75cd7db72ae7e05fd32b18d0aeba5959716cf69456237116494f4e5a2b094fdb4dc9b310fed82536c37c490ebb28ddf1c52ae9d4d51130f738310cb08b6993a470de3c5adc7bfb4613d34c1bcd60a76f876f54f55be8edafcc2836f6842d2c1cbe7e6ed08924f41bf865f09dff140a69ff5e57e6a8855e58a9c7afde026c56718f45ec24ccd9a48a9f09e8679957604e40b2091f82004ff98dccb67d923a8d4c56e2dffa9b1c8d9dc028833158a620e7d34bd19eecd45a83d97523980b9325a40a7589c3fb6740382b38ba773b5d84f94bfba6e9bfe22c5594a8079a866b985f43e5f154f7170ce3d3c0f65f01ed88644d15c0c93c4806e1fd8e420e8cd3d9ee47d7891485224b92cd778a5b163515aa9268ccacf1be93b6b12dfd5d9a95d3a02d0ece29c76f87befd0215c7dba295b8fb798e58e12711403d883f4cc3e6b492d777b4ac88b48153c5efcd4cac60f826e9623580d1ac3b51b96ffc2ac54f360fc139daabd99624e2e5235ffb7e2b3eeb20bff7c0b1534a2715572a5f2eff65c1fc49034410cbd19cb93bf2d794223bf2b1054af910ff31d0d46ec1d048eaf2aa5dfa0935a48646823019331b58924a039dd78e73c8ea622b59dfbcc0a3b625217633981b3daf13a35f729c7335017efe549baff26c5acfee54ac2af8044edbe2f23c4f3195b0e1f344d76ea57a9409e0e9ee12cf423ea11fe169fbaf12649f59fbe2b66cd49a5d7b67946b463d15ec261a4a912dbd727d97dbc0ce3e4ee5a83e00e138fee3ad6cdb096f143b74c9aa9b748c9bcd9b35aa52c755a1f21d33f44bcf784d37604a21d0f33c8e30c132e39884fbb33e88513f9abcf0863929c2606de457196078c1fc1e7cc2409ae52ea8b76cc7de20df5abc7e22237d8af4bdf68ca4d3c0e6a8e69a1d935e55d577fce12aecd61de85551b319ddc5ec7e4137d6bcc0fd5027651c3545b4208a9f30f05a7a19a2ff552e922612aa770fc73884aef881fca807a8cd066a815a6dbbe4ae10247fde2a40909bf7bd7aff40aedf8b830e3430c06cdc00e55ef84d03b44f648d2c94fb4bc141e5aa7fcffb5500e007e060c3c9e8adebdfcc713874ab5455334c72a5dd71a3412f1e36e08b3c76e962c9e6ab940e9c950dbaa8c09647f98bd3def429b7dae8e11ff2f18311099aa71d18ee7175d192d498198e13bdb4b3dfa59831619031897f672c1f6f453b0b049b213b601e003850c3f40d12375b9c6e3f7cf2d6a1041b2f0c78ad4c6a1feb20b8dec5b63ae195905719a98047eb592d8a76f206232cb21dba26c7a5d2ab19cc3c9fc8a2a172a6ace6a588f99b0298ef396ec02f068e21c3906deeb5a04b4fde77002bb3f45ed8fb53750b45fa627de2776fcfa879cd695af2e41bb1aba99cab5a701c6d83124b0c7228b0e96dc6e4c11b7e34038f29e15c0de1c9bdca1d5caf421eeb16ae30f0478867da88f306bd932a0b7e48423db1984dfb2", 0x1000, 0x3, 0x0, 0x2, r14}]) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010207031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b3562406b20cd37ed01cc00000000000000000000000000000", 0x4c}], 0x1}, 0x0) 05:55:09 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000400)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}}) 05:55:09 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) [ 1613.673147] netlink: 20 bytes leftover after parsing attributes in process `syz-executor3'. 05:55:09 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000400)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}}) 05:55:09 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x4c00}]}, 0x78) 05:55:09 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x20000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:10 executing program 2: socketpair(0x0, 0x0, 0x3ff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000002700)=ANY=[], 0x0) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0x1, 0x7f0f}}}, 0x118) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x10002) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) fstat(r1, &(0x7f0000000500)) getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0x1, &(0x7f0000000840)=[0x0]) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) getegid() getuid() fstat(r0, &(0x7f00000014c0)) getuid() getresgid(&(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80)) 05:55:10 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000140)={{0x101, 0x2}, 'port0\x00', 0xc, 0x100020, 0x7, 0xffffffff00000000, 0xc9b, 0x3, 0x0, 0x0, 0x0, 0x9}) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r2 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1) ftruncate(r2, 0x1000000) sendfile(r1, r2, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) 05:55:10 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x7fdc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:10 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x6800}]}, 0x78) 05:55:10 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)) r1 = syz_open_dev$usb(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x7, 0x0) ioctl$BLKPG(r1, 0x1269, &(0x7f00000012c0)={0x401, 0x6, 0x1000, &(0x7f00000002c0)="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"}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getgroups(0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x6, 0x80) r3 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0x0, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_G_SELECTION(r2, 0xc040565e, &(0x7f0000001300)={0x5, 0x100, 0x2, {0x2, 0x40, 0x1, 0x6b43}}) r4 = syz_open_dev$vivid(&(0x7f00000000c0)='/dev/video#\x00', 0x3, 0x2) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x14) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f0000000240)={@empty, r5}, 0x14) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010207031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b3562406b20cd37ed01cc00000000000000000000000000000", 0x4c}], 0x1}, 0x0) 05:55:10 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000400)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}}) 05:55:10 executing program 2: socketpair(0x0, 0x0, 0x4, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000002700)=ANY=[], 0x0) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0x1, 0x7f0f}}}, 0x118) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x154eb242) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) fstat(r1, &(0x7f0000000500)) getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0x1, &(0x7f0000000840)=[0x0]) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) getegid() getuid() fstat(r0, &(0x7f00000014c0)) getuid() getresgid(&(0x7f0000000c80), &(0x7f00000007c0), &(0x7f0000000d80)) 05:55:10 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000400)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}}) 05:55:10 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:10 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0xffffffffa0008000}]}, 0x78) [ 1614.310947] netlink: 20 bytes leftover after parsing attributes in process `syz-executor3'. 05:55:10 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getgroups(0x0, 0x0) r3 = dup2(r1, r1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc4c85513, &(0x7f0000000140)={{0x9, 0x6, 0x0, 0x80000000, 'syz0\x00', 0x3}, 0x0, [0x0, 0x3, 0x1, 0x7bb7, 0x2, 0x9, 0x6, 0x34, 0x100000001, 0x7, 0x7ff, 0x40, 0x8, 0x7, 0x663e, 0x2, 0x89e, 0xfffffffffffffeff, 0x10000, 0x4, 0x297a, 0x6, 0x1, 0x5, 0xd9, 0x1ff, 0x9, 0x800, 0x1, 0x2, 0x2, 0x100000001, 0x30316c5c, 0x100000000, 0x7fffffff, 0x2, 0x4, 0x6, 0x6, 0x800, 0x1, 0x4, 0x29, 0xda40, 0x4, 0x0, 0x9c, 0xc29, 0x7fffffff, 0x9, 0x121, 0x0, 0x4, 0x101, 0x3, 0x0, 0xffff, 0x6, 0x9, 0xfffffffffffffe01, 0x4, 0x1dff571e, 0x7, 0x1, 0x0, 0x800, 0x7f, 0x2, 0x7, 0x8000, 0xad5f, 0x1000, 0xffffffff, 0x6, 0x4405, 0x7, 0x7f, 0xfff, 0x9, 0x100000001, 0xffff, 0x0, 0x1, 0x8, 0x1, 0x2, 0x1, 0x4, 0x8, 0x19, 0xfffffffffffffff7, 0x9, 0xffffffffffffffa2, 0xfff, 0xdfc9, 0x100, 0xfc6e, 0xa3f, 0x2, 0xf000000000000000, 0x10001, 0x5, 0x7, 0xa05d, 0x6, 0x6, 0x18, 0xfffffffffffffffc, 0x1, 0x8cd3, 0x6, 0x4, 0x8, 0xb, 0x81, 0xff, 0x401, 0x4, 0x1, 0xffffffffffffffc1, 0x5, 0x7, 0xfffffffffffffeff, 0x100, 0x21e8, 0x2, 0x101, 0x18000000000], {0x77359400}}) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010207031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b3562406b20cd37ed01cc00000000000000000000000000000", 0x4c}], 0x1}, 0x0) 05:55:10 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000740)=ANY=[], 0x0) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0x1, 0x7f0f}}}, 0x118) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) fstat(r1, &(0x7f0000000500)) getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000b40)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0x1, &(0x7f0000000840)=[0x0]) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff17) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000800)=""/65, 0x41}], 0x1}}], 0x1, 0x0, 0x0) 05:55:10 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000400)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}}) 05:55:11 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) sendto$unix(r0, &(0x7f0000000140)="61aef92fbd08cd267de8e5fde6fa9994cc1b69d244b84a14a595ceb75172503696d9e4667a790aa0c8cbf8b599a6caac626cbac3d816232d837bccd119cec99b9441a1b3ae72f7d268de0b52479db4decd3a790540fac64dac50182ce9dad1df0acb426a04904fba035455b501ebe34385a02b30593db21adc4a1f7c71b0e9bb4f162d8a088629288cb6b43904c4de1a43f547ff294819150d94190c65a83a40e67a2a7fa3b1283468349a9b1de79c912c57d48d28d561b18f15ea09d01e270d9514591be542c9c58d39a64b9b6c99420bd26387e6748f999cd229f93584d0c5b658", 0xe2, 0x4c845, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e20}, 0x6e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r2 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1) ftruncate(r2, 0x1000000) sendfile(r1, r2, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) 05:55:11 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:11 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0xffffffff00000000}]}, 0x78) 05:55:11 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getgroups(0x2dd, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010207031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b3562406b20cd37ed01cc00000000000000000000000000000", 0x4c}], 0x1}, 0x0) 05:55:11 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000400)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}}) 05:55:11 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000002700)=ANY=[], 0x0) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0x1, 0x7f0f}}}, 0x118) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) fstat(r1, &(0x7f0000000500)) getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0x1, &(0x7f0000000840)=[0x0]) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) getegid() getuid() fstat(r0, &(0x7f00000014c0)) getuid() getresgid(&(0x7f0000000d00), &(0x7f0000000cc0), &(0x7f0000000d80)) 05:55:11 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x6c000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:11 executing program 0: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000400)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}}) 05:55:11 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x600000000000000}]}, 0x78) 05:55:11 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getgroups(0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f0000000580)={0x1000, 0x8, 0x2, 0x5, 0x0}, &(0x7f00000005c0)=0x10) sendmsg$inet_sctp(r0, &(0x7f0000000680)={&(0x7f0000000140)=@in={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000180)="8276709893759bb6cc9aee71e717c371bb03d80f64ecf61c693628fd0fed0861166a551ee662e326d1fee25eb59b84adfdc36d07def63bdb40fd8d9b6e375ed4194098d9e33822404da35cb198f8a9969acde3e292a52ef8e1e30de51823", 0x5e}, {&(0x7f0000000200)="8d67e5bcf224b2946e47cf6e934789a7f63aa248bd5ecf71e17d8540dfcf1237ad35dda96bb8dee4dc75b0db03aa50adb20217615fd535ae42d49001f94a225e5a38c570c6d59c9fe2613b857f78f8f100c24c5e05e024ab3e8c2b0496e6e5bf70ea2571b9a0b6170f2ba90f591f", 0x6e}, {&(0x7f0000000280)="c2e07b29eb336b9a4649aa2f8747c6219efa64cfe8ed2f2a31fc8f2d610d3094550b5066d855ade217de62ebba9819032c658a0a0d9c10beb09e0754864041ef63eb6dc1db054420c1081e98e9892d695f6ec2ad2d4575867d0afb7f9e01482a234ff2170b83156222af8203", 0x6c}, {&(0x7f0000000300)="f26004626bc5b01580ff6a84c2c2d5d1f24f5c9fc3f0bdaa8a8ae0ae2e3d5704d390c88df738e293cf8ce6d27ff753b5aa73e3b3749f7bf7e5f8d95bbdb77cd12d9f4b44866208859721c7789cbc4923ec1d867e411c97ab816c21c046a31faa4f8062b21df7dc071e41962b599d7d788b7e95aa14682d5b1c27cee4ced223b426aae4b06e6ccf5b1a5d248b3658d518de80b92b59b771ac73ac271b34d4b00a592535a555b9ad24097a095db29d03258300f382bdd9e89975b1788ed96718e1f4cc48757226", 0xc6}, {&(0x7f0000000400)="c06fa9e9ff2bbbe173b1d5ed551795ccdaa5afe2648ce86e647916eb2dc3391685e5164ac39aeda72868b8e824642999606ee29f4d8ebfe40054c3774bd2defb5ce463a9247a757738ccb3a13a81fba122f26d6320444b428be2d23a7abd5899fb72f8729ff95adde3f5b48414a219bccd9cd3dbe00ebd0ac85a45979a717ada44ad75e06ab43f3f357d428062a206133390ffd670d68abcc600bfa182693b0732051a69dc3dec8e", 0xa8}, {&(0x7f00000004c0)="e016d9bf140359", 0x7}], 0x6, &(0x7f0000000600)=[@sndrcv={0x30, 0x84, 0x1, {0x3, 0x100000000, 0x202, 0x1, 0x1, 0x6, 0x5, 0x2, r2}}, @prinfo={0x18, 0x84, 0x5, {0x10, 0x4bf}}], 0x48, 0x8000}, 0x800) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010207031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b3562406b20cd37ed01cc00000000000000000000000000000", 0x4c}], 0x1}, 0x0) syz_open_dev$rtc(&(0x7f00000000c0)='/dev/rtc#\x00', 0x9, 0x20000) ftruncate(r0, 0x3e00000) 05:55:11 executing program 0: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000400)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}}) 05:55:11 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getgroups(0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x40800, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x10000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0xbdc) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009ff0), 0x0, 0x0, 0x0, 0x40}, 0x0) 05:55:12 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000080)) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x2, 0x2) connect$bt_rfcomm(r2, &(0x7f0000000040)={0x1f, {0x7, 0x6, 0x81, 0xa8d6, 0x1000, 0x4}, 0x2}, 0xa) syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r3 = memfd_create(&(0x7f0000000180)="ac00", 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40042409, 0x1) syz_mount_image$erofs(&(0x7f00000001c0)='erofs\x00', &(0x7f0000000200)='./file0\x00', 0x8, 0x5, &(0x7f0000000440)=[{&(0x7f0000000240)="01ceb81fc8513a1ff6bbc42359ea45e4433d8b625669a134777d2a99014e0e526ad39caf477008ad5e674bd2865ff447ba8c839371a95abfa7bc148480dfcb582665f98ae3b2b415ba6c7474eb38edf5e37875ad030148c79b4e376902501a38339a980efc3573a774225e812098061251ec88a96cc5aa4ab8d76558ad5c23e19cf15826e129b3d663082729016aced74d2b7e96", 0x94}, {&(0x7f0000000300)="20f5805881493231e43dedff30acecfe", 0x10, 0x3f8ef962}, {&(0x7f0000000340)="be3062c373f19bb60ac2b18cc432173ba5aad5c3c7fa7056c5bbc596", 0x1c, 0x101}, {&(0x7f0000000380)="5f750992a03af10cf87a028761668a984c855f66434d9b6e67e8f83fb3a23ef01db322fcdd5029c3276a", 0x2a, 0x4}, {&(0x7f00000003c0)="3e5369536963804834b25b0a3d1ec95938b2052b270c03189cfdb43da011c0356c65d5f4c6f96c3882716a3d312e2d012a9c71bd3b69ffb488dcfb29485f5c21fc08d2541a57", 0x46, 0x4}], 0x8000, &(0x7f00000004c0)=ANY=[@ANYBLOB='noaCl,fault_injgction=0x000000000k=^MAY_READ,obj_user=vboxnet1mime_ty}e&,permit_directio,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00']) openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0) ftruncate(r3, 0x6) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) sendfile(r0, r3, &(0x7f00000000c0)=0xfffffffffffffffd, 0x4) fcntl$dupfd(r3, 0x406, r1) 05:55:12 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x4800}]}, 0x78) 05:55:12 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000002700)=ANY=[], 0x0) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0x1, 0x7f0f}}}, 0x118) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) fstat(r1, &(0x7f0000000500)) getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0x1, &(0x7f0000000840)=[0x0]) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) getegid() getuid() fstat(r0, &(0x7f00000014c0)) getuid() getresgid(&(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80)) 05:55:12 executing program 0: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000400)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}}) 05:55:12 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:12 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getgroups(0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010207031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b3562406b20cd37ed01cc00000000000000000000000000000", 0x4c}], 0x1}, 0x0) 05:55:12 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getgroups(0x0, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={0x0, @loopback}, &(0x7f0000000140)=0xc) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x80000, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010207031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b3562406b20cd37ed01cc00000000000000000000000000000", 0x4c}], 0x1}, 0x0) 05:55:12 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x6c00000000000000}]}, 0x78) 05:55:12 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000400)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}}) 05:55:12 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x7a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:12 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000400)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}}) 05:55:12 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x100000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getgroups(0x0, 0x0) r3 = geteuid() r4 = getuid() pipe(&(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000cc0)={@rand_addr, @multicast1, 0x0}, &(0x7f0000000d00)=0xc) bind$packet(r5, &(0x7f0000000d40)={0x11, 0xf7, r6, 0x1, 0xff, 0x6, @random="743a6b14768e"}, 0x14) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@local}}, &(0x7f00000002c0)=0xe8) mount$9p_rdma(&(0x7f00000000c0)='127.0.0.1\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x2000, &(0x7f0000000300)={'trans=rdma,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@common=@mmap='mmap'}, {@sq={'sq', 0x3d, 0x7}}], [{@pcr={'pcr', 0x3d, 0x38}}, {@obj_user={'obj_user', 0x3d, 'nodev$'}}, {@smackfsroot={'smackfsroot'}}, {@uid_gt={'uid>', r3}}, {@uid_lt={'uid<', r4}}, {@pcr={'pcr', 0x3d, 0x33}}, {@fowner_gt={'fowner>', r7}}, {@fsuuid={'fsuuid', 0x3d, {[0x34, 0x62, 0x0, 0x0, 0x35, 0x33, 0x36, 0x77], 0x2d, [0x33, 0x35, 0x37, 0x75], 0x2d, [0x65, 0x77, 0x37, 0x33], 0x2d, [0x66, 0x32, 0x34, 0x77], 0x2d, [0x0, 0x37, 0x35, 0x77, 0x7d, 0x37, 0x7f, 0x73]}}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}]}}) r8 = getpgid(0x0) tkill(r8, 0x1a) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0xfffffe20) recvfrom$unix(r1, &(0x7f0000000440)=""/53, 0x35, 0x2001, &(0x7f0000000480)=@abs={0x0, 0x0, 0x4e21}, 0x6e) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010207031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b3562406b20cd37ed01cc00000000000000000000000000000", 0x4c}], 0x1}, 0x0) [ 1616.375052] erofs: read_super, device -> /dev/loop1 [ 1616.420053] erofs: options -> noaCl,fault_injgction=0x000000000k=^MAY_READ,obj_user=vboxnet1mime_ty}e&,permit_directio, [ 1616.455836] erofs: cannot find valid erofs superblock 05:55:12 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x700}]}, 0x78) 05:55:12 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:13 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000200)) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r3 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000140)="bd714239e87eecaa1712a8131fefdb11daa0db4e97484dcd4121f999794d7da461cf65cd0e93d15066f99f60bbaaa1d89c866a574d214d4b6bcf6a6eee6867247f653a724cfa9f234c076e6a7e6247dbfd279cd423d3765405b9065cf9146d87a45b8498") ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0xffffffffffff7ffe) ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f0000000040)=""/97) ftruncate(r3, 0x1000000) sendfile(r2, r3, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) ioctl$KDENABIO(r1, 0x4b36) 05:55:13 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getgroups(0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x400, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000140)={r0}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010207031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b3562406b20cd37ed01cc00000000000000000000000000000", 0x4c}], 0x1}, 0x0) 05:55:13 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000400)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}}) 05:55:13 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x3100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:13 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000002700)=ANY=[], 0x0) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0x1, 0x7f0f}}}, 0x118) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) fstat(r1, &(0x7f0000000500)) getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000cc0)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0x1, &(0x7f0000000840)=[0x0]) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) getegid() getuid() fstat(r0, &(0x7f00000014c0)) getuid() getresgid(&(0x7f00000007c0), &(0x7f0000000d40), &(0x7f0000000d80)) 05:55:13 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x7a}]}, 0x78) 05:55:13 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000400)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}}) 05:55:13 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x60}]}, 0x78) 05:55:13 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0xdc7f0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) [ 1617.069836] __nla_parse: 8 callbacks suppressed [ 1617.069847] netlink: 20 bytes leftover after parsing attributes in process `syz-executor3'. [ 1617.173291] netlink: 20 bytes leftover after parsing attributes in process `syz-executor3'. 05:55:13 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x40, 0x0) pwrite64(r0, &(0x7f0000000440)="79d37c2120233c80b7961814af27f5460ea883f277c5f7ae67f6f63c626c2ed3e31820db42a54ba257140f634dd25262574f5509992053ae32321e385270924a86e228467ceb5e4ba8d3cef730320b5bd5aed01e6d103e3a153ef80e29dc3601ca9479d5a66d412aef318cb06c077dcea59ee1105bc8fd079754f5a3ac430deb6b111d40792c699272b3c42c47a6aff2e08db3b383c706294a13c21f051f9aa5cb844a6f12", 0xa5, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r3, 0xc0a85352, &(0x7f00000001c0)={{0x3ff, 0x7}, 'port0\x00', 0x40, 0x10, 0x10000, 0x100, 0x9, 0x5, 0x7, 0x0, 0x2}) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, 0x0) getgroups(0x0, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f00000003c0)={{0x6c, @dev={0xac, 0x14, 0x14, 0x1c}, 0x4e24, 0x4, 'lblcr\x00', 0x8, 0x10000, 0x15}, {@broadcast, 0x4e24, 0x3, 0x100000000, 0x4, 0x3}}, 0x44) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r3, 0x80045500, &(0x7f0000000500)) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e24, @broadcast}}}, &(0x7f0000000340)=0x84) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000380)=@assoc_value={r4, 0x7}, 0x8) r5 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000000140)={'bridge0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="0f0000004000000000000000000000000000000000000000000000000000ab00000000002b1c85488770fcf0ff38070600000000000000000002002000000000540856ad000000000000000000000000000000000000000000000000"]}) r7 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x8, 0x400002) ioctl$TIOCSWINSZ(r7, 0x5414, &(0x7f0000000140)={0x1, 0x1ff, 0x7, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010207031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b3562406b20cd37ed01cc00000000000000000000000000000", 0x4c}], 0x1}, 0x0) 05:55:13 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x68000000}]}, 0x78) 05:55:13 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:14 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000100), &(0x7f00000001c0), &(0x7f0000000200)) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = memfd_create(&(0x7f0000000240)="2b8b8a16114fdddf6b284699df92d53e6f4a02759b9461ac", 0x200100000000000) r2 = fcntl$dupfd(r0, 0x0, r1) bind$bt_rfcomm(r2, &(0x7f00000002c0)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3, 0x400}}, 0xa) socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f000000dff8)={0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x40, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00') sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c1c0200", @ANYRES16=r5, @ANYBLOB="03000000000000000000010000000800a48f02000000"], 0x1c}}, 0x0) r6 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000380)='/dev/mixer\x00', 0x100, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r8 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) ioctl$UI_END_FF_ERASE(r3, 0x400c55cb, &(0x7f0000000080)={0x10, 0x8001, 0x1}) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r8, 0x40042409, 0x1) ftruncate(r8, 0x1000000) sendfile(r7, r8, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) 05:55:14 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000400)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}}) 05:55:14 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getgroups(0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x80, 0x0) ioctl$KVM_PPC_GET_PVINFO(r2, 0x4080aea1, &(0x7f0000000140)=""/2) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010207031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b3562406b20cd37ed01cc00000000000000000000000000000", 0x4c}], 0x1}, 0x0) 05:55:14 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000002700)=ANY=[], 0x0) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0x1, 0x7f0f}}}, 0x118) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0xfffffffffffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r1, &(0x7f0000000500)) getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0xff, &(0x7f0000000840)=[r3]) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) getegid() getuid() fstat(r0, &(0x7f00000014c0)) getuid() getresgid(&(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80)) 05:55:14 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x60000000}]}, 0x78) 05:55:14 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) [ 1617.871716] sg_write: 52 callbacks suppressed [ 1617.871732] sg_write: data in/out 393180/74 bytes for SCSI command 0xff-- guessing data in; [ 1617.871732] program syz-executor5 not setting count and/or reply_len properly [ 1617.879717] sg_write: data in/out 196572/74 bytes for SCSI command 0xff-- guessing data in; [ 1617.879717] program syz-executor4 not setting count and/or reply_len properly [ 1617.918860] netlink: 20 bytes leftover after parsing attributes in process `syz-executor3'. [ 1617.945240] sg_write: data in/out 393180/74 bytes for SCSI command 0xff-- guessing data in; [ 1617.945240] program syz-executor5 not setting count and/or reply_len properly 05:55:14 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000400)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}}) 05:55:14 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0xffffff7f}]}, 0x78) [ 1617.964913] netlink: 20 bytes leftover after parsing attributes in process `syz-executor3'. [ 1617.992054] sg_write: data in/out 196572/74 bytes for SCSI command 0xff-- guessing data in; [ 1617.992054] program syz-executor4 not setting count and/or reply_len properly 05:55:14 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:14 executing program 3: r0 = socket$inet(0x10, 0x1, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getgroups(0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = memfd_create(&(0x7f00000000c0)='7{:+{\x00', 0x5) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000000140)) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010207031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b3562406b20cd37ed01cc00000000000000000000000000000", 0x4c}], 0x1}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz0\x00', 0x1ff) 05:55:14 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000400)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}}) [ 1618.140691] sg_write: data in/out 393180/74 bytes for SCSI command 0xff-- guessing data in; [ 1618.140691] program syz-executor5 not setting count and/or reply_len properly [ 1618.174080] sg_write: data in/out 117637084/74 bytes for SCSI command 0xff-- guessing data in; [ 1618.174080] program syz-executor4 not setting count and/or reply_len properly 05:55:14 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000007c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000cc0)='/dev/dlm_plock\x00', 0x103000, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000e40)="6d656d6f72656e747300bfddc2042a60498ca1d4c0872b85fad74a1e6d22063ccfb1dfa707faf0ec215e3ba7c5bb80", 0x26e1, 0x0) getsockname$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000002700)=ANY=[], 0x0) openat$cgroup_type(r2, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0xfffffffffffffd6e) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r3, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0x1, 0x7f0f}}}, 0x118) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x20032600) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x4001fc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) fstat(r2, &(0x7f0000000500)) getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0x1, &(0x7f0000000840)=[0x0]) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) getegid() getuid() fstat(r1, &(0x7f00000014c0)) getuid() getresgid(&(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80)) [ 1618.212771] sg_write: data in/out 117637084/74 bytes for SCSI command 0xff-- guessing data in; [ 1618.212771] program syz-executor4 not setting count and/or reply_len properly [ 1618.233603] sg_write: data in/out 393180/74 bytes for SCSI command 0xff-- guessing data in; [ 1618.233603] program syz-executor5 not setting count and/or reply_len properly 05:55:15 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000980)={0x7, 0x700000000000000, 0x101, 'queue1\x00', 0x8}) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) recvmsg$kcm(r0, &(0x7f0000000940)={&(0x7f0000000040)=@ipx, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000140)=""/16, 0x10}, {&(0x7f0000000180)=""/226, 0xe2}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/168, 0xa8}, {&(0x7f0000000440)=""/102, 0x66}, {&(0x7f00000004c0)=""/55, 0x37}, {&(0x7f0000000500)=""/171, 0xab}, {&(0x7f00000005c0)=""/196, 0xc4}, {&(0x7f00000006c0)=""/195, 0xc3}], 0x9, &(0x7f0000000880)=""/170, 0xaa}, 0x0) r2 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1) ftruncate(r2, 0x1000000) sendfile(r1, r2, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) 05:55:15 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)="03006d6f72792e6576676d177300", 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000002700)=ANY=[], 0x0) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x39c, 0xfa00, {r2, 0x1, 0x0, 0x0, 0x0, @ib={0x1b, 0x4, 0x395, {"2d70454dfdfb0378e7959340104fe9ef"}, 0x1, 0x2, 0x4}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0x1, 0x7f0f}}}, 0x118) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) fstat(r1, &(0x7f0000000500)) getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0x1, &(0x7f0000000840)=[0x0]) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000c80), &(0x7f00000007c0)=0xffffffffffffff89) getegid() getuid() fstat(r1, &(0x7f0000000e40)) getuid() getresgid(&(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80)) 05:55:15 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:15 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getgroups(0x0, 0x0) r2 = syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x3, 0x2) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000180)={r0, r0, 0x1, 0x1000, &(0x7f0000000140)="c7a519f8c34fb0a101b4ab491cd253ac0aab30", 0x8, 0xe714, 0x3, 0x2a8b, 0x7, 0x2, 0x100000001}) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010207031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b3562406b20cd37ed01cc00000000000000000000000000000", 0x4c}], 0x1}, 0x0) 05:55:15 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x6800}]}, 0x78) 05:55:15 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000400)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}}) [ 1618.832051] sg_write: data in/out 167968732/74 bytes for SCSI command 0xff-- guessing data in; [ 1618.832051] program syz-executor4 not setting count and/or reply_len properly [ 1618.834362] netlink: 20 bytes leftover after parsing attributes in process `syz-executor3'. [ 1618.858650] sg_write: data in/out 393180/74 bytes for SCSI command 0xff-- guessing data in; [ 1618.858650] program syz-executor5 not setting count and/or reply_len properly 05:55:15 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x4800000000000000}]}, 0x78) 05:55:15 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getgroups(0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010207031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b3562406b20cd37ed01cc00000000000000000000000000000", 0x4c}], 0x1}, 0x0) get_thread_area(&(0x7f00000000c0)={0x5, 0x1000, 0x0, 0x5, 0x7, 0x7, 0x9, 0x40, 0x3, 0x8}) 05:55:15 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000002700)=ANY=[], 0x0) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0x1, 0x7f0f}}}, 0x118) write$cgroup_subtree(r0, &(0x7f00000007c0)=ANY=[], 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) fstat(r1, &(0x7f0000000500)) getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0x1, &(0x7f0000000840)=[0x0]) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) getegid() getuid() fstat(r0, &(0x7f00000014c0)) getuid() getresgid(&(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80)) 05:55:15 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:15 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, 0x0) 05:55:15 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0xdc7f000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) [ 1619.095319] netlink: 20 bytes leftover after parsing attributes in process `syz-executor3'. [ 1619.155791] netlink: 20 bytes leftover after parsing attributes in process `syz-executor3'. 05:55:15 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x500000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:15 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000002700)=ANY=[], 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r3, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0x1, 0x7f0f}}}, 0x118) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) fstat(r2, &(0x7f0000000500)) getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f0000000940)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0x1, &(0x7f0000000840)=[0x0]) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000c80)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) getegid() getuid() fstat(r0, &(0x7f00000014c0)) getuid() getresgid(&(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80)) 05:55:15 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x3f00000000000000}]}, 0x78) 05:55:15 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}) 05:55:15 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x3, 0x2) r2 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x4) ftruncate(r2, 0x1000000) sendfile(r1, r2, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) 05:55:15 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x0, 0x0) name_to_handle_at(r0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x74, 0x1, "12d06ea669b9bfe260da26705d50c10f5dac7bec50084fbcce15a5133428526dbb0d71f05649aaee6e38b8eb0afd497d84ab78061c2f57d1837ba995660506b30d7ef8f663d7b44414923a93ce69bdf2ccf1e537fa89d9d17ab04a12d56eb5fdd11fdccf40e898bd8ec8b479"}, &(0x7f0000000280), 0x400) r1 = socket$inet(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getgroups(0x0, 0x0) setsockopt$inet_tcp_buf(r1, 0x6, 0x0, 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x20000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="24000000010207031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b3562406b20cd37ed01cc00000000000000000000000000000", 0x4c}], 0x1}, 0x0) 05:55:15 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) r1 = memfd_create(&(0x7f00000000c0)='vboxnet1nodev/\x00', 0x2) ioctl$KVM_GET_DEBUGREGS(r1, 0x8080aea1, &(0x7f0000000140)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getgroups(0xffffffffffffff57, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010207031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b3562406b20cd37ed01cc00000000000000000000000000000", 0x4c}], 0x1}, 0x0) 05:55:16 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x13000000}]}, 0x78) 05:55:16 executing program 0: 05:55:16 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) [ 1619.847967] netlink: 20 bytes leftover after parsing attributes in process `syz-executor3'. 05:55:16 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000000680)='./bus\x00', 0x0) 05:55:16 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x500000000000000}]}, 0x78) [ 1619.892117] netlink: 20 bytes leftover after parsing attributes in process `syz-executor3'. 05:55:16 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x80) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f0000000140)={0x3fff8000, 0x0, 0x10001, 0x600000000}) ioctl$DRM_IOCTL_SG_FREE(r2, 0x40106439, &(0x7f0000000180)={0x8, r3}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getgroups(0x0, 0x0) setsockopt$inet_tcp_buf(r2, 0x6, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010207031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b3562406b20cd37ed01cc00000000000000000000000000000", 0x4c}], 0x1}, 0x0) [ 1620.021620] netlink: 20 bytes leftover after parsing attributes in process `syz-executor3'. 05:55:16 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x100000000000000}]}, 0x78) 05:55:16 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:16 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000002700)=ANY=[], 0x0) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0x1, 0x7f0f}}}, 0x118) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) fstat(r1, &(0x7f0000000500)) getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0x1, &(0x7f0000000840)=[0x0]) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) getegid() getuid() fstat(r0, &(0x7f00000014c0)) getuid() getresgid(&(0x7f00000007c0), &(0x7f0000000dc0), &(0x7f0000000c80)) 05:55:16 executing program 1: open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x41) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r2 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1) ftruncate(r2, 0x1000000) sendfile(r1, r2, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) 05:55:16 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = msgget(0xffffffffffffffff, 0x2a0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) msgctl$MSG_STAT(r1, 0xb, &(0x7f0000000340)=""/35) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000009c0)='erspan0\x00', 0x9) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getresuid(&(0x7f0000000140), 0x0, &(0x7f0000000200)) clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xf, 0x4, 0x4000000004, 0xffff, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x2c) accept$unix(0xffffffffffffff9c, 0x0, 0x0) accept$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$NBD_SET_TIMEOUT(0xffffffffffffffff, 0xab09, 0x8000) mount(0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, 0x0, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x44801) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) 05:55:16 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x210200, 0x0) prctl$PR_GET_NAME(0x10, &(0x7f0000000200)) openat$cgroup(r3, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0) getgroups(0x0, 0x0) connect$bt_l2cap(r3, &(0x7f00000001c0)={0x1f, 0x3, {0x6, 0x4a4e, 0x100, 0x3, 0x5, 0x8000}, 0x1, 0x5}, 0xe) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010207031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b3562406b20cd37ed01cc00000000000000000000000000000", 0x4c}], 0x1}, 0x0) 05:55:16 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0xd00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:16 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x10}]}, 0x78) 05:55:16 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f00000007c0)=ANY=[], 0x23b) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0x1, 0x7f0f}}}, 0x118) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000e40)='./file0\x00', &(0x7f0000000dc0)) fstat(r1, &(0x7f0000000500)) getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0x1, &(0x7f0000000840)=[0x0]) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) getegid() getuid() fstat(r0, &(0x7f00000014c0)) getuid() getresgid(&(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80)) 05:55:16 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getgroups(0xf5febae0803b8c1b, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000001b40)=0x0) stat(&(0x7f0000001b80)='./file0\x00', &(0x7f0000001bc0)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000001c40), &(0x7f0000001c80)=0x0, &(0x7f0000001cc0)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001d00)={0x0}, &(0x7f0000001d40)=0xc) r7 = getuid() lstat(&(0x7f0000001d80)='./file0\x00', &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000001e40)=0x0) r10 = geteuid() fstat(r0, &(0x7f0000001e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = fcntl$getown(r1, 0x9) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000002340)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}}}, &(0x7f0000002440)=0xe8) getgroups(0x2, &(0x7f0000002480)=[0x0, 0xffffffffffffffff]) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000002ac0)={0x0}, &(0x7f0000002b00)=0xc) fstat(r0, &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x0, 0x0}) r17 = getgid() r18 = getpgid(0x0) r19 = geteuid() stat(&(0x7f0000002bc0)='./file0\x00', &(0x7f0000002c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = fcntl$getown(r0, 0x9) r22 = getuid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002c80)={0x0, 0x0, 0x0}, &(0x7f0000002cc0)=0xc) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000002d00)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000002d40)={{{@in6=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000002e40)=0xe8) stat(&(0x7f0000002e80)='./file0\x00', &(0x7f0000002ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r27 = gettid() stat(&(0x7f0000003200)='./file0\x00', &(0x7f0000003240)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00000032c0), &(0x7f0000003300), &(0x7f0000003340)=0x0) r30 = getpid() getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000003380)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@multicast1}}, &(0x7f0000003480)=0xe8) fstat(r2, &(0x7f00000034c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getownex(r1, 0x10, &(0x7f0000003540)={0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000003580)={{{@in, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003680)=0xe8) fstat(r2, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000003740)=0x0) r37 = getuid() getgroups(0x6, &(0x7f0000003780)=[0x0, 0xee01, 0xffffffffffffffff, 0xee00, 0xffffffffffffffff, 0xee00]) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000037c0)=0x0) r40 = geteuid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000003800)={0x0, 0x0, 0x0}, &(0x7f0000003840)=0xc) r42 = fcntl$getown(r1, 0x9) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000003b80)={{{@in=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@remote}}, &(0x7f0000003c80)=0xe8) r44 = getgid() r45 = gettid() stat(&(0x7f0000003cc0)='./file0\x00', &(0x7f0000003d00)={0x0, 0x0, 0x0, 0x0, 0x0}) r47 = getgid() ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000003d80)=0x0) stat(&(0x7f0000003dc0)='./file0\x00', &(0x7f0000003e00)={0x0, 0x0, 0x0, 0x0, 0x0}) r50 = getegid() r51 = bpf$MAP_CREATE(0x0, &(0x7f0000003e80)={0xf, 0x401, 0x1f, 0x1fe8, 0x4, 0x1, 0x7}, 0x2c) sendmmsg$unix(r1, &(0x7f0000004000)=[{&(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001600)=[{&(0x7f00000001c0)="101871b3c4481dcf4365efc823240088914e64d839018b44c7091820ae18355aca113bf887b0e08d6c2dc2b859a586f26e62553f877386905703951d7e742ce280c392174d7c774c1e8de07b0e8b0b9f341c8e1b5af3125f63e89b787c29248aceee3466ed5d6c5cb74393a92db8a930e02d4b46a5263622c6359f996b62e31dca3411a4c4dbbd30a1cec06292cd6fa2f87d6e7dee5de9a6dbde621798862b3d37e6a785a6ff4ff8e2c2a24fc2608bdda130b183a725487c419964150909f8c48578d5729970a181bed4942ea90320c2adcd4c0f03", 0xd5}, {&(0x7f00000000c0)="9dae94921db38b7a834c3c963320a44ba1f5febfe3d5db455b34f74c3775f1bc4f846363a5b014193465e8fb2896abb5d36544efc8", 0x35}, {&(0x7f00000002c0)="855b2b46217945eeee203430b1bbe18e5145c86c662cda4ac27c625dbbe9a8d3f7668a04d4f1824e388c5184a93429c12868eb5e87683fe83b79f3b73c49d9148f219bdb6a94", 0x46}, {&(0x7f0000000340)="aa5b53d93979fd3cf78f1f7b92b9875f3103d30219e670af6ed319021abd387d83e14e9bb7b0cdedeaf2aec0413fd18f9bf9edae4467c82c7dd3e6e2ad35b2c8a3bb35b107f328ad47bd3da7269fe4a63b5f3f3a40dde4a1377b92377015af03676ccbb02f0b53db99b199d89243ab52d02c3b39c8bf5f62bd2f31d5c93473b374803d9d59d806798dfc1f613c9902420329604b0d680cc7d2eba0a5eedaf9", 0x9f}, {&(0x7f0000000400)="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", 0x1000}, {&(0x7f0000001400)="1eae5bae229d937e6141541afac48723f5c08ee82e7f0da86ffddbaebd5cbad18e9373dc88327692040005850aee3878cbe22f4f21116041084e18dcdb205f57d6fcbbc72ef32b2d48fb35d8df256ebd7544c94f5470ac5c1f62bc38f587f7abf6300c9e21f8b28b5912dae8", 0x6c}, {&(0x7f0000001480)="0b7745e6ac5d9c4d827f2ed039101e0a2bc13f8b0e69ee8d2bb48780f0e8cdf3154000908e994af3f12ad4440c5662273df7f9a0a60d46e5136c1f5ab47a79bdece6084b5fd4aff28126ee5d33e26823f5c427e2531b17ee95daf02e6390", 0x5e}, {&(0x7f0000001500)="a7e724690082ba1d04682c112d37525dab7d72cc29555c280584d99bdee8a86163264187cde3d713bb7f74d50a74e238948ce2711026dfaa1e6a1f94b57f5dc01401587ee2bca654658102073dfbe11a438a02b96eb6d17772ab6fe4c907824e3a3757edf9499c37f3df6a3940f06f07e4adfb0f35cf6ff8156b2e6a489980f790a631dd0377aa5c76430429966fdecf431dfcc3d2c729a6883613eb4b607cfb1a33a0", 0xa3}, {&(0x7f00000015c0)}], 0x9, 0x0, 0x0, 0x4}, {&(0x7f00000016c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001ac0)=[{&(0x7f0000001740)="1249bbf9d4170bcf3365645f5eff6a3b0ba5d943f9b43df0818ebbac33f1a28e3f9d104cd923f2ab6c6bf97e594d0bbd44bc21e7752df9e87432bb5cfee1a1da4ca59a937f247d82cb9394d77a78ec732f99281b38035b3c893ab8049c0969a8f49867baeea929a9309c857ff296a2dd0241f2d34eed44810d82acc130b8737b30a64f07b225d4f7985bee4b4227f9a9731fcdced89b1d687363c0b42bf9766bb9bb27882edd478280ce102f78eb002e34f947bd15d888017a8fdd8492eaf016565753675aadc5acd9f9310d3e82069ea5ec54547a97f50b9dca5effee1d92d390d2062b42df6f99a464e4d14705310a8e8e0f", 0xf3}, {&(0x7f0000001840)="80232fd7724d06dffe88e64a0fb5cf02304b6a9b88f74bc1ce78efcd10eaed004554ca693e4384cdbddf80d5f42db4a6115d533ec7b0332a9d99bf4b3c32458caf4cbe4653d342b75882032b687f83c2af7917446bcc7b090d631ad8b303820c4f", 0x61}, {&(0x7f00000018c0)="837da56e8d2d74bf27c1652bf48511ce460e67c34660a2943f7401d3bd96c98b5100f9af8289e64da1c782406f6b706bb58f2a53ae37a312f96a1fa0bbafe8c6be7e6ae9caa0909789cd50", 0x4b}, {&(0x7f0000001940)="d09f75eeec7d5622e82b8851de8a054c065969ee18214d6455758014a0edeb4380ef", 0x22}, {&(0x7f0000001980)="742385a338c9638e3957e317f98de78d9b431a9ffe6a371121ec5a8da0d29bfad038d55e928b75e21357e2441348add9ca546c42e67c0972c79973029a10b23e75e7e235e25945853efa45b79806d190cbb85f1f21ab1361975cbb98cf93d4b2639c01fc7c99c7f5dd4c999367291210b025b8cc5f45272063bb8039005dfa59ffbb744397e80a6dc7de3325336fcd431efd1facd5d1881b8ddc83976daae27d0fa999d34d032176a31c7614cc7a7a00095286feb3e01998f47f2902c20aab4d046dc646083416f47c28e49d2bc8b370cc2efbdc3da5788e9d2286437d9e39f7575cfa39b8b3c1d1abcf435c89a411f755264abb4fe676fb", 0xf8}, {&(0x7f0000001a80)="e98cd85b84bafe4fa54848ce02e56ff9c52db194a06cf0542bf2407b896331ef3f0544cf0f8745b63a6ccc43d22f8a5fbe4e54fd9570", 0x36}], 0x6, &(0x7f0000001f00)=[@rights={0x18, 0x1, 0x1, [r2]}, @cred={0x20, 0x1, 0x2, r3, r4, r5}, @cred={0x20, 0x1, 0x2, r6, r7, r8}, @rights={0x28, 0x1, 0x1, [r2, r0, r1, r1, r2, r1]}, @rights={0x38, 0x1, 0x1, [r1, r2, r1, r2, r0, r0, r1, r0, r2]}, @rights={0x38, 0x1, 0x1, [r2, r1, r2, r0, r1, r1, r1, r0, r2]}, @rights={0x28, 0x1, 0x1, [r2, r2, r1, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r9, r10, r11}], 0x138, 0x8000}, {&(0x7f0000002040)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000002300)=[{&(0x7f00000020c0)="2f48d390412885ddcf2cd1c7fa43a78585d0ba617a19edc531e011a3970bd53db6c9dffac4e74ab89efdc13a8dd10b0744e59d460fca0e7150df657abcdce84ea49366245c601c441219b6fd84afb9da27d64dc33a1cd68b515bff333c407beb93241d19d7f94458759c311a445ae2e63e4efde69e447fcc3d490368c717", 0x7e}, {&(0x7f0000002140)="2f7603edd7ed4a2e02cdccd034e097b10a5bb6aa874796b131995992c8522a1a94bf5f7889f0fd47bb034726133b6caefc9bc3e5fb3822148986685e8cd9c13abd841898d1f607e3cae1d57fbc864672b60f98d02157e41c7a7680aa63924d3ceaa6098e7195142195d6deee8c5ecb566f711762068961c9793ecd51ef4c1e1aca08dbb9f57fb8d81b7498d63b62bb9edc1ea4195cb5616166997ca97852511f581ebd82f0bc093c46ac8c1e981527c4b57cc0", 0xb3}, {&(0x7f0000002200)="c9e2a0bfcbe6dad579ce8aedd25d04473756ed0a2d2e2da8164980d10c9cebfd3fca559655377b0616d4618f00850bc8a5ceaee4a3453395a1364f740390d301788e5e290a76c915e036e49646b4a02aeec60376b5fd67840815df21b77f763a1e396d07119cdfbb264eec7728f97db6d1f66f7fee5627398e1cab1ada19cab386d5f7114608bfed34f414863f55c6f501361869a50bfbbb65fe7546cdcc8b1ce2da21b2871ad353f1a4bd2984be7a78fadea37144029ca7c87a10ed4ee535d60c05200d104f06ce197f9d4cfa88eba7104d21258c302b47d4c0d81e", 0xdc}], 0x3, &(0x7f00000024c0)=[@rights={0x18, 0x1, 0x1, [r1]}, @cred={0x20, 0x1, 0x2, r12, r13, r14}], 0x38, 0x880}, {&(0x7f0000002500)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002800)=[{&(0x7f0000002580)="7ff60271ecacd85e1c11123421c9cc6b9c1c9199de018ce78ec3091a72d1f986e0517caf1b714c6b154a39ebdb8ba0755099b6dc81d059c6d32ba511c3127acd2b7d3391e5b6289c7c037e179cbb4d37f06b8bc155b9e3fc9cb0b144cf08072cf6a3bb2ed213cdb339c5f2d35e222823061155a0eaa62c", 0x77}, {&(0x7f0000002600)="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", 0xfa}, {&(0x7f0000002700)="1c273c56c5d5d6b1874c11871eb6cbdc101938afc4aec45a36c1ef7e99412bd34eb62cf8aae0d70eb8ecb989637721b9f172286d52c2d70899ab66532c46e3e46d78148a308b5b0915", 0x49}, {&(0x7f0000002780)="f310c067919c5ab7f8ebc244d40378947fd470eaf6d812bd42436ca8970f6a981bafcc4f7ed93de3e377b6657e84c3d18255072100196f7de4e21863ba61601f1684b30e2973a4353e0f806890bcd14f738c38267445492fb9fd9cf028218b6c318dcd50d64d5a25cc2d828b786e50", 0x6f}], 0x4, 0x0, 0x0, 0x40000}, {&(0x7f0000002840)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002a80)=[{&(0x7f00000028c0)="a7334a7c7ccbf249bc173ce3abbf388a34c8120ee65f1d2931bf529572e85fdbca980d125a1dba80bdc133e24722bf60de800954521c0895b7a98e06fcb7088d49045f10df5f6661273151754c022003ed09ef0f91b03cbf4973d729", 0x5c}, {&(0x7f0000002940)="f480634f69c74f51354394652d0fff23787adf1c5a1e55a2246c3c5aca04fe3d6694253f13961d336ae8e853b37e10272ef059993d43598cc1de8c8c1e0c7e543535b73c4305606f0cb776178e51508593269386b5c750f2ae49e9f5a1e1de7b89d0264a17645b717f47531800e06c219583ab8902ca298ba599f64bcb1a3b193fea595f0dca6b65fc71b98673f9d3a56ae848dc4e7c09fab65ae1530895094754fd03c7ac58cb48b3acceef0de946ce721242c2", 0xb4}, {&(0x7f0000002a00)="7945b22c32ab7af0de80ce992ead36dafb10933bafd3ee5e012c1a9e4057c7d6dee5efa8445e", 0x26}, {&(0x7f0000002a40)="8569cab02a3858684e8f8e259c452f2478a10d469512c634c4f8eed5bfb6811ea0959f058ef34556c569a16e3f916bdf6056ba5f501235d8f19f596f", 0x3c}], 0x4, &(0x7f0000002f40)=[@cred={0x20, 0x1, 0x2, r15, r16, r17}, @rights={0x18, 0x1, 0x1, [r1]}, @rights={0x18, 0x1, 0x1, [r2, r2]}, @cred={0x20, 0x1, 0x2, r18, r19, r20}, @cred={0x20, 0x1, 0x2, r21, r22, r23}, @rights={0x28, 0x1, 0x1, [r1, r0, r2, r0, r1]}, @cred={0x20, 0x1, 0x2, r24, r25, r26}], 0xd8, 0x800}, {&(0x7f0000003040)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000031c0)=[{&(0x7f00000030c0)="17", 0x1}, {&(0x7f0000003100)="c1ac9b3b36c12df35ad155217c242bc990d8a0fb10ea6e5da86b902d153104b21c2bcfd6849c01a526f75ada3df92adf02231b9ba78cccabec89c3600510f1dc35d2817eee0b5368a7aeebed106e8784bb37e028f147a9f863cdb96dcdb596b3d23bb60e8f3e244688969dc6a63fa981707faeea88a2e22ab46978e7962082bb81330b", 0x83}], 0x2, &(0x7f0000003880)=[@rights={0x38, 0x1, 0x1, [r0, r1, r2, r2, r2, r1, r1, r1, r0]}, @cred={0x20, 0x1, 0x2, r27, r28, r29}, @rights={0x38, 0x1, 0x1, [r2, r2, r2, r2, r2, r0, r0, r2, r1, r0]}, @rights={0x20, 0x1, 0x1, [r2, r0, r2]}, @cred={0x20, 0x1, 0x2, r30, r31, r32}, @rights={0x20, 0x1, 0x1, [r0, r1, r2, r0]}, @cred={0x20, 0x1, 0x2, r33, r34, r35}, @cred={0x20, 0x1, 0x2, r36, r37, r38}, @cred={0x20, 0x1, 0x2, r39, r40, r41}, @rights={0x18, 0x1, 0x1, [r0, r2]}], 0x168, 0x4c084}, {&(0x7f0000003a00)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000003b40)=[{&(0x7f0000003a80)="cba9fc7d4f857d1c9c474f4b6a19a8956ef3e038d691296b08963c6a2f35c839bd977e8722415e4e8d55da949f48328d7c5a5fa6427716a408c0f953ec34520f971f0bdd5caeef2011f8947bc72160490b958b37dc67cee77b8ab58a9f9203874bf416f51e049a878daf05dcd058b3484eef4cb51aa253c8d3a57f7c7967bf04042d277ece5ce95e5f2ce58a03346b519e6d3f3fa8b74a0b7f0fdbb2de006bca66c43de006665e7cbeabdba636aeed105680c360ea8a34df22d7560857", 0xbd}], 0x1, &(0x7f0000003ec0)=[@rights={0x18, 0x1, 0x1, [r0]}, @rights={0x18, 0x1, 0x1, [r1]}, @rights={0x30, 0x1, 0x1, [r2, r2, r0, r0, r0, r2, r1, r2]}, @cred={0x20, 0x1, 0x2, r42, r43, r44}, @cred={0x20, 0x1, 0x2, r45, r46, r47}, @rights={0x30, 0x1, 0x1, [r0, r2, r2, r1, r0, r1, r1]}, @cred={0x20, 0x1, 0x2, r48, r49, r50}, @rights={0x38, 0x1, 0x1, [r0, r1, r1, r51, r2, r0, r0, r0, r2]}], 0x128, 0x80}], 0x7, 0x4000) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010207031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b3562406b20cd37ed01cc00000000000000000000000000000", 0x4c}], 0x1}, 0x0) 05:55:16 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0xffffffffa0008000}]}, 0x78) 05:55:16 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:17 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0xa0008000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:17 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x7, 0x4, 0x480, 0x140, 0x280, 0x0, 0x398, 0x398, 0x398, 0x4, &(0x7f0000000040), {[{{@arp={@loopback, @local, 0xffffffff, 0xff000000, @empty, {[0x0, 0xff, 0x0, 0xff, 0xff]}, @mac=@local, {[0xff, 0xff, 0x0, 0xff, 0x0, 0xff]}, 0x7, 0x2, 0x7ff, 0x4973ec03, 0x80000001, 0x2, 'tunl0\x00', 'ip6tnl0\x00', {0xff}, {0xff}, 0x0, 0x3b5}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={[], 0x1d}, @multicast2, @loopback, 0xf}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @mac=@broadcast, @local, @empty, 0x371d41051e5d0b8f, 0xffffffff}}}, {{@arp={@rand_addr=0x4, @dev={0xac, 0x14, 0x14, 0xd}, 0xff, 0x0, @empty, {[0xff, 0x0, 0xff, 0x0, 0xff, 0xff]}, @mac=@random="864448ce4bd4", {[0xff, 0x0, 0x0, 0xff]}, 0x7, 0x6, 0x9, 0x9, 0x5, 0xff, 'veth1\x00', 'sit0\x00', {0xff}, {}, 0x0, 0x208}, 0xf0, 0x118}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x3}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4d0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r2 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1) ftruncate(r2, 0x1000000) sendfile(r1, r2, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) 05:55:17 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x48000000}]}, 0x78) 05:55:17 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000002700)=ANY=[], 0x0) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0x1, 0x7f0f}}}, 0x118) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) fstat(r1, &(0x7f0000000500)) getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0x1, &(0x7f0000000840)=[0x0]) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) getegid() getuid() fstat(r0, &(0x7f00000014c0)) getuid() getresgid(&(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80)) 05:55:17 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fe, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='nv\x00', 0x3) clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xf, 0x4, 0x4000000004, 0xffff, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x2c) accept$unix(0xffffffffffffff9c, 0x0, 0x0) ioctl$NBD_SET_TIMEOUT(0xffffffffffffffff, 0xab09, 0x0) mkdir(0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0xc0, 0x0, 0x0) 05:55:17 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getgroups(0xb3fd3841c88770d5, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0x3, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010207031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b3562406b20cd37ed01cc00000000000000000000000000000", 0x4c}], 0x1}, 0x0) connect$pptp(r1, &(0x7f00000001c0)={0x18, 0x2, {0x0, @local}}, 0x1e) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x2, 0x0) ioctl$BLKDISCARD(r2, 0x1277, &(0x7f0000000140)=0x2) 05:55:17 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x6000000}]}, 0x78) 05:55:17 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0xfbffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:17 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0xa000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:17 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x40000000000002, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f00000000c0)={'filter\x00', 0x11, "0409e819f3a81e84cb112b462e91adeb47"}, &(0x7f0000000100)=0x35) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getgroups(0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0x3, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205647, &(0x7f0000000240)={0x9f0000, 0x7, 0x400, [], &(0x7f00000001c0)={0x98090a, 0x0, [], @p_u8=&(0x7f0000000180)=0x8}}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010207031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b3562406b20cd37ed01cc00000000000000000000000000000", 0x4c}], 0x1}, 0x0) 05:55:17 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x3, 0x10000000000402) write$binfmt_elf32(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200000000110000"], 0x18) write$binfmt_aout(r1, &(0x7f0000000240), 0x20) 05:55:17 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x1000000}]}, 0x78) 05:55:17 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x7400, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:17 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0xffffffffffffffc3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000140)={r2, 0x65, "5d0ac07d7bd8ba8da1f5d80969abc29cde2381ab9a095208aa154bf0bbe23feb16c3e64036b0ccc274f775ec014f991198640da04e2df050506dc191f95ef7a84bf5b86b731914c01b50d0bb078fb2dc4668a6a6103058c581a6d48ad113f9968ebe2297be"}, &(0x7f00000001c0)=0x6d) r3 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40042409, 0x1) ftruncate(r3, 0x1000000) sendfile(r1, r3, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) 05:55:17 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getgroups(0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)}, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10) 05:55:17 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000002700)=ANY=[], 0x0) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0x1, 0x7f0f}}}, 0x118) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) fstat(r1, &(0x7f0000000500)) getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0x1, &(0x7f0000000840)=[0x0]) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000dc0)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000c80)=0x8a) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) getegid() getuid() fstat(r0, &(0x7f00000014c0)) getuid() getresgid(&(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80)) 05:55:17 executing program 0: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 05:55:17 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0xdc7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:17 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x6}]}, 0x78) 05:55:18 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x5, 0x800000000086, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) 05:55:18 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0xd000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:18 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x6c000000}]}, 0x78) 05:55:18 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getgroups(0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) fstat(r3, &(0x7f0000000280)) ioctl$KVM_SET_TSC_KHZ(r3, 0xaea2, 0x9) vmsplice(r0, &(0x7f00000006c0)=[{&(0x7f0000000440)="ec57b7edd20c9a95f5f04a16b8a7aaa825e9d7a15bb8c50063dc59126786d101f26620b4a178d9fd78489c8ac6aef5f264bd003bbd0e075fc40e661146608aefe2", 0x41}, {&(0x7f00000004c0)="948f82e5dda1fa0cd6b07c386b0cf56b2e40ceecea256d25e9bfd1ed87e38af46a71d8729666a550fd9b9a5f369ee8d096990468170664a3a395913e85582e29c869e8046d54c0b6b6bb740c833adf5be5e4b50a74c117881051e69b15a7a57d298996dcd76e2a0da398cdb0179238ea32b25da57aa20caaf4e84124d5a6b8ee5f5eb8ff0fc1134d8b889c2784a80a4d3c97bbe78fb1695eb0", 0x99}, {&(0x7f0000000580)="ba849fed8a63e89e5988ba46c012b9bd20bffe491bb4e5d27ea97f3f8689d02a7fe11ac0b0b9a0c48ed8a878f46159e212b18f08f0eb3a37a58671bd1098ba61457f98d47bdcb20097d02484c464d486028eca312aefaf43e4a4e8c2380000", 0x5f}, {&(0x7f0000000600)="34b23a5261aa412b3478985049a3e38a8d7665a6bac8146f25175349177899ac7c98459b08d6bcc6635c7ce1fd6d2591c3b168a57f59074c8c078b211906d1646c9c0323024f27bbe2ea8163fdcd869d9eb0756003773fa192f7cee3cbd74935fd1b55911adcb36115e0f681637a4a487c48cd38bada6a02f1363144709414a96ba04ae9ec669240c92a7236d193ee0deff9d96b825dafaab06c1c", 0x9b}], 0x4, 0x1) getsockopt$sock_buf(r1, 0x1, 0x1f, &(0x7f0000000300)=""/70, &(0x7f0000000380)=0x46) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r3, 0xc0045540, &(0x7f0000000400)) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010207031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b3562406b20cd37ed01cc00000000000000000000000000000", 0x4c}], 0x1}, 0x0) recvfrom$inet(r2, &(0x7f0000000140)=""/254, 0xfe, 0x20, &(0x7f0000000240)={0x2, 0x4e22, @local}, 0x10) fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f0000000700)) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f00000003c0)={0x3f, 0x1, 0x3, 0x20, 0x1}, 0xc) [ 1621.955403] QAT: Invalid ioctl [ 1621.979884] QAT: Invalid ioctl 05:55:18 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x6c000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:18 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x3000000}]}, 0x78) 05:55:18 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mixer\x00', 0x100, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r3 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000180)=0x6) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40042409, 0x1) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000280)={0x0, 0xb1, "3880ad6028391351c26d80e47b9be78096b9229909b156d591ea2526d8053bd45c9d625890f227a484559645b9fe72d9a451c092916f55f7d881ed015c73b5134a8a28b5a23a35d5aae474fcd44ddba6e2939458063502501db9f495a2b69182a0121cca7bc80c2e36b8d735b19078bc71a8e85a165a600a8caa93d8cc66ba672f97bffbb4bf5abd1daf2f355da9b2fc36f6c38fe770d03626d33279398401359c56be46d8a416dd004f4614c5280ed708"}, &(0x7f0000000340)=0xb9) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000380)={r4, 0x5, 0x80000001}, &(0x7f00000003c0)=0x8) ioctl$TUNGETFILTER(r3, 0x801054db, &(0x7f0000000000)=""/191) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x800, 0x80000000}, &(0x7f0000000200)=0x18) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000240)={r5, 0x8001, 0x3, 0x3d71, 0x68, 0x6}, 0x14) ftruncate(r3, 0x1000000) sendfile(r2, r3, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) 05:55:18 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x5, 0x800000000086, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) 05:55:18 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(r0, &(0x7f0000000dc0)="00ca23b2f96c1e7b3b1d8e75d7ec", 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000002700)=ANY=[], 0x0) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0x1, 0x7f0f}}}, 0x118) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) fstat(r1, &(0x7f0000000500)) getegid() geteuid() lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000e80)) getresuid(&(0x7f0000000c80), &(0x7f0000000680), &(0x7f0000000cc0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0x1, &(0x7f0000000840)=[0x0]) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) getegid() getuid() fstat(r0, &(0x7f00000014c0)) getuid() getresgid(&(0x7f0000000d00), &(0x7f0000000d40), &(0x7f00000006c0)) 05:55:18 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0xffffffffa0008000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:18 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x7400}]}, 0x78) 05:55:18 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:18 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x500}]}, 0x78) 05:55:18 executing program 2: socketpair(0xb, 0xfffffffffffffffe, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = dup(r0) getsockname$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0xffd6) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000002700)=ANY=[], 0x0) openat$cgroup_type(r2, &(0x7f00000007c0)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x46, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r3, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0x1, 0x7f0f}}}, 0x118) write$cgroup_subtree(r2, &(0x7f0000000dc0)=ANY=[@ANYRES32=r3, @ANYRESOCT=r3, @ANYRES32=r0], 0x122) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) fstat(r1, &(0x7f0000000500)) getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) getresuid(&(0x7f0000000640), &(0x7f0000000000), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0x1, &(0x7f0000000840)=[0x0]) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) getegid() getuid() fstat(r0, &(0x7f00000014c0)) getuid() getresgid(&(0x7f0000000d00), &(0x7f0000000680), &(0x7f0000000d80)) 05:55:18 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x5, 0x800000000086, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) [ 1622.742576] QAT: Invalid ioctl [ 1622.747191] QAT: Invalid ioctl [ 1622.774128] __nla_parse: 6 callbacks suppressed [ 1622.774140] netlink: 20 bytes leftover after parsing attributes in process `syz-executor3'. 05:55:19 executing program 3: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x8000, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhci\x00', 0x20300, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x4, 0x70, 0x8, 0x4, 0x3, 0x0, 0x0, 0x22c36b69, 0x3189a0acfd28e077, 0x3, 0x4, 0x7, 0x3, 0x4, 0x6, 0x9, 0x1, 0x800, 0x2, 0xffffffff, 0xb50, 0xfff, 0x4, 0xffffffff, 0x800, 0x4, 0x400, 0xfd, 0x5, 0x5, 0x8, 0x8, 0x4, 0x0, 0x800, 0x8, 0x80000000, 0x4, 0x0, 0x6, 0x4, @perf_config_ext={0x6, 0x9}, 0x800, 0xf2, 0x100000000, 0x8, 0x3, 0xe929, 0x8}, r0, 0xc, r1, 0x4) r2 = socket$inet(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getgroups(0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010207031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b3562406b20cd37ed01cc00000000000000000000000000000", 0x4c}], 0x1}, 0x0) 05:55:19 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0xdc7f0000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:19 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x600}]}, 0x78) [ 1622.879409] sg_write: 60 callbacks suppressed [ 1622.879424] sg_write: data in/out 196572/74 bytes for SCSI command 0xff-- guessing data in; [ 1622.879424] program syz-executor4 not setting count and/or reply_len properly [ 1622.921441] sg_write: data in/out 393180/74 bytes for SCSI command 0xff-- guessing data in; [ 1622.921441] program syz-executor5 not setting count and/or reply_len properly [ 1622.947161] netlink: 20 bytes leftover after parsing attributes in process `syz-executor3'. [ 1622.956240] sg_write: data in/out 393180/74 bytes for SCSI command 0xff-- guessing data in; [ 1622.956240] program syz-executor5 not setting count and/or reply_len properly 05:55:19 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r0, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x0) 05:55:19 executing program 2: socketpair(0x4, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(r0, &(0x7f0000000dc0)="656d6f72792e6572656e7473002015f67b026fedb68cfaf0fc9aee02000000d54654855ce617bd878e5ce91a89346d6a1d23ad08a0a9818cf559531ab116d3a6f95f3f94e374c0e8f2090a4618c2aae11b4859bd8a59", 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000002700)=ANY=[], 0x0) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0x1, 0x7f0f}}}, 0x118) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f00000007c0)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) fstat(r1, &(0x7f0000000500)) getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0x0, &(0x7f0000000140)) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f0000000ec0), &(0x7f0000000f80), &(0x7f0000000e80)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) getegid() getuid() fstat(r0, &(0x7f00000014c0)) getuid() getresgid(&(0x7f0000000c80), &(0x7f0000000d00), &(0x7f0000000d80)) 05:55:19 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0xa000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:19 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x4}]}, 0x78) 05:55:19 executing program 1: openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r1 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) 05:55:19 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getgroups(0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x5) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0x1, 0x2) setsockopt$inet6_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000000180)={0x8d}, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f00000001c0)="24000000010207031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b3562406b20cd37ed01cc00000000000000000000000000000", 0x4c}], 0x1}, 0x0) [ 1623.421796] sg_write: data in/out 393180/74 bytes for SCSI command 0xff-- guessing data in; [ 1623.421796] program syz-executor5 not setting count and/or reply_len properly [ 1623.439812] sg_write: data in/out 196572/74 bytes for SCSI command 0xff-- guessing data in; [ 1623.439812] program syz-executor4 not setting count and/or reply_len properly [ 1623.446414] sg_write: data in/out 393180/74 bytes for SCSI command 0xff-- guessing data in; [ 1623.446414] program syz-executor5 not setting count and/or reply_len properly 05:55:19 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x400000000000000}]}, 0x78) [ 1623.480620] netlink: 20 bytes leftover after parsing attributes in process `syz-executor3'. [ 1623.507350] sg_write: data in/out 196572/74 bytes for SCSI command 0xff-- guessing data in; [ 1623.507350] program syz-executor4 not setting count and/or reply_len properly 05:55:19 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000002700)=ANY=[], 0x0) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0x1, 0x7f0f}}}, 0x118) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0xf18) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) fstat(r1, &(0x7f0000000500)) getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) getresuid(&(0x7f0000000640), &(0x7f0000000c80), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0x1, &(0x7f0000000840)=[0x0]) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) getegid() getuid() fstat(r0, &(0x7f00000014c0)) getuid() getresgid(&(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80)) 05:55:19 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000280)=0x0, &(0x7f00000002c0), &(0x7f0000000300)) getgroups(0x2, &(0x7f0000000340)=[r3, r4]) getgroups(0x0, 0x0) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x1) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsetxattr$security_selinux(r0, &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000140)='system_u:object_r:audit_spool_t:s0\x00', 0x23, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) memfd_create(&(0x7f0000000180)='system_u:object_r:audit_spool_t:s0\x00', 0x2) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010207031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b3562406b20cd37ed01cc00000000000000000000000000000", 0x4c}], 0x1}, 0x0) 05:55:19 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x9000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:19 executing program 0: syz_emit_ethernet(0x372, &(0x7f0000000000)={@link_local, @random="d5bd6d307de3", [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty, {[], @gre}}}}}, 0x0) [ 1623.769226] sg_write: data in/out 196572/74 bytes for SCSI command 0xff-- guessing data in; [ 1623.769226] program syz-executor4 not setting count and/or reply_len properly [ 1623.775577] sg_write: data in/out 393180/74 bytes for SCSI command 0xff-- guessing data in; [ 1623.775577] program syz-executor5 not setting count and/or reply_len properly [ 1623.801683] netlink: 20 bytes leftover after parsing attributes in process `syz-executor3'. 05:55:20 executing program 0: getgid() clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@nat={'nat\x00', 0x1b, 0x5, 0x510, 0x0, 0x138, 0x3b0, 0x0, 0x0, 0x538, 0x538, 0x538, 0x538, 0x538, 0x5, &(0x7f0000000200), {[{{@uncond, 0x0, 0xc8, 0x110}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x8, @ipv4=@broadcast, @ipv6=@local, @icmp_id, @icmp_id=0x68}}}, {{@uncond, 0x0, 0xc8, 0x110}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@broadcast, 'ip_vti0\x00'}}}, {{@uncond, 0x0, 0xc8, 0x110}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@mcast1, @ipv4=@dev={0xac, 0x14, 0x14, 0x11}, @icmp_id=0x65, @icmp_id=0x65}}}, {{@ipv6={@dev={0xfe, 0x80, [], 0x14}, @loopback, [0xffffffff, 0xffffffff, 0xffffff00, 0xff], [0xffffffff, 0x0, 0x0, 0xffffffff], 'sit0\x00', 'teql0\x00', {0xff}, {0xff}, 0x3b, 0x3f3, 0x1}, 0x0, 0xc8, 0x110}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x14, @ipv6=@remote, @ipv4=@multicast2, @icmp_id=0x66}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080), &(0x7f00000000c0)=0x4) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x24, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], 0x0}, 0x48) tee(0xffffffffffffffff, r0, 0x7fff, 0x4) exit(0x9) getrusage(0x0, &(0x7f0000000500)) 05:55:20 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x4000000}]}, 0x78) [ 1623.816781] netlink: 20 bytes leftover after parsing attributes in process `syz-executor3'. [ 1623.835470] sg_write: data in/out 393180/74 bytes for SCSI command 0xff-- guessing data in; [ 1623.835470] program syz-executor5 not setting count and/or reply_len properly 05:55:20 executing program 3: r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x101, 0x0) fstat(r0, &(0x7f00000002c0)) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f00000001c0)=""/229) r1 = socket$inet(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x9, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getgroups(0xfe05, 0x0) setsockopt$inet_tcp_buf(r1, 0x6, 0x1a, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="24000000010207031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b3562406b20cd37ed01cc00000000000000000000000000000", 0x4c}], 0x1}, 0x0) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0), 0x10) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000100)={r3, 0x80000, r0}) [ 1623.992380] netlink: 20 bytes leftover after parsing attributes in process `syz-executor3'. [ 1624.021317] netlink: 20 bytes leftover after parsing attributes in process `syz-executor3'. 05:55:20 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x7400, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:20 executing program 0: write$apparmor_exec(0xffffffffffffffff, 0x0, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/attr/exec\x00', 0x2, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fallocate(0xffffffffffffffff, 0x15, 0xa, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000000000)) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x111, 0x2, 0x0, 0x4) perf_event_open(&(0x7f000000a000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xa00000400, 0x0, 0x8000010004}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x0, 0x1, @empty, 0xc8a}}}, 0x0) 05:55:20 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r2 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) ftruncate(r2, 0x1000000) sendfile(r1, r2, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) 05:55:20 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getgroups(0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010207031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b3562406b20cd37ed01cc00000000000000000000000000000", 0x4c}], 0x1}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x800, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x101ff, 0x2, 0x5000, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) 05:55:20 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x7a000000}]}, 0x78) 05:55:20 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000002700)=ANY=[], 0x0) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x100000001) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0x1, 0x7f0f}}}, 0x118) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) fstat(r1, &(0x7f0000000500)) getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0x1, &(0x7f0000000840)=[0x0]) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) getegid() getuid() fstat(r0, &(0x7f00000014c0)) getuid() getresgid(&(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80)) 05:55:20 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0xa000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) [ 1624.341448] netlink: 20 bytes leftover after parsing attributes in process `syz-executor3'. [ 1624.381205] xprt_adjust_timeout: rq_timeout = 0! 05:55:20 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:20 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x7a00}]}, 0x78) [ 1624.432593] netlink: 20 bytes leftover after parsing attributes in process `syz-executor3'. 05:55:20 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x8001, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getgroups(0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000080)={0x0, 0x83, &(0x7f0000009ff0)=[{&(0x7f0000000140)="24000000010207031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b3562406b20cd37ed01cc00000000000000000000000000000", 0x4c}], 0x112e}, 0x0) 05:55:20 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getgroups(0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x5) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0x1, 0x2) setsockopt$inet6_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000000180)={0x8d}, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f00000001c0)="24000000010207031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b3562406b20cd37ed01cc00000000000000000000000000000", 0x4c}], 0x1}, 0x0) 05:55:20 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x6000}]}, 0x78) 05:55:20 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:20 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getgroups(0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010207031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b3562406b20cd37ed01cc00000000000000000000000000000", 0x4c}], 0x1}, 0x0) [ 1624.715051] netlink: 20 bytes leftover after parsing attributes in process `syz-executor0'. 05:55:21 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:21 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000002700)=ANY=[], 0x0) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0x1, 0x7f0f}}}, 0x118) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) fstat(r1, &(0x7f0000000500)) getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0x1, &(0x7f0000000840)=[0x0]) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000dc0)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) getegid() getuid() fstat(r0, &(0x7f00000014c0)) getuid() getresgid(&(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80)) 05:55:21 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r1 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f0000000040), 0x1) 05:55:21 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getgroups(0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x5) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0x1, 0x2) setsockopt$inet6_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000000180)={0x8d}, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f00000001c0)="24000000010207031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b3562406b20cd37ed01cc00000000000000000000000000000", 0x4c}], 0x1}, 0x0) 05:55:21 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x74}]}, 0x78) 05:55:21 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff}) r3 = openat$cgroup_ro(r2, &(0x7f0000000200)="8370757365742e73757265005a7d4ef21a8d68f02850eb781c905d144e2244c37e8f9bda5e4fe73a422709457bf2e51da92b9eacfb045922974f2e5d937b9b2f202f440ef425f466945d21a5bc96718e1745edbb4693c54937721490b10800000000", 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'dummy0\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000001c0)={0x1d, r4}, 0x10) ioctl$KVM_SET_BOOT_CPU_ID(r3, 0xae78, &(0x7f0000000140)=0x2) socket$inet_tcp(0x2, 0x1, 0x0) getgroups(0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010207031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b3562406b20cd37ed01cc00000000000000000000000000000", 0x4c}], 0x1}, 0x0) 05:55:21 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0xffffffffffffffc3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000140)={r2, 0x65, "5d0ac07d7bd8ba8da1f5d80969abc29cde2381ab9a095208aa154bf0bbe23feb16c3e64036b0ccc274f775ec014f991198640da04e2df050506dc191f95ef7a84bf5b86b731914c01b50d0bb078fb2dc4668a6a6103058c581a6d48ad113f9968ebe2297be"}, &(0x7f00000001c0)=0x6d) r3 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40042409, 0x1) ftruncate(r3, 0x1000000) sendfile(r1, r3, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) 05:55:21 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x6800000000000000}]}, 0x78) 05:55:21 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:21 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) r1 = socket(0x1a, 0x80a, 0x5) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f00000000c0)=0x1000, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getgroups(0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010207031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b3562406b20cd37ed01cc00000000000000000000000000000", 0x4c}], 0x1}, 0x0) 05:55:21 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getgroups(0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) accept4$unix(r1, &(0x7f0000000140)=@abs, &(0x7f00000000c0)=0x6e, 0x80000) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010207031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b3562406b20cd37ed01cc00000000000000000000000000000", 0x4c}], 0x1}, 0x0) 05:55:21 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000040)) r2 = memfd_create(&(0x7f00000001c0)="a40000", 0x4) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1) ftruncate(r2, 0x1000000) ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f0000000080)={0x3ff, 0x4, 0x0, 0xffffffff00000000}) sendfile(r1, r2, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) 05:55:21 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:21 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000002700)=ANY=[], 0x0) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0x1, 0x7f0f}}}, 0x118) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) lstat(&(0x7f00000007c0)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) fstat(r1, &(0x7f0000000e40)) getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0x0, &(0x7f0000000500)) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) getegid() getuid() fstat(r0, &(0x7f00000014c0)) getuid() getresgid(&(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80)) 05:55:21 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x7a00000000000000}]}, 0x78) 05:55:21 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getgroups(0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010207031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b3562406b20cd37ed01cc00000000000000000000000000000", 0x4c}], 0x1}, 0x0) 05:55:21 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x30000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:22 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x700000000000000}]}, 0x78) 05:55:22 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0xffffffffffffffc3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000140)={r2, 0x65, "5d0ac07d7bd8ba8da1f5d80969abc29cde2381ab9a095208aa154bf0bbe23feb16c3e64036b0ccc274f775ec014f991198640da04e2df050506dc191f95ef7a84bf5b86b731914c01b50d0bb078fb2dc4668a6a6103058c581a6d48ad113f9968ebe2297be"}, &(0x7f00000001c0)=0x6d) r3 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40042409, 0x1) ftruncate(r3, 0x1000000) sendfile(r1, r3, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) 05:55:22 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x74000000}]}, 0x78) 05:55:22 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)) getgroups(0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_setup(0x7, &(0x7f00000001c0)) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010207031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b3562406b20cd37ed01cc00000000000000000000000000000", 0x4c}], 0x1}, 0x0) 05:55:22 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0xffffff7f, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:22 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x6c}]}, 0x78) 05:55:22 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r3 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40042409, 0x1) ftruncate(r1, 0x1000000) sendfile(r2, r3, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) 05:55:22 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:22 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000c80)=ANY=[@ANYRESHEX], 0x12) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0x1, 0x7f0f}}}, 0x118) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) fstat(r1, &(0x7f0000000500)) getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0x1, &(0x7f0000000840)=[0x0]) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) getegid() getuid() fstat(r0, &(0x7f00000014c0)) getuid() getresgid(&(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80)) 05:55:22 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0xffffffffffffffc3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000140)={r2, 0x65, "5d0ac07d7bd8ba8da1f5d80969abc29cde2381ab9a095208aa154bf0bbe23feb16c3e64036b0ccc274f775ec014f991198640da04e2df050506dc191f95ef7a84bf5b86b731914c01b50d0bb078fb2dc4668a6a6103058c581a6d48ad113f9968ebe2297be"}, &(0x7f00000001c0)=0x6d) r3 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40042409, 0x1) ftruncate(r3, 0x1000000) sendfile(r1, r3, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) 05:55:22 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getgroups(0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x0, [], [{0x5, 0x80000000, 0x7f, 0xab, 0x9, 0x6b6}, {0x0, 0x1a, 0x8, 0x5c, 0x56, 0xb3e5}], [[], [], []]}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0xced7bd620212bcb1, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000180)={0xa, 0x4, 0xfa00, {r3}}, 0xc) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010207031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b3562406b20cd37ed01cc00000000000000000000000000000", 0x4c}], 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000340), &(0x7f0000000380)=0x4) 05:55:22 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x600000000000000}]}, 0x78) 05:55:22 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x3, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) pkey_alloc(0x0, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r2 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x0) ftruncate(r2, 0x1000000) sendfile(r1, r2, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) 05:55:22 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:22 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) fsetxattr$security_capability(r0, &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000140)=@v2={0x2000000, [{0x1, 0x8000}, {0x6, 0x7f}]}, 0x14, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getgroups(0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) memfd_create(&(0x7f0000000180)=']\x00', 0x3) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x24000, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/qat_adf_ctl\x00', 0x800, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/mixer\x00', 0x40000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010207031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b3562406b20cd37ed01cc00000000000000000000000000000", 0x4c}], 0x1}, 0x0) 05:55:23 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x6800000000000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:23 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x300000000000000}]}, 0x78) 05:55:23 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$getown(r1, 0x9) tkill(r3, 0x4) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getgroups(0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) splice(r0, &(0x7f00000000c0), r2, &(0x7f0000000140), 0xffffffff, 0x2) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010207031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b3562406b20cd37ed01cc00000000000000000000000000000", 0x4c}], 0x1}, 0x0) 05:55:23 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x5000000}]}, 0x78) 05:55:23 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x500000000000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:23 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000002700)=ANY=[], 0x0) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0xa8, 0xfa00, {r2, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0x1, 0x7f0f}}}, 0x118) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) fstat(r1, &(0x7f0000000500)) getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file1\x00', &(0x7f0000000c80)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0x1, &(0x7f0000000840)=[0x0]) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) getegid() getuid() fstat(r0, &(0x7f0000000740)) getuid() getresgid(&(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80)) 05:55:23 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000040)) r2 = memfd_create(&(0x7f00000001c0)="a40000", 0x4) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1) ftruncate(r2, 0x1000000) ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f0000000080)={0x3ff, 0x4, 0x0, 0xffffffff00000000}) sendfile(r1, r2, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) 05:55:23 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getgroups(0x0, 0x0) syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x80000) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010207031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b3562406b20cd37ed01cc00000000000000000000000000000", 0x4c}], 0x1}, 0x0) 05:55:23 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x300}]}, 0x78) 05:55:23 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:23 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r2 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1) ftruncate(r2, 0x1000000) ioctl$GIO_UNISCRNMAP(r2, 0x4b69, &(0x7f0000000040)=""/61) sendfile(r1, r2, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) 05:55:23 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000002700)=ANY=[], 0x0) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0x1, 0x7f0f}}}, 0x118) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) fstat(r1, &(0x7f0000000500)) getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0x1, &(0x7f0000000840)=[0x0]) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f00000007c0), &(0x7f0000000b80), &(0x7f0000000bc0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) getegid() getuid() fstat(r0, &(0x7f00000014c0)) getuid() getresgid(&(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80)) 05:55:23 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:23 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$int_in(r1, 0x0, &(0x7f00000000c0)=0x80000001) r2 = syz_open_dev$midi(&(0x7f0000000140)='/dev/midi#\x00', 0x6, 0x40) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}}) ioctl$sock_inet_SIOCRTMSG(r2, 0x890d, &(0x7f0000000280)={0x74b, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x15}}, {0x2, 0x4e23, @multicast1}, {0x2, 0x4e24, @remote}, 0xc0, 0x6, 0x6, 0x8, 0xa5, &(0x7f0000000240)='syzkaller0\x00', 0x5, 0x9, 0x1ff}) getgroups(0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010207031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b3562406b20cd37ed01cc00000000000000000000000000000", 0x4c}], 0x1}, 0x0) getdents(r2, &(0x7f00000001c0)=""/89, 0x59) 05:55:23 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x5}]}, 0x78) 05:55:23 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:24 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getgroups(0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x406, r1) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r3, 0x40045731, &(0x7f00000001c0)=0x3) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010207031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b3562406b20cd37ed01cc00000000000000000000000000000", 0x4c}], 0x1}, 0x0) 05:55:24 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}]}, 0x78) [ 1627.834460] __nla_parse: 18 callbacks suppressed [ 1627.834471] netlink: 20 bytes leftover after parsing attributes in process `syz-executor3'. [ 1627.858936] netlink: 20 bytes leftover after parsing attributes in process `syz-executor3'. [ 1627.945039] sg_write: 62 callbacks suppressed [ 1627.945054] sg_write: data in/out 393180/74 bytes for SCSI command 0xff-- guessing data in; [ 1627.945054] program syz-executor5 not setting count and/or reply_len properly [ 1627.952658] sg_write: data in/out 393180/74 bytes for SCSI command 0xff-- guessing data in; [ 1627.952658] program syz-executor5 not setting count and/or reply_len properly 05:55:24 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000040)) r2 = memfd_create(&(0x7f00000001c0)="a40000", 0x4) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1) ftruncate(r2, 0x1000000) ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f0000000080)={0x3ff, 0x4, 0x0, 0xffffffff00000000}) sendfile(r1, r2, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) 05:55:24 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r1 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x1f, 0xc0000) write$P9_RWRITE(r1, &(0x7f0000000140)={0xb, 0x77, 0x1}, 0xb) getgroups(0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010207031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b3562406b20cd37ed01cc00000000000000000000000000000", 0x4c}], 0x1}, 0x0) 05:55:24 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:24 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000c80)="6d656d6f72792e6576656e7473047d80d49d7ed3af651f5851268803963412affa2bd1af69bf9577274b36524efa343e48ae676be3ea75", 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000002700)=ANY=[], 0x0) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0x1, 0x7f0f}}}, 0x118) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) fstat(r1, &(0x7f0000000500)) getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0x1, &(0x7f0000000840)=[0x0]) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) getegid() getuid() fstat(r0, &(0x7f00000014c0)) getuid() getresgid(&(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80)) [ 1628.460586] sg_write: data in/out 196572/74 bytes for SCSI command 0xff-- guessing data in; [ 1628.460586] program syz-executor4 not setting count and/or reply_len properly [ 1628.491475] netlink: 20 bytes leftover after parsing attributes in process `syz-executor3'. [ 1628.499793] sg_write: data in/out 196572/74 bytes for SCSI command 0xff-- guessing data in; [ 1628.499793] program syz-executor4 not setting count and/or reply_len properly [ 1628.543416] netlink: 20 bytes leftover after parsing attributes in process `syz-executor3'. 05:55:24 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x3, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) pkey_alloc(0x0, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r2 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x0) ftruncate(r2, 0x1000000) sendfile(r1, r2, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) 05:55:24 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x1300}]}, 0x78) 05:55:24 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000002700)=ANY=[], 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r3, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0x1, 0x7f0f}}}, 0x118) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) fstat(r1, &(0x7f0000000500)) getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0x1, &(0x7f0000000840)=[0x0]) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000e00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000dc0)=0xe8) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) getegid() getuid() fstat(r2, &(0x7f0000000c80)) getuid() getresgid(&(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80)) 05:55:24 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0xa00000000000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:24 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getgroups(0x0, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x58) ioctl$VIDIOC_ENUMSTD(r2, 0xc0485619, &(0x7f0000000140)={0x8, 0x408004, "ee3f6cc9231bfafe1d7788c2389924a658277a339b028732", {0x20, 0xffffffff80000001}, 0x1f}) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0xfffffffffffffd77) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010207031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b3562406b20cd37ed01cc00000000000000000000000000000", 0x4c}], 0x1}, 0x0) [ 1628.675017] sg_write: data in/out 196572/74 bytes for SCSI command 0xff-- guessing data in; [ 1628.675017] program syz-executor4 not setting count and/or reply_len properly [ 1628.702467] netlink: 20 bytes leftover after parsing attributes in process `syz-executor3'. [ 1628.715730] sg_write: data in/out 393180/74 bytes for SCSI command 0xff-- guessing data in; 05:55:25 executing program 3: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x7, 0x4, 0x480, 0x140, 0x280, 0x0, 0x398, 0x398, 0x398, 0x4, &(0x7f0000000040), {[{{@arp={@loopback, @local, 0xffffffff, 0xff000000, @empty, {[0x0, 0xff, 0x0, 0xff, 0xff]}, @mac=@local, {[0xff, 0xff, 0x0, 0xff, 0x0, 0xff]}, 0x7, 0x2, 0x7ff, 0x4973ec03, 0x80000001, 0x2, 'tunl0\x00', 'ip6tnl0\x00', {0xff}, {0xff}, 0x0, 0x3b5}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={[], 0x1d}, @multicast2, @loopback, 0xf}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @mac=@broadcast, @local, @empty, 0x371d41051e5d0b8f, 0xffffffff}}}, {{@arp={@rand_addr=0x4, @dev={0xac, 0x14, 0x14, 0xd}, 0xff, 0x0, @empty, {[0xff, 0x0, 0xff, 0x0, 0xff, 0xff]}, @mac=@random="864448ce4bd4", {[0xff, 0x0, 0x0, 0xff]}, 0x7, 0x6, 0x9, 0x9, 0x5, 0xff, 'veth1\x00', 'sit0\x00', {0xff}, {}, 0x0, 0x208}, 0xf0, 0x118}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x3}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4d0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r2 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1) ftruncate(r2, 0x1000000) sendfile(r1, r2, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) [ 1628.715730] program syz-executor5 not setting count and/or reply_len properly [ 1628.727417] netlink: 20 bytes leftover after parsing attributes in process `syz-executor3'. [ 1628.744911] sg_write: data in/out 196572/74 bytes for SCSI command 0xff-- guessing data in; [ 1628.744911] program syz-executor4 not setting count and/or reply_len properly 05:55:25 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) [ 1628.849671] sg_write: data in/out 393180/74 bytes for SCSI command 0xff-- guessing data in; [ 1628.849671] program syz-executor5 not setting count and/or reply_len properly [ 1628.881883] sg_write: data in/out 196572/74 bytes for SCSI command 0xff-- guessing data in; [ 1628.881883] program syz-executor4 not setting count and/or reply_len properly 05:55:25 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x13}]}, 0x78) [ 1628.971515] sg_write: data in/out 393180/74 bytes for SCSI command 0xff-- guessing data in; [ 1628.971515] program syz-executor5 not setting count and/or reply_len properly 05:55:25 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}) 05:55:25 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000002700)=ANY=[], 0x0) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0xffffffffffffffff, &(0x7f00000007c0), 0x13f, 0x1009}}, 0x20) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) fstat(r1, &(0x7f0000000500)) getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0x1, &(0x7f0000000840)=[0x0]) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) getegid() getuid() fstat(r0, &(0x7f00000014c0)) getuid() getresgid(&(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80)) 05:55:25 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:25 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x10000000000000}]}, 0x78) 05:55:25 executing program 1: socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000002700)=ANY=[], 0x0) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0x1, 0x7f0f}}}, 0x118) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0xfffffffffffffffa) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r1, &(0x7f0000000500)) getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0xff, &(0x7f0000000840)=[r3]) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) getegid() getuid() fstat(r0, &(0x7f00000014c0)) getuid() getresgid(&(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80)) 05:55:25 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:25 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x6000000000000000}]}, 0x78) 05:55:25 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}) 05:55:25 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:25 executing program 3: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x7, 0x4, 0x480, 0x140, 0x280, 0x0, 0x398, 0x398, 0x398, 0x4, &(0x7f0000000040), {[{{@arp={@loopback, @local, 0xffffffff, 0xff000000, @empty, {[0x0, 0xff, 0x0, 0xff, 0xff]}, @mac=@local, {[0xff, 0xff, 0x0, 0xff, 0x0, 0xff]}, 0x7, 0x2, 0x7ff, 0x4973ec03, 0x80000001, 0x2, 'tunl0\x00', 'ip6tnl0\x00', {0xff}, {0xff}, 0x0, 0x3b5}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={[], 0x1d}, @multicast2, @loopback, 0xf}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @mac=@broadcast, @local, @empty, 0x371d41051e5d0b8f, 0xffffffff}}}, {{@arp={@rand_addr=0x4, @dev={0xac, 0x14, 0x14, 0xd}, 0xff, 0x0, @empty, {[0xff, 0x0, 0xff, 0x0, 0xff, 0xff]}, @mac=@random="864448ce4bd4", {[0xff, 0x0, 0x0, 0xff]}, 0x7, 0x6, 0x9, 0x9, 0x5, 0xff, 'veth1\x00', 'sit0\x00', {0xff}, {}, 0x0, 0x208}, 0xf0, 0x118}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x3}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4d0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r2 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1) ftruncate(r2, 0x1000000) sendfile(r1, r2, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) 05:55:25 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x4c00000000000000}]}, 0x78) 05:55:25 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000002700)=ANY=[], 0x0) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0x1, 0x7f0f}}}, 0x118) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) fstat(r1, &(0x7f0000000500)) getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0x1, &(0x7f0000000840)=[0x0]) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) getegid() perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$adsp(&(0x7f0000000240)='/dev/adsp#\x00', 0x795d, 0x400000) 05:55:25 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}) 05:55:25 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x7fdc, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:26 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000200)) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r3 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000140)="bd714239e87eecaa1712a8131fefdb11daa0db4e97484dcd4121f999794d7da461cf65cd0e93d15066f99f60bbaaa1d89c866a574d214d4b6bcf6a6eee6867247f653a724cfa9f234c076e6a7e6247dbfd279cd423d3765405b9065cf9146d87a45b8498") ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0xffffffffffff7ffe) ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f0000000040)=""/97) ftruncate(r3, 0x1000000) sendfile(r2, r3, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) ioctl$KDENABIO(r1, 0x4b36) 05:55:26 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x3f000000}]}, 0x78) 05:55:26 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:26 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}) 05:55:26 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x7400000000000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:26 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x7}]}, 0x78) 05:55:26 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}) 05:55:26 executing program 3: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x7}]}, 0x78) 05:55:26 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x4c00, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:26 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x7400000000000000}]}, 0x78) 05:55:26 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000002700)=ANY=[], 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r2, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000002c0)="640f01d10f30c4c21191648b9a65660f38036300262e0fc7ae7fec0471c4e39d48910000000097c4e2a999c9c4e135fadc9a59d9e3853d0166b8f3000f00d0", 0x3f}], 0x1, 0x0, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528acba}], 0x1, 0x0) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r8, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0x1, 0x7f0f}}}, 0x118) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) lstat(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) fstat(r1, &(0x7f0000000500)) getegid() geteuid() 05:55:26 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}) 05:55:27 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000200)) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r3 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000140)="bd714239e87eecaa1712a8131fefdb11daa0db4e97484dcd4121f999794d7da461cf65cd0e93d15066f99f60bbaaa1d89c866a574d214d4b6bcf6a6eee6867247f653a724cfa9f234c076e6a7e6247dbfd279cd423d3765405b9065cf9146d87a45b8498") ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0xffffffffffff7ffe) ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f0000000040)=""/97) ftruncate(r3, 0x1000000) sendfile(r2, r3, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) ioctl$KDENABIO(r1, 0x4b36) 05:55:27 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x48000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:27 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}) 05:55:27 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x2000000000000000}]}, 0x78) 05:55:27 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x3100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:27 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}) 05:55:27 executing program 3: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x1, 0x2) r2 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1) ftruncate(r2, 0x1000000) sendfile(r1, r2, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000140)=""/215) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f00000002c0)=[@in6={0xa, 0x4e24, 0xa9d, @mcast1, 0x101}], 0x1c) r4 = getegid() chown(&(0x7f0000000040)='./file0\x00', r3, r4) 05:55:27 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x7000000}]}, 0x78) 05:55:27 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x900, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:27 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}) 05:55:27 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:27 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x3f00}]}, 0x78) 05:55:27 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000200)) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r3 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000140)="bd714239e87eecaa1712a8131fefdb11daa0db4e97484dcd4121f999794d7da461cf65cd0e93d15066f99f60bbaaa1d89c866a574d214d4b6bcf6a6eee6867247f653a724cfa9f234c076e6a7e6247dbfd279cd423d3765405b9065cf9146d87a45b8498") ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0xffffffffffff7ffe) ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f0000000040)=""/97) ftruncate(r3, 0x1000000) sendfile(r2, r3, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) ioctl$KDENABIO(r1, 0x4b36) 05:55:27 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}) 05:55:27 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000002700)=ANY=[], 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r3, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB="2800000012000d06000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="41b710909c00e96ed8ca169d211e1b009e629ee2ec9a4fc02438405e4594d5a4c54eebed6c3072c4"], 0x28}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r5, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0x1, 0x7f0f}}}, 0x118) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) fstat(r1, &(0x7f0000000500)) getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c80)) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000c40)=0xc) getgroups(0x1, &(0x7f0000000840)=[0x0]) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)) 05:55:27 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:27 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x68}]}, 0x78) 05:55:28 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}) [ 1631.772242] netlink: 8 bytes leftover after parsing attributes in process `syz-executor2'. [ 1631.851386] netlink: 8 bytes leftover after parsing attributes in process `syz-executor2'. 05:55:28 executing program 3: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x200, 0x0) ustat(0xffffffffffff0001, &(0x7f0000000380)) ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f0000000140)=ANY=[@ANYBLOB="050000000000000000000010f1ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000011710000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"]) r3 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r4 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000240)=0x7) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0xa0102, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0xffffffffffffffff) getdents(r2, &(0x7f0000000280)=""/254, 0xfe) ftruncate(r4, 0x8003) sendfile(r3, r4, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) 05:55:28 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:28 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x2}]}, 0x78) 05:55:28 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}) 05:55:28 executing program 0: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}) 05:55:28 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0xa0008000}]}, 0x78) [ 1632.053814] netlink: 8 bytes leftover after parsing attributes in process `syz-executor2'. 05:55:28 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000007100)=[{{&(0x7f0000000040)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f00000042c0)=[{&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f00000022c0)=""/4096, 0x1000}, {&(0x7f0000001140)=""/129, 0x81}, {&(0x7f0000001200)=""/62, 0x3e}, {&(0x7f00000032c0)=""/4096, 0x1000}, {&(0x7f0000001240)=""/62, 0x3e}], 0x7, &(0x7f0000004340)=""/54, 0x36, 0x800}, 0x2}, {{&(0x7f0000004380)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f00000055c0)=[{&(0x7f0000004400)=""/81, 0x51}, {&(0x7f0000004480)=""/67, 0x43}, {&(0x7f0000004500)=""/4096, 0x1000}, {&(0x7f0000005500)=""/183, 0xb7}], 0x4, &(0x7f0000005600)=""/17, 0x11, 0x212}, 0x1}, {{&(0x7f0000005640), 0x80, &(0x7f0000005840)=[{&(0x7f00000056c0)=""/46, 0x2e}, {&(0x7f0000005700)=""/158, 0x9e}, {&(0x7f00000057c0)=""/108, 0x6c}], 0x3, 0x0, 0x0, 0x9bf7}, 0xff}, {{&(0x7f0000005880)=@alg, 0x80, &(0x7f0000005bc0)=[{&(0x7f0000005900)=""/44, 0x2c}, {&(0x7f0000005940)=""/201, 0xc9}, {&(0x7f0000005a40)=""/167, 0xa7}, {&(0x7f0000005b00)=""/164, 0xa4}], 0x4, &(0x7f0000005c00)=""/163, 0xa3, 0x1}, 0x100000000}, {{&(0x7f0000005cc0)=@can, 0x80, &(0x7f0000007040)=[{&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/146, 0x92}, {&(0x7f0000006e00)=""/12, 0xc}, {&(0x7f0000006e40)=""/246, 0xf6}, {&(0x7f0000006f40)=""/200, 0xc8}], 0x5, &(0x7f00000070c0)=""/38, 0x26, 0x4}, 0x4}], 0x5, 0x12000, &(0x7f0000007240)={0x0, 0x989680}) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r2 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1) ftruncate(r2, 0x1000000) sendfile(r1, r2, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) 05:55:28 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x3000000000000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:28 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x8000a0}]}, 0x78) 05:55:28 executing program 3: socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000002700)=ANY=[], 0x0) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0x7, 0x7f0f}}}, 0x118) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) fstat(r1, &(0x7f0000000500)) getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0x1, &(0x7f0000000840)=[0x0]) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) getegid() getuid() fstat(r0, &(0x7f00000014c0)) getuid() getresgid(&(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80)) 05:55:28 executing program 0: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}) 05:55:28 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000002700)=ANY=[], 0x0) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000dc0)={0x15, 0x110, 0xfa00, {r2, 0x0, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0x1, 0x7f0f}}}, 0x118) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) fstat(r1, &(0x7f0000000500)) getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0x1, &(0x7f0000000840)=[0x0]) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) getegid() getuid() fstat(r0, &(0x7f00000014c0)) getuid() getresgid(&(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80)) 05:55:28 executing program 0: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}) 05:55:28 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0xd00000000000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:28 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x3}]}, 0x78) 05:55:29 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}) 05:55:29 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:29 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x48}]}, 0x78) [ 1632.997773] sg_write: 62 callbacks suppressed [ 1632.997787] sg_write: data in/out 393180/74 bytes for SCSI command 0xff-- guessing data in; [ 1632.997787] program syz-executor5 not setting count and/or reply_len properly [ 1633.071900] sg_write: data in/out 393180/74 bytes for SCSI command 0xff-- guessing data in; [ 1633.071900] program syz-executor5 not setting count and/or reply_len properly 05:55:29 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r2 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1) ftruncate(r2, 0x1000000) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000040)={0x3a}, 0x4) sendfile(r1, r2, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) 05:55:29 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}) 05:55:29 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:29 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x3000000000000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:29 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000002700)=ANY=[], 0x0) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0x1, 0x7f0f}}}, 0x118) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) fstat(r1, &(0x7f0000000500)) getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0x1, &(0x7f0000000840)=[0x0]) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) getegid() getuid() fstat(r0, &(0x7f00000014c0)) getuid() getresgid(&(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80)) 05:55:29 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x2000}]}, 0x78) [ 1633.527678] sg_write: data in/out 393180/74 bytes for SCSI command 0xff-- guessing data in; [ 1633.527678] program syz-executor5 not setting count and/or reply_len properly [ 1633.534490] sg_write: data in/out 196572/74 bytes for SCSI command 0xff-- guessing data in; [ 1633.534490] program syz-executor4 not setting count and/or reply_len properly [ 1633.545402] sg_write: data in/out 196572/74 bytes for SCSI command 0xff-- guessing data in; [ 1633.545402] program syz-executor3 not setting count and/or reply_len properly [ 1633.582508] sg_write: data in/out 393180/74 bytes for SCSI command 0xff-- guessing data in; [ 1633.582508] program syz-executor5 not setting count and/or reply_len properly 05:55:29 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}) 05:55:29 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x4c00}]}, 0x78) 05:55:29 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:30 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}) 05:55:30 executing program 3: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r3 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) fadvise64(r1, 0x17, 0x4000, 0x2) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) ftruncate(r3, 0x1000000) sendfile(r2, r3, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) [ 1633.755108] sg_write: data in/out 393180/74 bytes for SCSI command 0xff-- guessing data in; [ 1633.755108] program syz-executor5 not setting count and/or reply_len properly [ 1633.770141] sg_write: data in/out 196572/74 bytes for SCSI command 0xff-- guessing data in; [ 1633.770141] program syz-executor4 not setting count and/or reply_len properly 05:55:30 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000002700)=ANY=[], 0x0) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0x1, 0x7f0f}}}, 0x118) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) fstat(r1, &(0x7f0000000500)) getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0x1, &(0x7f0000000840)=[0x0]) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) getegid() getuid() fstat(r0, &(0x7f00000014c0)) getuid() getresgid(&(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80)) [ 1633.858434] sg_write: data in/out 393180/74 bytes for SCSI command 0xff-- guessing data in; [ 1633.858434] program syz-executor5 not setting count and/or reply_len properly [ 1633.891516] sg_write: data in/out 196572/74 bytes for SCSI command 0xff-- guessing data in; [ 1633.891516] program syz-executor4 not setting count and/or reply_len properly 05:55:30 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r2 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1) ftruncate(r2, 0x1000000) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000040)={0x3a}, 0x4) sendfile(r1, r2, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) 05:55:30 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x7a000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:30 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}) 05:55:30 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x6c00}]}, 0x78) 05:55:30 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000002700)=ANY=[], 0x0) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @in6={0xa, 0x4e23, 0x80000000, @local, 0x1}}}, 0x225) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) fstat(r1, &(0x7f0000000500)) getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0x1, &(0x7f0000000840)=[0x0]) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) getegid() getuid() fstat(r0, &(0x7f00000014c0)) getuid() getresgid(&(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80)) 05:55:30 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}) 05:55:30 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x7a00, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:30 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x4c}]}, 0x78) 05:55:30 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x100000}]}, 0x78) 05:55:30 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:31 executing program 3: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r3 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) fadvise64(r1, 0x17, 0x4000, 0x2) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) ftruncate(r3, 0x1000000) sendfile(r2, r3, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) 05:55:31 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}) 05:55:31 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:31 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x8000a0ffffffff}]}, 0x78) 05:55:31 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x11, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @link_local}]}, 0x40}}, 0x0) write$cgroup_subtree(r0, &(0x7f0000002700)=ANY=[], 0x0) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r3, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0x1, 0x7f0f}}}, 0x118) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000c80)) fstat(r1, &(0x7f0000000500)) r4 = getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0x0, &(0x7f0000000000)=[r4]) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f0000000b40), &(0x7f0000000480), &(0x7f0000000bc0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) getegid() getuid() 05:55:31 executing program 1: openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r2 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x5}, &(0x7f0000000080)=0x8) fcntl$getflags(r0, 0x408) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000140)={r3, 0x1, 0x1a, "b460400ebf1dab6304aa99e2cbc4eb329388293d63d6cdc914fd"}, 0x22) ftruncate(r2, 0x1000000) sendfile(r1, r2, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) 05:55:31 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}) 05:55:31 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x2000000}]}, 0x78) 05:55:31 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0xdc7f, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:31 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}) 05:55:31 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:31 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x20000000}]}, 0x78) 05:55:31 executing program 3: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x41, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r2 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1) ftruncate(r2, 0x1000000) sendfile(r1, r2, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) 05:55:31 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}) 05:55:31 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000002700)=ANY=[], 0x0) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0x1, 0x7f0f}}}, 0x118) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x6) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) fstat(r1, &(0x7f0000000500)) getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0x1, &(0x7f0000000840)=[0x0]) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) getegid() getuid() fstat(r0, &(0x7f00000014c0)) getuid() getresgid(&(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80)) 05:55:31 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:31 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x4800}]}, 0x78) 05:55:32 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:32 executing program 1: openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r2 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x5}, &(0x7f0000000080)=0x8) fcntl$getflags(r0, 0x408) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000140)={r3, 0x1, 0x1a, "b460400ebf1dab6304aa99e2cbc4eb329388293d63d6cdc914fd"}, 0x22) ftruncate(r2, 0x1000000) sendfile(r1, r2, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) 05:55:32 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x200000000000000}]}, 0x78) 05:55:32 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, 0x0) 05:55:32 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(r0, &(0x7f0000000dc0)='cpuacct.usage_percpu\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000002700)=ANY=[], 0x0) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000007c0)={0x0, 0xfffffffffffffe45, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0x1, 0x7f0f}}}, 0x118) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) fstat(r1, &(0x7f0000000500)) getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0xc) getgroups(0x1, &(0x7f0000000840)=[0x0]) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000c80), &(0x7f0000000cc0)=0x6) getegid() getuid() fstat(r0, &(0x7f00000014c0)) getuid() getresgid(&(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80)) 05:55:32 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x6800, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:32 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0xffffff7f00000000}]}, 0x78) 05:55:32 executing program 3: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r3 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) fadvise64(r1, 0x17, 0x0, 0x2) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) ftruncate(r3, 0x1000000) sendfile(r2, r3, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) 05:55:32 executing program 2: socketpair(0x0, 0x0, 0x4, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000002700)=ANY=[], 0x0) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x10000) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0x1, 0x7f0f}}}, 0x118) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) fstat(r1, &(0x7f0000000500)) getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0x1, &(0x7f0000000840)=[0x0]) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) getegid() getuid() fstat(r0, &(0x7f00000014c0)) getuid() getresgid(&(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80)) 05:55:32 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:32 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, 0x0) 05:55:32 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x1300000000000000}]}, 0x78) 05:55:32 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x5000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:33 executing program 1: openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r2 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x5}, &(0x7f0000000080)=0x8) fcntl$getflags(r0, 0x408) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000140)={r3, 0x1, 0x1a, "b460400ebf1dab6304aa99e2cbc4eb329388293d63d6cdc914fd"}, 0x22) ftruncate(r2, 0x1000000) sendfile(r1, r2, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) 05:55:33 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x4c000000}]}, 0x78) 05:55:33 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, 0x0) 05:55:33 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x900000000000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:33 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000002700)=ANY=[], 0x0) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0x1, 0x7f0f}}}, 0x118) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) fstat(r1, &(0x7f0000000500)) getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0x1, &(0x7f0000000840)=[0x0]) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000c80)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) getegid() getuid() fstat(r0, &(0x7f00000014c0)) getuid() getresgid(&(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80)) 05:55:33 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x7a00000000000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:33 executing program 3: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r3 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) fadvise64(r1, 0x17, 0x0, 0x2) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) ftruncate(r3, 0x1000000) sendfile(r2, r3, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) 05:55:33 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r3 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) fadvise64(r1, 0x0, 0x4000, 0x2) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) ftruncate(r3, 0x1000000) sendfile(r2, r3, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) 05:55:33 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000}]}, 0x78) 05:55:33 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:33 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f00000007c0)=ANY=[], 0xfffffffffffffdf9) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0x1, 0x7f0f}}}, 0x118) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) fstat(r1, &(0x7f0000000500)) getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0x1, &(0x7f0000000840)=[0x0]) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) getegid() getuid() fstat(r0, &(0x7f00000014c0)) getuid() getresgid(&(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80)) 05:55:33 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:34 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000140)=0xb9f, 0x2) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) r2 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1) write$smack_current(r2, &(0x7f0000000040)='-vboxnet0securityem0y\x00', 0x16) ftruncate(r2, 0x1000000) sendfile(r1, r2, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) 05:55:34 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}]}, 0x78) 05:55:34 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:34 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000002700)=ANY=[], 0x0) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000007c0)={0xffffffffffffffff}, 0x13f, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0x1, 0x7f0f}}}, 0x118) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) fstat(r1, &(0x7f0000000500)) getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0x1, &(0x7f0000000840)=[0x0]) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f0000000c80)) stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) getegid() getuid() fstat(r0, &(0x7f00000014c0)) getuid() getresgid(&(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80)) 05:55:34 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x4800000000000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:34 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f}]}, 0x78) [ 1638.059332] sg_write: 57 callbacks suppressed [ 1638.059347] sg_write: data in/out 393180/74 bytes for SCSI command 0xff-- guessing data in; [ 1638.059347] program syz-executor5 not setting count and/or reply_len properly [ 1638.083059] sg_write: data in/out 393180/74 bytes for SCSI command 0xff-- guessing data in; [ 1638.083059] program syz-executor5 not setting count and/or reply_len properly [ 1638.109450] sg_write: data in/out 196572/74 bytes for SCSI command 0xff-- guessing data in; [ 1638.109450] program syz-executor4 not setting count and/or reply_len properly [ 1638.170519] sg_write: data in/out 196572/74 bytes for SCSI command 0xff-- guessing data in; [ 1638.170519] program syz-executor4 not setting count and/or reply_len properly 05:55:34 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x600, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:34 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}]}, 0x78) 05:55:34 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x8000a0ffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:34 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000c80)=ANY=[], 0x0) openat$cgroup_type(r0, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x9) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0x1, 0x7f0f}}}, 0x118) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) fstat(r1, &(0x7f0000000500)) getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0x1, &(0x7f0000000840)=[0x0]) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) getegid() getuid() fstat(r0, &(0x7f00000014c0)) getuid() getresgid(&(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80)) 05:55:34 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r3 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) fadvise64(r1, 0x0, 0x4000, 0x2) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) ftruncate(r3, 0x1000000) sendfile(r2, r3, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) [ 1638.371229] sg_write: data in/out 196572/74 bytes for SCSI command 0xff-- guessing data in; [ 1638.371229] program syz-executor4 not setting count and/or reply_len properly [ 1638.381828] sg_write: data in/out 196572/74 bytes for SCSI command 0xff-- guessing data in; [ 1638.381828] program syz-executor3 not setting count and/or reply_len properly [ 1638.403624] sg_write: data in/out 393180/74 bytes for SCSI command 0xff-- guessing data in; [ 1638.403624] program syz-executor5 not setting count and/or reply_len properly 05:55:34 executing program 3: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0xffffffffffffff83) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r2 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) ftruncate(r2, 0x1000000) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x8, "a911d1ccde27321f783cd0353e29a3db0aaa148645973c2e0b40ce2ded49d1ed", 0x10, 0x82, 0x4, 0x1b, 0x4}) sendfile(r1, r2, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) [ 1638.449378] sg_write: data in/out 393180/74 bytes for SCSI command 0xff-- guessing data in; [ 1638.449378] program syz-executor5 not setting count and/or reply_len properly [ 1638.467495] sg_write: data in/out 196572/74 bytes for SCSI command 0xff-- guessing data in; [ 1638.467495] program syz-executor4 not setting count and/or reply_len properly 05:55:35 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000140)=0xb9f, 0x2) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) r2 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1) write$smack_current(r2, &(0x7f0000000040)='-vboxnet0securityem0y\x00', 0x16) ftruncate(r2, 0x1000000) sendfile(r1, r2, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) 05:55:35 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x700000000000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:35 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x700}]}, 0x78) [ 1638.969298] sg_write: data in/out 393180/74 bytes for SCSI command 0xff-- guessing data in; [ 1638.969298] program syz-executor5 not setting count and/or reply_len properly 05:55:35 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0xfbffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:35 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00}]}, 0x78) 05:55:35 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x7a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:35 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x1300000000000000}]}, 0x78) 05:55:35 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0xffffff7f00000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:35 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r3 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) fadvise64(r1, 0x0, 0x4000, 0x2) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) ftruncate(r3, 0x1000000) sendfile(r2, r3, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) 05:55:35 executing program 2: socketpair(0x5, 0xa, 0xfffffffffffffffd, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000002700)=ANY=[], 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0x1, 0x7f0f}}}, 0x118) write$cgroup_subtree(r0, &(0x7f00000007c0)=ANY=[], 0x1d7) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) fstat(r1, &(0x7f0000000500)) geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0x1, &(0x7f0000000840)=[0x0]) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0x32a5370e10bab574) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0xff) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) getuid() fstat(r0, &(0x7f00000014c0)) getuid() getresgid(&(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80)) 05:55:35 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:35 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x4800000000000000}]}, 0x78) 05:55:36 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r3 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) fadvise64(r1, 0x0, 0x4000, 0x2) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) ftruncate(r3, 0x1000000) sendfile(r2, r3, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) 05:55:36 executing program 3: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0xffffffffffffff83) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r2 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) ftruncate(r2, 0x1000000) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x8, "a911d1ccde27321f783cd0353e29a3db0aaa148645973c2e0b40ce2ded49d1ed", 0x10, 0x82, 0x4, 0x1b, 0x4}) sendfile(r1, r2, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) 05:55:36 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:36 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xa0008000}]}, 0x78) 05:55:36 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000002700)=ANY=[], 0x0) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0x1, 0x7f0f}}}, 0x118) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) fstat(r1, &(0x7f0000000500)) getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0x1, &(0x7f0000000840)=[0x0]) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) getegid() getuid() fstat(r0, &(0x7f0000000c80)) getuid() getresgid(&(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80)) 05:55:36 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:36 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000}]}, 0x78) 05:55:36 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x68, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:36 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:36 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x4800}]}, 0x78) 05:55:36 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x48, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:36 executing program 2: socketpair(0x0, 0x1, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000002700)=ANY=[], 0x0) openat$cgroup_type(r0, &(0x7f0000000e00)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0x1, 0x7f0f}}}, 0x118) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) fstat(r1, &(0x7f0000000500)) getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0x1, &(0x7f0000000840)=[0x0]) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f0000000080), &(0x7f0000000b80), &(0x7f00000007c0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) getegid() getuid() fstat(r0, &(0x7f00000014c0)) getuid() getresgid(&(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80)) 05:55:36 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r3 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40042409, 0x1) ftruncate(r3, 0x1000000) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000140)) sendfile(r2, r3, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) ioctl$KDGKBSENT(r2, 0x4b48, &(0x7f0000000040)={0x99e6, 0x5, 0x9}) 05:55:36 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x6c00, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:36 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000}]}, 0x78) 05:55:36 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x1000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:36 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000002700)=ANY=[], 0x0) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0x1, 0x7f0f}}}, 0x118) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) fstat(r1, &(0x7f0000000500)) getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0x1, &(0x7f0000000840)=[0x0]) lstat(&(0x7f0000000dc0)='./file0\x00', &(0x7f0000000c80)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f00000007c0), &(0x7f0000000b80), &(0x7f0000000bc0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) getegid() getuid() fstat(r0, &(0x7f00000014c0)) getuid() getresgid(&(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80)) 05:55:36 executing program 3: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r3 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) fadvise64(0xffffffffffffffff, 0x17, 0x4000, 0x2) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) ftruncate(r3, 0x1000000) sendfile(r2, r3, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) 05:55:36 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x3100, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:36 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000140)={0x5, 0x8, 0x81, 0x7}, 0x8) r2 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1) ftruncate(r2, 0x1000000) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x7, 0x0, 0x10003, 0x3ff}) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, &(0x7f0000000080)={0x8, r3, 0x0, 0x7f}) sendfile(r1, r2, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) 05:55:37 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x500}]}, 0x78) 05:55:37 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x74}]}, 0x78) 05:55:37 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x3100000000000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:37 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:37 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r3 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40042409, 0x1) ftruncate(r3, 0x1000000) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000140)) sendfile(r2, r3, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) ioctl$KDGKBSENT(r2, 0x4b48, &(0x7f0000000040)={0x99e6, 0x5, 0x9}) 05:55:37 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000002700)=ANY=[], 0x0) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0x1, 0x7f0f}}}, 0x118) write$cgroup_subtree(r1, &(0x7f0000002580)=ANY=[@ANYBLOB="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", @ANYPTR64=&(0x7f0000000ec0)=ANY=[@ANYRES16=r0, @ANYPTR64=&(0x7f0000000440)=ANY=[@ANYRESDEC=r2], @ANYRES16=r2, @ANYRESDEC=0x0, @ANYBLOB="7a8f88ace17baa316cc970da58e971192395e1c4cccd249adda9d5cb76417b7066791a492f7870c3400a2c06c824ee972a79364401732df3cc8128dc3bb30a200d82e12bf73322eaaa5a639cc890c7bc451409a39b8a38b0966682007ee4e8e01f21fafadbe76f2b1d7c7a1652af3f736be5e12df9ce5ad8e05597e623a6e557466d44ada46749ed9bc4007876badd19da4ab3cf9e185bff0cb1776d09a22229fcea6a053510b441fdff3e4ddc263005342ff8cf04c9c31cf4916447e0ba115e39f5c6971190e1"]], 0x13463284) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000c80)='./file0\x00', &(0x7f0000000480)) fstat(r1, &(0x7f0000000fc0)) getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0x1, &(0x7f0000000840)=[0x0]) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000c40)=0xc) getegid() getuid() fstat(r0, &(0x7f00000014c0)) getuid() getresgid(&(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80)) 05:55:37 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x74000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:37 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00000000000000}]}, 0x78) 05:55:37 executing program 3: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) r3 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) fadvise64(r1, 0x17, 0x4000, 0x2) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) ftruncate(r3, 0x1000000) sendfile(r2, r3, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) 05:55:37 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:37 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000}]}, 0x78) 05:55:37 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000140)={0x5, 0x8, 0x81, 0x7}, 0x8) r2 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1) ftruncate(r2, 0x1000000) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x7, 0x0, 0x10003, 0x3ff}) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, &(0x7f0000000080)={0x8, r3, 0x0, 0x7f}) sendfile(r1, r2, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) 05:55:37 executing program 3: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x80, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x8, 0x4000) write$P9_RATTACH(r0, &(0x7f0000000140)={0x14, 0x69, 0x2, {0x45, 0x4, 0x3}}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r2 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1) ftruncate(r2, 0x1000000) sendfile(r1, r2, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) 05:55:38 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000002700)=ANY=[], 0x0) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0x1, 0x7f0f}}}, 0x118) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) fstat(r1, &(0x7f0000000500)) getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f0000000dc0)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0x1, &(0x7f0000000840)=[0x0]) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) getegid() getuid() fstat(r0, &(0x7f00000014c0)) getuid() getresgid(&(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80)) 05:55:38 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:38 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00000000000000}]}, 0x78) 05:55:38 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:38 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f00000007c0)=ANY=[], 0x0) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000f00)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0x1, 0x7f0f}}}, 0x118) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) fstat(r1, &(0x7f0000000500)) getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f00000001c0)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0x1, &(0x7f0000000840)=[0x0]) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) getegid() getuid() fstat(r0, &(0x7f00000014c0)) getuid() getresgid(&(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80)) 05:55:38 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r3 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40042409, 0x1) ftruncate(r3, 0x1000000) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000140)) sendfile(r2, r3, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) ioctl$KDGKBSENT(r2, 0x4b48, &(0x7f0000000040)={0x99e6, 0x5, 0x9}) 05:55:38 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000}]}, 0x78) 05:55:38 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x6c00000000000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:38 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x3}]}, 0x78) 05:55:38 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x600000000000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:38 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:38 executing program 3: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x80, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x8, 0x4000) write$P9_RATTACH(r0, &(0x7f0000000140)={0x14, 0x69, 0x2, {0x45, 0x4, 0x3}}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r2 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1) ftruncate(r2, 0x1000000) sendfile(r1, r2, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) 05:55:39 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}]}, 0x78) 05:55:39 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000c80)=ANY=[], 0x0) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x5) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0x1, 0x7f0f}}}, 0x118) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) fstat(r1, &(0x7f0000000500)) getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0x4000000000000050, &(0x7f0000000c80)=[r3]) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) getegid() getuid() fstat(r0, &(0x7f00000014c0)) getuid() getresgid(&(0x7f0000000ec0), &(0x7f0000000e80), &(0x7f0000000e40)) 05:55:39 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}]}, 0x78) 05:55:39 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x8000a0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:39 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x80000, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) r3 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x201) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r3, &(0x7f0000000140)="9ad620d10b5c86ff4c532cb66ed2b31bb8ea710925cad22f31d6ece5d4ab01c68499a8eabbcca2a21d4eec88f4ff8d600ded9d66330a110905c1b4e44cb9518362dce6e94a6cb0b6576d5cb60a75d5cbd6f60865f7a4c839a823b268bf7a0df45aa6cf5ad3659bd4b41db3f61dc5a276bad51814ce99a38829bcf04f35187b4c577ef427ff2d148d20268cdd1bc7eaad1c31e2a272089697c6ed36ac4549f2a3be69015e20b3341a42f92c5c89060eca11186f13207b9891f98588dbf408bddbccb3422a8b6471f17c30c710a69370361b4f7e5fcdea80", &(0x7f0000000240)="592d6466f52858df46f81c44bf160130992eacd413ec52085af4316e5d70c75bd10dd1be122930383bef4c47207c550c6951c0c6bc9223aa6fd726bc57827cafae6fdf7a139fee3c885dc2d582ef1438453704", 0x2}, 0x20) ftruncate(r3, 0x1000000) sendfile(r2, r3, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r3, 0x4008ae48, &(0x7f00000002c0)=0x10000) 05:55:39 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x10}]}, 0x78) 05:55:39 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r3 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) fadvise64(r1, 0x17, 0x4000, 0x2) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) ftruncate(r3, 0x1000000) sendfile(r2, r3, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) 05:55:39 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000002700)=ANY=[], 0x0) openat$cgroup_type(r1, &(0x7f0000000cc0)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0x1, 0x7f0f}}}, 0x118) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) fstat(r1, &(0x7f0000000500)) getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0x1, &(0x7f0000000840)=[0x0]) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) getegid() getuid() fstat(r0, &(0x7f00000014c0)) getuid() getresgid(&(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80)) [ 1643.413400] sg_write: 74 callbacks suppressed [ 1643.413415] sg_write: data in/out 196572/74 bytes for SCSI command 0xff-- guessing data in; [ 1643.413415] program syz-executor4 not setting count and/or reply_len properly [ 1643.449498] sg_write: data in/out 393180/74 bytes for SCSI command 0xff-- guessing data in; [ 1643.449498] program syz-executor5 not setting count and/or reply_len properly [ 1643.474326] sg_write: data in/out 196572/74 bytes for SCSI command 0xff-- guessing data in; [ 1643.474326] program syz-executor4 not setting count and/or reply_len properly 05:55:39 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x68000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) [ 1643.509755] sg_write: data in/out 393180/74 bytes for SCSI command 0xff-- guessing data in; [ 1643.509755] program syz-executor5 not setting count and/or reply_len properly 05:55:39 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x60}]}, 0x78) 05:55:39 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000002700)=ANY=[], 0x0) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0x1, 0x7f0f}}}, 0x118) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) fstat(r1, &(0x7f0000000500)) getegid() geteuid() lstat(&(0x7f0000000cc0)='./file0\x00', &(0x7f0000000dc0)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0x1, &(0x7f0000000840)=[0x0]) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) getegid() getuid() fstat(r0, &(0x7f0000000ec0)) getuid() getresgid(&(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80)) [ 1643.611023] sg_write: data in/out 196572/74 bytes for SCSI command 0xff-- guessing data in; [ 1643.611023] program syz-executor4 not setting count and/or reply_len properly [ 1643.707020] sg_write: data in/out 393180/74 bytes for SCSI command 0xff-- guessing data in; [ 1643.707020] program syz-executor5 not setting count and/or reply_len properly [ 1643.728987] sg_write: data in/out 196572/74 bytes for SCSI command 0xff-- guessing data in; [ 1643.728987] program syz-executor4 not setting count and/or reply_len properly 05:55:40 executing program 3: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x80, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x8, 0x4000) write$P9_RATTACH(r0, &(0x7f0000000140)={0x14, 0x69, 0x2, {0x45, 0x4, 0x3}}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r2 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1) ftruncate(r2, 0x1000000) sendfile(r1, r2, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) 05:55:40 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) [ 1643.764572] sg_write: data in/out 393180/74 bytes for SCSI command 0xff-- guessing data in; [ 1643.764572] program syz-executor5 not setting count and/or reply_len properly 05:55:40 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x8000a0ffffffff}]}, 0x78) [ 1643.839958] sg_write: data in/out 196572/74 bytes for SCSI command 0xff-- guessing data in; [ 1643.839958] program syz-executor4 not setting count and/or reply_len properly 05:55:40 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x4c000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) [ 1643.956310] sg_write: data in/out 393180/74 bytes for SCSI command 0xff-- guessing data in; [ 1643.956310] program syz-executor5 not setting count and/or reply_len properly 05:55:40 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000c80)='/dev/dlm-monitor\x00', 0x101000, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000dc0)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) getsockname$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000002700)=ANY=[], 0x0) openat$cgroup_type(r2, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r3, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0x1, 0x7f0f}}}, 0x118) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x20032600) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x4001fc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) fstat(r2, &(0x7f0000000500)) getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0x1, &(0x7f0000000840)=[0x0]) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) getegid() getuid() fstat(r1, &(0x7f00000014c0)) getuid() getresgid(&(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80)) 05:55:40 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x80000, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) r3 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x201) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r3, &(0x7f0000000140)="9ad620d10b5c86ff4c532cb66ed2b31bb8ea710925cad22f31d6ece5d4ab01c68499a8eabbcca2a21d4eec88f4ff8d600ded9d66330a110905c1b4e44cb9518362dce6e94a6cb0b6576d5cb60a75d5cbd6f60865f7a4c839a823b268bf7a0df45aa6cf5ad3659bd4b41db3f61dc5a276bad51814ce99a38829bcf04f35187b4c577ef427ff2d148d20268cdd1bc7eaad1c31e2a272089697c6ed36ac4549f2a3be69015e20b3341a42f92c5c89060eca11186f13207b9891f98588dbf408bddbccb3422a8b6471f17c30c710a69370361b4f7e5fcdea80", &(0x7f0000000240)="592d6466f52858df46f81c44bf160130992eacd413ec52085af4316e5d70c75bd10dd1be122930383bef4c47207c550c6951c0c6bc9223aa6fd726bc57827cafae6fdf7a139fee3c885dc2d582ef1438453704", 0x2}, 0x20) ftruncate(r3, 0x1000000) sendfile(r2, r3, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r3, 0x4008ae48, &(0x7f00000002c0)=0x10000) 05:55:40 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x4c000000}]}, 0x78) 05:55:40 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x8000a0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:40 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0xd00, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:40 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfb, 0x80}, 0xc) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) fcntl$setlease(r0, 0x400, 0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000400)={0x2, 0x6}, 0x2) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000500)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10400}, 0xc, &(0x7f0000000380)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x48000}, 0x800) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r2, 0x800442d4, &(0x7f0000000240)=0x1ff) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r5 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$BLKTRACESTART(r5, 0x1274, 0x0) ioctl$PPPOEIOCSFWD(r4, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000000)={[], 0x1, 0xbd, 0x279d, 0x0, 0x0, r3}) ioctl$BLKTRACESTOP(r5, 0x1275, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r6, &(0x7f00000007c0)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0xfffffffffffffd77) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r6, &(0x7f0000002700)=ANY=[], 0x0) 05:55:40 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}]}, 0x78) 05:55:40 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x74, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:40 executing program 3: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r2 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1) ftruncate(r2, 0x1000000) sendfile(r1, r2, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040), &(0x7f0000000080)=0x4) 05:55:40 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x6800}]}, 0x78) 05:55:40 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000002700)=ANY=[], 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$cgroup_subtree(r1, &(0x7f0000000dc0)=ANY=[@ANYPTR64=&(0x7f0000000c80)=ANY=[@ANYPTR64=&(0x7f0000000b00)=ANY=[@ANYPTR, @ANYRES64], @ANYPTR64=&(0x7f0000000c40)=ANY=[@ANYPTR, @ANYPTR, @ANYRESDEC=r1], @ANYBLOB="97a0cb1c06c380482d90c47c06cd1f0467858b2b3a7dd0cbe7be326a86c63a", @ANYRESDEC=r3, @ANYRESDEC=r2], @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r3], 0xffffffffffffff80) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000480)) fstat(r1, &(0x7f0000000500)) getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0x1, &(0x7f0000000840)=[0x0]) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f00000002c0)=0xe8) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c00), &(0x7f00000007c0)=0x37a) getegid() getuid() fstat(r0, &(0x7f00000014c0)) getuid() getresgid(&(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80)) 05:55:40 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r2 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1) ftruncate(r2, 0x1000000) io_setup(0x1000, &(0x7f0000000040)=0x0) io_submit(r3, 0x6, &(0x7f0000000780)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3, r2, &(0x7f0000000140)="fb00151475417408343a968532e0bc72fa73367bb77897b5431fa430d4722dc3807ed074346c2bb87707724d1d689810dedececd084352e5f2ef54ffa527742903464af2bfc49e3ad871a04e565edcea9cb2917fb6ebb61e5f0d87925c5c022eca94a7a38ea04a424087f86537f34dd8f6877dbc3dcba86abf6f38e2f8d214bb67bec71184c315ca71b4686a86edf595be24ecd551", 0x95, 0x1, 0x0, 0x1, r0}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x80000000, r2, &(0x7f0000000200)="3fa8d2cb8e83f8c67285ed832ec64470e75afb91419a2b0c530f4bfa9dcfc6e38ff768832490456de9fa039ec62b2c0568c872a72ca07645b241e4573671a45d03d51af28e8b6218a1fe8d57c3bff32efdc0f5e1c031d98d248183387a4ef7d1c67aac2e68853aa1f8b140597fc0b7e34a5a740404d2525550b767e4578d704b6ba9ae58947d51af4555f234fbc2", 0x8e, 0x2, 0x0, 0x0, r1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x7, 0x3ff, r0, &(0x7f0000000300)="7e7065c02594d97d285a14700140575e06d4a983bd1f18753ec8b7b512fc854ea25ee8e5891a3cb5e3647a0a0bee93f2799ad37e2e7ab30a410804fe626410a5d94a37b8146f67e4ac62ee2d3646ba1a6ac61ca71f3f3c35fe6b055e621469a0774ad15ee7df01462294ba3d3963e83d872d5a7e88078cd39997d56cefbba0bcaad0cf265159f44cb40b48d066d717333f66f1b8b5268cc928c101ddd79f61ec9340a0af6cf5ceb05e106462930cdc74c09a23a05ff682590ecf212d2750caaa26bd5d6a9e0e463ff22536d9c2bfe1bb23cd80be48e07b5631e609ccc57c34f8eff56f", 0xe3, 0x1000, 0x0, 0x0, r2}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x8, 0x100000001, r1, &(0x7f0000000440)="60a801ab7644cce7bca624cdfe69341ab1ddf2a6e1779d2c8ec148ff4545736d1ade85a51db8294bd1ed453a05d27a94962c802db6eecc6d21a7d3b879af3363bcf5c0e5c63df318ede3b3a85255c140fb418cdcb76e00258643bae9808a9249e8e5fe6dc036bf8a7f7586636b9656614296ffc78d9cb2886c0692cd9c350b77a4a446f46b034b1c56454eff3ff3dcb0367bcebda47771da85685223686ea57bbd21465f23682add0f732e72c04e142ea194650b2f3264bc40354c939329d87dc4cfbb2c653b8a03d6695ac9befced3459a18f4081fbe47c303af5c3fd05eec54a839674ac5fbe252d98153d3f3d6ada38", 0xf1, 0x7ff, 0x0, 0x3, r1}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x5, 0xffff, r2, &(0x7f0000000580)="7d4cbe2117650b52f7abb3caf37c46282c56d2b6bed9c48dde399b0ad89027df7a36c7672fdcb7032fb8b409e2c8be77a307ec7ae06452578f6f39f26502255ceafcb094a5bf6ba74c014b477d4ee0572bebc1e2f04fbd8f822bdf4f35c9472d3b76681ca503a07fe550a8d8676bd0809dd98bc9fdf13e77c423e6b6565e5f494d62a404828a81b387d114df5586e857805aaf29c0e6833dee7e63a560dc7a798dd5d4b8b4a5eb66c4f20f33abdfd5ef89ccf6121505f12a3ab46cc85e9d6d3ec7b87a9da9de2971b592daf030313b83c629d41c2105b0754f2ad3eb884eef9af314de9f566d78", 0xe7, 0x7, 0x0, 0x2, r2}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x2, 0x4, r0, &(0x7f00000006c0)="ce117d7638bfce2241be6004a4c03f0ca0dc3b328b103f8b2f2124634ff5f2d306aeaece34abb25b5c830becdaafde077f96d4803bfaa64d7abed4d6642d138cdeda8866fdcdd33b21ae0c27f35a5331cb4583b21289c49f77d63e97e09c705e2ffccfd462ac3a552b21220f82320ef1", 0x70, 0x5, 0x0, 0x2, r0}]) sendfile(r1, r2, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) 05:55:40 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:41 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x80000, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) r3 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x201) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r3, &(0x7f0000000140)="9ad620d10b5c86ff4c532cb66ed2b31bb8ea710925cad22f31d6ece5d4ab01c68499a8eabbcca2a21d4eec88f4ff8d600ded9d66330a110905c1b4e44cb9518362dce6e94a6cb0b6576d5cb60a75d5cbd6f60865f7a4c839a823b268bf7a0df45aa6cf5ad3659bd4b41db3f61dc5a276bad51814ce99a38829bcf04f35187b4c577ef427ff2d148d20268cdd1bc7eaad1c31e2a272089697c6ed36ac4549f2a3be69015e20b3341a42f92c5c89060eca11186f13207b9891f98588dbf408bddbccb3422a8b6471f17c30c710a69370361b4f7e5fcdea80", &(0x7f0000000240)="592d6466f52858df46f81c44bf160130992eacd413ec52085af4316e5d70c75bd10dd1be122930383bef4c47207c550c6951c0c6bc9223aa6fd726bc57827cafae6fdf7a139fee3c885dc2d582ef1438453704", 0x2}, 0x20) ftruncate(r3, 0x1000000) sendfile(r2, r3, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r3, 0x4008ae48, &(0x7f00000002c0)=0x10000) 05:55:41 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x7}]}, 0x78) 05:55:41 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0xdc7f000000000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:41 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000002700)=ANY=[], 0x0) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0x1, 0x7f0f}}}, 0x118) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f0000000e80)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) fstat(r1, &(0x7f0000000500)) getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0x1, &(0x7f0000000840)=[0x0]) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f0000000dc0)='./file0\x00', &(0x7f0000000c80)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) getegid() getuid() fstat(r0, &(0x7f00000014c0)) getuid() getresgid(&(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80)) 05:55:41 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0xfbffffff00000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:41 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}]}, 0x78) 05:55:41 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:41 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}]}, 0x78) 05:55:41 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:41 executing program 3: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) inotify_init1(0x0) r2 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1) ftruncate(r2, 0x1000000) sendfile(r1, r2, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) 05:55:41 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000002700)=ANY=[], 0x0) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0x1, 0x7f0f}}}, 0x118) write$cgroup_subtree(r0, &(0x7f0000000e00)=ANY=[], 0xffffff68) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f00000007c0), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) fstat(r1, &(0x7f0000000500)) getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) getresuid(&(0x7f0000000300), &(0x7f0000000c80), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0x1, &(0x7f0000000840)=[0x0]) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) getegid() getuid() fstat(r0, &(0x7f00000014c0)) getuid() getresgid(&(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80)) 05:55:41 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000140)={@in6={0xa, 0x4e20, 0x80000001, @mcast1, 0x40}, {&(0x7f0000000040)=""/52, 0x34}, &(0x7f0000000080), 0x2}, 0xa0) r2 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r3 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40042409, 0x1) ftruncate(r3, 0x1000000) sendfile(r2, r3, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) 05:55:42 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r2 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1) ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f0000000040)={0x10000, 0x95}) ftruncate(r2, 0x1000000) sendfile(r1, r2, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) 05:55:42 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x300000000000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:42 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x6000}]}, 0x78) 05:55:42 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x20000000000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:42 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000}]}, 0x78) 05:55:42 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0xa0008000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:42 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}]}, 0x78) 05:55:42 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x31000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:42 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}]}, 0x78) 05:55:42 executing program 3: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) inotify_init1(0x0) r2 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1) ftruncate(r2, 0x1000000) sendfile(r1, r2, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) 05:55:42 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000002700)=ANY=[], 0x0) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0x1, 0x7f0f}}}, 0x118) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) fstat(r1, &(0x7f0000000500)) getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0x1, &(0x7f0000000840)=[0x0]) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f00000007c0), &(0x7f0000000b80), &(0x7f0000000bc0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) getegid() getuid() fstat(r0, &(0x7f00000014c0)) getuid() getresgid(&(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80)) 05:55:42 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4c000000, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:43 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0xc822, 0x400040) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, 0x0, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r3 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40042409, 0x1) connect(r2, &(0x7f0000000140)=@in={0x2, 0x4e24, @broadcast}, 0x80) getpeername$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, &(0x7f0000000200)=0x10) ftruncate(r3, 0x1000000) sendfile(r2, r3, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x400, 0x0) 05:55:43 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x7a}]}, 0x78) 05:55:43 executing program 1: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x1300}]}, 0x78) 05:55:43 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x0, 0x6c000000, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:43 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x0, 0xa00000000000000, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:43 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}]}, 0x78) 05:55:43 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000040)={0x0, @aes256}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r2 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1) ftruncate(r2, 0x1000000) sendfile(r1, r2, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) 05:55:43 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000002700)=ANY=[], 0x0) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0x1, 0x7f0f}}}, 0x118) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0xfffffe87) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000c80)) fstat(r1, &(0x7f0000000500)) getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0x1, &(0x7f0000000840)=[0x0]) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) getegid() getuid() fstat(r0, &(0x7f00000014c0)) getuid() getresgid(&(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80)) 05:55:43 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x0, 0x6000000000000000, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:43 executing program 3: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r3 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) ftruncate(r3, 0x1000000) sendfile(r2, r3, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) 05:55:43 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x4c}]}, 0x78) 05:55:43 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:43 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0xc822, 0x400040) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, 0x0, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r3 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40042409, 0x1) connect(r2, &(0x7f0000000140)=@in={0x2, 0x4e24, @broadcast}, 0x80) getpeername$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, &(0x7f0000000200)=0x10) ftruncate(r3, 0x1000000) sendfile(r2, r3, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x400, 0x0) 05:55:43 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffff7f, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:43 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x6}]}, 0x78) 05:55:43 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000002700)=ANY=[], 0x0) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0x1, 0x7f0f}}}, 0x118) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) fstat(r1, &(0x7f0000000500)) getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0x1, &(0x7f0000000840)=[0x0]) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) getegid() getuid() fstat(r0, &(0x7f00000014c0)) getuid() getresgid(&(0x7f0000000d00), &(0x7f0000000c80), &(0x7f00000007c0)) 05:55:44 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}]}, 0x78) 05:55:44 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x0, 0xa000000, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:44 executing program 1: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x6c000000}]}, 0x78) 05:55:44 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x300}]}, 0x78) 05:55:44 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7a00, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:44 executing program 3: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000000140)) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r2 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1) ftruncate(r2, 0x1000000) sendfile(r1, r2, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) 05:55:44 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000002700)=ANY=[], 0x0) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0x1, 0x7f0f}}}, 0x118) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) fstat(r1, &(0x7f0000000500)) getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0x1, &(0x7f0000000840)=[0x0]) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) getegid() r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) 05:55:44 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:44 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0xc822, 0x400040) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, 0x0, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r3 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40042409, 0x1) connect(r2, &(0x7f0000000140)=@in={0x2, 0x4e24, @broadcast}, 0x80) getpeername$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, &(0x7f0000000200)=0x10) ftruncate(r3, 0x1000000) sendfile(r2, r3, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x400, 0x0) 05:55:44 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x4000, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000140)) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f00000001c0)={0x1, 0x7, 0x5, 0x0, 0x0, [{r1, 0x0, 0x89de}, {r0, 0x0, 0x6}, {r1, 0x0, 0x4}, {r1, 0x0, 0xffc0000000000}, {r1, 0x0, 0x70f7}]}) r2 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r3 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40042409, 0x1) r4 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000280), &(0x7f00000002c0)=0x4) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000180)=0x81, 0x8) ftruncate(r3, 0x1000000) sendfile(r2, r3, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) 05:55:44 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x48}]}, 0x78) 05:55:44 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4800000000000000, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:44 executing program 2: socketpair(0xfffffffffffffffe, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000002700)=ANY=[], 0x0) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0x1, 0x7f0f}}}, 0x118) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000c80), &(0x7f0000000340)=0xfffffffffffffe01) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) fstat(r1, &(0x7f0000000500)) getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0x1, &(0x7f0000000840)=[0x0]) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) getegid() fstat(r0, &(0x7f00000014c0)) getuid() getresgid(&(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80)) [ 1648.700665] sg_write: 79 callbacks suppressed [ 1648.701970] sg_write: data in/out 393180/74 bytes for SCSI command 0xff-- guessing data in; [ 1648.701970] program syz-executor5 not setting count and/or reply_len properly [ 1648.711679] sg_write: data in/out 393180/74 bytes for SCSI command 0xff-- guessing data in; [ 1648.711679] program syz-executor5 not setting count and/or reply_len properly [ 1648.741294] sg_write: data in/out 196572/74 bytes for SCSI command 0xff-- guessing data in; [ 1648.741294] program syz-executor4 not setting count and/or reply_len properly 05:55:45 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f00000000}]}, 0x78) [ 1648.878621] sg_write: data in/out 393180/74 bytes for SCSI command 0xff-- guessing data in; [ 1648.878621] program syz-executor5 not setting count and/or reply_len properly [ 1648.912588] sg_write: data in/out 393180/74 bytes for SCSI command 0xff-- guessing data in; [ 1648.912588] program syz-executor5 not setting count and/or reply_len properly 05:55:45 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x600}]}, 0x78) [ 1648.923015] sg_write: data in/out 196572/74 bytes for SCSI command 0xff-- guessing data in; [ 1648.923015] program syz-executor4 not setting count and/or reply_len properly 05:55:45 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000002700)=ANY=[], 0x0) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x2000) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0x1, 0x7f0f}}}, 0x118) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000c80)) fstat(r1, &(0x7f0000000500)) getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f0000000480)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0x37, &(0x7f0000000840)) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) getegid() getuid() fstat(r0, &(0x7f00000014c0)) getuid() getresgid(&(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80)) 05:55:45 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) [ 1649.037926] sg_write: data in/out 393180/74 bytes for SCSI command 0xff-- guessing data in; [ 1649.037926] program syz-executor5 not setting count and/or reply_len properly 05:55:45 executing program 3: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$VIDIOC_S_FBUF(r0, 0x4030560b, &(0x7f0000000040)={0x10, 0x4, &(0x7f0000000140)="dfe55c8951dddec340f2fb8cd8f7bd735f4e310cdb3060881063e91e2e407ea687a8a027c53e931f29e8a27c984e2878ffafddaecd81be07c11e7f71c15184f44489b67a21a855db7ff0f574db2fa37587cbad19fadaf9ee6f68b36d04c149e24f517dc6f86146076e016732798b8630a6eb77595e38c1ea1fd823253c3111d2f926817211b6537a23b9a861dde317a476343a2252730bd0977f6dd8bbc95eecd3876ba17cb817e6c4f0b41b38d8d295bf72b8b5f5b1cb0d7610c65a2c40c2", {0x80000000, 0x5ef, 0x584e4f53, 0xd, 0x4693, 0x100000000, 0x5, 0x3d}}) r2 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x4) ftruncate(r2, 0x5000000) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x8, 0x3ea4715d}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000240)={r3, 0x6}, &(0x7f00000002c0)=0x8) sendfile(r1, r2, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) [ 1649.090971] sg_write: data in/out 196572/74 bytes for SCSI command 0xff-- guessing data in; [ 1649.090971] program syz-executor4 not setting count and/or reply_len properly 05:55:45 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffa0008000}]}, 0x78) [ 1649.145772] sg_write: data in/out 393180/74 bytes for SCSI command 0xff-- guessing data in; [ 1649.145772] program syz-executor5 not setting count and/or reply_len properly [ 1649.166418] sg_write: data in/out 196572/74 bytes for SCSI command 0xff-- guessing data in; [ 1649.166418] program syz-executor4 not setting count and/or reply_len properly 05:55:45 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x0, 0x6c00, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:45 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r2 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x5, 0x4, &(0x7f0000000440)=[{&(0x7f0000000200)="d3f47320b6356e5ecce75c79fd56d7c242df1dc2c6e923c686d0da2a44d6c83c8f2f4b0696577c8d8b1370ce906578fdcfa54b6562adf517c43149c75dca8d95ea386520600d7eafe9a5ad80fbc212cd276c1af0bb6e3f4e5bb71fa8991cf05c1fd12615b24951af7d948dffda6713750627e85a351a80d3bc81b1292a211545d4a21c4065ad07cc", 0x88, 0x36}, {&(0x7f00000002c0)="a99fd7fa6fb023cddf506c44b0bc39ea27291111cb664f553da660114f6bb75a459f77cbdc1f701c72d30f677f0720837e98e78c4c7ba62dceca2e4245d5040bc4624a84c5306c5073caa9db537612c091cccf0e947531631f49df51243dbc2acf63a1e58774887b7ddec8d5c1a0c17c5ee7e74058871577dbc0dd3fca07b277c7336ff47d3f973b0fa883b8ce2ca24821801f1eae41", 0x96, 0x9}, {&(0x7f0000000380)="8a0fed63cbc6307611e42eb17e993ca6a0c767375e2446684e124f148bd5b12c96c7c0342bfc30d78c3402fb835d61f1ca6d4a4aaeeada1f0344a7e49734e9fa589d10b45928463b03a58b7494e7608d41a426fa6cd6e3e71d325d4c0a3635bc8fd1981dcb9bd73fb11e98871869c2a4557c87233215a6d8fba8c55b5f6c77cf69f2293175b3920023fc31905b49679c4406022dea2d1652114945b401af7cb9e4b6a73a07eb103301b4d857f6db3b6fa527e803c59a687f", 0xb8}, {&(0x7f00000012c0)="b28c3efc1bd2558ecc6959d7be47ca9957cbf7577e8a7f117e03c2ccd3a6c492e9d39a7f7bd60d5fe530e2ad3315a4454025070795886f12692150a47d1c543ef570e13131f97a3faaba7e29186d37f29b426abe0a59c03aaaec35916add456d11ad2adb76d13f23624313da9940688a99b569bb3354e2319e35581b5f7580b439b40c4c680c74d4fee58a14820fdc0ab236e8cc5cbaef7fc2c98fb8fc43254cd98a11497160cf84d8ffe163a6146801c2527909fd3d2ba855ee9ac34508142bd4727ce8a113ed83e626575fe504f889682c89c44f4727fde4afa191bf9035b07a124a2eea8720489625cdcbf7dd2bd192ffb958c37a6c9918ffd4caad0e3e8188ff3bd188dbbf0a19a2b0ee4635063e55eb7766252ce421f51cbe977d1f581a050e263cf6f5565b31ef1f34a0e20e449a0a561917636259db8c5eb1776257e91a4530cb6ae00c3542d671c36f26f7a8b5083173fe01070eb4dc1e9d73f8bf5c2f586c3a21ac3f47af3267b26f32b3070ed22a88c35e1198ab77bbef9b767f33914c2d30efa3485f71367068c4e22e4fe0dcfc2ecd872a23162e9df4cbdb299495c1234b9723ea6691a7f74137957fcbeca1f149a896a637d3eb4ef6ee7cc595978a12ae35fa6e023589f19647a36906f542bdc7978cee0d862ace3bf719edf3e2053c3d1d778e6301893b1626a6f1c2f21e38459bc16a0765c9831ad62d13e8606397d6245f51ac4a36985ce316d0e3d604865f049d829805c1680b4db3acd6a74814a9dbd8bfe445f24e4ff2c686f55e0b115326240ba86d7b35d4354f5ec72951b191210374955b8f64b5a8539ec68f422e349105488c1751cc3a85fdbfa934f3044d45538fd4780eb3dce43d92172726afeac5a1bebe4b71ff3a5834c59ddaa852a65ed0bef6c88d24ef043fbcc0589853c3b85fb5b280c1dbed84192023c0c20d2e2748c6d5de9457b66203cdc5d700802ea5575e9453c638611f7c039179177d681ae8ba097be6c6e73657065e4a00454602172c0d388ea5500bc857a3ba028f25d40b61ecf2103f504bd324a029cad299f70df7512c914237594bf2ca4d0468aaa56a454306472c292f3e2ed63ada6d95145007a79be5fade64f841a55553ed2873f22168bf5d204e10463c1403300c63f003d6a394e6830edf28770108a839fcdb466ca2ce3a462cb26120f1c6e2a9750c8e9c8c95305a12c4e6d526c6cb13b610510f612ec740126f8c3b1594ac5a297a2a7485f137a630fc3d5797254e63a5e01bfcf0ad6ba69f1d667860a730c26a09c12a9983263e9c515b29d7058964bea3c494f888f2854a147cc2d62cf2350b2f2e577bb2fc32caae225ffc1d433aa1dae49f0dc7ba78a794d2831164a4a040c62c80658036d5615eb68a97aa783035ea4b779d43a8f769333917387fb7305cacff2f771b8f050a2c7468ba624d166abce27488f823d279ccd916df6c3f4d11404ca1182f553d1ba5f4d4c5604d88a39083533d308c7b4181cefe37e7131a84b561ffa8928d981767fe391f1a3f6e2adb7e66d72dcffda9b5d0eb692040eed4bd464ed26b51551c59c54981545eb9ced45e3ae6c32e8c3d2894c9ac2b4d2a185492e9152297d38ec51c63e35da95536023a0fb977408699f78333b6a237a28ac9ecc46a6be33fdcef7c2ea1b159c2e46d7e578529e7dce6f0ef22b91a34bdf5c3eb51ac4a542c0b48d426f6c9303f7b5fbf03cf8a65d9160840398723cc2eff4299a3ea7fc6f5d1db5a6f5dbab64aff11852348f3a525d9a11b76e230fe3be994a0fef85f1e957c83545dd7fa8de558a573d40d0b7245680ef9393fbae27cbcc21a76c74f3085f1f5d06b90f6e9a868f9fb561cfef53d7472ac531fc6a6938bbabc908bccd6dd8609d971b93a7638ef90164ef1b9d1dde3eb8b9e63eaecd96538d3d09369700657f4a89b396e89eb943e028a5519987b845b889b845cc2f4ce1edb05d5ccbd0cf1366a3a1fff18759d0a76faa87243e5e3d502306614690d4539d9dea3a0fa4e66c16e843b5edc337ed1368f93a5b20ff23d106df5845bcece72090aecb583f9a0cdc516e8842eebcd47d24c7f748a679b9883e9bba3235abaa5d444f4073096d5545fd75fd686710f1b3f8950552665133854ba178e7d2054c03b1ea66f32417635caf37b6b94bcdeae289886eae569a9f9452a89c92f991587fcef860a3d3df48a6df65683f48457a161283e82c7d71ac479e1cf3497296f947a60d653d4569c2afc43fe97f7db7ed7325ad333c33f11bf2011f1706ad2e5eebf8d6981bedc0a58534600b100569547ac5bc8b73bead3300b870778bb9a2be0e01ab9aa57b421792f4efcd1e56584517119366247fe8ebf35a121321a9d2afe091e8d360b5b4de20e214ba68294e8c4a0b00c739ea30437add8a57c4db0f0c41f09fbe4facf69b78791c2543d29a22cacf0cd1a42c1223597714135ae463f6030e86f1747192db7fb674664f8595df5b58ebb358dca8e5987167a9678103bfcdfaaf5339502558f67f66c7050618dd217c0478e4b18326657830db0298a7fcaffd4e3db16f0b17d1f3cf3ba09abf8d48acc79ece3544634c4f51922b2f4c7f0444ca8047799b37434d69c857e963bf4b7c3547b78aef8b7a0df73fdd2e06f1ed52abaf1c93fc3651df80b7e56c37859c3cd99dcc727ea03919300e22dbd18b0be73aaf83d2de0a49b9c7ef12023942637fd19aee8cb27cdcd4e14a265712040e1fce50c40cd086731eedb976b092d414dfbd75f14ef46d980720c3780e8ccbb95341a7c79f598acd2e6462e67e1eff24f742293607f2af1530bee84480b477e3182bc8b2733f78c6fb6715aab4b50b65ad95bb3fd2bee2fe8627bb0713e9336d3582fb584f48cfcdec27456c9f6e1728b724fa743874065fc5c7ac73f1ed397dd0476cb87ece6f77d40073c9bf7d152177e486e43b2883566dbdf1714c450cd187fd3aa83b9a8a60c23cba094c20f067a94a1ce6a8ad2072f4b6519a6d35676125d3286bdefe3c2ab1c4b08bab18e98b65c159f5a7338088fa6c23b176c4a75484ad7d61abbb258fae717f566855e7ad9fcf572d057f259856bd0151b8fb70e870d50ed0584f62411cce50b7ee348529ab430a84b518d2979225f466a51f7edceb67d963b1e479a1f80240d8e162f78175deb56674d26a434da5e02c992c2cf0d081f7a4882f959404fdcd3eacc5cb89867e4038ab5f32c2e91e98bf7d64a5ad4e70f660e4a0dfd513309fe445a0334e7e0cbcd59882b39d5833ec107b9bb017b86574976ac3fc7f7bfb1b7f0e24b8087aa1eb88caa227d69be76b682db57023b869690877069849cad40d77172b9055bd4b4617411122fbc87ba43b1d0beeeb16fc837d0bf1a39fd9bbcb67b34a56e375aeb7e9ef0553b46b9cc74933a7b8d6d9a382c8f0cf058448361cbe61040d541c136bb2b60f0764d140ac9e92d75a2c681016d0c83cc263022f14fac56836fd1db89c89cfd3c960385c9b8ebed011e7d54a6f9e80fb6aa2185a1b60ae2aababb679344be2622d92d206352caa7c6edebc256298447f2c240b3cb7f255db9f9cc27b707466f4fc6a854f241440a0c3eb57d7325d1921d241a0a28559425179756ac47235654238e705e6b89e611169868015c45c3f135fe1f1cb2a6a3f6ac0a759e1ab8c9a09e92d3e543f9c337617c02433546eb83369233da182101d391b2dc963993bc75a052e6185db21505a88d5e8a8a3855000ef0f230dd833a9242496100160bbe112417967762fcd44ecb8272ad25736a85e7d27b4ef5676c658c920cb6087bde17415733249b759037dd5955156cb975d306fd9a19b49e8bf834f03768506bf8de8afc72953c972202cc96cc046147b77fc0e7b34f8d83697a86b87a93f4016c21174651e3c0b8225457f304933ead00707e1cc04515cad72822a0eae134268076a0782d11c9e60fdd6c41061d15bc8b3c9360928e6070258c5da7f3e526bf765ebb96477a5192a68c12e54ed34282429def420f946bfa9f15892ef55457c393e99669d97e1e7b3965c6b9139518623ac2fadee2b0b82ec51ff0f9e4e747c0fbdeb065231d6610f74c2e6699ebfd48ddc973f285f016a20c19398f6d2a58e3c1813ae37431f2e43df694bdcfb84a8cb8fed81bd6472f53de20ce522d9166b21d8d025191f1047843c367c819a2468feb489cdd0574fb0ce84a3d382e0a76e0ca8803c284545c666e4ae7e55f009f212b121788972f4bb7cbc77104f1b88200370dba07a17fc320bde507f352b2bf830e5d7a5ccab2afa7c9632a99b43b4e690df1e7cc31cb0efff84dcbe822eb4e40a94d9dd09a1e60753c934d3d1d90e5b1bac8d397e55c464c5e26aadafc99df0fce2d09dd1ce8305b755146ce4de11800a964761d6373e635a2660375f04b7ddb0b85abd61da4fd44d9f25e93e0ca9c5ed18989a333d4f1fc38d25ea677580c18521903cb6f4b72fa350fe48412e00f539d0158e350f179fcb323b1a291ca6f1bd5f67f5aff26d796dbe900095be971132d5691ac011a41f28b3f9dd19663d75235541f362baa12064bd476445e533602058b9a83f56226111290d79cc3b842cce1d879f5f362d897f9b19348e6750c5e324f29aefffa2b2005964ae3b2162ced851fe0355697e730864a7713aa5a2d9e9b4fb5ae80652840dfa6bd7faf21f4c43d13ee81e5e66a9af72d3d02507256461f34491066d6b6837809291a417fd79d307baf86e673e0b0c6e4df256ef09b4b30e6745bc1dda152b0cc444b618c8e187127803762783dbe5ec406ed562572fe52abfdd8e7e78b0d22453465b0f587289a65ea1c3193441789957a518c9d1883770eb04b45c0de198748f53257556351f08c446777bbeb19123c51a7f6e88e03046b6058d81ea210fba1a3149f744babd62835735cb94806127b3981b8dd23d330e6b9435392bb0a53793a102f5b9b14cc787d20730c04332a4c2045c61b9c044d1cbced26e647158d8d6f63013002c45c0b6bfff52e4d0a40d4e9777418c8497a887072275b0f2bf4ee1290b6f0ea19e6372dba227c72108a1ddfeb892602bf4c40d573d6424cd9e5df139c03f094825936bce13fb18d814be90d1bd2c4800fabeb825106aa949e95cdd831d72d74a9a9aa423e0d71856bb6da66f986aff69b0a58f4b1037177360b29ad29d9a5651c4bef7c98f7485cc8a06f8351f695a742f06efcd07977dfa23d347077eb6bace7b181ebcc33761b536ace16421370560cb567a9a7da5ef08d7f15b242f373c49988af427dfdd6627b035a3484de3cd21d3560cb68474eb680d97022b0dac4f575ec34b1288fc68cf01937fe4cf03fae3815255ccd11ed08b756dceeb110353671facd76bb14fe7c22ff8e97ca4c72442f1bedb76c1a3721d84adda57fda4b6afe9d9abe9c1d39625bff6a3271e3edf3efa581ba231c488e84a162b9a3a3ccf2e398c535c9d5aed9458a7827f9120f4ec6d282e5bcdb6bd2931895ccbf32ffb1062e8b21d9e8eeda1ae80ce1828c05cc0ff95e59c3a335b16412735a151a7b7333aff8dada976d0c6f63492cfe9c30ec84509500e26eadcbd5d2ca89c5d1cd33d7bda0f5e2445928a5871d5ade6787b6ddcd25dcada9d5c8cb20ae1977cfa288c734369f0b20181c4f5286030967657217458688296488e384c037c0e47a66646d821f7cfcfc8c65401654c1ae4df3476d849c7ff7e96ddf14390e6956a254909fc5598cd389fd061bf4a883e59a9e383add5b254fd9b60e78c4a2a2363f981e1a5750601326623d", 0x1000}], 0xa00050, &(0x7f00000004c0)={[{@discard='discard'}, {@noacl='noacl'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '-.'}}, {@context={'context', 0x3d, 'staff_u'}}, {@func={'func', 0x3d, 'POLICY_CHECK'}}, {@func={'func', 0x3d, 'FILE_CHECK'}}]}) ftruncate(r2, 0x1000000) sendfile(r1, r2, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) ioctl$PPPIOCSMRU(r2, 0x40047452, &(0x7f0000000040)=0x3f) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f0000000140)='./file0\x00', 0x8, 0x2) 05:55:45 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x13}]}, 0x78) 05:55:45 executing program 2: socketpair(0xffffffffffffffff, 0x3, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000002700)=ANY=[], 0x0) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffdf5, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0xf}}, 0xffffffffffffff8a) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0x1, 0x7f0f}}}, 0x118) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) fstat(r1, &(0x7f0000000500)) getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) getegid() getuid() fstat(r0, &(0x7f00000014c0)) getuid() getresgid(&(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80)) 05:55:45 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x0, 0xd00, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:45 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x4000, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000140)) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f00000001c0)={0x1, 0x7, 0x5, 0x0, 0x0, [{r1, 0x0, 0x89de}, {r0, 0x0, 0x6}, {r1, 0x0, 0x4}, {r1, 0x0, 0xffc0000000000}, {r1, 0x0, 0x70f7}]}) r2 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r3 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40042409, 0x1) r4 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000280), &(0x7f00000002c0)=0x4) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000180)=0x81, 0x8) ftruncate(r3, 0x1000000) sendfile(r2, r3, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) 05:55:45 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}]}, 0x78) 05:55:45 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:46 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}]}, 0x78) 05:55:46 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) [ 1649.900536] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 05:55:46 executing program 3 (fault-call:2 fault-nth:0): perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}) 05:55:46 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x74000000}]}, 0x78) 05:55:46 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7a00000000000000, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) [ 1650.200507] FAULT_INJECTION: forcing a failure. [ 1650.200507] name failslab, interval 1, probability 0, space 0, times 0 [ 1650.243679] CPU: 0 PID: 2212 Comm: syz-executor3 Not tainted 4.20.0-rc1-next-20181109+ #110 [ 1650.252253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1650.261693] Call Trace: [ 1650.264366] dump_stack+0x244/0x39d [ 1650.268068] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1650.273355] ? perf_trace_lock+0x4a7/0x7a0 [ 1650.277679] should_fail.cold.4+0xa/0x17 [ 1650.281800] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1650.286970] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1650.292547] ? check_preemption_disabled+0x48/0x280 [ 1650.297599] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1650.303217] ? memset+0x31/0x40 [ 1650.306548] ? perf_trace_lock+0x4a7/0x7a0 [ 1650.310827] ? find_held_lock+0x36/0x1c0 [ 1650.315034] ? perf_trace_sched_process_exec+0x860/0x860 [ 1650.320525] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1650.326100] ? check_preemption_disabled+0x48/0x280 [ 1650.331175] __should_failslab+0x124/0x180 [ 1650.335453] should_failslab+0x9/0x14 [ 1650.339287] __kmalloc_track_caller+0x2d1/0x760 [ 1650.343989] ? __fget+0x4aa/0x740 [ 1650.347476] ? lock_downgrade+0x900/0x900 [ 1650.351693] ? check_preemption_disabled+0x48/0x280 [ 1650.356835] ? snd_ctl_ioctl+0x51f/0x1110 [ 1650.361058] memdup_user+0x2c/0xa0 [ 1650.364637] snd_ctl_ioctl+0x51f/0x1110 [ 1650.368653] ? snd_ctl_elem_add_user+0x170/0x170 [ 1650.373453] ? __fget+0x4d1/0x740 [ 1650.376992] ? ksys_dup3+0x680/0x680 [ 1650.380778] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1650.385782] ? snd_ctl_elem_add_user+0x170/0x170 [ 1650.390598] do_vfs_ioctl+0x1de/0x1790 [ 1650.394563] ? ioctl_preallocate+0x300/0x300 [ 1650.399007] ? __fget_light+0x2e9/0x430 [ 1650.403013] ? fget_raw+0x20/0x20 [ 1650.406507] ? __sb_end_write+0xd9/0x110 [ 1650.410611] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1650.416188] ? fput+0x130/0x1a0 [ 1650.419509] ? do_syscall_64+0x9a/0x820 [ 1650.423512] ? do_syscall_64+0x9a/0x820 [ 1650.427539] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 1650.432166] ? security_file_ioctl+0x94/0xc0 [ 1650.436631] ksys_ioctl+0xa9/0xd0 [ 1650.440127] __x64_sys_ioctl+0x73/0xb0 [ 1650.444061] do_syscall_64+0x1b9/0x820 [ 1650.447981] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1650.453429] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1650.458388] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1650.463270] ? trace_hardirqs_on_caller+0x310/0x310 [ 1650.468326] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1650.473379] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1650.478436] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1650.483332] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1650.488553] RIP: 0033:0x457569 [ 1650.491770] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1650.510708] RSP: 002b:00007f91dc1eac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1650.518462] RAX: ffffffffffffffda RBX: 00007f91dc1eac90 RCX: 0000000000457569 [ 1650.525774] RDX: 0000000020000400 RSI: 00000000c4c85512 RDI: 0000000000000004 [ 1650.533079] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1650.540417] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f91dc1eb6d4 [ 1650.547723] R13: 00000000004c8db0 R14: 00000000004d1b20 R15: 0000000000000005 05:55:46 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x7a000000}]}, 0x78) 05:55:46 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4c00000000000000, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:47 executing program 1 (fault-call:2 fault-nth:0): perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000400)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}}) 05:55:47 executing program 0 (fault-call:8 fault-nth:0): r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r3 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) fadvise64(r1, 0x17, 0x4000, 0x2) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) ftruncate(r3, 0x1000000) sendfile(r2, r3, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) 05:55:47 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:47 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}]}, 0x78) 05:55:47 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000002700)=ANY=[], 0x0) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0x1, 0x7f0f}}}, 0x118) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) fstat(r0, &(0x7f0000000e40)) getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0x1, &(0x7f0000000840)=[0x0]) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f0000000500)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) getegid() getuid() fstat(r0, &(0x7f00000014c0)) getuid() getresgid(&(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80)) 05:55:47 executing program 3 (fault-call:2 fault-nth:1): perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}) [ 1650.891414] FAULT_INJECTION: forcing a failure. [ 1650.891414] name failslab, interval 1, probability 0, space 0, times 0 [ 1650.908456] CPU: 1 PID: 2233 Comm: syz-executor1 Not tainted 4.20.0-rc1-next-20181109+ #110 [ 1650.917023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1650.926420] Call Trace: [ 1650.929060] dump_stack+0x244/0x39d [ 1650.932743] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1650.937990] ? perf_trace_lock+0x4a7/0x7a0 [ 1650.942285] should_fail.cold.4+0xa/0x17 [ 1650.946398] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1650.951537] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1650.957116] ? check_preemption_disabled+0x48/0x280 [ 1650.962174] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1650.967768] ? memset+0x31/0x40 [ 1650.971096] ? perf_trace_lock+0x4a7/0x7a0 [ 1650.975391] ? find_held_lock+0x36/0x1c0 [ 1650.979538] ? perf_trace_sched_process_exec+0x860/0x860 [ 1650.985050] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1650.990646] ? check_preemption_disabled+0x48/0x280 [ 1650.995714] __should_failslab+0x124/0x180 [ 1650.995744] should_failslab+0x9/0x14 [ 1650.995765] __kmalloc_track_caller+0x2d1/0x760 [ 1650.995785] ? __fget+0x4aa/0x740 [ 1650.995810] ? lock_downgrade+0x900/0x900 [ 1650.995834] ? check_preemption_disabled+0x48/0x280 [ 1651.003912] ? snd_ctl_ioctl+0x51f/0x1110 [ 1651.003945] memdup_user+0x2c/0xa0 [ 1651.003971] snd_ctl_ioctl+0x51f/0x1110 [ 1651.003999] ? snd_ctl_elem_add_user+0x170/0x170 [ 1651.004031] ? __fget+0x4d1/0x740 [ 1651.004065] ? ksys_dup3+0x680/0x680 [ 1651.044987] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1651.049966] ? snd_ctl_elem_add_user+0x170/0x170 [ 1651.055033] do_vfs_ioctl+0x1de/0x1790 [ 1651.058967] ? ioctl_preallocate+0x300/0x300 [ 1651.063420] ? __fget_light+0x2e9/0x430 [ 1651.067426] ? fget_raw+0x20/0x20 [ 1651.070930] ? __sb_end_write+0xd9/0x110 [ 1651.075035] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1651.080607] ? fput+0x130/0x1a0 [ 1651.083924] ? do_syscall_64+0x9a/0x820 [ 1651.087929] ? do_syscall_64+0x9a/0x820 [ 1651.091957] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 1651.096579] ? security_file_ioctl+0x94/0xc0 [ 1651.101030] ksys_ioctl+0xa9/0xd0 [ 1651.104523] __x64_sys_ioctl+0x73/0xb0 [ 1651.104553] do_syscall_64+0x1b9/0x820 [ 1651.104576] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1651.104601] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1651.104620] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1651.104647] ? trace_hardirqs_on_caller+0x310/0x310 [ 1651.104669] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1651.112464] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1651.112499] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1651.112537] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1651.152779] RIP: 0033:0x457569 [ 1651.156010] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1651.174953] RSP: 002b:00007feea3d35c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1651.182698] RAX: ffffffffffffffda RBX: 00007feea3d35c90 RCX: 0000000000457569 05:55:47 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}) 05:55:47 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00}]}, 0x78) 05:55:47 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x6800000000000000}]}, 0x78) 05:55:47 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000}]}, 0x78) 05:55:47 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000002700)=ANY=[], 0x0) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r2, 0xffffffffffffff97, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0x1, 0x7f0f}}}, 0x118) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) lstat(&(0x7f00000007c0)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) fstat(r1, &(0x7f0000000500)) getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0x1, &(0x7f0000000840)=[0x0]) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000380)=0xe8) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) getegid() getuid() fstat(r0, &(0x7f00000014c0)) getuid() getresgid(&(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80)) [ 1651.190488] RDX: 0000000020000400 RSI: 00000000c4c85512 RDI: 0000000000000004 [ 1651.197787] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1651.205077] R10: 0000000000000000 R11: 0000000000000246 R12: 00007feea3d366d4 [ 1651.212367] R13: 00000000004c8db0 R14: 00000000004d1b20 R15: 0000000000000005 05:55:47 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) [ 1651.244657] FAULT_INJECTION: forcing a failure. [ 1651.244657] name failslab, interval 1, probability 0, space 0, times 0 [ 1651.356156] CPU: 0 PID: 2243 Comm: syz-executor0 Not tainted 4.20.0-rc1-next-20181109+ #110 [ 1651.364706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1651.374078] Call Trace: [ 1651.376691] dump_stack+0x244/0x39d [ 1651.380390] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1651.385645] ? vprintk_func+0x85/0x181 [ 1651.389568] should_fail.cold.4+0xa/0x17 [ 1651.393649] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1651.398771] ? lockdep_hardirqs_on+0x3bb/0x5b0 05:55:47 executing program 1 (fault-call:2 fault-nth:1): perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000400)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}}) [ 1651.403366] ? retint_kernel+0x2d/0x2d [ 1651.403400] ? find_held_lock+0x36/0x1c0 [ 1651.411378] ? aa_file_perm+0x469/0x1060 [ 1651.411400] ? find_held_lock+0x36/0x1c0 [ 1651.411435] ? perf_trace_sched_process_exec+0x860/0x860 [ 1651.411460] ? refcount_inc_not_zero_checked+0x1e5/0x2f0 [ 1651.411484] __should_failslab+0x124/0x180 [ 1651.411505] should_failslab+0x9/0x14 [ 1651.411521] kmem_cache_alloc_trace+0x2d7/0x750 [ 1651.411540] ? aa_file_perm+0x490/0x1060 [ 1651.411564] alloc_pipe_info+0x164/0x5d0 [ 1651.443259] ? aa_path_link+0x5e0/0x5e0 [ 1651.443283] ? pipe_read+0x940/0x940 [ 1651.451457] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 1651.451477] ? common_file_perm+0x236/0x7f0 [ 1651.451495] ? find_held_lock+0x36/0x1c0 [ 1651.451518] splice_direct_to_actor+0x6fc/0x8f0 [ 1651.451537] ? pipe_to_sendpage+0x400/0x400 [ 1651.451560] ? apparmor_file_permission+0x24/0x30 [ 1651.451575] ? do_splice_to+0x190/0x190 [ 1651.451592] ? security_file_permission+0x1c2/0x220 [ 1651.451612] ? rw_verify_area+0x118/0x360 [ 1651.451633] do_splice_direct+0x2d4/0x420 [ 1651.503691] ? splice_direct_to_actor+0x8f0/0x8f0 [ 1651.508537] ? apparmor_file_permission+0x24/0x30 [ 1651.513393] ? rw_verify_area+0x118/0x360 [ 1651.517532] do_sendfile+0x62a/0xe20 [ 1651.521259] ? do_compat_pwritev64+0x1c0/0x1c0 [ 1651.525847] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1651.531409] ? _copy_from_user+0xdf/0x150 [ 1651.535568] __x64_sys_sendfile64+0x15d/0x250 [ 1651.540054] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 1651.544631] do_syscall_64+0x1b9/0x820 [ 1651.548521] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1651.553911] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1651.558835] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1651.563670] ? trace_hardirqs_on_caller+0x310/0x310 [ 1651.568680] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1651.574208] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1651.579227] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1651.584120] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1651.589300] RIP: 0033:0x457569 05:55:47 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x0, 0x700000000000000, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:47 executing program 0 (fault-call:8 fault-nth:1): r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r3 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) fadvise64(r1, 0x17, 0x4000, 0x2) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) ftruncate(r3, 0x1000000) sendfile(r2, r3, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) 05:55:47 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}]}, 0x78) [ 1651.592482] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1651.611378] RSP: 002b:00007feabcab7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1651.619085] RAX: ffffffffffffffda RBX: 00007feabcab7c90 RCX: 0000000000457569 [ 1651.626368] RDX: 00000000200000c0 RSI: 0000000000000006 RDI: 0000000000000005 [ 1651.633636] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1651.641030] R10: 00000000effffdef R11: 0000000000000246 R12: 00007feabcab86d4 [ 1651.648296] R13: 00000000004c3c2a R14: 00000000004d6230 R15: 0000000000000007 05:55:47 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc0505510, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}) 05:55:48 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x0, 0xdc7f000000000000, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:48 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x1300}]}, 0x78) 05:55:48 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000400)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}}) [ 1651.846819] FAULT_INJECTION: forcing a failure. [ 1651.846819] name failslab, interval 1, probability 0, space 0, times 0 [ 1651.862483] CPU: 0 PID: 2286 Comm: syz-executor0 Not tainted 4.20.0-rc1-next-20181109+ #110 [ 1651.871016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1651.880396] Call Trace: [ 1651.880423] dump_stack+0x244/0x39d [ 1651.880445] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1651.880480] should_fail.cold.4+0xa/0x17 05:55:48 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f0000000340), 0xfffffffffffffeb7) r4 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f0000000040), 0x4) io_setup(0x9, &(0x7f0000000180)=0x0) r6 = syz_open_dev$audion(&(0x7f0000000500)='/dev/audio#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, 0x0) ioctl$VHOST_SET_LOG_FD(r6, 0x4004af07, &(0x7f00000000c0)=r6) io_cancel(r5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x400000000000, 0xffffffffffffffff, 0x0}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ppp\x00', 0x6, 0x0) ioctl$EVIOCGPROP(r7, 0xc004743e, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000800)=""/65, 0x41}], 0x1}}], 0x1, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r8, 0x4400ae8f, &(0x7f0000000ac0)={"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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000002700)=ANY=[], 0x0) [ 1651.880503] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1651.880534] ? save_stack+0x43/0xd0 [ 1651.880552] ? kasan_kmalloc+0xc7/0xe0 [ 1651.880569] ? kmem_cache_alloc_trace+0x152/0x750 [ 1651.880590] ? alloc_pipe_info+0x164/0x5d0 [ 1651.896053] ? splice_direct_to_actor+0x6fc/0x8f0 [ 1651.896073] ? do_sendfile+0x62a/0xe20 [ 1651.896090] ? __x64_sys_sendfile64+0x15d/0x250 [ 1651.896107] ? do_syscall_64+0x1b9/0x820 [ 1651.896126] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1651.896151] ? find_held_lock+0x36/0x1c0 [ 1651.935301] ? perf_trace_sched_process_exec+0x860/0x860 [ 1651.935326] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1651.935348] __should_failslab+0x124/0x180 [ 1651.959230] should_failslab+0x9/0x14 [ 1651.963055] __kmalloc+0x2e0/0x760 [ 1651.966630] ? alloc_pipe_info+0x2ce/0x5d0 [ 1651.970908] alloc_pipe_info+0x2ce/0x5d0 [ 1651.974990] ? pipe_read+0x940/0x940 [ 1651.978735] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 1651.978755] ? common_file_perm+0x236/0x7f0 [ 1651.978772] ? find_held_lock+0x36/0x1c0 [ 1651.978793] splice_direct_to_actor+0x6fc/0x8f0 [ 1651.978811] ? pipe_to_sendpage+0x400/0x400 [ 1651.978833] ? apparmor_file_permission+0x24/0x30 [ 1651.978847] ? do_splice_to+0x190/0x190 [ 1651.978883] ? security_file_permission+0x1c2/0x220 [ 1651.978904] ? rw_verify_area+0x118/0x360 [ 1652.019183] do_splice_direct+0x2d4/0x420 [ 1652.023355] ? splice_direct_to_actor+0x8f0/0x8f0 [ 1652.028210] ? apparmor_file_permission+0x24/0x30 [ 1652.033078] ? rw_verify_area+0x118/0x360 [ 1652.037241] do_sendfile+0x62a/0xe20 [ 1652.040980] ? do_compat_pwritev64+0x1c0/0x1c0 [ 1652.045591] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1652.051143] ? _copy_from_user+0xdf/0x150 [ 1652.055323] __x64_sys_sendfile64+0x15d/0x250 [ 1652.059850] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 1652.064466] do_syscall_64+0x1b9/0x820 [ 1652.068364] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1652.073745] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1652.078703] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1652.083560] ? trace_hardirqs_on_caller+0x310/0x310 [ 1652.088593] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1652.093631] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1652.098492] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1652.103716] RIP: 0033:0x457569 [ 1652.106922] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1652.125836] RSP: 002b:00007feabcab7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1652.133571] RAX: ffffffffffffffda RBX: 00007feabcab7c90 RCX: 0000000000457569 [ 1652.140855] RDX: 00000000200000c0 RSI: 0000000000000006 RDI: 0000000000000005 05:55:48 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) [ 1652.148150] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1652.155423] R10: 00000000effffdef R11: 0000000000000246 R12: 00007feabcab86d4 [ 1652.162689] R13: 00000000004c3c2a R14: 00000000004d6230 R15: 0000000000000007 05:55:48 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc1105511, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}) 05:55:48 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x5}]}, 0x78) 05:55:48 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x13000000}]}, 0x78) 05:55:48 executing program 0 (fault-call:8 fault-nth:2): r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r3 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) fadvise64(r1, 0x17, 0x4000, 0x2) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) ftruncate(r3, 0x1000000) sendfile(r2, r3, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) 05:55:48 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc0045878, &(0x7f0000000400)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}}) 05:55:48 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x0, 0x6c00000000000000, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:48 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85513, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}) 05:55:48 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000}]}, 0x78) [ 1652.447461] FAULT_INJECTION: forcing a failure. [ 1652.447461] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1652.518319] CPU: 1 PID: 2322 Comm: syz-executor0 Not tainted 4.20.0-rc1-next-20181109+ #110 [ 1652.526851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1652.536231] Call Trace: [ 1652.536260] dump_stack+0x244/0x39d [ 1652.536287] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1652.536307] ? should_fail+0x19a/0xd01 [ 1652.536329] ? write_comp_data+0x1b/0x70 [ 1652.536351] should_fail.cold.4+0xa/0x17 [ 1652.536373] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1652.564837] ? graph_lock+0x270/0x270 [ 1652.568671] ? __lock_is_held+0xb5/0x140 [ 1652.572776] ? find_held_lock+0x36/0x1c0 [ 1652.576871] ? lock_release+0xa10/0xa10 [ 1652.580857] ? perf_trace_sched_process_exec+0x860/0x860 [ 1652.586326] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1652.591091] ? __might_sleep+0x95/0x190 [ 1652.595080] __alloc_pages_nodemask+0x34b/0xdd0 [ 1652.599755] ? find_held_lock+0x36/0x1c0 [ 1652.603825] ? __alloc_pages_slowpath+0x2e30/0x2e30 [ 1652.608858] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1652.614417] ? check_preemption_disabled+0x48/0x280 [ 1652.619448] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1652.624988] ? percpu_counter_add_batch+0x141/0x190 [ 1652.630014] ? mpol_shared_policy_lookup+0xf7/0x150 [ 1652.635045] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1652.640593] alloc_pages_vma+0x11e/0x4a0 [ 1652.644668] shmem_alloc_page+0xa5/0x190 [ 1652.648733] ? shmem_swapin+0x230/0x230 [ 1652.652745] shmem_alloc_and_acct_page+0x248/0xdb0 [ 1652.657685] ? shmem_getattr+0x2c0/0x2c0 [ 1652.661794] ? hrtimer_try_to_cancel+0x21c/0x6f0 [ 1652.666584] ? perf_swevent_start_hrtimer.part.75+0x19a/0x260 [ 1652.672468] ? do_raw_spin_unlock+0xa7/0x330 [ 1652.676885] ? perf_event_namespaces_output+0x490/0x490 [ 1652.682325] ? kvm_clock_read+0x18/0x30 [ 1652.686319] ? kvm_sched_clock_read+0x9/0x20 [ 1652.690761] ? sched_clock+0x31/0x50 [ 1652.694481] ? sched_clock_cpu+0x1b/0x1b0 [ 1652.698640] shmem_getpage_gfp+0x71d/0x4840 [ 1652.702964] ? cpu_clock_event_start+0x12c/0x180 [ 1652.707743] ? shmem_add_to_page_cache+0x1950/0x1950 [ 1652.712876] ? mark_held_locks+0x130/0x130 [ 1652.717123] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1652.722661] ? perf_pmu_enable+0xd9/0x120 [ 1652.726815] ? print_usage_bug+0xc0/0xc0 [ 1652.730889] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1652.736429] ? group_sched_in+0x17d/0x400 [ 1652.740592] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1652.746137] ? flexible_sched_in+0x11f/0xc70 [ 1652.750551] ? print_usage_bug+0xc0/0xc0 [ 1652.754626] ? pinned_sched_in+0xc90/0xc90 [ 1652.758902] ? __lock_acquire+0x62f/0x4c20 [ 1652.763148] ? graph_lock+0x270/0x270 [ 1652.766961] ? __lock_acquire+0x62f/0x4c20 [ 1652.771211] ? mark_held_locks+0x130/0x130 [ 1652.775453] ? __lock_is_held+0xb5/0x140 [ 1652.779528] ? print_usage_bug+0xc0/0xc0 [ 1652.783596] ? mark_held_locks+0x130/0x130 [ 1652.787839] ? __perf_event_task_sched_in+0x897/0xb60 [ 1652.793041] ? lock_downgrade+0x900/0x900 [ 1652.797204] ? __lock_acquire+0x62f/0x4c20 [ 1652.801449] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1652.806991] ? graph_lock+0x270/0x270 [ 1652.810820] ? mark_held_locks+0x130/0x130 [ 1652.815096] ? retint_kernel+0x2d/0x2d [ 1652.818987] ? trace_hardirqs_on_caller+0xc0/0x310 [ 1652.823935] ? graph_lock+0x270/0x270 [ 1652.827738] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1652.833226] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1652.837991] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1652.842754] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 1652.847356] ? retint_kernel+0x2d/0x2d [ 1652.851251] ? trace_hardirqs_on_caller+0xc0/0x310 [ 1652.856197] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1652.860961] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1652.866415] ? lock_downgrade+0x900/0x900 [ 1652.870581] ? check_preemption_disabled+0x48/0x280 [ 1652.875601] ? graph_lock+0x270/0x270 [ 1652.879413] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1652.884184] ? retint_kernel+0x2d/0x2d [ 1652.888083] ? find_held_lock+0x36/0x1c0 [ 1652.892164] ? aa_file_perm+0x469/0x1060 [ 1652.896236] shmem_file_read_iter+0x399/0x1010 [ 1652.900861] ? shmem_mfill_atomic_pte+0x2850/0x2850 [ 1652.905893] ? aa_file_perm+0x490/0x1060 [ 1652.909961] ? percpu_ref_put_many+0x11c/0x260 [ 1652.914552] ? aa_path_link+0x5e0/0x5e0 [ 1652.918531] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1652.923325] ? retint_kernel+0x2d/0x2d [ 1652.927228] ? __lockdep_init_map+0x105/0x590 [ 1652.931728] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1652.936489] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 1652.941079] ? retint_kernel+0x2d/0x2d [ 1652.944984] ? trace_hardirqs_on_caller+0xc0/0x310 [ 1652.949934] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1652.954726] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1652.960180] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1652.965724] ? fsnotify+0x50e/0xef0 [ 1652.969360] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1652.974386] ? iov_iter_pipe+0xbb/0x2f0 [ 1652.978370] generic_file_splice_read+0x5a2/0x9a0 [ 1652.983230] ? add_to_pipe+0x360/0x360 [ 1652.987127] ? security_file_permission+0x125/0x220 [ 1652.992159] ? rw_verify_area+0x118/0x360 [ 1652.996312] ? add_to_pipe+0x360/0x360 [ 1653.000205] do_splice_to+0x12e/0x190 [ 1653.004012] splice_direct_to_actor+0x270/0x8f0 [ 1653.008700] ? pipe_to_sendpage+0x400/0x400 [ 1653.013048] ? do_splice_to+0x190/0x190 [ 1653.017042] ? do_splice_direct+0x2b4/0x420 [ 1653.021399] ? do_splice_direct+0x2be/0x420 [ 1653.025724] do_splice_direct+0x2d4/0x420 [ 1653.029890] ? splice_direct_to_actor+0x8f0/0x8f0 [ 1653.034736] ? apparmor_file_permission+0x24/0x30 [ 1653.039613] ? rw_verify_area+0x118/0x360 [ 1653.043768] do_sendfile+0x62a/0xe20 [ 1653.047534] ? do_compat_pwritev64+0x1c0/0x1c0 [ 1653.052316] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1653.057857] ? _copy_from_user+0xdf/0x150 [ 1653.062023] __x64_sys_sendfile64+0x15d/0x250 [ 1653.066526] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 1653.071127] do_syscall_64+0x1b9/0x820 [ 1653.075023] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1653.080398] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1653.085337] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1653.090194] ? trace_hardirqs_on_caller+0x310/0x310 [ 1653.095222] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1653.100261] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1653.105289] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1653.110175] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1653.115368] RIP: 0033:0x457569 [ 1653.118573] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1653.137516] RSP: 002b:00007feabcab7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1653.145249] RAX: ffffffffffffffda RBX: 00007feabcab7c90 RCX: 0000000000457569 [ 1653.152585] RDX: 00000000200000c0 RSI: 0000000000000006 RDI: 0000000000000005 [ 1653.159873] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 05:55:48 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc0405519, &(0x7f0000000400)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}}) [ 1653.167166] R10: 00000000effffdef R11: 0000000000000246 R12: 00007feabcab86d4 [ 1653.174474] R13: 00000000004c3c2a R14: 00000000004d6230 R15: 0000000000000007 05:55:49 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc0189436, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}) [ 1653.269490] kvm: pic: non byte read [ 1653.275163] kvm: pic: non byte read [ 1653.309352] kvm: pic: non byte read [ 1653.326571] kvm: pic: non byte read [ 1653.343677] kvm: pic: non byte read [ 1653.356714] kvm: pic: non byte read [ 1653.376635] kvm: pic: non byte read [ 1653.425427] kvm: pic: non byte read [ 1653.433081] kvm: pic: non byte read [ 1653.450907] kvm: pic: non byte read 05:55:49 executing program 2: socketpair(0x4, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(r0, &(0x7f0000000900)='pids.current\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000002700)=ANY=[], 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r3, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0x1, 0x7f0f}}}, 0x118) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) fstat(r1, &(0x7f0000000500)) getegid() geteuid() lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000f00)) getresuid(&(0x7f0000000640), &(0x7f00000007c0), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0x0, &(0x7f0000000840)) lstat(&(0x7f0000000840)='./file0\x00', &(0x7f0000000f80)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f0000000880), &(0x7f00000008c0), &(0x7f0000000bc0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) getegid() getuid() fstat(r2, &(0x7f0000000c80)) getuid() getresgid(&(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80)) 05:55:49 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85513, &(0x7f0000000400)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}}) 05:55:49 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:49 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r3 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) fadvise64(r1, 0x17, 0x4000, 0x2) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) ftruncate(r3, 0x1000000) sendfile(r2, r3, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) 05:55:49 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}]}, 0x78) 05:55:49 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc1105518, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}) [ 1653.710351] sg_write: 57 callbacks suppressed [ 1653.710372] sg_write: data in/out 393180/74 bytes for SCSI command 0xff-- guessing data in; [ 1653.710372] program syz-executor5 not setting count and/or reply_len properly 05:55:49 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfbffffff00000000, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:50 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00}]}, 0x78) 05:55:50 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc0045878, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}) [ 1653.847122] sg_write: data in/out 196572/74 bytes for SCSI command 0xff-- guessing data in; [ 1653.847122] program syz-executor4 not setting count and/or reply_len properly [ 1653.886825] sg_write: data in/out 196572/74 bytes for SCSI command 0xff-- guessing data in; 05:55:50 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000002700)=ANY=[], 0x0) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x3) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0x1, 0x7f0f}}}, 0x118) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) lstat(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000ec0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) fstat(r1, &(0x7f0000000500)) getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0x1, &(0x7f0000000840)=[0x0]) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) getegid() getuid() fstat(r0, &(0x7f00000014c0)) getuid() getresgid(&(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80)) 05:55:50 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0x800455d1, &(0x7f0000000400)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}}) [ 1653.886825] program syz-executor4 not setting count and/or reply_len properly [ 1653.919319] sg_write: data in/out 393180/74 bytes for SCSI command 0xff-- guessing data in; [ 1653.919319] program syz-executor5 not setting count and/or reply_len properly 05:55:50 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x0, 0xa0008000, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) [ 1653.995565] sg_write: data in/out 393180/74 bytes for SCSI command 0xff-- guessing data in; [ 1653.995565] program syz-executor5 not setting count and/or reply_len properly 05:55:50 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0x2, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}) [ 1654.088542] sg_write: data in/out 196572/74 bytes for SCSI command 0xff-- guessing data in; [ 1654.088542] program syz-executor4 not setting count and/or reply_len properly 05:55:50 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}, 0x78) [ 1654.130974] sg_write: data in/out 196572/74 bytes for SCSI command 0xff-- guessing data in; [ 1654.130974] program syz-executor4 not setting count and/or reply_len properly 05:55:50 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc1105518, &(0x7f0000000400)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}}) [ 1654.171327] sg_write: data in/out 393180/74 bytes for SCSI command 0xff-- guessing data in; [ 1654.171327] program syz-executor5 not setting count and/or reply_len properly [ 1654.263901] sg_write: data in/out 393180/74 bytes for SCSI command 0xff-- guessing data in; [ 1654.263901] program syz-executor5 not setting count and/or reply_len properly 05:55:50 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r3 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) fadvise64(r1, 0x17, 0x4000, 0x2) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) ftruncate(r3, 0x1000000) sendfile(r2, r3, &(0x7f00000000c0)=0xf1050e, 0xeffffdef) 05:55:50 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x0, 0x68000000, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:50 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc008551a, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}) 05:55:50 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000}]}, 0x78) 05:55:50 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000002700)=ANY=[], 0x0) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0x1, 0x7f0f}}}, 0x118) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000480)) fstat(r1, &(0x7f0000000500)) getegid() geteuid() getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0x1, &(0x7f0000000840)=[0x0]) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f0000000c80)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) getegid() getuid() fstat(r0, &(0x7f00000014c0)) getuid() getresgid(&(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80)) 05:55:50 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc008551c, &(0x7f0000000400)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}}) [ 1654.522469] sg_write: data in/out 196572/74 bytes for SCSI command 0xff-- guessing data in; [ 1654.522469] program syz-executor4 not setting count and/or reply_len properly 05:55:50 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:50 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc008551c, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}) 05:55:50 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x6c000000}]}, 0x78) 05:55:50 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:50 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0x5421, &(0x7f0000000400)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}}) 05:55:51 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc020660b, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}) 05:55:51 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x68000000}]}, 0x78) 05:55:51 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:51 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r3 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) fadvise64(r1, 0x17, 0x4000, 0x2) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) ftruncate(r3, 0x1000000) sendfile(r2, r3, &(0x7f00000000c0)=0xf1050c, 0xeffffdef) 05:55:51 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000002700)=ANY=[], 0x0) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0x1, 0x7f0f}}}, 0x118) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) fstat(r1, &(0x7f0000000500)) getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0x1, &(0x7f0000000840)=[0x0]) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f0000000c80), &(0x7f0000000b80), &(0x7f00000007c0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) getegid() getuid() fstat(r0, &(0x7f00000014c0)) getuid() getresgid(&(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80)) 05:55:51 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0x5460, &(0x7f0000000400)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}}) 05:55:51 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0x80045500, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}) 05:55:51 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000}]}, 0x78) 05:55:51 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7400, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:51 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0x5451, &(0x7f0000000400)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}}) 05:55:51 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc0045516, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}) 05:55:51 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x6c}]}, 0x78) 05:55:51 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:51 executing program 2: socketpair(0x0, 0x3, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000002700)=ANY=[], 0x0) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0x1, 0x7f0f}}}, 0x118) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) fstat(r1, &(0x7f0000000500)) getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0x1, &(0x7f0000000840)=[0x0]) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f0000000c80)='./file0\x00', &(0x7f0000000d00)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) getegid() getuid() fstat(r1, &(0x7f00000014c0)) getuid() getresgid(&(0x7f0000000cc0), &(0x7f00000007c0), &(0x7f0000000d80)) 05:55:51 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00000000000000}]}, 0x78) 05:55:51 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc0189436, &(0x7f0000000400)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}}) 05:55:52 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r3 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) fadvise64(r1, 0x17, 0x4000, 0x2) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) ftruncate(r3, 0x1000000) sendfile(r2, r3, &(0x7f00000000c0)=0xf10504, 0xeffffdef) 05:55:52 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:52 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0x5451, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}) 05:55:52 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000}]}, 0x78) 05:55:52 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc1105511, &(0x7f0000000400)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}}) 05:55:52 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0x1, 0x7f0f}}}, 0x118) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000c00), &(0x7f0000000800)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) fstat(r1, &(0x7f0000000500)) getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r3, 0x20000000008912, &(0x7f0000000040)="0a5c2d0240316285717070") r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r4, &(0x7f0000000040)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "ac41d1c45d71d3ed2a4182b9a6fdfebbf3550b2209895f348f8fc6716e08d1364ad5526c6e898cbb38c310d32b6a3217fa0cb9e4cafe0569942f46cde7188b"}, 0x60) getsockopt$nfc_llcp(r4, 0x118, 0x2, &(0x7f00000001c0)=""/149, 0x70a2fa) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000cc0)=0xffffffffffffffc6) getgroups(0x1, &(0x7f0000000840)=[0x0]) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)) 05:55:52 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}]}, 0x78) 05:55:52 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:52 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc1105517, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}) 05:55:52 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc020660b, &(0x7f0000000400)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}}) 05:55:52 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x0, 0xa00, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:52 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x8000a0}]}, 0x78) 05:55:53 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000002700)=ANY=[], 0x0) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0x1, 0x7f0f}}}, 0x118) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) fstat(r1, &(0x7f0000000500)) getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000c80)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0x1, &(0x7f0000000840)=[0x0]) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) getegid() getuid() fstat(r0, &(0x7f00000014c0)) getuid() getresgid(&(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80)) 05:55:53 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r3 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) fadvise64(r1, 0x17, 0x4000, 0x2) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) ftruncate(r3, 0x1000000) sendfile(r2, r3, &(0x7f00000000c0)=0xf10506, 0xeffffdef) 05:55:53 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0x40405514, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}) 05:55:53 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x4}]}, 0x78) 05:55:53 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:53 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc0045878, &(0x7f0000000400)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}}) 05:55:53 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000}]}, 0x78) 05:55:53 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3100, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:53 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0x800455d1, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}) 05:55:53 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0x2, &(0x7f0000000400)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}}) 05:55:53 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:53 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74000000}]}, 0x78) 05:55:53 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000002700)=ANY=[], 0x0) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x80000) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0x1, 0x7f0f}}}, 0x118) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) lstat(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000880)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) fstat(r1, &(0x7f0000000500)) getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0x1, &(0x7f0000000840)=[0x0]) lstat(&(0x7f0000000e80)='./file0\x00', &(0x7f0000000dc0)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) getegid() getuid() fstat(r0, &(0x7f00000014c0)) getuid() getresgid(&(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80)) 05:55:54 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00}]}, 0x78) 05:55:54 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc00455d0, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}) 05:55:54 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r3 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) fadvise64(r1, 0x17, 0x4000, 0x2) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) ftruncate(r3, 0x1000000) sendfile(r2, r3, &(0x7f00000000c0)=0xf10503, 0xeffffdef) 05:55:54 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x0, 0xdc7f, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:54 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0x40405514, &(0x7f0000000400)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}}) 05:55:54 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(r0, &(0x7f0000000c80)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000002700)=ANY=[], 0x0) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0x1, 0x7f0f}}}, 0x118) write$cgroup_subtree(r1, &(0x7f00000007c0)=ANY=[], 0x35a49a46159d7900) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) fstat(r1, &(0x7f0000000500)) getegid() geteuid() lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000dc0)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000580)=0xc) getgroups(0x1, &(0x7f0000000840)=[0x0]) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) getegid() getuid() fstat(r0, &(0x7f00000014c0)) getuid() getresgid(&(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80)) 05:55:54 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a}]}, 0x78) 05:55:54 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:54 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc0405519, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}) 05:55:54 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000940)='/dev/ppp\x00', 0x4000, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000b40)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000dc0)=ANY=[@ANYPTR64=&(0x7f0000000c80)=ANY=[@ANYRES16=r2, @ANYRESOCT=0x0, @ANYRESOCT=r1, @ANYRESOCT=r2, @ANYRES64=r2], @ANYBLOB="4dfe109bd0b7291a93c096f9f62f56d6a57759541faee57daf8107cbc0dd7729f10e42bccad2f875de9e59285e2f928adc26e063cdcd98a243f96a22ef5cce2ea255ae1adfe6d8599a0472adbec0db5c7c183870f6e708c21c875163a7d8643c620d76722de90a6857c4295db0276b22604f8f7e17345197b12958adb5870e6537865898bc51cd000000000000000000000000000000", @ANYRESOCT=r1, @ANYRESOCT=r2, @ANYRESDEC=r2], 0xeb) openat$cgroup_type(r2, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r3, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @in={0x2, 0x4e23, @multicast2}}}, 0x118) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x20032600) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x4001fc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) fstat(r2, &(0x7f0000000500)) getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x100, 0x0) ioctl$TCSETAW(r4, 0x5407, &(0x7f0000000240)={0x7ff, 0x200, 0x3, 0x80000000, 0x0, 0x1, 0x200, 0x3, 0xffff, 0xbf69}) socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x801, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = dup(r5) ioctl$DRM_IOCTL_FREE_BUFS(r6, 0x4010641a, &(0x7f0000000200)={0x0, 0x0}) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) 05:55:54 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc008551a, &(0x7f0000000400)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}}) 05:55:54 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}]}, 0x78) 05:55:54 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x0, 0x6800, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:54 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0x4020940d, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}) 05:55:55 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0x5452, &(0x7f0000000400)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}}) 05:55:55 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000002700)=ANY=[], 0x0) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0x1, 0x7f0f}}}, 0x118) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) fstat(r1, &(0x7f0000000500)) getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0x1, &(0x7f0000000840)=[0x0]) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) getegid() getuid() fstat(r0, &(0x7f00000014c0)) getuid() getresgid(&(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80)) 05:55:55 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r3 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) fadvise64(r1, 0x17, 0x4000, 0x2) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) ftruncate(r3, 0x1000000) sendfile(r2, r3, &(0x7f00000000c0)=0xf1050b, 0xeffffdef) 05:55:55 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:55 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000}]}, 0x78) 05:55:55 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0x5452, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}) [ 1658.912717] sg_write: 59 callbacks suppressed [ 1658.912733] sg_write: data in/out 393180/74 bytes for SCSI command 0xff-- guessing data in; [ 1658.912733] program syz-executor5 not setting count and/or reply_len properly [ 1658.936395] sg_write: data in/out 196572/74 bytes for SCSI command 0xff-- guessing data in; [ 1658.936395] program syz-executor4 not setting count and/or reply_len properly 05:55:55 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0x40405515, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}) 05:55:55 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x0, 0x900000000000000, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) [ 1658.962162] sg_write: data in/out 196572/74 bytes for SCSI command 0xff-- guessing data in; [ 1658.962162] program syz-executor4 not setting count and/or reply_len properly [ 1658.981684] sg_write: data in/out 393180/74 bytes for SCSI command 0xff-- guessing data in; [ 1658.981684] program syz-executor5 not setting count and/or reply_len properly 05:55:55 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a000000}]}, 0x78) 05:55:55 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0x80045500, &(0x7f0000000400)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}}) [ 1659.105265] sg_write: data in/out 196572/74 bytes for SCSI command 0xff-- guessing data in; [ 1659.105265] program syz-executor4 not setting count and/or reply_len properly 05:55:55 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0x81785501, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}) 05:55:55 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:55 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0x81785501, &(0x7f0000000400)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}}) [ 1659.198015] sg_write: data in/out 393180/74 bytes for SCSI command 0xff-- guessing data in; [ 1659.198015] program syz-executor5 not setting count and/or reply_len properly [ 1659.230414] sg_write: data in/out 393180/74 bytes for SCSI command 0xff-- guessing data in; [ 1659.230414] program syz-executor5 not setting count and/or reply_len properly 05:55:55 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000002700)=ANY=[], 0x0) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0x1, 0x7f0f}}}, 0x118) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f00000007c0)=0xfffffffffffffd42) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0x1, &(0x7f0000000840)=[0x0]) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) getegid() getuid() fstat(r0, &(0x7f00000014c0)) getuid() getresgid(&(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80)) [ 1659.336923] sg_write: data in/out 196572/74 bytes for SCSI command 0xff-- guessing data in; [ 1659.336923] program syz-executor4 not setting count and/or reply_len properly [ 1659.401109] sg_write: data in/out 196572/74 bytes for SCSI command 0xff-- guessing data in; [ 1659.401109] program syz-executor4 not setting count and/or reply_len properly 05:55:56 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r3 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) fadvise64(r1, 0x17, 0x4000, 0x2) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) ftruncate(r3, 0x1000000) sendfile(r2, r3, &(0x7f00000000c0)=0xf1050d, 0xeffffdef) 05:55:56 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}]}, 0x78) 05:55:56 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0x40049409, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}) 05:55:56 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc0505510, &(0x7f0000000400)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}}) 05:55:56 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:56 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000002700)=ANY=[], 0x0) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0x1, 0x7f0f}}}, 0x118) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) fstat(r0, &(0x7f0000000dc0)) getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0x40000000000002db, &(0x7f0000000840)=[0x0]) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) getegid() getuid() fstat(r1, &(0x7f0000000c80)) getuid() getresgid(&(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80)) 05:55:56 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500}]}, 0x78) [ 1659.838271] sg_write: data in/out 196572/74 bytes for SCSI command 0xff-- guessing data in; [ 1659.838271] program syz-executor4 not setting count and/or reply_len properly 05:55:56 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc0045878, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}) 05:55:56 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:56 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc008551b, &(0x7f0000000400)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}}) 05:55:56 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c}]}, 0x78) 05:55:56 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffa0008000, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:56 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc008551b, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}) 05:55:56 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r3 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) fadvise64(r1, 0x17, 0x4000, 0x2) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) ftruncate(r3, 0x1000000) sendfile(r2, r3, &(0x7f00000000c0)=0xf10505, 0xeffffdef) 05:55:56 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f00000007c0)={0x2, 0x0, @loopback}, &(0x7f00000004c0)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000002700)=ANY=[], 0x0) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0x1, 0x7f0f}}}, 0x118) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000dc0)) fstat(r1, &(0x7f0000000500)) getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0x1, &(0x7f0000000840)=[0x0]) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) getegid() getuid() fstat(r0, &(0x7f00000014c0)) getuid() getresgid(&(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80)) 05:55:56 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}]}, 0x78) 05:55:56 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3100000000000000, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:56 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc1105517, &(0x7f0000000400)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}}) 05:55:56 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:56 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000840)=ANY=[@ANYPTR64], 0x8) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000001c0)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000dc0)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @in={0x2, 0x4e20, @rand_addr=0x3ff8000000000}}}, 0x118) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x1) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) fstat(r1, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0x1, &(0x7f00000007c0)=[r3]) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000100)=0xc) getegid() getuid() fstat(r0, &(0x7f00000014c0)) getuid() getresgid(&(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80)) 05:55:57 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c000000}]}, 0x78) 05:55:57 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0x4020940d, &(0x7f0000000400)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}}) 05:55:57 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0x5450, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}) 05:55:57 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7400000000000000, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:57 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}]}, 0x78) 05:55:57 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0x5460, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}) 05:55:57 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c}]}, 0x78) 05:55:57 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8000a0ffffffff, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:57 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0x5450, &(0x7f0000000400)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}}) 05:55:57 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r3 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) fadvise64(r1, 0x17, 0x4000, 0x2) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) ftruncate(r3, 0x1000000) sendfile(r2, r3, &(0x7f00000000c0)=0xf1050a, 0xeffffdef) 05:55:57 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0x5421, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}) 05:55:57 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000bc0)={0x2, 0x0, @loopback}, &(0x7f0000000dc0)=0xdac14223f984cef2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000002700)=ANY=[], 0x0) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0x1, 0x7f0f}}}, 0x118) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) lstat(&(0x7f0000000cc0)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) fstat(r1, &(0x7f0000000500)) getegid() geteuid() getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0x1, &(0x7f0000000840)=[0x0]) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f0000000580), &(0x7f0000000b80), &(0x7f0000000380)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) getegid() getuid() fstat(r1, &(0x7f00000014c0)) getuid() getresgid(&(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80)) 05:55:57 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000}]}, 0x78) 05:55:57 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x0, 0xd000000, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:57 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000400)={{0xa0008000, 0x0, 0x0, 0x0, 'syz0\x00'}}) 05:55:57 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1300}]}, 0x78) 05:55:58 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0x40049409, &(0x7f0000000400)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}}) 05:55:58 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000002700)=ANY=[], 0x0) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0x1, 0x7f0f}}}, 0x472) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f00000007c0)=0x30) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) fstat(r1, &(0x7f0000000500)) getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0x1, &(0x7f0000000840)=[0x0]) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) getegid() getuid() fstat(r0, &(0x7f00000014c0)) getuid() getresgid(&(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80)) 05:55:58 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}]}, 0x78) 05:55:58 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5000000, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:58 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000400)={{0x2, 0x0, 0x0, 0x0, 'syz0\x00'}}) 05:55:58 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13}]}, 0x78) 05:55:58 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc0045516, &(0x7f0000000400)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}}) 05:55:58 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r3 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) fadvise64(r1, 0x17, 0x4000, 0x2) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) ftruncate(r3, 0x1000000) sendfile(r2, r3, &(0x7f00000000c0)=0xf10502, 0xeffffdef) 05:55:58 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fdc, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:58 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000400)={{0x100000000000000, 0x0, 0x0, 0x0, 'syz0\x00'}}) 05:55:58 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) socketpair(0x10, 0x1, 0x0, &(0x7f0000000b40)) syz_open_dev$vcsa(&(0x7f0000000b80)='/dev/vcsa#\x00', 0x7b, 0x1) syz_open_dev$dmmidi(&(0x7f0000000bc0)='/dev/dmmidi#\x00', 0xfffffffffffffff8, 0x0) syz_open_dev$dmmidi(&(0x7f0000000c80)='/dev/dmmidi#\x00', 0x3, 0x200) syz_open_dev$dspn(&(0x7f0000000e80)='/dev/dsp#\x00', 0x5, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000f00)='/dev/vbi#\x00', 0x0, 0x2) r1 = openat$cgroup_ro(r0, &(0x7f0000000f40)='pids.current\x00', 0x26e1, 0x0) getsockname$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_type(r2, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0xffffffffffffffd6, 0xfa00, {0x4000000000003, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r3, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0x1, 0x7f0f}}}, 0x118) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x20032600) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x4001fc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) fstat(r2, &(0x7f0000000500)) getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) getresuid(&(0x7f00000007c0), &(0x7f0000000680), &(0x7f0000000cc0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0x1, &(0x7f0000000840)=[0x0]) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f0000000dc0), &(0x7f0000000640), &(0x7f00000006c0)) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) getegid() getuid() fstat(r1, &(0x7f00000014c0)) getuid() getresgid(&(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80)) 05:55:58 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:58 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000a0}]}, 0x78) 05:55:58 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000400)={{0x200000000000000, 0x0, 0x0, 0x0, 'syz0\x00'}}) 05:55:58 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000002700)=ANY=[], 0x0) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x21c, @mcast1, 0x8}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0x1, 0x7f0f}}}, 0x111) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) fstat(r0, &(0x7f0000000e40)) getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000cc0), &(0x7f0000000c80)=0x1db) getgroups(0x0, &(0x7f0000000500)) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) getegid() getuid() fstat(r0, &(0x7f00000014c0)) getresgid(&(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80)) 05:55:58 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0x40405515, &(0x7f0000000400)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}}) 05:55:58 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x0, 0x500000000000000, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:58 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}]}, 0x78) 05:55:59 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000400)={{0x2000000, 0x0, 0x0, 0x0, 'syz0\x00'}}) 05:55:59 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r3 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) fadvise64(r1, 0x17, 0x4000, 0x2) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) ftruncate(r3, 0x1000000) sendfile(r2, r3, &(0x7f00000000c0)=0xf10508, 0xeffffdef) 05:55:59 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc00455d0, &(0x7f0000000400)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}}) 05:55:59 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:59 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}]}, 0x78) 05:55:59 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000400)={{0x1000000, 0x0, 0x0, 0x0, 'syz0\x00'}}) 05:55:59 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000002700)=ANY=[], 0x0) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0x1, 0x7f0f}}}, 0x118) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) fstat(r1, &(0x7f0000000500)) getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0x1, &(0x7f0000000840)=[0x0]) lstat(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000c80)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) getegid() getuid() fstat(r0, &(0x7f00000014c0)) getuid() getresgid(&(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80)) 05:55:59 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000400)={{0x8000a0, 0x0, 0x0, 0x0, 'syz0\x00'}}) 05:55:59 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:59 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}]}, 0x78) 05:55:59 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000400)={{0x2, 0x0, 0x0, 0x0, 'syz0\x00'}}) 05:55:59 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:55:59 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000002700)=ANY=[], 0x0) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0x1, 0x7f0f}}}, 0x118) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) lstat(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000dc0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) fstat(r1, &(0x7f0000000500)) getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbbf4}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x8, 0x11, [@generic="e2"]}]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x884}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x8, 0x3, 0x3e}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e21}, @FOU_ATTR_AF={0x8, 0x2, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) getgroups(0x1, &(0x7f0000000840)=[0x0]) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)) 05:56:00 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000400)={{0xffffffffa0008000, 0x0, 0x0, 0x0, 'syz0\x00'}}) 05:56:00 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3000000000000000, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:56:00 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r3 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) fadvise64(r1, 0x17, 0x4000, 0x2) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) ftruncate(r3, 0x1000000) sendfile(r2, r3, &(0x7f00000000c0)=0xf10509, 0xeffffdef) 05:56:00 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00000000000000}]}, 0x78) 05:56:00 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000400)={{0xffffff1f, 0x0, 0x0, 0x0, 'syz0\x00'}}) 05:56:00 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000002700)=ANY=[], 0x0) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0x1, 0x7f0f}}}, 0x118) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) fstat(r1, &(0x7f0000000500)) getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0x1, &(0x7f0000000840)=[0x0]) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f00000007c0)='./file0/file0\x00', &(0x7f0000000c80)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) getegid() getuid() fstat(r0, &(0x7f00000014c0)) getuid() getresgid(&(0x7f00000009c0), &(0x7f0000000d40), &(0x7f0000000980)) [ 1664.260869] sg_write: 59 callbacks suppressed [ 1664.260906] sg_write: data in/out 196572/74 bytes for SCSI command 0xff-- guessing data in; [ 1664.260906] program syz-executor4 not setting count and/or reply_len properly [ 1664.303102] sg_write: data in/out 393180/74 bytes for SCSI command 0xff-- guessing data in; [ 1664.303102] program syz-executor5 not setting count and/or reply_len properly 05:56:00 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000400)={{0x1, 0xffffffffa0008000, 0x0, 0x0, 'syz0\x00'}}) [ 1664.345555] sg_write: data in/out 196572/74 bytes for SCSI command 0xff-- guessing data in; [ 1664.345555] program syz-executor4 not setting count and/or reply_len properly [ 1664.385100] sg_write: data in/out 393180/74 bytes for SCSI command 0xff-- guessing data in; [ 1664.385100] program syz-executor5 not setting count and/or reply_len properly 05:56:00 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:56:00 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000400)={{0x8000a0ffffffff, 0x0, 0x0, 0x0, 'syz0\x00'}}) 05:56:00 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00}]}, 0x78) [ 1664.519567] sg_write: data in/out 196572/74 bytes for SCSI command 0xff-- guessing data in; [ 1664.519567] program syz-executor4 not setting count and/or reply_len properly 05:56:00 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8000a0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:56:00 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000400)={{0x1, 0x2, 0x0, 0x0, 'syz0\x00'}}) [ 1664.581775] sg_write: data in/out 196572/74 bytes for SCSI command 0xff-- guessing data in; [ 1664.581775] program syz-executor4 not setting count and/or reply_len properly [ 1664.591641] sg_write: data in/out 393180/74 bytes for SCSI command 0xff-- guessing data in; [ 1664.591641] program syz-executor5 not setting count and/or reply_len properly 05:56:00 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000002700)=ANY=[], 0x0) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x2000000007b) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0x1, 0x7f0f}}}, 0x118) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) fstat(r0, &(0x7f0000000500)) getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0x1, &(0x7f0000000840)=[0x0]) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)) mkdir(&(0x7f0000000c40)='./file0\x00', 0x80000000) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) r2 = fanotify_init(0x0, 0x0) fanotify_mark(r2, 0x11, 0x40000028, r2, 0x0) socket$inet6(0xa, 0x6, 0x3) [ 1664.680828] sg_write: data in/out 393180/74 bytes for SCSI command 0xff-- guessing data in; [ 1664.680828] program syz-executor5 not setting count and/or reply_len properly 05:56:00 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000400)={{0x0, 0xffffffffa0008000, 0x0, 0x0, 'syz0\x00'}}) [ 1664.747382] sg_write: data in/out 196572/74 bytes for SCSI command 0xff-- guessing data in; [ 1664.747382] program syz-executor4 not setting count and/or reply_len properly [ 1664.822278] sg_write: data in/out 196572/74 bytes for SCSI command 0xff-- guessing data in; [ 1664.822278] program syz-executor4 not setting count and/or reply_len properly 05:56:01 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r3 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) fadvise64(r1, 0x17, 0x4000, 0x2) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) ftruncate(r3, 0x1000000) sendfile(r2, r3, &(0x7f00000000c0)=0xf10507, 0xeffffdef) 05:56:01 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}]}, 0x78) 05:56:01 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:56:01 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000400)={{0x1, 0x100000000000000, 0x0, 0x0, 'syz0\x00'}}) 05:56:01 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000400)={{0x0, 0x200000000000000, 0x0, 0x0, 'syz0\x00'}}) 05:56:01 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:56:01 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48}]}, 0x78) 05:56:01 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000400)={{0x1, 0x8000a0ffffffff, 0x0, 0x0, 'syz0\x00'}}) 05:56:01 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000400)={{0x0, 0x100000000000000, 0x0, 0x0, 'syz0\x00'}}) 05:56:01 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000}]}, 0x78) 05:56:01 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000002700)=ANY=[], 0x0) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0x1, 0x7f0f}}}, 0x118) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000580)) fstat(r1, &(0x7f0000000500)) getegid() geteuid() getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0x1, &(0x7f0000000840)=[0x0]) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f0000000480)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) getegid() getuid() fstat(r0, &(0x7f00000014c0)) getuid() 05:56:01 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:56:02 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000280)={{{@in=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}}}, &(0x7f0000000380)=0xe8) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x100000000, 0x3, &(0x7f0000000200)=[{&(0x7f0000000140)="b8d9996227161b892a4813b7b9e2f56b7ea5d92036bcafc68794fecc287bd3304302ffa3c16b", 0x26, 0x8}, {&(0x7f0000000180), 0x0, 0x400}, {&(0x7f00000001c0)="3d159be8bef64ebd2436f49108488aa234e8deb64b06970ecb42b7e3276789bb4e1b85ab572af6dbefd6959bb4fae5dddd2a9a22594a4db11bc4b5082c", 0x3d, 0xfb}], 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB='shortname=win95,rodir,shortname=winnt,shortname=lower,iocharset=cp1251,shortname=winnt,fowner>', @ANYRESDEC=r3, @ANYBLOB='\x00\x00']) r4 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) fadvise64(r1, 0x17, 0x4000, 0x2) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) ftruncate(r4, 0x1000000) sendfile(r2, r4, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) 05:56:02 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00000000000000}]}, 0x78) 05:56:02 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000400)={{0x0, 0xa0008000, 0x0, 0x0, 'syz0\x00'}}) 05:56:02 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000400)={{0x1, 0x1000000, 0x0, 0x0, 'syz0\x00'}}) 05:56:02 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:56:02 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x0, 0x300000000000000, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:56:02 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000400)={{0x0, 0x1000000, 0x0, 0x0, 'syz0\x00'}}) 05:56:02 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800000000000000}]}, 0x78) 05:56:02 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000400)={{0x1, 0x8000a0, 0x0, 0x0, 'syz0\x00'}}) 05:56:02 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:56:02 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000002700)=ANY=[], 0x0) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0x1, 0x7f0f}}}, 0x118) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) fstat(r1, &(0x7f0000000500)) getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0x1, &(0x7f0000000840)=[0x0]) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000c80)=0x3) getegid() getuid() fstat(r0, &(0x7f00000014c0)) getuid() getresgid(&(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80)) [ 1666.248501] FAT-fs (loop0): Unrecognized mount option "fowner>18446744073709551615" or missing value 05:56:02 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000400)={{0x0, 0x8000a0, 0x0, 0x0, 'syz0\x00'}}) 05:56:03 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={r0}) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r3 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) fadvise64(r1, 0x17, 0x4000, 0x2) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000080)) ftruncate(r3, 0x1000000) sendfile(r2, r3, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) 05:56:03 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:56:03 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000400)={{0x1, 0x2000000, 0x0, 0x0, 'syz0\x00'}}) 05:56:03 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000}]}, 0x78) 05:56:03 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000400)={{0x0, 0x2, 0x0, 0x0, 'syz0\x00'}}) 05:56:03 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000002700)=ANY=[], 0x0) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000007c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0x1, 0x7f0f}}}, 0x118) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) fstat(r1, &(0x7f0000000500)) getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0x1, &(0x7f0000000840)=[0x0]) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f0000000940)='./file1\x00', &(0x7f0000000c80)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) getegid() getuid() fstat(r0, &(0x7f00000014c0)) getuid() getresgid(&(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80)) [ 1666.846353] FAT-fs (loop0): Unrecognized mount option "fowner>18446744073709551615" or missing value 05:56:03 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7a000000, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:56:03 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f00000000}]}, 0x78) 05:56:03 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000400)={{0x0, 0x8000a0ffffffff, 0x0, 0x0, 'syz0\x00'}}) 05:56:03 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000400)={{0x1, 0xfffffdfd, 0x0, 0x0, 'syz0\x00'}}) 05:56:03 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000002700)=ANY=[], 0x0) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0x1, 0x7f0f}}}, 0x118) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) lstat(&(0x7f00000007c0)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) fstat(r1, &(0x7f0000000500)) getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0x3fffffab, &(0x7f0000000840)=[0x0]) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) getegid() getuid() fstat(r0, &(0x7f00000014c0)) getuid() getresgid(&(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80)) 05:56:03 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:56:03 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4c00, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:56:03 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}]}, 0x78) 05:56:03 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000400)={{0x0, 0x2000000, 0x0, 0x0, 'syz0\x00'}}) 05:56:03 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000400)={{0x1, 0x200000000000000, 0x0, 0x0, 'syz0\x00'}}) 05:56:03 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0xffffffff, 0x2a000) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f0000000140)='./file0\x00', 0x4, 0x2, &(0x7f0000000340)=[{&(0x7f0000000180)="7f9ef0edd823924bce131e3b44dbdb48a23476de4f21e55eebdb0dac4df201867aab09fa50aa8d9517112b4c0d6cbddc4dd41895558fce20fe9809b3d8167211ffa484f88b4ce850ecb91d75e93b80512ef9985614f7dd72a4927530a70cec0574814f74c0253a1209620a3dd35208dcf6ecd4fee0230b0a99b22989166868962d82fe6b86751d974f67b0c0f7ef715679e457b14bdcbdae2cffb29b191d221fa30ccd62e19a5d080def257f63a35af05f91a4195ad5d57364fd07c4b619356a0ade", 0xc2, 0x6}, {&(0x7f0000000280)="5d418afd3b11b719bc6e407483023166bfa03babc8505778ecc807e27d5e517d4b8922f9321b6cc57320a6ab3d023b348697e7bcde9c83426fcc458c418dad5838017edb7d2538ccdf4f5a8b7e51f032c8d9de5f145d822ed285b8b209e2521435414c3300bd1641bc43bba596264b1eba546f9518d40b961bc1dc8471f9da46b671a315002d8e9a29ed97b0442edebc6b5ff6951ff82f17b58d96233c73b0a3e89474d46878e04c0a3fd861", 0xac, 0xfffffffffffffffd}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB='umask=00000000000000000000777,dir_umask=00000000000000000000004,obj_user=/dev/vbi#\x00,smackfsroot=/dev/sg#\x00,appraise,fscontext=unconfinedRu,\x00']) r3 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) fadvise64(r1, 0x17, 0x4000, 0x2) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0505350, &(0x7f0000000440)={{0x3e}, {0xbcf6, 0x400}, 0x8fe, 0x2, 0xd28b}) ftruncate(r3, 0x1000000) sendfile(r0, r3, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@mcast2, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f0000000700)=0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x12, 0x4, &(0x7f00000004c0)=@raw=[@map={0x18, 0xb, 0x1, 0x0, r0}, @ldst={0x3, 0x3, 0x2, 0x5, 0x6, 0x4, 0xfffffffffffffffc}, @generic={0x9, 0x3, 0x5, 0xffffffff, 0x9}], &(0x7f0000000500)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000540)=""/153, 0x41100, 0x1, [], r4, 0x7}, 0x48) 05:56:03 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000007c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000002700)=ANY=[], 0x0) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0x1, 0x7f0f}}}, 0x118) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) fstat(r1, &(0x7f0000000500)) getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0x1, &(0x7f0000000840)=[0x0]) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) getegid() getuid() fstat(r0, &(0x7f00000014c0)) getuid() getresgid(&(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80)) 05:56:04 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:56:04 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000400)={{0x0, 0x0, 0x8000a0ffffffff, 0x0, 'syz0\x00'}}) 05:56:04 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000400)={{0x1, 0xfdfdffff00000000, 0x0, 0x0, 'syz0\x00'}}) 05:56:04 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68000000}]}, 0x78) [ 1667.966110] hfs: unable to parse mount options 05:56:04 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000}]}, 0x78) 05:56:04 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:56:04 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000400)={{0x0, 0x0, 0x8000a0, 0x0, 'syz0\x00'}}) 05:56:04 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000002700)=ANY=[], 0x0) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0x1, 0x7f0f}}}, 0x118) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) fstat(r1, &(0x7f0000000500)) getegid() geteuid() lstat(&(0x7f00000007c0)='./file0/file0\x00', &(0x7f00000005c0)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0x1, &(0x7f0000000840)=[0x0]) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) getegid() getuid() fstat(r0, &(0x7f00000014c0)) getuid() getresgid(&(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80)) 05:56:04 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000400)={{0x1, 0xa0008000, 0x0, 0x0, 'syz0\x00'}}) 05:56:04 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r3 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) fadvise64(r1, 0x17, 0x4000, 0x2) accept$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) ftruncate(r3, 0x1000000) sendfile(r2, r3, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) 05:56:04 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x0, 0x600000000000000, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:56:04 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600}]}, 0x78) 05:56:04 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800}]}, 0x78) 05:56:04 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000400)={{0x0, 0x0, 0xffffffffa0008000, 0x0, 'syz0\x00'}}) 05:56:04 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800000000000000}]}, 0x78) 05:56:04 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x0, 0x6800000000000000, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:56:04 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000400)={{0x1, 0xfdfdffff, 0x0, 0x0, 'syz0\x00'}}) 05:56:04 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffff7f00000000, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:56:04 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}]}, 0x78) 05:56:04 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000002700)=ANY=[], 0x0) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0x1, 0x7f0f}}}, 0x118) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) fstat(r1, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0x1, &(0x7f00000007c0)=[r3]) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) getegid() getuid() fstat(r0, &(0x7f00000014c0)) getuid() getresgid(&(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80)) 05:56:04 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000400)={{0x0, 0x0, 0x200000000000000, 0x0, 'syz0\x00'}}) 05:56:05 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r3 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) fadvise64(r1, 0x17, 0x4000, 0x2) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) ftruncate(r3, 0x1000000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x2, 0x0) sendfile(r2, r3, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) 05:56:05 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000400)={{0x1, 0x0, 0x200000000000000, 0x0, 'syz0\x00'}}) 05:56:05 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x0, 0x74000000, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:56:05 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f}]}, 0x78) 05:56:05 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000400)={{0x0, 0x0, 0x100000000000000, 0x0, 'syz0\x00'}}) 05:56:05 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000002700)=ANY=[], 0x0) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0xcf, 0x8, {"480069aeeef15290b73fca56cd5ec1eb"}, 0x6, 0x1, 0x7f0f}}}, 0x118) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) fstat(r1, &(0x7f0000000500)) getegid() geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) getresuid(&(0x7f00000007c0), &(0x7f0000000c80), &(0x7f00000006c0)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001480), &(0x7f0000000800)=0x3) getgroups(0x1, &(0x7f0000000840)=[0x0]) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) getegid() getuid() fstat(r0, &(0x7f00000014c0)) getuid() getresgid(&(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80)) 05:56:05 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000400)={{0x0, 0x0, 0x1000000, 0x0, 'syz0\x00'}}) 05:56:05 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}]}, 0x78) 05:56:05 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:56:05 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}]}, 0x78) 05:56:05 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000400)={{0x1, 0x0, 0xfdfdffff00000000, 0x0, 'syz0\x00'}}) [ 1669.270728] sg_write: 63 callbacks suppressed [ 1669.270744] sg_write: data in/out 196572/74 bytes for SCSI command 0xff-- guessing data in; [ 1669.270744] program syz-executor4 not setting count and/or reply_len properly 05:56:05 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000400)={{0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}) [ 1669.355039] sg_write: data in/out 393180/74 bytes for SCSI command 0xff-- guessing data in; [ 1669.355039] program syz-executor5 not setting count and/or reply_len properly [ 1669.418668] sg_write: data in/out 393180/74 bytes for SCSI command 0xff-- guessing data in; [ 1669.418668] program syz-executor5 not setting count and/or reply_len properly [ 1669.435275] sg_write: data in/out 196572/74 bytes for SCSI command 0xff-- guessing data in; [ 1669.435275] program syz-executor4 not setting count and/or reply_len properly 05:56:06 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68}]}, 0x78) 05:56:06 executing program 2: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0xffffffff, 0x2a000) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f0000000140)='./file0\x00', 0x4, 0x2, &(0x7f0000000340)=[{&(0x7f0000000180)="7f9ef0edd823924bce131e3b44dbdb48a23476de4f21e55eebdb0dac4df201867aab09fa50aa8d9517112b4c0d6cbddc4dd41895558fce20fe9809b3d8167211ffa484f88b4ce850ecb91d75e93b80512ef9985614f7dd72a4927530a70cec0574814f74c0253a1209620a3dd35208dcf6ecd4fee0230b0a99b22989166868962d82fe6b86751d974f67b0c0f7ef715679e457b14bdcbdae2cffb29b191d221fa30ccd62e19a5d080def257f63a35af05f91a4195ad5d57364fd07c4b619356a0ade", 0xc2, 0x6}, {&(0x7f0000000280)="5d418afd3b11b719bc6e407483023166bfa03babc8505778ecc807e27d5e517d4b8922f9321b6cc57320a6ab3d023b348697e7bcde9c83426fcc458c418dad5838017edb7d2538ccdf4f5a8b7e51f032c8d9de5f145d822ed285b8b209e2521435414c3300bd1641bc43bba596264b1eba546f9518d40b961bc1dc8471f9da46b671a315002d8e9a29ed97b0442edebc6b5ff6951ff82f17b58d96233c73b0a3e89474d46878e04c0a3fd861", 0xac, 0xfffffffffffffffd}], 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB='umask=00000000000000000000777,dir_umask=00000000000000000000004,obj_user=/dev/vbi#\x00,smackfsroot=/dev/sg#\x00,appraise,fscontext=unconfinedRu,\x00']) r3 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) fadvise64(r1, 0x17, 0x4000, 0x2) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0505350, &(0x7f0000000440)={{0x3e}, {0xbcf6, 0x400}, 0x8fe, 0x2, 0xd28b}) ftruncate(r3, 0x1000000) sendfile(r0, r3, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@mcast2, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f0000000700)=0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x12, 0x4, &(0x7f00000004c0)=@raw=[@map={0x18, 0xb, 0x1, 0x0, r0}, @ldst={0x3, 0x3, 0x2, 0x5, 0x6, 0x4, 0xfffffffffffffffc}, @generic={0x9, 0x3, 0x5, 0xffffffff, 0x9}], &(0x7f0000000500)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000540)=""/153, 0x41100, 0x1, [], r4, 0x7}, 0x48) 05:56:06 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000040)=0x8) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r3 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) fadvise64(r1, 0x17, 0x4000, 0x2) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) ftruncate(r3, 0x1000000) sendfile(r2, r3, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) 05:56:06 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000400)={{0x1, 0x0, 0x8000a0, 0x0, 'syz0\x00'}}) 05:56:06 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000400)={{0x0, 0x0, 0xa0008000, 0x0, 'syz0\x00'}}) 05:56:06 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x0, 0xdc7f0000, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) [ 1670.009423] sg_write: data in/out 196572/74 bytes for SCSI command 0xff-- guessing data in; [ 1670.009423] program syz-executor4 not setting count and/or reply_len properly [ 1670.041843] sg_write: data in/out 393180/74 bytes for SCSI command 0xff-- guessing data in; [ 1670.041843] program syz-executor5 not setting count and/or reply_len properly [ 1670.057134] sg_write: data in/out 196572/74 bytes for SCSI command 0xff-- guessing data in; [ 1670.057134] program syz-executor4 not setting count and/or reply_len properly [ 1670.099358] hfs: unable to parse mount options 05:56:06 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) [ 1670.135326] sg_write: data in/out 393180/74 bytes for SCSI command 0xff-- guessing data in; [ 1670.135326] program syz-executor5 not setting count and/or reply_len properly 05:56:06 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000400)={{0x0, 0x0, 0x2000000, 0x0, 'syz0\x00'}}) 05:56:06 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000400)={{0x1, 0x0, 0x1000000, 0x0, 'syz0\x00'}}) [ 1670.201147] sg_write: data in/out 196572/72 bytes for SCSI command 0xff-- guessing data in; [ 1670.201147] program syz-executor4 not setting count and/or reply_len properly [ 1670.244354] sg_write: data in/out 196572/72 bytes for SCSI command 0xff-- guessing data in; [ 1670.244354] program syz-executor4 not setting count and/or reply_len properly 05:56:06 executing program 2: getgid() clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg(r0, &(0x7f0000003940)=[{{&(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x1, {0xa, 0x4e22, 0x20, @empty, 0x5}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000380)="4c660332fb480450722133a2bd45f38394c1bdfb2bc6324174fdeed94c015e34740cd98f30f3e0ce1f9958f88731a6cf324276dd59c718827e5dddea341049aeb540", 0x42}], 0x1, 0x0, 0x0, 0x4000000}, 0x4}], 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@nat={'nat\x00', 0x1b, 0x5, 0x538, 0x0, 0x138, 0x3b0, 0x0, 0x0, 0x538, 0x538, 0x538, 0x538, 0x538, 0x5, &(0x7f0000000200), {[{{@uncond, 0x0, 0xc8, 0x110}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x8, @ipv4=@broadcast, @ipv6=@local, @icmp_id=0x68, @icmp_id=0x68}}}, {{@uncond, 0x0, 0xc8, 0x110}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@broadcast, 'ip_vti0\x00'}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@mh={0x28, 'mh\x00', 0x0, {0xddc}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@mcast1, @ipv4=@dev={0xac, 0x14, 0x14, 0x11}, @icmp_id=0x65, @icmp_id=0x65}}}, {{@ipv6={@dev={0xfe, 0x80, [], 0x14}, @loopback, [0xffffffff, 0xffffffff, 0x0, 0xff], [0xffffffff, 0x0, 0x0, 0xffffffff], 'sit0\x00', 'teql0\x00', {0xff}, {0xff}, 0x3b, 0x3f3, 0x1, 0x10}, 0x0, 0xc8, 0x110}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x14, @ipv6=@remote, @ipv4=@multicast2, @icmp_id=0x66}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080), &(0x7f00000000c0)=0x4) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x24, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], 0x0}, 0x48) exit(0x9) getrusage(0x0, &(0x7f0000000500)) 05:56:06 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:56:06 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}]}, 0x78) 05:56:06 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x200000000000000, 'syz0\x00'}}) 05:56:06 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000400)={{0x1, 0x0, 0x2000000, 0x0, 'syz0\x00'}}) 05:56:07 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r3 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) fadvise64(r1, 0x17, 0x4000, 0x2) ioctl$KVM_GET_CPUID2(r0, 0xc008ae91, &(0x7f0000000040)={0x3, 0x0, [{}, {}, {}]}) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x2) ftruncate(r3, 0x1000000) sendfile(r2, r3, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) 05:56:07 executing program 2: creat(&(0x7f0000000040)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000500)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6100) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) connect$vsock_dgram(r1, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xbc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x0, 0x1000f4) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000140)='overlay\x00', 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="776f726b6469723d2e2f6275532e6e060087cac78c7fa6d0cea1cf80fd21fff38f4dede4917b912dc3ec525d06b665d5b9b4891cf3768a070885"]) r2 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) getegid() getgroups(0x0, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x0) bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbff}, 0xc) r3 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f00000005c0)) sendfile(r0, r3, &(0x7f0000d83ff8)=0x2400, 0x8000fffffffe) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)="7374617409c0d2febcf9df2deac8c177ff171248e91193513049f831550d6f7de66cf617732743e397b89f26eda4dcc3783f9db5116b34d31b0512a5608aaff01e7952340cd6fd00000000", 0x275a, 0x0) fsetxattr$system_posix_acl(r4, &(0x7f0000000640)='system.posix_acl_access\x00', &(0x7f0000000700)={{}, {0x1, 0x2}, [{0x2, 0x6}, {0x2, 0x2}], {}, [{0x8, 0x4}], {0x10, 0x5}, {0x20, 0x3}}, 0x3c, 0x0) 05:56:07 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x0, 0x900, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:56:07 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000}]}, 0x78) 05:56:07 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x8000a0ffffffff, 'syz0\x00'}}) 05:56:07 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000400)={{0x1, 0x0, 0xfdfdffff, 0x0, 'syz0\x00'}}) 05:56:07 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000}]}, 0x78) 05:56:07 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfbffffff, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) [ 1670.942002] overlayfs: option "workdir=./buS.n" is useless in a non-upper mount, ignore [ 1670.963611] overlayfs: missing 'lowerdir' 05:56:07 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x2000000, 'syz0\x00'}}) [ 1671.014956] audit: type=1804 audit(1544162167.225:83): pid=3622 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor2" name="/root/syzkaller-testdir346593598/syzkaller.Mxcp9s/2472/bus" dev="sda1" ino=16774 res=1 05:56:07 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000400)={{0x1, 0x0, 0x2, 0x0, 'syz0\x00'}}) 05:56:07 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7a, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) [ 1671.135435] audit: type=1804 audit(1544162167.285:84): pid=3607 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor2" name="/root/syzkaller-testdir346593598/syzkaller.Mxcp9s/2472/bus" dev="sda1" ino=16774 res=1 05:56:07 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x1000000, 'syz0\x00'}}) [ 1671.258776] audit: type=1804 audit(1544162167.415:85): pid=3607 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor2" name="/root/syzkaller-testdir346593598/syzkaller.Mxcp9s/2472/bus" dev="sda1" ino=16774 res=1 [ 1671.284471] audit: type=1804 audit(1544162167.505:86): pid=3622 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor2" name="/root/syzkaller-testdir346593598/syzkaller.Mxcp9s/2472/bus" dev="sda1" ino=16774 res=1 [ 1671.317163] audit: type=1804 audit(1544162167.505:87): pid=3631 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor2" name="/root/syzkaller-testdir346593598/syzkaller.Mxcp9s/2472/bus" dev="sda1" ino=16774 res=1 [ 1671.347021] overlayfs: option "workdir=./buS.n" is useless in a non-upper mount, ignore [ 1671.355607] audit: type=1804 audit(1544162167.525:88): pid=3622 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor2" name="/root/syzkaller-testdir346593598/syzkaller.Mxcp9s/2472/bus" dev="sda1" ino=16774 res=1 [ 1671.366589] overlayfs: missing 'lowerdir' 05:56:07 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f0000000140)={0x1f, 0x9, [], {0x0, @bt={0x100, 0x8001, 0x0, 0x3, 0x3dd31333, 0xffffffffffffff00, 0x78, 0x6, 0x5, 0x20, 0x5, 0xf46, 0xfffffffffffffff9, 0x386, 0x10}}}) eventfd2(0x1, 0x1) r2 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r3 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) fadvise64(r1, 0x17, 0x4000, 0x2) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) ftruncate(r3, 0x1000000) sendfile(r2, r3, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) ioctl$KVM_SET_TSS_ADDR(r3, 0xae47, 0x0) 05:56:07 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000}]}, 0x78) 05:56:07 executing program 2: creat(&(0x7f0000000040)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000500)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6100) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) connect$vsock_dgram(r1, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xbc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x0, 0x1000f4) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000140)='overlay\x00', 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="776f726b6469723d2e2f6275532e6e060087cac78c7fa6d0cea1cf80fd21fff38f4dede4917b912dc3ec525d06b665d5b9b4891cf3768a070885"]) r2 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) getegid() getgroups(0x0, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x0) bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbff}, 0xc) r3 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f00000005c0)) sendfile(r0, r3, &(0x7f0000d83ff8)=0x2400, 0x8000fffffffe) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)="7374617409c0d2febcf9df2deac8c177ff171248e91193513049f831550d6f7de66cf617732743e397b89f26eda4dcc3783f9db5116b34d31b0512a5608aaff01e7952340cd6fd00000000", 0x275a, 0x0) fsetxattr$system_posix_acl(r4, &(0x7f0000000640)='system.posix_acl_access\x00', &(0x7f0000000700)={{}, {0x1, 0x2}, [{0x2, 0x6}, {0x2, 0x2}], {}, [{0x8, 0x4}], {0x10, 0x5}, {0x20, 0x3}}, 0x3c, 0x0) 05:56:07 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:56:07 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000400)={{0x1, 0x0, 0xfffffdfd, 0x0, 'syz0\x00'}}) 05:56:07 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x8000a0, 'syz0\x00'}}) 05:56:08 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x0, 0x9000000, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) [ 1671.847310] overlayfs: option "workdir=./buS.n" is useless in a non-upper mount, ignore 05:56:08 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:56:08 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000400)={{0x1, 0x0, 0xffffffffa0008000, 0x0, 'syz0\x00'}}) 05:56:08 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000}]}, 0x78) [ 1671.911124] overlayfs: missing 'lowerdir' [ 1671.915851] audit: type=1804 audit(1544162168.125:89): pid=3679 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor2" name="/root/syzkaller-testdir346593598/syzkaller.Mxcp9s/2473/bus" dev="sda1" ino=16579 res=1 05:56:08 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0xffffffffa0008000, 'syz0\x00'}}) [ 1672.027149] audit: type=1804 audit(1544162168.235:90): pid=3667 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor2" name="/root/syzkaller-testdir346593598/syzkaller.Mxcp9s/2473/bus" dev="sda1" ino=16579 res=1 05:56:08 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:56:08 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/mixer\x00', 0x1fffffffffffffd, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r3 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) fadvise64(r1, 0x17, 0x4000, 0x2) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0) ftruncate(r3, 0x1000000) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x4000, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x4e21, 0x7, @local, 0x6}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f00000001c0)={r5, 0x6, 0x0, 0x0, 0xfffffffffffffff9}, &(0x7f0000000200)=0x18) sendfile(r2, r3, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) 05:56:08 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}]}, 0x78) 05:56:08 executing program 2: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) getxattr(0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x0) rename(&(0x7f00000001c0)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", &(0x7f0000000040)='./file0\x00') mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000640)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x400}}, 0x50) 05:56:08 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000400)={{0x1, 0x0, 0x100000000000000, 0x0, 'syz0\x00'}}) 05:56:08 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x100000000000000, 'syz0\x00'}}) 05:56:08 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x0, 0x31000000, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:56:08 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000400)={{0x1, 0x0, 0x8000a0ffffffff, 0x0, 'syz0\x00'}}) 05:56:08 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30000000, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:56:08 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}]}, 0x78) 05:56:09 executing program 2: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) getxattr(0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x0) rename(&(0x7f00000001c0)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", &(0x7f0000000040)='./file0\x00') mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000640)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x400}}, 0x50) 05:56:09 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0xa0008000, 'syz0\x00'}}) 05:56:09 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:56:09 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r2 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) fadvise64(0xffffffffffffffff, 0x17, 0x4000, 0x2) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) ftruncate(r2, 0x1000000) sendfile(r1, r2, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) 05:56:09 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}]}, 0x78) 05:56:09 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000400)={{0x1, 0x0, 0xa0008000, 0x0, 'syz0\x00'}}) 05:56:09 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/igmp6\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(r0, &(0x7f00000005c0)=[{&(0x7f00000004c0)=""/159, 0x9f}], 0x1, 0x4) 05:56:09 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x0, 0x600, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:56:09 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x2, 'syz0\x00'}}) 05:56:09 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x0, 0xd00000000000000, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:56:09 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}]}, 0x78) 05:56:09 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x0, "73797a30008000a0ffffffff00"}}) 05:56:09 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000400)={{0x1, 0x0, 0x0, 0x2, 'syz0\x00'}}) 05:56:09 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000001c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) dup3(r0, r2, 0x0) 05:56:09 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0008000}]}, 0x78) [ 1673.803452] input: syz0 as /devices/virtual/input/input25 05:56:10 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8000, 0x81) r2 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r3 = memfd_create(&(0x7f0000000100)="ac0000", 0x0) fadvise64(r1, 0x17, 0x4000, 0x2) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) ftruncate(r3, 0x1000000) sendfile(r2, r3, &(0x7f00000000c0)=0xf1050f, 0xeffffdef) 05:56:10 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x500000000000000, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 05:56:10 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x0, "73797a30000000000000000200"}}) 05:56:10 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000400)={{0x1, 0x0, 0x0, 0x200000000000000, 'syz0\x00'}}) 05:56:10 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffa0008000}]}, 0x78) 05:56:10 executing program 2: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={@mcast2, @local, @ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x1b}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x21, r0, 0x0, 0x0) [ 1674.263641] vivid-001: kernel_thread() failed [ 1674.299347] sg_write: 46 callbacks suppressed [ 1674.299362] sg_write: data in/out 196572/74 bytes for SCSI command 0xff-- guessing data in; [ 1674.299362] program syz-executor4 not setting count and/or reply_len properly [ 1674.338635] sg_write: data in/out 393180/74 bytes for SCSI command 0xff-- guessing data in; [ 1674.338635] program syz-executor5 not setting count and/or reply_len properly 05:56:10 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x0, "73797a30008000a000"}}) 05:56:10 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x0, 0xffffffffffffff7b}, [{}]}, 0x78) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) [ 1674.385405] sg_write: data in/out 196572/74 bytes for SCSI command 0xff-- guessing data in; [ 1674.385405] program syz-executor4 not setting count and/or reply_len properly [ 1674.391192] sg_write: data in/out 393180/74 bytes for SCSI command 0xff-- guessing data in; [ 1674.391192] program syz-executor5 not setting count and/or reply_len properly 05:56:10 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x6) 05:56:10 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000400)={{0x1, 0x0, 0x0, 0x8000a0ffffffff, 'syz0\x00'}}) [ 1674.527096] sg_write: data in/out 196572/74 bytes for SCSI command 0xff-- guessing data in; [ 1674.527096] program syz-executor4 not setting count and/or reply_len properly [ 1674.565418] sg_write: data in/out 196572/74 bytes for SCSI command 0xff-- guessing data in; 05:56:10 executing program 5: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00000000000000}]}, 0x78) 05:56:10 executing program 2: [ 1674.565418] program syz-executor4 not setting count and/or reply_len properly [ 1674.625526] sg_write: data in/out 393180/74 bytes for SCSI command 0xff-- guessing data in; [ 1674.625526] program syz-executor5 not setting count and/or reply_len properly [ 1674.701154] sg_write: data in/out 393180/74 bytes for SCSI command 0xff-- guessing data in; [ 1674.701154] program syz-executor5 not setting count and/or reply_len properly [ 1675.167618] ================================================================== [ 1675.175333] BUG: KASAN: null-ptr-deref in kthread_stop+0x108/0x8f0 [ 1675.181649] Write of size 4 at addr 000000000000001c by task syz-executor0/3826 [ 1675.189321] [ 1675.190951] CPU: 0 PID: 3826 Comm: syz-executor0 Not tainted 4.20.0-rc1-next-20181109+ #110 [ 1675.199430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1675.208775] Call Trace: [ 1675.211364] dump_stack+0x244/0x39d [ 1675.214991] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1675.220179] ? vprintk_func+0x85/0x181 [ 1675.224062] kasan_report.cold.8+0x6d/0x309 [ 1675.228377] ? kthread_stop+0x108/0x8f0 [ 1675.232354] check_memory_region+0x13e/0x1b0 [ 1675.236758] kasan_check_write+0x14/0x20 [ 1675.240812] kthread_stop+0x108/0x8f0 [ 1675.244609] ? kthread_unpark+0x160/0x160 [ 1675.248758] ? __lock_is_held+0xb5/0x140 [ 1675.252869] ? ieee80211_build_hdr+0x1008/0x37f0 [ 1675.257679] vivid_stop_generating_vid_out+0x2bb/0x9ae [ 1675.262962] ? vivid_start_generating_vid_out+0x490/0x490 [ 1675.268555] ? _vb2_fop_release+0x3f/0x2b0 [ 1675.272792] ? mutex_trylock+0x2b0/0x2b0 [ 1675.276844] ? vivid_fop_release+0x66/0x440 [ 1675.281160] ? __mutex_lock+0x85e/0x16f0 [ 1675.285238] vbi_out_stop_streaming+0x91/0x150 [ 1675.289827] ? vbi_out_buf_queue+0x310/0x310 [ 1675.294235] __vb2_queue_cancel+0x171/0xd20 [ 1675.298566] ? lock_downgrade+0x900/0x900 [ 1675.302708] ? vb2_buffer_done+0xb80/0xb80 [ 1675.306949] ? find_held_lock+0x36/0x1c0 [ 1675.311010] ? mark_held_locks+0xc7/0x130 [ 1675.315172] ? kasan_check_write+0x14/0x20 [ 1675.319418] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1675.324345] ? kasan_check_read+0x11/0x20 [ 1675.328495] ? wait_for_completion+0x8a0/0x8a0 [ 1675.333075] ? trace_hardirqs_off_caller+0x300/0x300 [ 1675.338192] vb2_core_streamoff+0x60/0x140 [ 1675.342445] __vb2_cleanup_fileio+0x73/0x160 [ 1675.346852] vb2_core_queue_release+0x1e/0x80 [ 1675.351355] _vb2_fop_release+0x1d2/0x2b0 [ 1675.355503] vb2_fop_release+0x77/0xc0 [ 1675.359390] vivid_fop_release+0x18e/0x440 [ 1675.363625] ? vivid_remove+0x460/0x460 [ 1675.367653] v4l2_release+0x224/0x3a0 [ 1675.371456] __fput+0x3bc/0xa70 [ 1675.374733] ? dev_debug_store+0x140/0x140 [ 1675.378966] ? get_max_files+0x20/0x20 [ 1675.382866] ? trace_hardirqs_on+0xbd/0x310 [ 1675.387208] ? trace_hardirqs_off_caller+0x300/0x300 [ 1675.392317] ? perf_trace_sched_process_exec+0x860/0x860 [ 1675.397764] ? __lock_is_held+0xb5/0x140 [ 1675.401828] ____fput+0x15/0x20 [ 1675.405105] task_work_run+0x1e8/0x2a0 [ 1675.408990] ? task_work_cancel+0x240/0x240 [ 1675.413304] ? __sb_end_write+0xd9/0x110 [ 1675.417362] ? touch_atime+0x103/0x320 [ 1675.421276] ? file_remove_privs+0x540/0x540 [ 1675.425688] ? file_remove_privs+0x540/0x540 [ 1675.430142] get_signal+0x1550/0x1970 [ 1675.433951] ? direct_splice_actor+0x128/0x190 [ 1675.438535] ? ptrace_notify+0x130/0x130 [ 1675.442599] ? pipe_to_sendpage+0x400/0x400 [ 1675.446930] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1675.452463] ? check_preemption_disabled+0x48/0x280 [ 1675.457479] ? graph_lock+0x270/0x270 [ 1675.461285] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1675.466823] ? task_work_add+0x123/0x1e0 [ 1675.470962] do_signal+0x9c/0x21c0 [ 1675.474503] ? find_held_lock+0x36/0x1c0 [ 1675.478562] ? setup_sigcontext+0x7d0/0x7d0 [ 1675.482879] ? lock_downgrade+0x900/0x900 [ 1675.487030] ? exit_to_usermode_loop+0x8c/0x380 [ 1675.491692] ? exit_to_usermode_loop+0x8c/0x380 [ 1675.496358] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 1675.500944] ? trace_hardirqs_on+0xbd/0x310 [ 1675.505272] ? do_syscall_64+0x6be/0x820 [ 1675.509335] ? trace_hardirqs_off_caller+0x300/0x300 [ 1675.514447] exit_to_usermode_loop+0x2e5/0x380 [ 1675.519031] ? __bpf_trace_sys_exit+0x30/0x30 [ 1675.523531] do_syscall_64+0x6be/0x820 [ 1675.527421] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1675.532788] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1675.537715] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1675.542556] ? trace_hardirqs_on_caller+0x310/0x310 [ 1675.547570] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1675.552586] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1675.557603] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1675.562453] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1675.567638] RIP: 0033:0x457569 [ 1675.570829] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1675.589733] RSP: 002b:00007feabcab7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1675.597456] RAX: 0000000000019500 RBX: 0000000000000004 RCX: 0000000000457569 [ 1675.604740] RDX: 00000000200000c0 RSI: 0000000000000006 RDI: 0000000000000005 [ 1675.612005] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1675.619275] R10: 00000000effffdef R11: 0000000000000246 R12: 00007feabcab86d4 [ 1675.626543] R13: 00000000004c3c2a R14: 00000000004d6230 R15: 00000000ffffffff [ 1675.633836] ================================================================== [ 1675.641201] Disabling lock debugging due to kernel taint [ 1675.647335] Kernel panic - not syncing: panic_on_warn set ... [ 1675.653257] CPU: 0 PID: 3826 Comm: syz-executor0 Tainted: G B 4.20.0-rc1-next-20181109+ #110 [ 1675.663156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1675.672503] Call Trace: [ 1675.675087] dump_stack+0x244/0x39d [ 1675.678713] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1675.684001] panic+0x2ad/0x55c [ 1675.687190] ? add_taint.cold.5+0x16/0x16 [ 1675.691359] ? preempt_schedule+0x4d/0x60 [ 1675.695509] ? ___preempt_schedule+0x16/0x18 [ 1675.699931] ? trace_hardirqs_on+0xb4/0x310 [ 1675.704263] kasan_end_report+0x47/0x4f [ 1675.708264] kasan_report.cold.8+0x76/0x309 [ 1675.712583] ? kthread_stop+0x108/0x8f0 [ 1675.716560] check_memory_region+0x13e/0x1b0 [ 1675.720963] kasan_check_write+0x14/0x20 [ 1675.725019] kthread_stop+0x108/0x8f0 [ 1675.728811] ? kthread_unpark+0x160/0x160 [ 1675.733006] ? __lock_is_held+0xb5/0x140 [ 1675.737059] ? ieee80211_build_hdr+0x1008/0x37f0 [ 1675.741816] vivid_stop_generating_vid_out+0x2bb/0x9ae [ 1675.747091] ? vivid_start_generating_vid_out+0x490/0x490 [ 1675.752634] ? _vb2_fop_release+0x3f/0x2b0 [ 1675.756868] ? mutex_trylock+0x2b0/0x2b0 [ 1675.760943] ? vivid_fop_release+0x66/0x440 [ 1675.765285] ? __mutex_lock+0x85e/0x16f0 [ 1675.769350] vbi_out_stop_streaming+0x91/0x150 [ 1675.773939] ? vbi_out_buf_queue+0x310/0x310 [ 1675.778373] __vb2_queue_cancel+0x171/0xd20 [ 1675.782708] ? lock_downgrade+0x900/0x900 [ 1675.786851] ? vb2_buffer_done+0xb80/0xb80 [ 1675.791090] ? find_held_lock+0x36/0x1c0 [ 1675.795198] ? mark_held_locks+0xc7/0x130 [ 1675.799362] ? kasan_check_write+0x14/0x20 [ 1675.803594] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1675.808525] ? kasan_check_read+0x11/0x20 [ 1675.812669] ? wait_for_completion+0x8a0/0x8a0 [ 1675.817284] ? trace_hardirqs_off_caller+0x300/0x300 [ 1675.822397] vb2_core_streamoff+0x60/0x140 [ 1675.826633] __vb2_cleanup_fileio+0x73/0x160 [ 1675.831041] vb2_core_queue_release+0x1e/0x80 [ 1675.835550] _vb2_fop_release+0x1d2/0x2b0 [ 1675.839695] vb2_fop_release+0x77/0xc0 [ 1675.843576] vivid_fop_release+0x18e/0x440 [ 1675.847805] ? vivid_remove+0x460/0x460 [ 1675.851774] v4l2_release+0x224/0x3a0 [ 1675.855570] __fput+0x3bc/0xa70 [ 1675.858846] ? dev_debug_store+0x140/0x140 [ 1675.863095] ? get_max_files+0x20/0x20 [ 1675.866987] ? trace_hardirqs_on+0xbd/0x310 [ 1675.871323] ? trace_hardirqs_off_caller+0x300/0x300 [ 1675.876424] ? perf_trace_sched_process_exec+0x860/0x860 [ 1675.881870] ? __lock_is_held+0xb5/0x140 [ 1675.885947] ____fput+0x15/0x20 [ 1675.889221] task_work_run+0x1e8/0x2a0 [ 1675.893127] ? task_work_cancel+0x240/0x240 [ 1675.897443] ? __sb_end_write+0xd9/0x110 [ 1675.901503] ? touch_atime+0x103/0x320 [ 1675.905379] ? file_remove_privs+0x540/0x540 [ 1675.909778] ? file_remove_privs+0x540/0x540 [ 1675.914178] get_signal+0x1550/0x1970 [ 1675.917971] ? direct_splice_actor+0x128/0x190 [ 1675.922557] ? ptrace_notify+0x130/0x130 [ 1675.926616] ? pipe_to_sendpage+0x400/0x400 [ 1675.930943] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1675.936474] ? check_preemption_disabled+0x48/0x280 [ 1675.941486] ? graph_lock+0x270/0x270 [ 1675.945285] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1675.950817] ? task_work_add+0x123/0x1e0 [ 1675.954873] do_signal+0x9c/0x21c0 [ 1675.958417] ? find_held_lock+0x36/0x1c0 [ 1675.962487] ? setup_sigcontext+0x7d0/0x7d0 [ 1675.966803] ? lock_downgrade+0x900/0x900 [ 1675.970947] ? exit_to_usermode_loop+0x8c/0x380 [ 1675.975643] ? exit_to_usermode_loop+0x8c/0x380 [ 1675.980315] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 1675.984932] ? trace_hardirqs_on+0xbd/0x310 [ 1675.989263] ? do_syscall_64+0x6be/0x820 [ 1675.993343] ? trace_hardirqs_off_caller+0x300/0x300 [ 1675.998460] exit_to_usermode_loop+0x2e5/0x380 [ 1676.003055] ? __bpf_trace_sys_exit+0x30/0x30 [ 1676.007549] do_syscall_64+0x6be/0x820 [ 1676.011448] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1676.016809] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1676.021728] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1676.026564] ? trace_hardirqs_on_caller+0x310/0x310 [ 1676.031584] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1676.036603] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1676.041617] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1676.046482] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1676.051663] RIP: 0033:0x457569 [ 1676.054845] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1676.073737] RSP: 002b:00007feabcab7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1676.081446] RAX: 0000000000019500 RBX: 0000000000000004 RCX: 0000000000457569 [ 1676.088726] RDX: 00000000200000c0 RSI: 0000000000000006 RDI: 0000000000000005 [ 1676.096006] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1676.103272] R10: 00000000effffdef R11: 0000000000000246 R12: 00007feabcab86d4 [ 1676.110539] R13: 00000000004c3c2a R14: 00000000004d6230 R15: 00000000ffffffff [ 1676.118940] Kernel Offset: disabled [ 1676.122576] Rebooting in 86400 seconds..