1, 0x7ff, 0x9, 0x0, 0x9, 0x80]}, &(0x7f0000000240)=0x100) r2 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x3a9a, 0xffffffff7ffffffe) ioctl$SG_SET_RESERVED_SIZE(r2, 0x227d, &(0x7f00000000c0)) 23:46:19 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) [ 473.464955][T19889] Unknown ioctl 1075359313 23:46:19 executing program 0: pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x2, 0xfa00, {0x2, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {r3}}, 0x10) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f00000000c0)=0x10d060000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) syz_mount_image$ceph(&(0x7f00000001c0)='ceph\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x7, &(0x7f0000000540)=[{&(0x7f0000000240)="96ff7ae8d66667e6609b19d4305bbfe5a1d5451c0cb6ec33f4c47a269bbacb20560a7f459da928cdef936c0525924c8256e06ba3f04740770af29c19ececa4dec49b6739474f982f96bec2013eb0f1f66cf2d8fdc3796ab1d9a77859f351ba4cb72f9792881a", 0x66, 0xfffffffffffffffa}, {&(0x7f0000000680)="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", 0x1000, 0x5}, {&(0x7f00000002c0)="390f2749c6c0342e09e7f734ce1adbcaa684c3965de4fea65f668fd1838154e69b1e3ec71a8b5691ff3c18c50804ee7800e791327607ac30973e2105c0c842f893aeecc912d7689f165600641ef6cfc8baf9f7f3f550494181620d4307588574ef115ed63271832c0af1d8d84c598c0dc5692b004bf593921ec38e7fcd1198ab084ee497b8031ff804dbb9630c6ad355056e6a549e171cb4779fc710570863ccb8b0916b83ffb4ba4e09b6c6e9644f05ae5022fd864be7bd16181d9a8391329bab524fcb02239dfd5d4f9240d232051731b21d15e4a6cae0d5d8", 0xda, 0x4}, {&(0x7f00000003c0)="30ce3d55239b9d2511ead2c2713d4b519f04a8e388633b13e4b9fff9db1bb04f3d866da010c444ec35764c52c0273731cc7cdebc3052147d43d11c6639cfadcbe0d1987681af54ddec37480617aa8ea4cea716d82406b75ecb742f75733d313503df6eeb48490d6a988ae6a14be09a715a8a93752e1f246648766506ec9c38a4c8f45bebbf97a92e5db1eb103a", 0x8d, 0x200}, {&(0x7f0000000480)="5b001f7eefc5aceee22399bdff1a513b018edf8508dd", 0x16, 0x3}, {&(0x7f0000001680)="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", 0x1000, 0x337}, {&(0x7f00000004c0)="9f78a5fdf68abf2ff53e41e2d2662d2152501dde3968d46a0b2b0df49370e23906948fb5699e105e27ce18a534cb169efdb8010471efd279da062f3832bbc4c45c088d20fb6ce6eb1ade1266f264cb2552a62c9901fe883cf90165", 0x5b, 0xffffffff}], 0x110000, &(0x7f0000000600)='/dev/sg#\x00') ioctl$SG_GET_LOW_DMA(r2, 0x227a, &(0x7f0000000000)) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x100002000002, 0x11, r2, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) prctl$PR_SET_TSC(0x1a, 0x1) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000002680)={0x0, @in={{0x2, 0x4e24, @remote}}}, &(0x7f0000002740)=0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000002780)={r6, 0x3cb}, &(0x7f00000027c0)=0x8) ioctl$SCSI_IOCTL_SYNC(r2, 0x4) r7 = mmap$binder(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x2, 0x4010, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000002ac0)={0x78, 0x0, &(0x7f0000002940)=[@acquire_done={0x40106309, r7, 0xac}, @release={0x40046306, 0x3}, @clear_death={0x400c630f, 0x4}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x28, 0x30, &(0x7f00000028c0)=[@ptr={0x70742a85, 0x1, &(0x7f0000002880), 0x1, 0x2, 0x35}], &(0x7f0000002900)=[0x0, 0x78, 0x40, 0x38, 0x28, 0x78]}}, @increfs={0x40046304, 0x3}], 0xdd, 0x0, &(0x7f00000029c0)="a77753d250c450d1253202e66480087730b74e6d564148c43c707879d119c93c8d499529833ce086faf7b2fc481268e34167118a0503d34b1d3389710e318a11f085e96cb8155909f1b5ecc56a7ea812e3edb700f515591a280c9ff32ef7e2d0f039ae9d13ee150f69345f646e0480607b5f48fb6eed20aff07319afeff1253c958855a6b107895ecd47d75875831476b5121c85cd57720f46a7ee9fb27a145e1e8d61589037d62681701f9ec341eb267acaf02965abeae06e65bc1f77c4f9e04c1fab90335ebb025151ecefc2f72a447ca5f40989f66abe8c9cd725f2"}) splice(r4, &(0x7f0000002800), r5, &(0x7f0000002840), 0x459d, 0x0) 23:46:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x34d564b) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:46:19 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x227d, &(0x7f00000000c0)) r1 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x1ff, 0x1ff) setxattr$security_ima(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='security.ima\x00', &(0x7f0000000180)=@ng={0x4, 0x12, "0c42e37adf44746b4d16e23a1e7e06"}, 0x11, 0x1) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) setsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f0000000080)=0x7, 0x4) 23:46:20 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) [ 473.706872][T19899] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO 23:46:20 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x227d, &(0x7f0000000000)) 23:46:20 executing program 2: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_S390_UCAS_UNMAP(r0, 0x4018ae51, &(0x7f0000000040)={0x7, 0x0, 0xfff}) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001) open(&(0x7f0000000140)='./bus\x00', 0x200002, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) connect$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x3, {{0x40, 0x3}, 0x3}}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={0x0, 0xffffffff}, 0x8) ftruncate(r2, 0x2008000) sendfile(r1, r2, 0x0, 0x80000001) 23:46:20 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) 23:46:20 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x4000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:46:20 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$SG_SET_RESERVED_SIZE(r0, 0x227d, &(0x7f00000000c0)) 23:46:20 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='clear_refs\x00') syncfs(r0) ustat(0x800, &(0x7f0000000000)) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') exit(0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@mcast1, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@multicast2}}, &(0x7f0000000300)=0xe8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e22, @local}}, 0x5812b967, 0x6, 0x101, 0x9, 0x5}, &(0x7f0000000400)=0x98) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000440)={r3, 0x600000000000}, 0x8) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r1, r2, r4) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000480)) sendfile(r0, r1, 0x0, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xc2, 0x0, 0x3, 0x2, 0x3}, 0x20) openat$cgroup_type(r1, &(0x7f00000002c0)='cgroup.type\x00', 0x2, 0x0) [ 474.258096][T19922] Unknown ioctl 1075359313 23:46:20 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) 23:46:20 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x227d, &(0x7f00000000c0)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x4080, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000100)=0xc) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x100, 0x440) 23:46:20 executing program 0: pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f00000000c0)=0x10d060000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0xfffffffffffffffd, 0x81d, r1, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r0, 0xc0385720, &(0x7f0000000000)={0x1, {0x77359400}, 0x8000, 0x5}) write(r0, &(0x7f00000001c0), 0xfffffef3) [ 474.527262][T19946] Unknown ioctl 1075359313 23:46:20 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xf0, 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x0, 0x3b23560691493769, 0xb, 0x509, @buffer={0x0, 0x65, &(0x7f0000000080)=""/101}, &(0x7f0000000100)="7027b4380b7d808c344f88", &(0x7f0000000140)=""/86, 0x100000001, 0x24, 0x0, &(0x7f00000001c0)}) read$FUSE(r0, &(0x7f0000000280), 0x1000) 23:46:21 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) 23:46:21 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x40001c0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:46:21 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) [ 475.331563][T19970] Unknown ioctl 1075359313 23:46:21 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) 23:46:21 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x4009400) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:46:21 executing program 2: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_S390_UCAS_UNMAP(r0, 0x4018ae51, &(0x7f0000000040)={0x7, 0x0, 0xfff}) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r2 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f00000001c0), &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={0x0, 0xffffffff}, 0x8) ftruncate(0xffffffffffffff9c, 0x2008000) sendfile(r1, r3, 0x0, 0x80000001) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000100)={0x10000, 0x0, [0x0, 0x3, 0x2, 0x89, 0x5, 0x80b, 0x1, 0x2000000000]}) 23:46:21 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x200100, 0x0) exit(0x0) write$uinput_user_dev(r2, &(0x7f00000001c0)={'syz0\x00', {0x6000000000, 0x7, 0x1, 0x4}, 0x25, [0x7, 0x100000000, 0x1, 0xa0, 0xd34, 0x3, 0x1, 0x7, 0x8, 0x7f, 0x1, 0x4, 0x1, 0x1ff, 0x3, 0x0, 0x7, 0xfffffffffffffffc, 0xec2, 0xe5f7, 0x80000001, 0xea, 0x400, 0xfffffffffffffff8, 0x1, 0xffffffffffffffc1, 0x4, 0x100, 0x4, 0x1f, 0x81, 0x6, 0x7f, 0x3fdc, 0x1000, 0x5, 0xcd7, 0x200000000, 0x0, 0x796f, 0x8, 0x100000000, 0x1ff, 0x2da5, 0x2, 0x4, 0x6, 0xffffffff, 0x4c30, 0x1, 0x0, 0x84, 0x3f, 0x25c, 0x8, 0x80000000, 0x258c, 0x6, 0x1a0, 0x18fa, 0xb9, 0x4, 0x4, 0x5], [0xffffffffffffff01, 0x4, 0x676e, 0xffffffffffffff81, 0x2, 0x800, 0x7, 0x7, 0x5, 0x1, 0x1c5, 0x7fffffff, 0xc4, 0x5, 0x3, 0x81, 0x80000000, 0x480000000, 0x6, 0x1a1f, 0x2, 0xffffffff, 0x5, 0x7ff, 0x94c5, 0xd21, 0x4, 0x100000000, 0x9, 0x1000, 0xbbc8, 0x1ff, 0x0, 0x1, 0xff, 0x7f, 0x6, 0x8, 0x4ac, 0xfffffffffffffff8, 0xfffffffffffffffb, 0x4, 0x5, 0x6, 0x4000000000000000, 0x1, 0x0, 0x5, 0xffffffffffff8000, 0x1, 0x6, 0xe40, 0xae, 0x7ff, 0x0, 0x3f, 0x8, 0x7, 0x0, 0x5, 0xffffffffffffffff, 0xfffffffffffffc00, 0x6, 0x4c], [0xcc1, 0x40, 0x0, 0x6, 0x6, 0x3, 0x10000, 0x100000001, 0xc257, 0x4, 0x8001, 0x400, 0x7, 0x5, 0x2, 0x1, 0x35f, 0x8000, 0x4, 0x7, 0x9, 0x2, 0x2, 0x81, 0x5c8, 0x2, 0x401, 0x1, 0x5, 0x80000001, 0x1, 0x7f, 0x7, 0x5b, 0x31df8000000, 0x80000001, 0x40000000000, 0x7fff, 0x80, 0x100000000, 0x400, 0xffff, 0x4, 0xa89, 0x6, 0x2, 0x7, 0x81, 0x1, 0x3, 0x7fffffff, 0xfff, 0x7, 0x7, 0xf2, 0x4, 0xcbd, 0x9, 0x8001, 0x1, 0x1, 0xc295, 0x3, 0x3ff], [0xe53c, 0x1eb, 0x80000001, 0x4, 0x7f, 0xf5f3, 0x4, 0x1, 0xfffffffffffff801, 0x8001, 0x3, 0x3, 0x7f, 0x2, 0x9, 0x5d, 0x1, 0x7fff, 0x0, 0x600000000000, 0x6, 0x2, 0x3, 0x4, 0x20, 0x80, 0x6, 0x8e8, 0x2, 0x5ecceba3, 0x400, 0x1, 0x0, 0xfffffffffffffff7, 0x8001, 0xfff, 0x81, 0x8000, 0x0, 0x1f, 0x6, 0x8001, 0x2, 0x101, 0x3, 0x1979, 0x7f, 0x6, 0x100000000, 0x5, 0xbe78, 0x7, 0x9, 0xff, 0x4, 0x5, 0x3, 0x1000, 0x6, 0x0, 0x7, 0x1, 0x433, 0x2]}, 0x45c) sendfile(r0, r1, 0x0, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000040)={0x0, 0x7ff, 0x30, 0xc67, 0x9}, &(0x7f0000000080)=0x18) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000000c0)={0x5, 0x8008, 0x7fffffff, 0x0, r3}, &(0x7f0000000100)=0x10) 23:46:21 executing program 3: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) listen(0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) 23:46:21 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f00000000c0)=0x10d060000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x100002000002, 0x11, r1, 0x0) write(r0, &(0x7f00000001c0), 0xfffffef3) 23:46:22 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x801, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x8000) ioctl$SG_SET_RESERVED_SIZE(r0, 0x227d, &(0x7f00000000c0)) r2 = dup2(r0, r0) r3 = request_key(&(0x7f0000000100)='id_legacy\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='trusted\x00', 0x0) keyctl$set_timeout(0xf, r3, 0xfffffffffffffffe) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x111, 0x2, 0x1, 0x4) [ 475.610671][T19992] Unknown ioctl 1075359313 23:46:22 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x44d564b) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:46:22 executing program 3: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) listen(0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) [ 475.677916][T19992] Unknown ioctl 1078505115 [ 475.701526][T19992] Unknown ioctl 1075359313 23:46:22 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x227d, &(0x7f00000000c0)) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x1, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000140)={@mcast1}, &(0x7f0000000180)=0x14) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000080)={0x1, 'vlan0\x00', 0x3}, 0x18) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000240)) ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f0000000200)={r2, 0xfffffffffffffffe}) pipe2(&(0x7f0000000000), 0x84000) getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000280)={@empty}, &(0x7f00000002c0)=0x14) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000300)) 23:46:22 executing program 3: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) listen(0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) [ 475.753253][T20003] Unknown ioctl 1078505115 23:46:22 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) 23:46:22 executing program 2: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_S390_UCAS_UNMAP(r0, 0x4018ae51, &(0x7f0000000040)={0x7, 0x0, 0xfff}) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={0x0, 0xffffffff}, 0x8) ftruncate(r2, 0x2008000) sendfile(r1, r2, 0x0, 0x80000001) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) 23:46:22 executing program 2: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_S390_UCAS_UNMAP(r0, 0x4018ae51, &(0x7f0000000040)={0x7, 0x0, 0xfff}) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={0x0, 0xffffffff}, 0x8) ftruncate(0xffffffffffffffff, 0x2008000) sendfile(r1, 0xffffffffffffffff, 0x0, 0x80000001) [ 475.953148][T20020] Unknown ioctl 1075359313 23:46:22 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0xd27, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x227d, &(0x7f0000000040)) [ 476.093161][T20029] Unknown ioctl 1075359313 [ 476.106235][T20029] Unknown ioctl 1075359313 23:46:22 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='clear_refs\x00') fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000280)=0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') exit(0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x594, 0x1ff, 0x1, 0x3, 0x44}, &(0x7f0000000100)=0x98) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000001c0)={r2, @in={{0x2, 0x4e20, @multicast1}}, 0x2e8a, 0x7fff}, 0x90) sendfile(r0, r1, 0x0, 0x1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) 23:46:22 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x5000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:46:22 executing program 0: pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f00000000c0)=0x10d060000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000)=0x91f, 0x4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x100002000002, 0x11, r1, 0x0) write(r0, &(0x7f00000001c0), 0xfffffef3) 23:46:22 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) 23:46:22 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x227d, &(0x7f00000000c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x20901, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={0xffffffffffffff9c, 0x10, &(0x7f0000000000)={&(0x7f0000000240)=""/120, 0x78, 0xffffffffffffffff}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=r2, 0x4) 23:46:22 executing program 2: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f0000000440)=0x1) ioctl$KVM_S390_UCAS_UNMAP(r0, 0x4018ae51, &(0x7f0000000040)={0x7, 0x0, 0xfff}) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000400)={r0, 0x0, 0xfffffffffffff000, 0x10000fffff000}) r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x1, 0x4) close(r1) fcntl$getownex(r0, 0x10, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r2 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={0x0, 0xffffffff}, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140)={0xffffffffffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000380)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xd4}, r4}}, 0x30) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e20, 0x15, @local, 0x100000001}}, 0x6, 0x4000000000, 0x7, 0x1}, &(0x7f0000000100)=0x98) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000000280)={r5, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x84) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000004c0)={0x0, r3, 0x0, 0xd, &(0x7f0000000480)='securityself\x00', 0xffffffffffffffff}, 0x30) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r6, 0x4, &(0x7f0000000680)=""/145) openat$cgroup_ro(r0, &(0x7f00000003c0)='cpuacct.usage_percpu\x00', 0x0, 0x0) ftruncate(r3, 0x2008000) sendfile(r1, r3, 0x0, 0x80000001) 23:46:22 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x6000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:46:23 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x227d, &(0x7f00000000c0)) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000000)) 23:46:23 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) [ 476.603610][T20051] Unknown ioctl 1074048646 [ 476.622935][T20051] Unknown ioctl 1075359313 [ 476.633126][T20051] Unknown ioctl 1075344706 [ 476.643558][T20051] Unknown ioctl 4726 23:46:23 executing program 4: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0xb) r2 = dup2(r1, r1) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="b6b6db4967c83eb5831c660d8c923460b593a4c06b8ba4569709666e3ee7bf606b856a95415923614fda796cfadfd2f3d4b1de080076c1ffff59bcb6d1011df1adf25edbb4339c8b4eabbdb0e00a1f3535ae18785c4cafcbe089169c92a92bfbae51a9369027d3140000"], 0x1}}, 0x44801) sendmsg$FOU_CMD_DEL(r2, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={0x0}}, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000800)=ANY=[]) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440)='/dev/sequencer\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0) r3 = epoll_create1(0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) close(r3) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f00000000c0)) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000001c0)={0x11, @multicast1, 0x4e22, 0x0, 'fo\x00', 0x0, 0x90c8, 0x33}, 0x2c) r4 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r4, 0x227d, &(0x7f00000000c0)) 23:46:23 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) 23:46:23 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x7000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:46:23 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='map_files\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') exit(0x0) setsockopt$packet_int(r0, 0x107, 0xb, &(0x7f0000000340)=0x2, 0x4) sendfile(r0, r1, 0x0, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000000)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@remote}}, &(0x7f0000000100)=0xe8) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(r1, &(0x7f0000000280)={0xa0, 0x19, 0x1, {0x40, {0x28, 0x2, 0x6}, 0x1, r2, r3, 0xf3f9, 0x7, 0x4, 0xff, 0x4, 0x7fffffff, 0x2, 0x0, 0xffffffff, 0xf0, 0xe55f, 0x5, 0x1, 0x4, 0x7}}, 0xa0) fcntl$setlease(r0, 0x400, 0x2) 23:46:23 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) [ 477.392468][T20062] Unknown ioctl 1074048646 [ 477.414055][T20062] Unknown ioctl 1075359313 [ 477.427681][T20062] Unknown ioctl 1075344706 [ 477.513065][T20087] Unknown ioctl 4726 23:46:23 executing program 0: pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f00000000c0)=0x10d060000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x100002000002, 0x11, r1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev}, 0x1c) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00'}, 0x30) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x1, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video2\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0), 0xfffffef3) 23:46:23 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) 23:46:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x70001c0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:46:24 executing program 2: ioctl$KVM_S390_UCAS_UNMAP(0xffffffffffffffff, 0x4018ae51, &(0x7f0000000040)={0x7, 0x0, 0xfff}) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000100)) memfd_create(&(0x7f0000000140)='/dev/amidi#\x00', 0x4) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001) setsockopt$inet6_tcp_int(r1, 0x6, 0x1a, &(0x7f0000000000)=0x3, 0x4) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={0x0, 0xffffffff}, 0x8) ftruncate(r2, 0x2008000) sendfile(r0, r2, 0x0, 0x80000001) 23:46:24 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, 0x0, 0x0) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) 23:46:24 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x227d, &(0x7f00000000c0)) 23:46:24 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, 0x0, 0x0) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) 23:46:24 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) fcntl$setflags(r0, 0x2, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000000)=0xb80) ioctl$SG_SET_RESERVED_SIZE(r0, 0x227d, &(0x7f0000000140)=0xffffffffffffff81) 23:46:24 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, 0x0, 0x0) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) 23:46:24 executing program 2: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_S390_UCAS_UNMAP(r0, 0x4018ae51, &(0x7f0000000040)={0x7, 0x0, 0xfff}) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) fcntl$getownex(r0, 0x10, 0x0) syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={0x0, 0xffffffff}, 0x8) ftruncate(r2, 0x2008000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, r0, 0x0, 0xb, &(0x7f0000000100)='/dev/vsock\x00'}, 0x30) ptrace$cont(0x18, r3, 0x4, 0x9) sendfile(r1, r2, 0x0, 0x80000001) 23:46:24 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='clear_refs\x00') getsockopt$inet6_tcp_buf(r0, 0x6, 0xf, &(0x7f0000000000)=""/90, &(0x7f0000000080)=0x5a) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') fsetxattr$security_ima(r1, &(0x7f00000000c0)='security.ima\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="050311000000007f00135f36cba8d22d3273629f"], 0x1d, 0x3) exit(0x0) sendfile(r0, r1, 0x0, 0x1) 23:46:24 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x756fc5f00cee7286, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00') getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000200)={{{@in=@dev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000300)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000340)={{{@in6=@empty, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@local}}, &(0x7f0000000440)=0xe8) accept$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) accept$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000540)=0x14) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000580)={{{@in6, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6}}, &(0x7f0000000680)=0xe8) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000006c0)={@mcast2, 0x0}, &(0x7f0000000700)=0x14) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1f, &(0x7f0000000740)={@loopback, 0x0}, &(0x7f0000000780)=0x14) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000800)={{{@in6=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@local}}, &(0x7f0000000900)=0xe8) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000c00)={&(0x7f0000000080), 0xc, &(0x7f0000000bc0)={&(0x7f0000000940)={0x250, r2, 0x100, 0x70bd27, 0x25dfdbfb, {}, [{{0x8, 0x1, r3}, {0x1e8, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x100000001}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r7}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0xfffffffffffff64f}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r9}, {0x44, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x7ff}}, {0x8, 0x6, r10}}}]}}]}, 0x250}, 0x1, 0x0, 0x0, 0x800}, 0x4000800) ioctl$SG_SET_RESERVED_SIZE(r0, 0x227d, &(0x7f00000000c0)) [ 478.906584][T20129] Unknown ioctl 1075359313 23:46:25 executing program 0: pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f00000000c0)=0x10d060000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@empty, @rand_addr=0x6376, 0x1, 0x8, [@multicast1, @empty, @loopback, @empty, @local, @remote, @broadcast, @broadcast]}, 0x30) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x100002000002, 0x11, r1, 0x0) write(r0, &(0x7f00000001c0), 0xfffffef3) 23:46:25 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) 23:46:25 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x400) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x227d, &(0x7f00000000c0)) vmsplice(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="fe37b6328a0ab83413b1dcabb319fff03a2016080d9e5877b7906342d2c9b859de213198b2e720353c6e73066584db392be473279bbc8e2ec9f9f62f1cdfb1be437c25ed4da2f825432edea25bc56ab60407ea88f934cf9b3ffca4fc7f9b746f573321ba48e607ca1aa5493e21ed45", 0x6f}, {&(0x7f0000000180)="940b05efb67da3b5b445c56d62462cc71df219dc655c78f3c31ef8074de0166ebc25060dd986b60c953e570429e2939544378bf7741d1589d6aa20a275a3e9b1f53e8f652865fea49750cfd08fe90b21ebc7dc0fb65347b8758829", 0x5b}, {&(0x7f0000000200)="b46531716fb18246743c2fb82ceb008d3849c6d87dc6c0ef104ce164c3cb9e07c1f998fcec14f29049f5263805d66077cc010af977cce56286928d327d608ba6595b64027aabd8e0acf7a136714616efa78c12f20e3ff020702a96ea70dc1d7477ee932b03391f7b560642fa0827ffffcd4a2e9faa865970b3356cb813b81f", 0x7f}, {&(0x7f0000000080)="827372d8cdcec97a3ab7fd157ea139b99977c7ca8c751952f15f34e4e875ccc3946b20bec70650d4661cc71a182d8c40710e127d5287448234403f08b516a2", 0x3f}, {&(0x7f0000000280)="b45ad7de1dd57b0dd5eafa269b03a20976d871ebeefcb51801f21e2610bdce0cd261af8919db41b49247a9a92f7e11dcaadfe388159ca51e1e42b1bc555dff37a7ac23be83d7c32707a8d84f667fb05edaa67351653042a1a891125c47e7105dae47eacb35c6a66274c88b90fa679016127f22352aca2ae0d877a4e2b751b91ebe796f5b0db67324ee67594c68cb2ffb36f6f9885d1f5aa4405eed", 0x9b}], 0x5, 0x2) 23:46:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x8000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:46:25 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) 23:46:25 executing program 2: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x3, 0x0) ioctl$KVM_S390_UCAS_UNMAP(r0, 0x4018ae51, &(0x7f0000000040)={0x7, 0x0, 0xfff}) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x400, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={0x0, 0xffffffff}, 0x8) ftruncate(r2, 0x2008000) sendfile(r1, r2, 0x0, 0x80000001) 23:46:25 executing program 4: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffff9c}) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4c04000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="500000001200000025bd70000879d6d33fa1ff2e858c9b3dfcdbdf250000000400000000000000000000000000ec04d30200320028001a00ac1e00010000000000000000000000000000000900000000000000000000000002000220"], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x8000) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = gettid() r4 = getuid() fstat(r0, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r0, &(0x7f0000000d80)={&(0x7f0000000100), 0xc, &(0x7f0000000c40)=[{&(0x7f0000000300)={0x924, 0x32, 0x40c, 0x70bd25, 0x25dfdbfb, "", [@nested={0x64c, 0x4c, [@generic="8c1e9c552265ff540c70c705e96c7442efa61f7b3ae420d9c21bfab16860b003a318952e75cdb713823e9d6bbae60eb19a3c9eadb93c6ec48dd8868f41eb250cb029ed393f6fe17c3f55a2471b539876a0b0e5e3e065fa65e1329d8193f01522e3094eacb58a06bc36a395e151968179b74cecb8570bb9d922dd9734e7ecad44d543d1e60540b26e9c6706a04661b5b52a29608072bc4a0bb7bee3f3a0a2218e409e129324115f51edf3c509400b5938153c03320b7b499647b375ec51e1dbb8c8fd5466c9bb8d03d9f22d199deb2f39ed9e98d5badf7c9d957fe17dbb05394677d29d941ee8a109720b217342972b82900f", @generic="ec26722d54caa6297b23f3602b1a8fdd9f1b2613136f8cc5f88563c198f1fe04ac7edb95c1030eae939bf353cc50fe5ec3fabd7ee1393c6224b60e03dbc0415133508fd7a94645430a4d8d62f81744200ba19e072f8018a19e330c1c0ed735240aa4a723a2ca6ad2ab4eff06b6c26406158fc590c10a142675a866db02c8c81c1197bc305a91fc3b9dff4ca8b282e2b2df69d933c71ef621aad6feb548c251b7359da34d19e35276c36968aef9163531e17744a361f15c3bc07b3164206f39134ebad1696eb8b4315e5ea2aa23ba2e3fecfcf0bc358572f20aa32b7b6f1274a80dc10a989d1b1a5764822d", @generic="d9c9be543f78611f84d2ff1738ae849d3e413a68dcbac32b123a3b2af414ea4db1f207f822ea04280a4728a9a97ffc6860038e87ad2048c7e5ef3b51b7dbd88bcb2acddbe1f5f963dcbbb4985e7e6b98b15be501c4a0ea6ebac640a9295e1defce4aede5978492d89acd32c86f311964ca714a699b0ca0d5528c4790bf2bb963fa9a245eb018eaa7b3d647ee3da52632fd4927ee51e08a727274d6794b7f70303d95d3251afbcec64ce3494f998946603b1e20a4f7b1ba565fe247b68627a38201c199b2ddf9f060fea60e3a0a1893ddf69a2c46597640e3854d51e25e3bb3cc25c31a0bf075ff4f0a4bb3d715ee96db12", @typed={0x14, 0x3b, @ipv6=@initdev={0xfe, 0x88, [], 0x1, 0x0}}, @generic="729e3d617c0c19ac57f6b4649514c90bfd5c54c026f38d58d7c018c150a08b55cf80cd6c1d94743f30181c582c3c9d3fd660f07aeb22e171a6d462321b909160a04e6265d11e753f5574ae45aaa66b7060d7761ee1f5fa0f301cffb699fd", @generic="c15eb052f1c339396290dbba705f12eb4f390116f126299b4ca9416a8c717dae7c2c9b4a11aa52571cb768a718fff4711cf95646713b420af52591c044e56d321ac7d5972be47d2640b28171e562fcc341130a5730d7b192a08b8147bfbeab2631d2f8fe1553d395ffd8a60b6541d67fc35a33aaf40e41c0dbf8e30b2af1d61b815509fbf5b7be61037be8365bd73b4b07fc8aa74aff7fc871788ef1a3d2f9e6eb4a8b16359d04c1319e0d4e52fec97756f1b425e675c7a66e2be6450d586c6defb89080a225f27846fa2c0f0a72f5c4", @generic="ca7c361e62ea465c45292c5a755bd3e3848f4e5ce0b9480a40dc9b2afdbb69b9c9534c0b73474d7804ffe5e4d1805b491df92da994ce5a41f101daa937fbd498ec7ce5d723861383e2b3934a17145a802abf9ba52504adaccff13a91c676611cd69cc9862ae3e7e13682faf5edd5f8b40aded0baada2a78176c2098557a1d48d164054429a150ffc6f567de78f9bdce13d20a009cbf66bfdcbb05bca4bfc845e408ed47f8cf8fa72cb6a1659c12777317a9832b468f3d8420afa7cd2618ef4cadf7441372e914111bc5c75d2091153dfd4f6e489c628ad96ae959a83b43d4b2dd2ccbcc5a743325fa60030f7bad85598c360f08e5b8464c6128c66cfad5174", @generic="0161a5456bbd461afbe7f4139280b2a29125b53efc80550b48faafdfc73283d308bda936d2fd65bc3b0dc93b1ce5c6e200a30228abe38cce0ae3402640813cab52046aad8faae27c57aa290468f12d60bc15ef40df40bf80f369aa088e45a30b31417a", @generic="3d6151dae028dc333a4cdb1ffbd8289288a1f25acc64f4daa905ee01d6ad58407e6536d947b651277fd97a8da42af1ca6dce696936c89df2d363493b557437d5893d2e0a467897cf70ebe02c9c4460a18bca5f8876ba7dbda3b6db3ca98d849987ef67afec28638bf5c4f26777e012b2f71f5938141d1bab10aba7762951a9f4566c41c0b58736494226a051c47fea3ec5e7d7afbb140bff8cd2a2b169546770f004638151025a6ffb99216264212ea2181e5647eef09e3acbb2225a972dccee2327052fe6fa6ade68", @typed={0xc, 0x24, @str='wlan0\'\x00'}]}, @nested={0xf8, 0x10001, [@generic="cb4b64da9fb554721c325e04326d647f1e00369c2469ecdb69c57deb12d5f16812fbc39277a6d88b4f9649e2a58687584e6649502d926d86c4db27ad11d4d7af83cf30ee4a42580f6ed51b4f3ea365b19d14b8aed37d0018807d9149c7b26e096f3f032007c6c4cff581a8956e6b39720b0f8426962385bf4d5d6f6f889c747088de510efb5b9075bf50c1b67acc4a068d7d86dd81097407e8d4f0ff59", @typed={0x8, 0x76, @uid=r2}, @generic="bef2b5a9db4198d732468698bf860aa44297726b6dd6c51045cd3ae43cd050f3a632ebfe8ef1605942d07330b03be88344c47a84bdabba6c31273dab25e67f0d21a8eb21815b408bb952", @typed={0x4, 0x89}]}, @generic="47ff992525c34310b62120bab13b672fc5dfb6d5ff89345dfdb7f130b1e78a488cb06ee6ddae1149cdc1f833e1e6558ab32fa988872b5a76112cdcfb9c51c7ea1ba9eabd26dc19315fdbd0c69a0239733d0c7c9e607ba1ddf3f96d54716ac3880bd6edd3e3b083f876cc5d69189faf1e5ddbcfba46586de33817ae3816e08bb1514a198e8b75463537918d609269bc75a1e8355346d8abb86e504b5073dd3eb172e2d2bc15ec0ae6a56ad9b3d3bd7e0654095662b9434271ab607d800964b85255f0e93c73fb309728", @typed={0x8, 0x4e, @u32}, @generic="2a0b57c6057e75ede01ed827643a2c391be7c57e6041a27b69644b77abfff8606dd2f830165596b9df85456e345a93e7e524e1d905eb24b7fb32478728643f593a3f10f82a57ceffab68f75920622aecdb1936e0cd84b36b19", @generic="9d598dee115bb9934a0f7bf5fbe5332e3c8984021dc1361524c0a1ddcd4c5af2277d0bfe912439b6359877707ae01e7e7bd77a18625a2fda2f40741eacdf3bf5ac468aed7236f56735f9000362571395beb63465a91cbfdabbb35f631ef03d0f45772381d4e570003fd7c4e08c9a05e4ec646642ce4c69f35acffb3a9541c5852c0e07ad309d82c83e269bc37490d4c452c7984183034056c127c1dd8c5eadfcda81a62337ae"]}, 0x924}], 0x1, &(0x7f0000000d00)=[@rights={0x30, 0x1, 0x1, [r0, r0, r1, r0, r1, r1, r0]}, @cred={0x20, 0x1, 0x2, r3, r4, r5}, @rights={0x18, 0x1, 0x1, [r0]}], 0x68, 0x10}, 0x40000) ioctl$SG_SET_RESERVED_SIZE(r1, 0x227d, &(0x7f00000000c0)) 23:46:25 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) 23:46:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x8010040) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:46:25 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0xb78, 0x100) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @broadcast}, 0x10) accept$inet(r1, &(0x7f00000001c0), &(0x7f0000000200)=0x10) ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f0000000080)) ioctl$SG_SET_RESERVED_SIZE(r0, 0x227d, &(0x7f00000000c0)) ioctl$VIDIOC_G_CROP(r1, 0xc014563b, &(0x7f0000000140)={0x3, {0x3, 0x100000000, 0x6, 0xe4}}) sigaltstack(&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)) [ 479.306035][T20172] Unknown ioctl 1075359313 23:46:25 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') exit(0x6) sendfile(r0, r1, 0x0, 0x1) 23:46:25 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) 23:46:26 executing program 0: pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f00000000c0)=0x10d060000) fcntl$setlease(r2, 0x400, 0x3) r3 = dup2(r0, r0) ioctl$EVIOCGREP(r3, 0x80084503, &(0x7f0000000140)=""/245) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) fallocate(r1, 0x4, 0x3, 0x3) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x100002000002, 0x11, r2, 0x0) write(r1, &(0x7f0000000000), 0x0) 23:46:26 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) 23:46:26 executing program 4: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x800, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x227d, &(0x7f0000000040)=0x800000) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x4000, 0x0) ioctl$sock_ax25_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={@default, @default, 0x8, [@null, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) recvfrom$rose(r1, &(0x7f0000000100)=""/50, 0xffffffffffffff7a, 0x2, &(0x7f0000000140)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, 0x6, [@null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @null]}, 0x40) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f00000001c0)=0x1) 23:46:26 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x8030000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:46:26 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) [ 480.101248][T20204] Unknown ioctl 1075359313 23:46:26 executing program 2: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_S390_UCAS_UNMAP(r0, 0x4018ae51, &(0x7f0000000040)={0x7, 0x0, 0xfff}) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={0x0, 0xffffffff}, 0x8) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000001c0)={0xe6, 0x6, 0x6, "7cbf089490259f75ef33d20df60fb48c46725335da8b2d54fc5b5181016ff60e47a8653b4c48ed6707d7fce156a2d61ec6967206f129c3817b2a6cd83824ceb4d958bb6c959fa5947985da61a209e9bd55b9a13cbbad5f7428a26b8441254b0440c334d9a7dc660648d54eadcf45cc0afa68c0f22fb17c90602c01503c3714c90e5fe18fd3fb11bb2539c5e54c2b03c20163cfe14541cf6c9152a4ba81abc77050af825252b100b39f0767441b30ec29f2af6168f09a72adc1f98de982def24f2d2656b808e09678638cd831b52e99bcfe5e9ec9c4d252c35706490451b2c8bb43074db46771"}) ioctl$DRM_IOCTL_GET_MAGIC(r2, 0x80046402, &(0x7f0000000100)=0x81) ftruncate(r2, 0x2008000) sendfile(r1, r2, 0x0, 0x80000001) 23:46:26 executing program 0: pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f00000000c0)=0xfff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e24, 0x2, @mcast1, 0x6}}, 0x1, 0x5, 0x6, 0x7, 0x45}, &(0x7f0000000080)=0x98) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000200)={r4, 0x5}, 0x8) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x100002000002, 0x11, r2, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(r1, 0xc040563d, &(0x7f0000000240)={0x1, 0x0, 0x100, 0x2, {0x18000, 0x1, 0x7, 0x2}}) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) write(r1, &(0x7f00000001c0), 0x189) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x1, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000280), &(0x7f00000002c0)=0x4) 23:46:26 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x227d, &(0x7f00000000c0)) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, &(0x7f0000000000)) r1 = dup(r0) ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000080)) 23:46:26 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x9000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:46:26 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x4c6000, 0x0) write$sndseq(r1, &(0x7f0000000080)=[{0x7d2ce44b, 0x8, 0xd52f, 0x5, @tick=0x3f, {0x1, 0x6}, {0x0, 0x1}, @note={0xe9f, 0x401, 0x80000000800, 0x3, 0x8}}], 0x30) ioctl$SG_SET_RESERVED_SIZE(r0, 0x227d, &(0x7f00000000c0)) [ 480.317119][T20224] Unknown ioctl 1075359313 23:46:26 executing program 1: r0 = openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='clear_refs\x00') syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') exit(0x7) sendfile(r1, r0, 0x0, 0x10001) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x2) 23:46:26 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 23:46:26 executing program 0: pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f00000000c0)=0x10d060000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x100002000002, 0x11, r2, 0x0) accept4$rose(r0, &(0x7f0000000000)=@short={0xb, @remote, @rose, 0x1, @default}, &(0x7f0000000080)=0x1c, 0x80800) write(r1, &(0x7f00000001c0), 0xfffffef3) 23:46:26 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 23:46:26 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x101000, 0x0) getdents(r1, &(0x7f0000000100)=""/85, 0x55) r2 = getpgid(0x0) getpriority(0x3, r2) ioctl$SG_SET_RESERVED_SIZE(r0, 0x227d, &(0x7f00000000c0)=0x8000000000000000) r3 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x7f, 0x80000) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) renameat2(r3, &(0x7f0000000180)='./file0\x00', r3, &(0x7f00000001c0)='./file0\x00', 0x1) 23:46:27 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xa000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:46:27 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) [ 481.108187][T20260] Unknown ioctl 1075359313 23:46:27 executing program 2: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_S390_UCAS_UNMAP(r0, 0x4018ae51, &(0x7f0000000040)={0x7, 0x0, 0xfff}) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) write$FUSE_NOTIFY_POLL(r0, &(0x7f00000006c0)={0x18, 0x1, 0x0, {0x6576}}, 0x18) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001) syz_mount_image$btrfs(&(0x7f00000001c0)='btrfs\x00', &(0x7f0000000200)='./bus\x00', 0x1, 0x5, &(0x7f00000005c0)=[{&(0x7f0000000240)="b2784fe718f33b981684c0661ebd6d9ba905b731625493af4590ef5d397b454361abeff35b71d1ed95c1f7b76ebc17d62f49a4c1e4bfd44b9657b58ba777628d8b095c2e9f885813fc600cb549acd14cd5c63f161b3305b6cb81d558d8d6673ec10e4c3f174a0098a0b0efafed685a3fcf3cc0c46aff3bf18987ac6295440475f8b10ba101f7595627be595798304e7743305e5ef442162b2d46d82666ac9993e57461b545d5257ba2440d4dc53a642fdf92a0b44a665e2db9904b98379763919754489d53e10a245434", 0xca, 0x100}, {&(0x7f0000000340)="f4ed3b684212bcb60d93acdabfbf61e91357fe7cbe99f8a1926280496856e763e94c83133b50370bf48d26855965a757c0163e1bc08393d168de4affdcac1a6ba80e92d0096bf98ab3a88d70e06b97e0d5c22d1cbf78eb776c1c4210d6680021de272e7ec8fc494e3e2ac1f1f2615c9da11d3640d6ba8d66fc340cb2aed6787063059b69aeb6d27fd34cbcb3c2759947ba41880c3edb9936aeb19442fcde67a3c6c5f1aca2a18a6e45688fa516ec2eb1e867d6847d17d58ced26c91dab525fb8547650a5289b", 0xc6, 0xfffffffffffffffa}, {&(0x7f0000000440)="c0c1be8af69352624110e786473b6d8ff63087ef0aba71a6a5060fb0951baa70affe3206ef21e0d881", 0x29, 0x100}, {&(0x7f0000000480)="e7a4ba26255440", 0x7, 0x4f}, {&(0x7f00000004c0)="87ed7a25ea20040ce433ea65e2a055d94da02f3032ec32b5a0f100490e3ba9abbbf0968865ed18f24ffcdbdbeccb26f2deb54b6e9eda99ee2d84de2eee19c76c34540525558ae821df80143b3f0a242c2a9dae50bee26bef6728368f7c90178f2a324c69f278ad9b6ae757651859e1b4ef08334bac2bc7803b18abd665272560895741347f3376399d90b9575cc82dcaaa0fd43751cecbf7702af6d7a3a8cd5afe3797de41649941dc018065d56091f095a73b211bd4cc6133648857a8b4ae8d57dcce64a189a7", 0xc7, 0x1ff}], 0xa2000, &(0x7f0000000640)={[{@skip_balance='skip_balance'}, {@compress_force='compress-force'}, {@space_cache='space_cache'}], [{@obj_type={'obj_type', 0x3d, '/dev/vsock\x00'}}]}) r2 = open(&(0x7f0000000680)='./bus\x00', 0x141042, 0x4) keyctl$session_to_parent(0x12) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={0x0, 0xffffffff}, 0x8) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f00000000c0)={0x1, 0x213, 0x7f25, 0xfffffffffffffffb, 0x9}, 0x14) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000100)={0x9, 0x0, 0x0, 0x594}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000140)={0xfffffffffffff66b, r3, 0x1, 0x4}) ftruncate(r2, 0x2008000) sendfile(r1, r2, 0x0, 0x80000001) 23:46:27 executing program 4: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm_plock\x00', 0x604003, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000280)={0x98de, 0x100000000, 0xfff, 0xffffffffffffffc1, 0xe2, 0x21, 0x80}, 0xc) sendfile(r0, r0, &(0x7f0000000240), 0x85) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000200)) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x227d, &(0x7f00000000c0)) r2 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x7, 0x100) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x7}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000140)=@assoc_id=r3, &(0x7f0000000180)=0x4) 23:46:27 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) keyctl$join(0x1, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(r1, 0x8003f1) r3 = open(&(0x7f0000000200)='./bus\x00', 0x121401, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000280)) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000300)=ANY=[@ANYBLOB="0000000000000000ffffffff00"/22]) write$FUSE_ENTRY(r2, &(0x7f0000000540)={0x90, 0x0, 0x5, {0x0, 0x0, 0x6, 0x7f, 0x5, 0x3f, {0x0, 0x400, 0x2, 0x5f2, 0x8, 0x8, 0x8000, 0x100000001, 0xc, 0xebe, 0x10001, 0x0, 0x0, 0x8000}}}, 0x90) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='cgroup\x00', 0x0, 0x0) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0bc5351, &(0x7f0000006fa8)) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x8000, 0x140) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000200)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @rand_addr="49d7c691e72692880efa2aac9540aa27", @local, 0x81, 0x5, 0x81, 0x100, 0x0, 0x200000}) ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f0000000280)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, @loopback, @ipv4={[], [], @local}, 0x5b, 0x200, 0x2, 0x100, 0xfffffffffffffffa}) 23:46:27 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xa010000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:46:27 executing program 4: r0 = accept$unix(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000000)=0x6e) read(r0, &(0x7f0000000180)=""/217, 0xd9) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x227d, &(0x7f00000000c0)) [ 481.320721][T20276] Unknown ioctl 1075359313 23:46:27 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='clear_refs\x00') bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r0, &(0x7f0000000000)="3731c7be3b1b4aadfa706b8ee1d5588e373dd4f3f603c3ef23467aae4f6234cb138116eb9528bf0a4e8232ce141921b4e5722a646486d28ce4dca03216db7c4961b13f8e6166ed4608369d5ea459ca5ea0fae500b561ea7e398fea18612ccfe3ac30a3fb3b2793f550454b8b2969a5", &(0x7f00000001c0)=""/224}, 0x18) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') exit(0x0) sendfile(r0, r1, 0x0, 0x1) sendmsg$tipc(r0, &(0x7f00000016c0)={&(0x7f00000000c0)=@id={0x1e, 0x3, 0x1, {0x4e22, 0x3}}, 0x10, &(0x7f0000001640)=[{&(0x7f00000002c0)="0b1b6ae125dbbbf4efea67966d62e5562c83f7b4465f0161a03a75fae2c9ad858d355f829edaf08f4719ed33bb72048187cf3750693c03e0edae5588281c7bbfd7b9c8bb4f800728f78452aec4caf24fc8fc2da34d33f6a1f62a115c7ad285d9328c1f73a1d2771c04eacb73f21615545aad2750bf19eeb93c8d10cbbc46f1f3fa2ac76fb241f4bfc434a2ca67d922b45ac777287a6b3ad3601e92632bb775ea27962378200dfcdab49aa2e8c7d90ca2baf2b57da37979ba291f4faab2d0cdc30b5155f673d2e66e83e0ae60da93b65cd9adc09aea80eeb2cceaed931d2f50acf47c9bd58af880e2367c", 0xea}, {&(0x7f00000003c0)="ea43b2aeba47c01bf5414aa6b1951506b4714978ac9be886d8345668d5f9b8ccad17ed105ed2a75f19ed34afedf23e7ea4d5d9d8d9a308264873616d8b062074862b7e57c4230754cb0d64f2e77304c5356134501ec7ff97d0082256ed0ee0e7db4d2fb5277f5dc787e0b8e34852e89813621747a33809afe134331b9e52b4624dc0db0f68255ea80531d847aa0641a13a377d2729fb17f54a53c27eab2bad6009", 0xa1}, {&(0x7f0000000480)="6de34139a098a03d5a154214470683015c3c9c44c8ada78b75d3eef5fbc3addadf7f503adeab009aaf4a2652f46efadd3853e72993f2e9f25ae60ee6ce1a7abe7cbce3d7482b75a5c1b5a257dd56a58020276fe94cb5bac64d00d82946ef5afa76ae69eaa41935c7a8a73e7127bdcf968b5a79d6f6718aab57f123776ca1b852af4afa8ddfa392f762bbfa6d2e989627a048ea098be8d0e0df90ed79a637ca291d252e3190ee39204e8fe0da32d451f89549dffe20386b18db051a6cb3d2", 0xbe}, {&(0x7f0000000100)="1a7927ccdd4a8394d2beaad7c5584a2009a539837cd0a24adfbf4a7e698e9a3e577e69b143d56d909835", 0x2a}, {&(0x7f0000000540)="4e116eeac338999579f235dec2b4a6bbbe4c5f7a6454f82a4171d43453c9dbc922dc872932c140c98f258f09da0d0797cf7f2fff89cf3a69a4d29dd24ec07ad4f63afa532023b1faafeb65233d3c6748c8a705891300174d2e760326a355d7c214a585eb6f25cb07efa9488b1c7c7992b16df748a2da241f15d858b12b909e3116f11eeecf77e77ecdcf69906e187eca77c24c08fef24fb19ba9fb01a4f34430ad09a7a5bdcd744d2673a5c3958d248b7243e73a336bf73eb5bacd73ae1dca522c47c5f2b026b27224b6fa5b30cb1de5820c", 0xd2}, {&(0x7f0000000640)="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", 0x1000}], 0x6, 0x0, 0x0, 0x4004041}, 0x80) 23:46:27 executing program 0: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f00000000c0)=0x10d060000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fsetxattr$security_smack_transmute(r0, &(0x7f0000000000)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000080)='TRUE', 0x4, 0x3) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x100002000002, 0x11, r2, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000200)={0x4, 0x8, 0xfa00, {r4, 0x7}}, 0x10) [ 481.456280][T20280] Unknown ioctl -1071619020 [ 481.479170][T20280] Unknown ioctl -1071619020 23:46:27 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x227d, &(0x7f00000000c0)) ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f0000000000)) r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x4, 0x14400) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000100)) r2 = dup(r1) accept4$inet6(r2, &(0x7f0000000240)={0xa, 0x0, 0x0, @local}, &(0x7f0000000280)=0x1c, 0x80000) 23:46:27 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xb000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") [ 481.514531][T20276] Unknown ioctl 1075359313 [ 481.550010][T20296] Unknown ioctl -1071619020 [ 481.581953][T20297] Unknown ioctl -1071619020 23:46:28 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x7fe3, 0x800000) ioctl$SG_SET_RESERVED_SIZE(r0, 0x227d, &(0x7f00000000c0)) 23:46:28 executing program 2: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_S390_UCAS_UNMAP(r0, 0x4018ae51, &(0x7f0000000040)={0x7, 0x0, 0xfff}) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r2 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={0x0, 0xffffffff}, 0x8) socket$can_raw(0x1d, 0x3, 0x1) ftruncate(r3, 0x2008000) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendfile(r1, r3, 0x0, 0x80000001) 23:46:28 executing program 3: openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x40140, 0x0) accept$unix(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x4e28, @rand_addr=0x9}, 0xfffffffffffffc7b) r0 = socket$inet_udp(0x2, 0x2, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000081, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r2) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) sendto$inet(r0, &(0x7f0000000140)="0e71da0b72b55c965f14e301a12de67b8f2df30eb916ebcfc221ad1137a2167605f186325d1728a4f848f5ac56", 0x2d, 0x0, 0x0, 0x0) renameat(r3, &(0x7f0000000240)='./file1\x00', 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x1b, &(0x7f0000000080), 0x0) umount2(&(0x7f0000000280)='./file0\x00', 0x0) io_setup(0x200000000003, 0x0) lstat(&(0x7f0000000200)='./file0\x00', 0x0) 23:46:28 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x227d, &(0x7f00000000c0)) r1 = dup(r0) getsockopt$netrom_NETROM_T2(r1, 0x103, 0x2, &(0x7f0000003780)=0x4, &(0x7f00000037c0)=0x4) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$IMHOLD_L1(r2, 0x80044948, &(0x7f0000000280)=0x5) fcntl$setflags(r0, 0x2, 0x1) write$binfmt_script(r2, &(0x7f00000002c0)={'#! ', './file0', [{0x20, '-'}, {0x20, 'nodevppp1'}, {}, {0x20, '/dev/sg#\x00'}, {}], 0xa, "ed4adcc0e82a63079f2b0545110c8dd6b362a4625f7a1fe12ac2b02c0a511d6ac7a93286324843db37c1189c9e552227d8dc143b088fae364a072b2161249e8a56927c2c635bf4b9d7f8f54b5105d067491ab7dada1e2f4089d7a889d3674029786527da262ab2b8ce82724f7035c300bf37fb07dbaa670bd6377ce9d5ac72c44593a40ff6a4d621216416543596eeb9a3d636529cc900c4d8df9dc8210bd1d68583b8bbec2f5efc97ea63c48a871746db670b30e3966d2f003c56957e79779769e932d2f0193c790e8f34de11813f7b1052fb8fc4c0fa8d849ee1b981e48de4b3ea9af17e62f1fa3bb43e5bea8b5e0582fa487977"}, 0x118) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x5, 0x4) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800200}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="517c12b1", @ANYRES16=r3, @ANYBLOB="010026bd7000fddbdf2508000000300003000800010001000000080001000100000014000200687773696d300000000000000000000008000400010000000c000300080001000000000008000500000000000800040008000000"], 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) [ 481.825546][T20318] Unknown ioctl 1075359313 23:46:28 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xc000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:46:28 executing program 4: ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x227d, &(0x7f00000000c0)) 23:46:28 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) sendto(r1, &(0x7f0000000240)="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", 0x16e, 0x3f, &(0x7f00000001c0)=@ipx={0x4, 0x6, 0xc2, "fd576a757ff2", 0x3}, 0x80) sched_yield() ioctl$SG_SET_RESERVED_SIZE(r0, 0x227d, &(0x7f00000000c0)) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) 23:46:28 executing program 0: pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f00000000c0)=0x10d060000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x100002000002, 0x11, r1, 0x0) write(r0, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000000)={'caif0\x00', {0x2, 0x4e23, @loopback}}) 23:46:28 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x2, 0x2) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000080)={r1, 0x4}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='clear_refs\x00') r3 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') ftruncate(r3, 0x5) exit(0x0) sendfile(r2, r3, 0x0, 0x1) 23:46:28 executing program 4: getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000023c0)={{{@in=@dev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@empty}}, &(0x7f00000024c0)=0xe8) getresuid(&(0x7f0000002500), &(0x7f0000002540), &(0x7f0000002580)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000025c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@mcast1}}, &(0x7f00000026c0)=0xe8) syz_mount_image$xfs(&(0x7f0000001100)='xfs\x00', &(0x7f0000001140)='./file0\x00', 0x2, 0x4, &(0x7f0000002340)=[{&(0x7f0000001180)="58c2897f37457bc58074e147d2b1676cbf66864d1b0f055d43a606aa8bff9668fb4a978bcc22b439bc82f2cc778380af652cd4832d2cf10407869060a4000477a990ae1e7c992869c458d6d6df2229bc519f47e721bb5e9f7f25db4ac3b520bf24cef1e461ff1a1b4c793cf5053206db2380eadaa0406652a8b13f9c2ea35d83c1f7d815095b286ea41097eda11e1b4f24253b8c86", 0x95, 0x6}, {&(0x7f0000001240)="1910594ebf063ce1aedcd469263d04fc300db2af65c4153afaf9b51e19c26c5f02c0666b54528a2d982dfb154fe2f0f2b3de73f96202b554a8dfcb7b4711c75d77820fe13f0b5996c7b07550806fbf1f0345eb62f68ec531a7c528bb124b089088a71b2eea5e1093cca4a8e03dab302a5c252066f59ac856f498", 0x7a, 0x4b000000}, {&(0x7f00000012c0)="8a5bddd4176a8c248568568bbe295003caa19a2948935dea52c36a7a6cb45f9c41c712ec214948da04ddfad623f2821ddecacf05d78416bb414634d0bcbbfc4c92dfdd8f7b6d6f619c9c1aee39149a865b627f28ab3dfa35bf1db770a6", 0x5d, 0x80000000}, {&(0x7f0000001340)="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", 0x1000, 0x81}], 0x2c, &(0x7f0000002700)={[{@grpquota='grpquota'}, {@barrier='barrier'}, {@usrquota='usrquota'}], [{@fowner_eq={'fowner', 0x3d, r0}}, {@subj_user={'subj_user', 0x3d, '}'}}, {@uid_eq={'uid', 0x3d, r1}}, {@euid_eq={'euid', 0x3d, r2}}]}) r3 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x8000, 0x0) recvfrom$inet(r4, &(0x7f0000000100)=""/4096, 0x1000, 0x1, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) ioctl$SG_SET_RESERVED_SIZE(r3, 0x227d, &(0x7f00000000c0)) 23:46:28 executing program 3: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_S390_UCAS_UNMAP(r0, 0x4018ae51, &(0x7f0000000040)={0x7, 0x0, 0xfff}) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={0x0, 0xffffffff}, 0x8) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000001c0)={0xe6, 0x6, 0x6, "7cbf089490259f75ef33d20df60fb48c46725335da8b2d54fc5b5181016ff60e47a8653b4c48ed6707d7fce156a2d61ec6967206f129c3817b2a6cd83824ceb4d958bb6c959fa5947985da61a209e9bd55b9a13cbbad5f7428a26b8441254b0440c334d9a7dc660648d54eadcf45cc0afa68c0f22fb17c90602c01503c3714c90e5fe18fd3fb11bb2539c5e54c2b03c20163cfe14541cf6c9152a4ba81abc77050af825252b100b39f0767441b30ec29f2af6168f09a72adc1f98de982def24f2d2656b808e09678638cd831b52e99bcfe5e9ec9c4d252c35706490451b2c8bb43074db46771"}) ioctl$DRM_IOCTL_GET_MAGIC(r2, 0x80046402, &(0x7f0000000100)=0x81) ftruncate(r2, 0x2008000) sendfile(r1, r2, 0x0, 0x80000001) 23:46:28 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xd000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") [ 482.421758][T20351] Unknown ioctl 1075359313 23:46:29 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000080)=0x3, 0x4) ioctl$SG_SET_RESERVED_SIZE(r0, 0x227d, &(0x7f00000000c0)) [ 482.637689][T20371] Unknown ioctl 1075359313 23:46:29 executing program 2: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_S390_UCAS_UNMAP(r0, 0x4018ae51, &(0x7f0000000040)={0x7, 0x0, 0xfff}) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={0x0, 0xffffffff}, 0x8) ftruncate(r2, 0x2008000) sendfile(r1, r2, 0x0, 0x80000001) 23:46:29 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xe000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:46:29 executing program 4: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x800, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r2, 0x227d, &(0x7f00000000c0)) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000140)={0x0, 0xb7, "4350d24bda3748c1c213af91225ee4620414af1ca18f0dbbcaa6dea1c4fe2c072e9c0c355ccb6ca8dbc18c87460b8c8f9264c9bbf91d3ed7e3484eba8c022a0c3d569528ee31205c14a11bc0efeda255e6480bcd29ac3df9fbf0ee95fda08776f47216a4e41659afae778c1037700b5bb9807b2c7aa55ed8f0f4ed0ae0b6dd935495e43b808c7279654544c37f0a81ec8783eef097e372736f85efb1ad626e1a34b0bb5904eac160e5da804649795dd5ada4a3860ba5a6"}, &(0x7f0000000200)=0xbf) setsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000240)={r4, 0x8}, 0x8) ioctl$SG_SET_TIMEOUT(r2, 0x2201, &(0x7f0000000080)) 23:46:29 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x200100, 0x0) sendmsg(r1, &(0x7f00000004c0)={&(0x7f0000000100)=@generic={0x1b, "2e7badf35bb1138c33a6f98ff55497280e9ce1245bd3371e4ca28780b4abe10743e470ac647271da4fca79e7d747dcefd150ad570a45edf90f3aab7e362a02b833d6c5161fcdf582cd79a281ad9de2fbb8b95697633694535b915c266a81fd0795bd51b67bb77a4bb306c92c60ee5f19658692b389cfaeea8a28026d8eb8"}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000080)="3b1b0bc29647a965a48e8779ed4ae73b12461bdfa0741e1a14fd07b85c2a0bb4", 0x20}, {&(0x7f0000000180)="cd1296ea38e35f73413d152c363497e1cacdaaef761faf3ce5f87b1a75c8cb96a7429a9c4f8b101235ce3baeb14276cf541a3b93b9cf42642c694740c237e4ea19f1f0f12c8ee7b0cff92dd010c0573e2acdfcd02bcb348794db753276f59a5897dd002eb326991a7499eb00be4ad837013af2f707f3d2ad358b64fa7697d9e83df8a5", 0x83}, {&(0x7f0000000240)="d25da53cd685b3cf7aadf73d84eb699a1948f3420ece7ab4c85340afd6ce5ad8f78d5c6525fe6b117cce89319ec2f6b44b9c76d64ed141cdc25697c337b8ab5d1d439d231e97368ed377acdf095195d4bea5de5b93173dd5035b1b8921d2e9c5803d49de7dc747244fca28632554652f4b6c293eeb77ef69af52503c6be1c6f6d68a8eff67b69b46c2043fc730d5c21b2bad2ecd3f3f38738b2d0ab9feca4c8bc0cafdd4e61d6f5b11d764d0efd8964b7bffa8336fc224a5b58d73393194436847cf7464da53", 0xc6}], 0x3, &(0x7f0000000380)=[{0xe8, 0x1, 0x8, "baafaf0a6465553b79aa5a6e499110784a14e6f71efe7888492ec172a223ac89cb22fb591bf2fb94910624b457eccd52f47f05c1cf243b7c6f499d4cd2d3b4c2360865da294e84b61ffe663692d559aef6ac5a17b83259e545d8d54bd9c6a6e57a8be0d2f2c6c38f5abcd79851eb09e2c485732ff69da1fa74e365bf386008ff4be0078f439b004451fcaa82386c1c9a95afab416f481bf1542ac4cd5020f082f67cb442dd66f1454df5dcc8d613cd2d68e1f7420f53a043a6accdc7073177d39124bcb96d16fd3d50f3cef90122098bc79353d2"}, {0x58, 0x0, 0x63, "7ce9dfb806598a67d36dab7a547d24d2f4ecf21aaad46bc1942de7584ba9416fff2b9e6f8fb1d6ff8672ae7fcf322a90c312d0dbe63ffb462009249ad18ef9cef671c6"}], 0x140}, 0x20000010) ioctl$SG_SET_RESERVED_SIZE(r0, 0x227d, &(0x7f00000000c0)) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) [ 482.974797][T20390] Unknown ioctl 1075359313 23:46:29 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xf000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:46:29 executing program 3: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_S390_UCAS_UNMAP(r0, 0x4018ae51, &(0x7f0000000040)={0x7, 0x0, 0xfff}) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={0x0, 0xffffffff}, 0x8) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000001c0)={0xe6, 0x6, 0x6, "7cbf089490259f75ef33d20df60fb48c46725335da8b2d54fc5b5181016ff60e47a8653b4c48ed6707d7fce156a2d61ec6967206f129c3817b2a6cd83824ceb4d958bb6c959fa5947985da61a209e9bd55b9a13cbbad5f7428a26b8441254b0440c334d9a7dc660648d54eadcf45cc0afa68c0f22fb17c90602c01503c3714c90e5fe18fd3fb11bb2539c5e54c2b03c20163cfe14541cf6c9152a4ba81abc77050af825252b100b39f0767441b30ec29f2af6168f09a72adc1f98de982def24f2d2656b808e09678638cd831b52e99bcfe5e9ec9c4d252c35706490451b2c8bb43074db46771"}) ioctl$DRM_IOCTL_GET_MAGIC(r2, 0x80046402, &(0x7f0000000100)=0x81) ftruncate(r2, 0x2008000) sendfile(r1, r2, 0x0, 0x80000001) [ 483.229176][T20401] Unknown ioctl 1075359313 23:46:29 executing program 0: pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f00000000c0)=0x10d060000) getegid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x40000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x100002000002, 0x11, r2, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000000)=0x100000000000, 0x1) 23:46:29 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0xdb9, 0x10002) ioctl$SIOCAX25GETINFOOLD(r1, 0x89e9, &(0x7f0000000140)) ioctl$SG_SET_RESERVED_SIZE(r0, 0x227d, &(0x7f00000000c0)=0x1) 23:46:29 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='clear_refs\x00') ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) r1 = getpgrp(0xffffffffffffffff) r2 = syz_open_procfs(r1, &(0x7f0000000180)='stat\x00') bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r2, &(0x7f0000000040)="abb15484701c491d563ad70e658bd809608d8af145ea2a6f91f7d9febbf87a6fd64e8e", &(0x7f0000000080)=""/107}, 0x18) exit(0x0) sendfile(r0, r2, 0x0, 0x4000000001) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r0, 0xc0385720, &(0x7f0000000240)={0x5, {0x77359400}, 0x4, 0x100005}) 23:46:29 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x10000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:46:29 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) delete_module(&(0x7f0000000000)='{\x00', 0x800) ioctl$SG_SET_RESERVED_SIZE(r0, 0x227d, &(0x7f00000000c0)) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x400000, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000100)={{{@in=@multicast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f0000000200)=0xe8) ioctl$SIOCAX25DELUID(r1, 0x89e2, &(0x7f0000000240)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, r2}) 23:46:30 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffff9c, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000280)=ANY=[@ANYBLOB="05000000000000005d0bffc69ce957c0b288421f00000000000000410101c00000000001000000100000003e0f000000000000018000000000000023080000000000001f0042ba249ec569ebea0000010000000100000000000000d1c1f8f1babc5a44b11426ea04af05e75c8e3e336b6d3ddbf0bb0659de8a1724123fa7017163fdcf85dcd51f83b8a9ad1efdac3c7bbfa892185f8fcaee010bcb5a758ebd74eb4f0d034df5279066c4023bcdf3b7a1fc8f08e27468f6e80d79e97600acbc37bb37594e1ce0347677d2e54c2e28d8c8ef6de717ea8f384e8408be860574c977e6a9d5b0cc1e1b6c9e9dd92d24bff6fe3fff8e4885dfa7c7db7cd0ea5a5d97939c1ad9c3e871888706b7ebb63a0e0910a885661deda284135ad6f351f7f9dc291a795db5c764be9e60d050b9525d22bb4bc320d4b12b321b9c8564f4ea9f52e42503d59c0340"]) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x4000, 0x0) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f00000001c0)={0x1, &(0x7f0000000080)=[{0x0}]}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000240)={r3, &(0x7f0000000200)=""/34}) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r2, 0x80845663, &(0x7f0000000100)={0x0, @reserved}) ioctl$SG_SET_RESERVED_SIZE(r0, 0x227d, &(0x7f00000000c0)) [ 483.770731][T20429] Unknown ioctl 1075359313 23:46:30 executing program 2: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_S390_UCAS_UNMAP(r0, 0x4018ae51, &(0x7f0000000040)={0x7, 0x8, 0xfff}) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={0x0, 0xffffffff}, 0x8) ioctl$KVM_TPR_ACCESS_REPORTING(r0, 0xc028ae92, &(0x7f0000000100)={0x36, 0xdb}) ftruncate(r2, 0x2008000) sendfile(r1, r2, 0x0, 0x80000001) 23:46:30 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x227d, &(0x7f00000000c0)=0xfffffffffffffffe) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x100000000002dff, 0x0) recvfrom$llc(r1, &(0x7f0000000100)=""/92, 0x5c, 0x2, 0x0, 0x0) 23:46:30 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x11000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:46:30 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) readahead(r0, 0x3, 0x10000) ioctl$SG_SET_RESERVED_SIZE(r0, 0x227d, &(0x7f00000000c0)) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000080)=0x60) [ 484.001692][T20441] Unknown ioctl 1075359313 [ 484.037893][T20441] Unknown ioctl -1071075694 23:46:30 executing program 4: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x11c605cee3fba504) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f00000001c0)={{0x1, 0x8001}, 'port1\x00', 0x88, 0x4, 0x7d, 0x20, 0x5, 0x0, 0x9b, 0x0, 0x100000006, 0x7}) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0xfffffffffffffffd) ioctl$SG_SET_RESERVED_SIZE(r1, 0x227d, &(0x7f00000000c0)) 23:46:30 executing program 3: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_S390_UCAS_UNMAP(r0, 0x4018ae51, &(0x7f0000000040)={0x7, 0x0, 0xfff}) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={0x0, 0xffffffff}, 0x8) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000001c0)={0xe6, 0x6, 0x6, "7cbf089490259f75ef33d20df60fb48c46725335da8b2d54fc5b5181016ff60e47a8653b4c48ed6707d7fce156a2d61ec6967206f129c3817b2a6cd83824ceb4d958bb6c959fa5947985da61a209e9bd55b9a13cbbad5f7428a26b8441254b0440c334d9a7dc660648d54eadcf45cc0afa68c0f22fb17c90602c01503c3714c90e5fe18fd3fb11bb2539c5e54c2b03c20163cfe14541cf6c9152a4ba81abc77050af825252b100b39f0767441b30ec29f2af6168f09a72adc1f98de982def24f2d2656b808e09678638cd831b52e99bcfe5e9ec9c4d252c35706490451b2c8bb43074db46771"}) ioctl$DRM_IOCTL_GET_MAGIC(r2, 0x80046402, &(0x7f0000000100)=0x81) ftruncate(r2, 0x2008000) sendfile(r1, r2, 0x0, 0x80000001) 23:46:30 executing program 0: pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="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"], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2275, &(0x7f00000000c0)=0x10d060000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x100002000002, 0x11, r3, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) 23:46:30 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x12000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:46:30 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') exit(0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x3f) sendfile(r0, r1, 0x0, 0x1) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000000)=0xffffffffffffffff, 0x4) 23:46:30 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000000)) ioctl$SG_SET_RESERVED_SIZE(r0, 0x227d, &(0x7f00000000c0)) [ 484.414479][T20465] Unknown ioctl 1075359313 23:46:30 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x227d, &(0x7f00000000c0)) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x6, 0x80800) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) 23:46:30 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x13000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") [ 484.543439][T20441] Unknown ioctl 1075359313 [ 484.545258][T20475] Unknown ioctl -1071075694 23:46:31 executing program 2: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_S390_UCAS_UNMAP(r0, 0x4018ae51, &(0x7f0000000040)={0x7, 0x0, 0xfff}) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={0x0, 0xffffffff}, 0x8) ftruncate(r2, 0x2008000) sendfile(r1, r2, 0x0, 0x80000001) 23:46:31 executing program 4: nanosleep(&(0x7f0000000000)={0x77359400}, &(0x7f0000000080)) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x227d, &(0x7f00000000c0)) [ 484.745181][T20489] Unknown ioctl 1075359313 [ 484.794388][T20489] Unknown ioctl 1075359313 23:46:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x14000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:46:31 executing program 2: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_S390_UCAS_UNMAP(r0, 0x4018ae51, &(0x7f0000000040)={0x7, 0x0, 0xfff}) r1 = socket$inet6(0xa, 0x400000000001, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r2, 0x101, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @multicast1}, @in={0x2, 0x4e21, @empty}}}, 0x118) close(r1) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x34, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7ff, 0x8}, 0x0, 0x10000, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={0x0, 0xffffffff}, 0x8) ftruncate(r3, 0x2008000) sendfile(r1, r3, 0x0, 0x80001001) [ 485.004083][T20498] Unknown ioctl 1075359313 [ 485.047705][T20498] Unknown ioctl 1075359313 23:46:31 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) r2 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f00000000c0)=0x10d060000) socketpair$unix(0x1, 0x9, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x100002000002, 0x19, r2, 0x0) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f0000000000)={0x0, 0x7, 0x100000000, 0x5}, 0x6) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x6, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x7f, 0x4, [0x0, 0x800, 0x0, 0x0]}, &(0x7f00000006c0)=0x10) r5 = syz_open_dev$audion(0x0, 0x0, 0x20001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) getpid() ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, [], [{0x1000, 0x0, 0x0, 0x6, 0x9, 0x100}, {0x0, 0x6, 0x0, 0x6}]}) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r5, 0x0, 0x80) signalfd(r6, &(0x7f0000000100)={0x1}, 0x8) ioctl(0xffffffffffffffff, 0xffffffffffffff7f, &(0x7f0000000780)="da0373d9a376eefa62ced01d2ffd68ccfa44aa3d6f3418b39771f87d6d235bb8784f4207615de34a34213ac64759a809cf8bd0027c76ddacd76cd12d3759781a32d56be582a2baf3f5e6042029727306ea5d675cfa6a3f51fa7a5f11cde691e7989c191138ec") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r7, 0x0) write$binfmt_misc(r7, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x104) io_setup(0x101, &(0x7f0000000040)) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 23:46:31 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') exit(0x6) sendfile(r0, r1, 0x0, 0x1) 23:46:31 executing program 2: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_S390_UCAS_UNMAP(r0, 0x4018ae51, &(0x7f0000000040)={0x7, 0x0, 0xfff}) write$FUSE_OPEN(r0, &(0x7f0000000100)={0x20, 0x0, 0x7, {0x0, 0x7}}, 0x20) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x0, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={0x0, 0xffffffff}, 0x8) ftruncate(r2, 0x8) sendfile(r1, r2, 0x0, 0x80000001) 23:46:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x15000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") [ 485.339879][T20515] Unknown ioctl 1075359313 [ 485.365610][T20515] Unknown ioctl 1075359313 23:46:31 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendmsg$nfc_llcp(r0, &(0x7f0000001780)={&(0x7f00000002c0)={0x27, 0x1, 0x1, 0x4000000000007, 0x4, 0xfffffffffffffff9, "fcaf02b8a657f7fb1d2a88cfcdc9f0fcfc1bcfb28dcc5bd04450e8f15a794286bf3c94e9e20bf1cc3ecbd93a7221bbc5c3623b877f6937431275393b3387c2", 0x32}, 0x60, &(0x7f00000006c0)=[{&(0x7f0000000340)="aaaec959f268cd239ba684a30eb9e02e293fb63284b73ae82ef97f77214a3b7003dd8b231412f2e842ad0121e0b34313d2e71becf096dbfebc22962b8edc17164177835902ddc75f2a6d4b78f66798b703fe91f23e833fd5d3e1ca2c925f1dc8a95ecfb179010a6a9ebef06c571126cad0594c0809ea7122bbe76073e39d4ef23acd633db53b85ee592f6546b4c4927ef26cf90f1ce8ac943fa98b5c6b1c320764f71ad5aff90508ac04db571d282e591ca9240175a854c369543850fe88d492ae93054155f45282d9867b4f40f6c1ab962189dddc5dc0f0c4dffd96f9f64396c3d3a84f7a6017736854b5d35624d4d5b52e95554bd4", 0xf6}, {&(0x7f0000000440)="d0932b", 0x3}, {&(0x7f0000000480)}, {&(0x7f00000004c0)="acac21e88eaff6ea390d339dc8805da43aac12a81509928c7e8facdd2d780d85e16574f3c34576b5e7858b2972948366bacb3fe96d2476d0d374973137508b9b204d6dbc086902", 0x47}, {&(0x7f0000000540)="a7d27ce5343f0d9aa1b0f8b84039fa47999ccb54e01d131ea2f539ea05d5e21cc7071b6c7418b0e746018092409f10f4cac2cde69642", 0x36}, {&(0x7f0000000580)="a34980ade7d7a77001cc15aefc93d29c71f3567dd99ea3bbb4bd34fdd183aad6dcd191edf39bf23db75a26153c0f2c14e496e53bd8ad22eb4312f042d3ac96fdda5bf78c349f18f37f1d32c0659bee828dd77236342d8c2a6a79a8ebb87d439d91574f64cdec43413c9818f7e85d5bf0917fcefa67d2a622b2284b5e6d49e68391c978d0689c0a0a84fcc745b9e2a85c24a13407eee65738bc6d96494ea137c8e25ba2d5ee5cc3df94ce87f14f0ca0a108dca55167", 0xb5}, {&(0x7f0000000640)="6463e5b63e2c7e2d7b70ed8dae14e5ead06d6ad74e378c9ac242cf3af447766b9fc82793fe99ff036ed3945fc5dd08017acaf594965098d6dcde67e4844c046702771f4aff3cc4fa39eac24041c1f0a70d", 0x51}], 0x7, &(0x7f0000000740)={0x1010, 0x116, 0x1000, "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"}, 0x1010, 0x4}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x400, 0x0) write$capi20_data(r0, &(0x7f0000000040)={{0x10, 0xe4, 0xc1, 0x83, 0x100000000, 0x2}, 0xc8, "973c6d68a2729cbbf8862922b7095d121427d27815e9fb7178a0f93b7c6b6ac2d961efcb3501debd41aeca91a4e6976351067875bc084496a898bdab71a56f3486ad5245b6760fb1ea0eb3b7546f85b9edc12eedde451b18525ed588c4c223b9b1264664f18d4d55589f36dffc19329b485a57267c7429d3ec3312f52cd6cd736abaf8a27f20e0235745d89722c653bfede060a4201152313b28b1f3add2792f0df3a0dbdf7f71a9e28ae608fb7abc739a8510ea2f7c502af3db128b79a61424e9857c415b702468"}, 0xda) exit(0x1000004) ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f0000000140)={0x7f, &(0x7f00000001c0)="7398de5ba1ae416e0b0b8d87ee05130728591363dc3f1bd45b318d8e25737551830c77c9393181cb728e041d3f9f7c439fcd1efe961648ae1bf1e10e8cfc21a564bc291a158dafb6b5ab2f0201519b75bc4fab6e511895877e88d50151035d6abbc0cb71c296ad9a5f0e8a2bef47fd1d2ec7bbc2c56f5ebcb8d08f7f6f3e75fff9a17ede17b1c7bfe9e559b4f166e14c3ef30dd818113f349ce0322ba9469426e9c1e9b60372fc65b2a3c9cb4be0a381955d2eb707e84037e31fb45ba610db2982e63f225bb9bfb5fa8e73090c46aa"}) sendfile(0xffffffffffffffff, r0, 0x0, 0x1) 23:46:31 executing program 0: pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SG_GET_KEEP_ORPHAN(r0, 0x2288, &(0x7f0000000000)) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f00000000c0)=0x10d060000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x100002000002, 0x11, r1, 0x0) write(r0, &(0x7f00000001c0), 0xfffffef3) 23:46:31 executing program 2: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_S390_UCAS_UNMAP(r0, 0x4018ae51, &(0x7f0000000040)={0x7, 0x0, 0xfff}) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x1, 0x1, 0x4) r2 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001) r3 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) listen(r2, 0x6) ioctl$RTC_UIE_ON(r3, 0x7003) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={0x0, 0xffffffff}, 0x8) ftruncate(r3, 0x2008000) sendfile(r1, r3, 0x0, 0x80000001) 23:46:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x150001c0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:46:32 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x227d, &(0x7f00000000c0)) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x800, 0x0) r2 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x7f, 0x400000) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000100)={0x3, r2}) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) [ 485.599225][T20538] Unknown ioctl 1075359313 23:46:32 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x227d, &(0x7f00000000c0)) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000080)={0x3, 0x1, 0x0, 0x10000, 0x3, 0x5, 0x1, 0x401, 0x2, 0x9}) 23:46:32 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x227d, &(0x7f00000000c0)) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x8000, 0x0) write$apparmor_exec(r1, &(0x7f0000000140)={'stack ', '^\x00'}, 0x8) accept$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000100)=0x1c) 23:46:32 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x16000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:46:32 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x7, 0xfffffffbfffffffc) ioctl$SG_SET_RESERVED_SIZE(r0, 0x227d, &(0x7f0000000040)=0x20000000006) 23:46:32 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') exit(0x6) sendfile(r0, r1, 0x0, 0x1) 23:46:32 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x227d, &(0x7f00000000c0)) rmdir(&(0x7f0000000080)='./file0\x00') 23:46:32 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x17000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:46:32 executing program 1: r0 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) ioctl$IOC_PR_CLEAR(r0, 0x401070cd, &(0x7f0000000080)={0x7f}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='clear_refs\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') exit(0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f00000001c0)=ANY=[@ANYBLOB="020046402f5b913f51ff64144e15aeb74c9ab7c04e1cdef7000000000017f5cfbcbc079ddfab0e230145674a0e24a21c16d1c424a1e5fed41e8b22caae31c797e6845322a782353fe59e7ad9cd5a5a8bb5521d3e9528a95532d5a692678a811554810b24988e760a395ed4df0a747138f4a502d8bf6adea98b144619457c821ec4884d55ea2b923218d8bb6bd81840028a743377d8f74270ca479409095a04cd318129696bec17ee00759bcebd4d741164fe866baed0ee88ae4bde63dafa8f5c47de8426df346bd9ac7738d6c7776f753e324508d7caf19f05c93f47e2a4e0335bb83f9cdbb433463b80a573a991a105a8"]) sendfile(r1, r2, 0x0, 0x1) mq_timedreceive(r1, &(0x7f0000000000)=""/40, 0x28, 0x7, &(0x7f0000000040)={0x0, 0x1c9c380}) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f00000000c0)={[{0x1, 0x3f, 0x0, 0x3, 0x3753, 0x2, 0x6, 0x7, 0x5, 0x0, 0x800, 0x8, 0xde16}, {0x8, 0x7fffffff, 0x5, 0x9, 0x0, 0xfffffffffffffff7, 0x7f, 0x5, 0x0, 0x101, 0x0, 0x0, 0x7}, {0x7b5, 0x6, 0x7ff, 0xfffffffffffffffb, 0x5, 0xffff, 0x1, 0x19, 0x3, 0x5, 0x40, 0x9, 0x800}], 0x8}) 23:46:32 executing program 0: pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f00000000c0)=0x10d060000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x100002000002, 0x11, r1, 0x0) write(r0, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000000)) [ 486.393947][T20576] Unknown ioctl 1075359313 23:46:32 executing program 2: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_S390_UCAS_UNMAP(r0, 0x4018ae51, &(0x7f0000000040)={0x7, 0x0, 0xfff}) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) fcntl$getownex(r1, 0x10, 0x0) r2 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={0x0, 0xffffffff}, 0x8) ftruncate(r3, 0x2008000) sendfile(r2, r1, 0x0, 0x80000001) 23:46:32 executing program 4: openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x227d, &(0x7f00000000c0)) 23:46:32 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x170101c0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:46:33 executing program 4: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0xb) r2 = dup2(r1, r1) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="b6b6db4967c83eb5831c660d8c923460b593a4c06b8ba4569709666e3ee7bf606b856a95415923614fda796cfadfd2f3d4b1de080076c1ffff59bcb6d1011df1adf25edbb4339c8b4eabbdb0e00a1f3535ae18785c4cafcbe089169c92a92bfbae51a9369027d3140000"], 0x1}}, 0x44801) sendmsg$FOU_CMD_DEL(r2, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={0x0}}, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000800)=ANY=[]) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440)='/dev/sequencer\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0) r3 = epoll_create1(0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) close(r3) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f00000000c0)) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000001c0)={0x11, @multicast1, 0x4e22, 0x0, 'fo\x00', 0x0, 0x90c8, 0x33}, 0x2c) r4 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r4, 0x227d, &(0x7f00000000c0)) [ 486.698404][T20605] Unknown ioctl 1075359313 [ 486.742144][T20605] Unknown ioctl 1075359313 23:46:33 executing program 2: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_S390_UCAS_UNMAP(r0, 0x4018ae51, &(0x7f0000000040)={0x7, 0x0, 0xfff}) r1 = socket$inet6(0xa, 0x400000000001, 0x8) close(r1) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={0x0, 0xffffffff}, 0x8) ftruncate(r2, 0x2008000) sendfile(r1, r2, 0x0, 0x80000001) 23:46:33 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x18000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") [ 486.978754][T20615] Unknown ioctl 1075359313 23:46:33 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000140)={0xa, 0x4, 0xfa00, {r2}}, 0xc) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)) r3 = msgget$private(0x0, 0x4) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000002c0)=0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000300)={[], 0x400, 0x100000001, 0x3, 0x40000000000000, 0x8, r4}) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f0000000080)=0x1) msgctl$MSG_INFO(r3, 0xc, &(0x7f00000001c0)=""/219) [ 487.120660][T20615] Unknown ioctl 1075359313 23:46:33 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') exit(0x6) sendfile(r0, r1, 0x0, 0x1) 23:46:33 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x19000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:46:33 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000140)={0xa, 0x4, 0xfa00, {r2}}, 0xc) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)) r3 = msgget$private(0x0, 0x4) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000002c0)=0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000300)={[], 0x400, 0x100000001, 0x3, 0x40000000000000, 0x8, r4}) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f0000000080)=0x1) msgctl$MSG_INFO(r3, 0xc, &(0x7f00000001c0)=""/219) 23:46:33 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x0}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r1, 0xc010641d, &(0x7f00000002c0)={r2, &(0x7f00000001c0)=""/232}) syz_open_dev$swradio(&(0x7f0000000340)='/dev/swradio#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x8) exit(0x0) sendfile(r0, r1, 0x0, 0x1) 23:46:33 executing program 2: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_S390_UCAS_UNMAP(r0, 0x4018ae51, &(0x7f0000000040)={0x7, 0x0, 0xfff}) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r2 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(r2, &(0x7f0000000380)="5b98649d5e2cc3559ce7fe45825b21b6ed05d23f3778a0ae8446baff72e09a8fb6f84f168660960977ecf45510af1082074638e0bd7990177d4e2905cb61df9820a4fcbba913a1fb1a7d95d2e9291b515810a2245750d25d2b4fae2b74cecb7c4bb11c6036e6d33bd388fbfac99bfbf021f1ca921fc63e", 0x77) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={0x0, 0xffffffff}, 0x8) ioctl$VIDIOC_G_AUDIO(r0, 0x80345621, &(0x7f0000000100)) ftruncate(r3, 0x2008000) sendfile(r1, r3, 0x0, 0x80000001) ioctl$KVM_SET_FPU(r0, 0x41a0ae8d, &(0x7f00000001c0)={[], 0x7, 0x1, 0x200, 0x0, 0x0, 0x4000, 0x100000, [], 0x1}) 23:46:33 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000140)={0xa, 0x4, 0xfa00, {r2}}, 0xc) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)) r3 = msgget$private(0x0, 0x4) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000002c0)=0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000300)={[], 0x400, 0x100000001, 0x3, 0x40000000000000, 0x8, r4}) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f0000000080)=0x1) msgctl$MSG_INFO(r3, 0xc, &(0x7f00000001c0)=""/219) 23:46:33 executing program 0: pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f00000000c0)=0x10d060000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x100002000002, 0x11, r2, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req={0x7, 0xfff, 0xe5, 0x8}, 0x10) write(r1, &(0x7f00000001c0), 0xfffffef3) [ 487.419798][T20651] Unknown ioctl 1075359313 [ 487.449747][T20651] Unknown ioctl -2144053727 23:46:33 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1a000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:46:33 executing program 4 (fault-call:4 fault-nth:0): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) [ 487.517542][T20656] Unknown ioctl 1101049485 23:46:34 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) 23:46:34 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x2, 0x0) 23:46:34 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1b000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:46:34 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r0, r1, 0x0, 0x1) 23:46:34 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x5411, 0x0) 23:46:34 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1b0001c0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") [ 488.220675][T20656] Unknown ioctl 1075359313 [ 488.271802][T20687] Unknown ioctl -2144053727 23:46:34 executing program 1: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000140)='clear_refs\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') exit(0x0) getsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000000000)=0x401, &(0x7f0000000040)=0x2) sendfile(r1, r2, 0x0, 0x1) 23:46:34 executing program 2: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x101000, 0x0) ioctl$VT_RELDISP(r0, 0x5605) ioctl$KVM_S390_UCAS_UNMAP(r0, 0x4018ae51, &(0x7f0000000040)={0x7, 0x0, 0xfff}) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001) r2 = open(&(0x7f0000000000)='./bus\x00', 0x4004, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={0x0, 0xffffffff}, 0x8) ftruncate(r2, 0x2008000) sendfile(r1, r1, 0x0, 0x1) 23:46:34 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x5421, 0x0) 23:46:34 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r0, r1, 0x0, 0x1) 23:46:34 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPCONNADD(r1, 0x400443c8, &(0x7f0000000100)={r0, 0x3}) r2 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f00000000c0)=0x10d060000) splice(r1, &(0x7f0000000880), r2, &(0x7f00000008c0), 0x1, 0x0) socketpair$unix(0x1, 0x805, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c4602030200ff0000000000000003003e0001000100d101000038000000ca03000000800000010020000100ffff0104ff00000000000300007003000000030000000300000008000000ff01000003000000ff0100003f07c7039c8377b7cde7074ef4fe12f15dcd73a5d65c4ac879da2102e1e759e6580e68a4fa3890c488ddfd33dfcdc6f577f3f7fe3f1486d9fecdd8a6da3d1496da0cc7a120614156a455f01b3b3c9fdb0af4cdc38441ef7cf9127a990ab00d7667fe98dc1ddb654f09c548117617537e0192c0bad5c978fc00"/1744], 0x6d0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x100002000002, 0x11, r0, 0x0) ioctl$PPPIOCCONNECT(r1, 0x4004743a, &(0x7f0000000080)=0x4) write(r1, &(0x7f00000001c0), 0xfffffef3) 23:46:34 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1c000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:46:34 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x5450, 0x0) 23:46:34 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r0, r1, 0x0, 0x1) 23:46:35 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x5451, 0x0) [ 488.608212][T20716] Unknown ioctl 22021 [ 488.626398][T20716] Unknown ioctl 1075359313 23:46:35 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') exit(0x6) sendfile(r0, 0xffffffffffffffff, 0x0, 0x1) [ 488.651339][T20716] Unknown ioctl 22021 [ 488.661853][T20721] Unknown ioctl 1075359313 23:46:35 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x5452, 0x0) 23:46:35 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1d000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:46:35 executing program 1: syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0xffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') exit(0x0) sendfile(r0, r1, 0x0, 0x1) 23:46:35 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x5460, 0x0) 23:46:35 executing program 2: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_S390_UCAS_UNMAP(r0, 0x4018ae51, &(0x7f0000000040)={0x7, 0x0, 0xfff}) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={0x0, 0xffffffff}, 0x1f5) getsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000100), &(0x7f0000000140)=0xb) ftruncate(r2, 0x2008000) sendfile(r1, r2, 0x0, 0x80000001) 23:46:35 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1e000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:46:35 executing program 0: pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f00000000c0)=0x10d060000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x100002000002, 0x11, r2, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$peek(0x1, r4, &(0x7f0000000180)) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x21}, 0x21) ioctl$KVM_DIRTY_TLB(r1, 0x4010aeaa, &(0x7f0000000000)={0x401, 0x40}) [ 489.286252][T20752] Unknown ioctl 1075359313 23:46:35 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x8901, 0x0) 23:46:35 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x8902, 0x0) 23:46:35 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1e010000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:46:36 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') exit(0x6) sendfile(r0, 0xffffffffffffffff, 0x0, 0x1) 23:46:36 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x8903, 0x0) 23:46:36 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1f0001c0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:46:36 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x8904, 0x0) [ 490.077650][T20793] Unknown ioctl 1075359313 23:46:36 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x100, 0x8) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000040)={0x8, 0x6, 0x4, 'queue0\x00', 0x100000001}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='clear_refs\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') exit(0x0) sendfile(r1, r2, 0x0, 0x1) 23:46:36 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x8906, 0x0) 23:46:36 executing program 0: pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000080)=0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x800, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x100002000002, 0x11, r1, 0x0) write(r0, &(0x7f00000001c0), 0xfffffef3) 23:46:36 executing program 2: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x1f, 0x0) ioctl$KVM_S390_UCAS_UNMAP(r0, 0x4018ae51, &(0x7f0000000040)={0x7, 0x0, 0xfff}) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={0x0, 0xffffffff}, 0x8) r3 = getpgid(0x0) ptrace$pokeuser(0x6, r3, 0x2, 0x0) ftruncate(r2, 0x2008000) sendfile(r1, r2, 0x0, 0x80000001) 23:46:36 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x200001c0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:46:36 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x8907, 0x0) 23:46:36 executing program 0: pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f00000000c0)=0x10d060000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f00000001c0), 0xfffffef3) [ 490.303080][T20810] Unknown ioctl 1075359313 23:46:36 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x8940, 0x0) 23:46:37 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') exit(0x6) sendfile(r0, 0xffffffffffffffff, 0x0, 0x1) 23:46:37 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x8941, 0x0) 23:46:37 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x221001c0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:46:37 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x894c, 0x0) [ 491.068779][T20847] Unknown ioctl 1075359313 23:46:37 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x8980, 0x0) 23:46:37 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x29000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:46:37 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r0, r1, 0x0, 0x1) 23:46:37 executing program 2: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_S390_UCAS_UNMAP(r0, 0x4018ae51, &(0x7f0000000040)={0x7, 0x0, 0xfff}) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={0x0, 0xffffffff}, 0x8) ftruncate(r0, 0x5) sendfile(r1, r2, 0x0, 0x80000001) 23:46:37 executing program 0: pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@local}}, &(0x7f00000004c0)=0xe8) bind$xdp(r1, &(0x7f0000000500)={0x2c, 0x0, r3, 0x39, r1}, 0x10) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f00000000c0)=0x10d060000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x100002000002, 0x11, r2, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) [ 491.265193][T20864] Unknown ioctl 1075359313 23:46:37 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x8981, 0x0) 23:46:37 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x2a1001c0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") [ 491.287804][T20864] Unknown ioctl 1075359313 23:46:37 executing program 1: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f00000001c0)={[0x976, 0x9, 0x1, 0x8, 0x2, 0x401, 0x9, 0x7fff, 0x800, 0x400, 0x5ea, 0x0, 0x3, 0x6, 0x7ff, 0x99], 0x15000, 0x108000}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)) r1 = getpid() ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x9, 0x1, 0x0, 'queue1\x00', 0x100000000}) r2 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x20, 0x20400) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000080)={0x1, 0x0, 0x5, 0x0, 0xe}) r3 = syz_open_procfs(r1, &(0x7f0000000440)='fd/4\x00Y\xc3O|\xb4b\xf9\xdf\xb3\xfd2\xee2\x04\xf8\xed+2\xa7\xc4[O1&dA\xfc\xcaK\xc9\xbd\x10\xdc>R\x1d\x82\xf3\xed\f\x06 FP\xf6\xfdR\xa7\xc8\xb0*\xa4\x8e\x00\x00\x00\x00\x00\xc7\xa0\xc2\x10\xa4\x9f1\xc2\x89\v\xbam\xec\xbfd\xa2\xd6\xcf\xb6;\x13\x91(<\xbb\x04\x96\xb9\x1d0\x1d\v\x98\xe3\xd4yy\xcdI\xa4\x01\x83\xce\xb3\x15\x81n:\x84CY\xfa\xa9\x18\xad\xc7+\x18\xbd=\xffB\x8a\x1c\x1a\x8c\x13P\xf9{\x00\xee\x14\xfa)\a\xf0l\x83\xeb\x8c\xe5\xcc\xb6\xac\xd3h\x10H\xf76\xeaZ\xc2\xff\x8fPbg^e\xf3\x99\\\x94\x0fUN\x9f\xf0\xbd\xbet\xeb\xdc?\xd41\xb0|\xb4m\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xe4kX\xe8 $\x87\xfeS#\xda9\x1f\x01\xe3\xc4\xa2\xaa\x85\xd9S!noo2\x12q\xc9\x8c\xf9[\xd1\xc4\xa2\xf4\x93n\x0f\x19FA\xb2o1\x96D\x81f\xff\xe3m\x9a\x8e\xb7&\xd9\xc0l\x1bz\xea\n\'\x1b\xad3X\":\x94\xcb\xd25\xcf\x89d:\b\xd9\xab~\x13\aP\x00\x1f\x99\ah\x9eS\xec\xc3\xbb\x99m\x96\x17\xce\xaf\x1e:\'\b\n\x1c\xa3\bP\x1ej\xb3\xf5.\x9bC\xb9X\x16>\xb6\xa3\xea{\xed\xcd(') r4 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') exit(0x0) sendfile(r3, r4, 0x0, 0x1) [ 491.410768][T20878] Unknown ioctl 1083223682 [ 491.426265][T20878] Unknown ioctl -1064545486 23:46:37 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') exit(0x6) sendfile(0xffffffffffffffff, r0, 0x0, 0x1) 23:46:37 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x8982, 0x0) 23:46:37 executing program 2: ioctl$KVM_S390_UCAS_UNMAP(0xffffffffffffffff, 0x4018ae51, &(0x7f0000000040)={0x7, 0x0, 0xfff}) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='rdma.current\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={0x0, 0xffffffff}, 0x8) ftruncate(r0, 0x2008000) sendfile(r0, r1, 0x0, 0x80000001) 23:46:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x2c1001c0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:46:38 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x8983, 0x0) 23:46:38 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x89a0, 0x0) 23:46:38 executing program 2: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_S390_UCAS_UNMAP(r0, 0x4018ae51, &(0x7f0000000040)={0x7, 0x0, 0xfff}) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={0x0, 0xffffffff}, 0x8) ftruncate(r2, 0x2008000) sendfile(r1, r2, 0x0, 0x80000001) 23:46:38 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x89a1, 0x0) [ 491.837911][T20911] Unknown ioctl 1075359313 23:46:38 executing program 0: pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f00000000c0)=0x10d060000) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x100002000002, 0x11, r1, 0x0) write(r0, &(0x7f00000001c0), 0xfffffef3) 23:46:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x34000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:46:38 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x40049409, 0x0) [ 492.210310][T20884] Unknown ioctl 1083223682 [ 492.216502][T20924] Unknown ioctl -1064545486 23:46:38 executing program 1: r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0xe, 0x80000) fcntl$getown(r0, 0x9) r1 = getpgrp(0x0) r2 = syz_open_procfs(r1, &(0x7f00000001c0)='attr/prev\x00') ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000040)) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x20000, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') getsockopt$EBT_SO_GET_INIT_INFO(r3, 0x0, 0x82, &(0x7f00000002c0)={'broute\x00'}, &(0x7f00000000c0)=0x78) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000200)={0x0, @reserved}) exit(0x0) socket$inet_udp(0x2, 0x2, 0x0) sendfile(r2, r4, 0x0, 0x1) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r3, 0x54a3) 23:46:38 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') exit(0x6) sendfile(0xffffffffffffffff, r0, 0x0, 0x1) 23:46:38 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x4020940d, 0x0) 23:46:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x3a000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:46:38 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0xc0045878, 0x0) [ 492.505092][T20943] Unknown ioctl 21667 [ 492.633731][T20950] Unknown ioctl 1075359313 23:46:39 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0xc0045878, 0x0) 23:46:39 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x3b000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:46:39 executing program 2: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_S390_UCAS_UNMAP(r0, 0x4018ae51, &(0x7f0000000040)={0x7, 0x0, 0xfff}) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x20, 0x0, &(0x7f0000000100)=[@dead_binder_done={0x40086310, 0x3}, @decrefs={0x40046307, 0x3}, @release, @enter_looper], 0x49, 0x0, &(0x7f00000001c0)="80ae38908bae69465fd995b2c757598ef990e6dfeb2739a6b03ab8fb411bd6eef566061d9772ee4456a3c8dc92e0f805adaa3da5c7fb8253b26d45a358e7c7c71422756a843d0e6432"}) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={0x0, 0xffffffff}, 0x8) ftruncate(r2, 0x2008000) sendfile(r1, r2, 0x0, 0x80000001) 23:46:39 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0xc0189436, 0x0) [ 492.965340][T20968] Unknown ioctl 1075359313 [ 492.988849][T20968] Unknown ioctl -1070571007 23:46:39 executing program 0: pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f00000000c0)=0x10d060000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RFLUSH(r0, &(0x7f0000000000)={0x7, 0x6d, 0x2}, 0x7) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x100002000002, 0x11, r1, 0x0) write(r0, &(0x7f00000001c0), 0xfffffef3) 23:46:39 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x3f000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:46:39 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0xc020660b, 0x0) [ 493.228721][T20982] Unknown ioctl 21667 23:46:39 executing program 1: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x800) r1 = syz_open_pts(0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000040)={0x12}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='clear_refs\x00') r3 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') exit(0x0) write$vhci(r3, &(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, "199d05e9d5fc698594c658972e5b8ab5e068a356164ef19bd8b589f83e3b0e67d7b533e23a76deff1ac2f74f0845c942c5ac6b3515f261c53a5729556484c3edfac312460bfb96d313f04a76bb48ebff1a6f23043edb2c501eb2c5d4370a30654bde9818d5b3b588c3a29008fc7654567523eef18097f085c1ed93d4a47673a316cec965e6156a27b6d5b67a7518dda9cd0655a664c0e75cec58ad465c7be00657e3776258f51eacb9cf51334957a1aaac6388c558f1e3b226821b1c00e4e7e8935ebdcfc07906d49788a2f06d2aa44ae3889c54e5b601df82676055cffe2d212f50361b8613cbee88667756befa3dbd7dfa1aa854bf722aeb"}, 0xfa) sendfile(r2, r3, 0x0, 0x1) 23:46:39 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') exit(0x6) sendfile(0xffffffffffffffff, r0, 0x0, 0x1) 23:46:39 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x2000, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) 23:46:39 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x40000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:46:39 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x80004) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) 23:46:40 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) 23:46:40 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x4000009f) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") [ 493.759784][T21013] Unknown ioctl 1075359313 [ 493.777297][T21015] Unknown ioctl -1070571007 23:46:40 executing program 2: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_S390_UCAS_UNMAP(r0, 0x4018ae51, &(0x7f0000000040)={0x7, 0x0, 0xfff}) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r2 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000380)='/dev/input/event#\x00', 0xf8e, 0x101a02) ioctl$SNDRV_TIMER_IOCTL_STATUS(r2, 0x80605414, &(0x7f0000000280)=""/138) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x5, 0x1000}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f00000001c0)={r4, @in6={{0xa, 0x4e23, 0xb1ab, @mcast1, 0xdd}}}, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={0x0, 0xffffffff}, 0x8) ftruncate(r3, 0x2008000) sendfile(r1, r3, 0x0, 0x80000001) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/net/pfkey\x00', 0x40a01, 0x0) 23:46:40 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000080)={0x0, 0x3, 0x10, 0x6, 0xe7}, &(0x7f00000000c0)=0x18) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000100)={r2, @in6={{0xa, 0x4e23, 0x81, @dev={0xfe, 0x80, [], 0xc}, 0x3f}}, 0x4, 0xfffffffffffffffa}, &(0x7f00000001c0)=0x90) r3 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) [ 493.967513][T21026] Unknown ioctl 1075359313 23:46:40 executing program 0: pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, r2, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x3c, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x21f}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x44}, 0x80) r3 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2275, &(0x7f00000000c0)=0x10d060000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x100002000002, 0x11, r3, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) r6 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/qat_adf_ctl\x00', 0x402, 0x0) pipe(&(0x7f0000000440)) getsockname$unix(r4, &(0x7f0000000340)=@abs, &(0x7f00000003c0)=0x6e) getsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f00000002c0)={@broadcast, @broadcast}, &(0x7f0000000300)=0xc) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x113c02, 0x0) gettid() 23:46:40 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x4, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) 23:46:40 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x400000b0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:46:40 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') exit(0x0) sendfile(r0, r1, 0x0, 0x1) 23:46:40 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') exit(0x6) sendfile(r0, r1, 0x0, 0x1) 23:46:40 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f0000000000), 0xe) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000040)=0x3, 0x4) listen(r1, 0x0) r2 = dup(r1) ioctl$DRM_IOCTL_DROP_MASTER(r2, 0x641f) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) 23:46:40 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2001ffffffe, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0xfffffffffffffffc, {0x0, 0x5, 0xfff8000000000003, 0xc}}, 0xfffffffffffffdb4) listen(r0, 0xffffffffffffffff) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) 23:46:40 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x400000b7) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:46:41 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0x80045530, &(0x7f00000000c0)=""/100) syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x0, 0x2) 23:46:41 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x0, 0x70bd28, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000380)="8cdc1f123c02b41d88b070") r3 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(r3, 0x65, 0x4, &(0x7f0000cbc000)=""/244, &(0x7f0000000100)=0xf4) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r4, &(0x7f0000000000), 0xe) listen(r4, 0x0) r5 = dup(r4) ioctl$sock_inet6_tcp_SIOCINQ(r5, 0x541b, 0x0) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) [ 494.749625][T21030] Unknown ioctl 1075359313 23:46:41 executing program 2: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_S390_UCAS_UNMAP(r0, 0x4018ae51, &(0x7f0000000040)={0x7, 0x0, 0xfff}) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r2 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000000100)={0x3, 0x1}) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={0x0, 0xffffffff}, 0x8) ftruncate(r3, 0x2008000) sendfile(r1, r3, 0x0, 0x80000001) 23:46:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x40000100) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") [ 495.041657][T21082] Unknown ioctl 1075359313 23:46:41 executing program 0: pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f00000000c0)=0x10d060000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000000000/0x4000)=nil, 0x4000}}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x100002000002, 0x11, r1, 0x0) write(r2, &(0x7f0000000000), 0xfffffffffffffd29) 23:46:41 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x14b}}, 0xe) listen(r0, 0x8) r1 = dup(r0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000080)={0x74, 0x0, [0x3, 0x9, 0x2, 0x8001]}) ioctl$VIDIOC_S_OUTPUT(r1, 0xc004562f, &(0x7f0000000040)=0x80000001) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x3, r1, 0x1}) 23:46:41 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='stat\x00') mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, &(0x7f0000000100)=0x2, 0x3ff, 0x1) exit(0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendfile(r0, r1, 0x0, 0x1) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f00000001c0)) 23:46:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x40000108) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:46:41 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') exit(0x6) sendfile(r0, r1, 0x0, 0x1) 23:46:41 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/null\x00', 0x100, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f0000000500)={0x0, 0xcd}, &(0x7f0000000540)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000580)=@assoc_value={r1, 0x5}, &(0x7f00000005c0)=0x8) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r2, &(0x7f0000000000), 0xe) listen(r2, 0x0) r3 = dup(r2) prctl$PR_GET_NAME(0x10, &(0x7f0000000040)=""/230) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000280)={{{@in=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000380)=0xe8) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000640)={0x8021, 0xa7daa4776d476803}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xc, &(0x7f0000000140)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x80}, @alu={0x7, 0x9, 0x3, 0xf, 0x2, 0xfffffffffffffff8, 0x8}, @exit, @alu={0x7, 0x8, 0x5, 0x7, 0x5, 0xfffffffffffffff4, 0xffffffffffffffff}, @exit, @call={0x85, 0x0, 0x0, 0x5b}, @map={0x18, 0x6, 0x1, 0x0, r3}, @jmp={0x5, 0x3ff, 0xd, 0x0, 0x5, 0xfffffffffffffffe, 0xc}, @generic={0x1, 0x810000000000000, 0x8, 0x518, 0x3f}, @jmp={0x5, 0x14, 0x9, 0x7, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff}], &(0x7f00000001c0)='syzkaller\x00', 0x8, 0x41, &(0x7f0000000200)=""/65, 0x41f00, 0x1, [], r4, 0x3, r3, 0x8, &(0x7f00000003c0)={0x9d9, 0x3f}, 0x8, 0x10, &(0x7f0000000400)={0x80000001, 0x0, 0x6, 0x1}, 0x10}, 0x70) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000600)={0xfffffffffffff001}) 23:46:41 executing program 0: pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f00000000c0)=0x10d060000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = semget(0x3, 0x0, 0x422) semctl$GETPID(r3, 0x0, 0xb, &(0x7f0000000140)=""/205) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x100002000002, 0x11, r1, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS(r0, 0x80605414, &(0x7f0000000240)=""/253) write(r0, &(0x7f0000000080), 0xffffffffffffff7d) 23:46:41 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, {0x2, 0x0, 0x7fffffff}}, 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x3ff, 0x40800) 23:46:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x40010000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:46:42 executing program 0: r0 = open(&(0x7f0000000240)='./file0\x00', 0x400004000, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x0, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f00000001c0)={0x10, 0xa3, 0xfa00, {&(0x7f0000000080), 0x0, {0xa, 0x4e23, 0x40, @mcast2, 0x401}, r1}}, 0x38) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="15e14597e623c1189c567ba7ec903f1f411246e4f628ba26c220e8cc419a4a9f734ac724441337fbdff8d58090ae1f6cf30199d9b5fe4173dbfe9468dc1e2501df0399d7afcb97504a4120ed13f2119a6c97a193d96d892bd28fe008306ceb272b0b2536a5a536764bf3a1a893492621d592d328509b9ce5d039f8d655b3e0b1bfeeaee441aa3b2942522d6952f6c4016c53e72b4402a1772f95223c7bb82a58e922ae0d175fdbe2a8f2e0d6e200003164c8950d0f17a8c679c3faa5105067595b3007da10e25568246ff28a9769fd654e56682c60b9dad42d57044f4279978bd8e690ce3c03696f53c24809c552ddc1e648e16a02d0"], 0x8) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) listen(r2, 0x293c6014) accept4(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000640)={0xffffffffffffffff}) r4 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_RESERVED_SIZE(r4, 0x2275, &(0x7f0000000200)=0xfff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001f40)={0x0, r3, 0x0, 0xf, &(0x7f0000001f00)='GPLcpuseteth1\xa1\x00', 0xffffffffffffffff}, 0x30) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000001f80)={{{@in6=@mcast2, @in=@local}}, {{@in=@loopback}, 0x0, @in=@broadcast}}, &(0x7f0000002080)=0xe8) lstat(&(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)) gettid() getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000002180)={{{@in6, @in6=@empty}}, {{@in=@loopback}, 0x0, @in6}}, &(0x7f0000002280)=0xe8) lstat(&(0x7f00000022c0)='./file0\x00', &(0x7f0000002300)) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000002380)) stat(&(0x7f00000023c0)='./file0\x00', &(0x7f0000002400)) lstat(&(0x7f0000002480)='./file0\x00', &(0x7f00000024c0)) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000002680)) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000026c0)={{{@in=@loopback, @in6=@local}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f00000027c0)=0xe8) lstat(&(0x7f0000002800)='./file0\x00', &(0x7f0000002840)) getpgid(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000028c0)={{{@in=@multicast2, @in6=@mcast1}}, {{@in6=@dev}, 0x0, @in6=@mcast1}}, &(0x7f00000029c0)=0xe8) getresgid(&(0x7f0000002a00), &(0x7f0000002a40), &(0x7f0000002a80)) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000002ac0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000002b00)={{{@in=@initdev, @in=@remote}}, {{@in=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f0000002c00)=0xe8) [ 495.855574][T21128] Unknown ioctl 1075359313 23:46:42 executing program 2: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_S390_UCAS_UNMAP(r0, 0x4018ae51, &(0x7f0000000040)={0x7, 0x0, 0xfff}) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r0, 0xc0305615, &(0x7f00000001c0)={0x0, {0x7, 0x2}}) r2 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={0x0, 0xffffffff}, 0x8) ftruncate(r3, 0x2008000) r4 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x9, 0x2000) sendfile(r1, r3, 0x0, 0x80000001) ioctl$SIOCAX25NOUID(r2, 0x89e3, &(0x7f0000000200)) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r4, 0x800443d3, &(0x7f0000000140)={{0x6, 0x464, 0xc92e, 0x7, 0x2, 0x4}, 0x6, 0x1, 0x1}) 23:46:42 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x40000, 0x0) ioctl$RTC_VL_READ(r1, 0x80047013, &(0x7f0000000080)) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000100)={0xb, @sliced={0xe8e9, [0x0, 0x400, 0x1, 0x7, 0xb63, 0xa6f, 0x7, 0x8, 0xff, 0xa9, 0x7, 0x7, 0x5, 0x10000, 0xff, 0x6, 0x1, 0x8, 0x0, 0x8001, 0xfff, 0x5, 0x6b, 0x0, 0x6, 0x0, 0xfffffffffffffff7, 0x100000000, 0x1, 0x9, 0x3, 0x4, 0x6, 0x8, 0x6, 0x3f, 0x8, 0x401, 0x5, 0x1f, 0xb, 0x101, 0xfffffffffffffff7, 0x3, 0x3, 0x2, 0x8, 0x1], 0x5}}) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) 23:46:42 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x400101c0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:46:42 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={0x0, r0, 0xc, 0x3}, 0x14) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x102, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x1, @remote, 0x6}, {0xa, 0x4e20, 0x3f, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}, r2, 0x3f}}, 0x48) [ 496.005795][T21140] Unknown ioctl 1075359313 [ 496.031787][T21140] Unknown ioctl -1070574059 23:46:42 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') fcntl$setflags(r1, 0x2, 0x1) exit(0x0) sendfile(r0, r1, 0x0, 0x1) 23:46:42 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x84, @broadcast, 0x4e21, 0x3, 'wlc\x00', 0x2, 0xa35, 0x1a}, 0x2c) bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, {0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffd}}, 0xe) socket$vsock_stream(0x28, 0x1, 0x0) listen(r0, 0x0) r2 = dup(r0) getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4) fsetxattr(r1, &(0x7f0000000000)=@random={'trusted.', '{$(#\\\x00'}, &(0x7f0000000100)='/dev/swradio#\x00', 0xe, 0x3) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) 23:46:42 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') exit(0x6) sendfile(r0, r1, 0x0, 0x1) 23:46:42 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x410101c0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:46:42 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000000c0)={{{@in, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast1}}, &(0x7f00000001c0)=0xe8) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0)={r2, r3, r4}, 0xc) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) 23:46:42 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x6, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0xc028ae92, &(0x7f00000000c0)={0x7fffffff, 0x2}) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) getsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040), &(0x7f0000000080)=0x4) [ 496.505208][T21124] syz-executor.0 (21124) used greatest stack depth: 22360 bytes left 23:46:43 executing program 0: pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f00000000c0)=0x10d060000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mq_timedreceive(r0, &(0x7f0000000140)=""/169, 0xa9, 0x1000, &(0x7f0000000000)={0x77359400}) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x100002000002, 0x11, r2, 0x0) ioctl$sock_SIOCOUTQ(r3, 0x5411, &(0x7f0000000200)) time(&(0x7f0000000080)) dup2(r2, r2) write(r1, &(0x7f00000001c0), 0xfffffef3) 23:46:43 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x48000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") [ 496.805130][T21148] Unknown ioctl 1075359313 [ 496.810537][T21148] Unknown ioctl -1070574059 23:46:43 executing program 2: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_S390_UCAS_UNMAP(r0, 0x4018ae51, &(0x7f0000000040)={0x7, 0x0, 0xfff}) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000100)={0x100000000, 0x3, 0x101, 0x0, 0x13, 0x8, 0x7, 0x7, 0x3, 0x1}) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={0x0, 0xffffffff}, 0x8) ftruncate(r2, 0x2008000) sendfile(r1, r2, 0x0, 0x80000001) 23:46:43 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0xfffffffffffffffb, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) 23:46:43 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0xfffffffffffffffa, {0x0, 0x0, 0xfffffffffffffffe, 0x4, 0xfffffffffffffffc}}, 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) 23:46:43 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') exit(0x0) accept4$x25(r0, 0x0, &(0x7f0000000000), 0x800) ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x40, {}, {0x1, 0xc, 0x81, 0x2, 0x6722, 0x6, "987fb1fc"}, 0xffffffff, 0x3, @planes=&(0x7f0000000040)={0xfffffffffffffffe, 0xb98e, @userptr=0x4, 0x9}, 0x4}) sendfile(r0, r1, 0x0, 0x1) 23:46:43 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x49000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") [ 496.997392][T21198] Unknown ioctl 1075359313 [ 497.027593][T21198] Unknown ioctl 21512 23:46:43 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') r1 = syz_open_procfs(0x0, 0x0) exit(0x6) sendfile(r0, r1, 0x0, 0x1) 23:46:43 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0xfffffffffffffffe, @ipv4={[], [], @multicast2}, 0x3}, @in6={0xa, 0x4e23, 0x200, @remote, 0xb51b70d}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x17}}, @in={0x2, 0x4e22, @broadcast}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e23, @broadcast}], 0x78) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x4}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000000c0)={r2, 0xc72e, 0x30}, 0xc) 23:46:43 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) fremovexattr(r0, &(0x7f0000000000)=@known='system.sockprotoname\x00') ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f00000000c0), 0xe) listen(r1, 0x0) ioctl$PPPIOCSMRU(r0, 0x40047452, &(0x7f0000000100)=0x7) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000080)={{0x5, 0xffff}, 0x48}, 0x10) r2 = dup(r1) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) 23:46:43 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x4b564d00) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:46:43 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x40000, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00000001c0)=0x485) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000180)) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='projid_map\x00') getpeername$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x1c) bind$bt_l2cap(r1, &(0x7f0000000000), 0xe) listen(r1, 0x0) r3 = dup(r1) getrandom(&(0x7f0000000040)=""/20, 0x14, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) 23:46:43 executing program 0: pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f00000000c0)=0x10d060000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x100002000002, 0x11, r1, 0x0) write(r0, &(0x7f00000001c0), 0xfffffef3) 23:46:44 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x40003, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) 23:46:44 executing program 2: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_S390_UCAS_UNMAP(r0, 0x4018ae51, &(0x7f0000000040)={0x7, 0x0, 0xfff}) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={0x0, 0xffffffff}, 0x8) ftruncate(r3, 0x2008000) r4 = semget$private(0x0, 0x2, 0x108) semctl$SEM_INFO(r4, 0x3, 0x13, &(0x7f0000000280)=""/81) sendfile(r1, r3, 0x0, 0x80000001) 23:46:44 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x4b564d01) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:46:44 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) getsockname$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000080)=0x1c) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) [ 497.796744][T21242] Unknown ioctl 1075359313 [ 497.804258][T21245] Unknown ioctl 21512 [ 497.928501][T21255] Unknown ioctl 1075359313 23:46:44 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='clear_refs\x00') sendmsg$unix(r0, &(0x7f0000000200)={&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f00000001c0)=[{&(0x7f00000000c0)="b9197d924ad580f5a16f547a53bef17bb9f8c4aa268d95a3ee6d080f49130b0ec3ef9484e31a928719662fdad5bca648e2ddf20782056bc1e7567aa22d79a6ce26b6300f", 0x44}], 0x1, 0x0, 0x0, 0x4000080}, 0x20000080) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') exit(0x0) sendfile(r0, r1, 0x0, 0x1) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000000)={0x9, 0x1, 0x4, 0x8}) 23:46:44 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0x825b, @dev={0xfe, 0x80, [], 0x23}, 0x7}, @in6={0xa, 0x4e23, 0x7, @local, 0x5}, @in={0x2, 0x4e22, @local}], 0x48) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) 23:46:44 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') r1 = syz_open_procfs(0x0, 0x0) exit(0x6) sendfile(r0, r1, 0x0, 0x1) 23:46:44 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x4b564d02) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:46:44 executing program 4: execve(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=[&(0x7f0000000080)='wlan1].-&user\x00'], &(0x7f0000000240)=[&(0x7f0000000100)='proc\x00', &(0x7f0000000140)='{\x00', &(0x7f0000000180)='keyringeth0)\xc8\x00', &(0x7f00000001c0)='vmnet1gmime_typetrustedem0\x00', &(0x7f0000000200)='\x00']) r0 = syz_open_dev$midi(&(0x7f0000000300)='/dev/midi#\x00', 0x9527, 0x4a00) accept4$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000380)=0x14, 0x80800) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f00000003c0)={{{@in=@local, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6}}, &(0x7f00000004c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@dev={0xfe, 0x80, [], 0xb}, @in6=@empty, 0x4e24, 0x8, 0x4e21, 0x3, 0xa, 0x20, 0x80, 0x3b, r1, r2}, {0x7a0, 0x3, 0x1000, 0x1, 0x5, 0x0, 0x9, 0x8}, {0x2, 0x7, 0x1f, 0x1}, 0x22, 0x6e6bba, 0x2, 0x0, 0x3, 0x1}, {{@in6=@rand_addr="409c18c56107f865f527fdd14f129148", 0x4d5, 0x7e}, 0x0, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x3, 0x3, 0x0, 0x9, 0x6, 0x7fff}}, 0xe8) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r3, &(0x7f0000000000), 0xe) listen(r3, 0x0) r4 = dup(r3) getsockopt$inet6_mreq(r4, 0x29, 0x1f, &(0x7f0000000280)={@empty}, &(0x7f00000002c0)=0x14) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, 0x0) 23:46:44 executing program 4: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) listen(0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) 23:46:44 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x4b564d03) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:46:44 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f00000000c0)=0x10d060000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x100002000002, 0x11, r1, 0x0) write(r0, &(0x7f00000001c0), 0xfffffef3) 23:46:44 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x10801, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f0000000080)={0x3ff, 0x2, 0x3, 'queue0\x00', 0x1ff}) listen(r0, 0x0) r2 = dup(r0) syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x2f0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) [ 498.731219][T21299] Unknown ioctl 1075359313 23:46:45 executing program 2: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_S390_UCAS_UNMAP(r0, 0x4018ae51, &(0x7f0000000040)={0x7, 0x0, 0xfff}) r1 = socket$inet6(0xa, 0x7, 0x8) close(r1) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) syz_open_dev$amidi(&(0x7f0000000140)='/dev/amidi#\x00', 0x1000, 0x1ffd) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={0x0, 0xffffffff}, 0x8) ftruncate(r2, 0x2008000) sendfile(r1, r2, 0x0, 0x80000001) 23:46:45 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) ioctl$RTC_AIE_OFF(r1, 0x7002) 23:46:45 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x4b564d04) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:46:45 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r0, 0x800443d3, &(0x7f0000000040)={{0x6, 0x1000, 0x6, 0x4000000080000, 0x3ff, 0x10001}, 0x3, 0x7, 0xae}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='clear_refs\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') exit(0x0) sendfile(r1, r2, 0x0, 0x1) 23:46:45 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x2080, 0x0) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000080)) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f0000000000), 0xe) listen(r1, 0x0) fstat(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = getuid() sendmsg$nl_generic(r0, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000002}, 0xc, &(0x7f0000000400)={&(0x7f0000000180)={0x244, 0x34, 0x500, 0x70bd2a, 0x25dfdbfd, {0x12}, [@typed={0x4, 0x45}, @nested={0xc, 0x16, [@typed={0x8, 0x82, @uid=r2}]}, @nested={0x20c, 0x7f, [@typed={0x8, 0x1, @fd=r1}, @generic="fa2f54319f73bedd6d4f05e4875637148b36aa281a7bbbfc6782993b506156088ebadf9e4077faf95cf02fdcba91e12fc7ab4deae13b083f2e04e2cab5e784bcb2a96305c6243dfeaa94988a98bdc8320899e33efcf7a3802900ce9926d9a9fd4d17fb9ae15739d6e865cc52aa0ed9a5b183ec5da981ee419f1131a750c714b51da9a9c0d35f987e668b2f52098ab3e148e94d16b6a6f689adce18a7d0dd3fd00121018dc9b4b1e938bc5c1872f32eee1a20dc9264873c9083e4e2afec298fd41e239d2a885544fef9fd1b4f6e191514feebfc122dea1925d21f282e21b2e7519ff286e6", @typed={0x8, 0x2d, @ipv4=@empty}, @generic="a0c3ce51df9424dab57eba867e1d6b8cf23e", @typed={0x14, 0x90, @binary="5c0791ef5f61e8e44937a7f640db"}, @typed={0x8, 0x5a, @uid=r3}, @generic="096ef223c61f3b583d5c0054552504b762304258f31676ba5c55b634b646064c286f005a49847a469155441e5e242611d5ac62370ce65cd36999f28f7116245576d410dcde15f57c233c8c8b56794e85183435b13e", @typed={0x8, 0x26, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @generic="c30d7dc5b20cf452e816ca4f06dbe6efbd33f4fa1a7060ea3f4295d8018c095139985e241e9f05c521b21a24a468735e99539dbcddaa34956acb7492fa4328157fa75d50af844f9eb941f4f22a36e6a4460a5e88a9699a71d8caddd38efcaa876cb9729fc1bda46450d70747ebb0b4b1b57b0dcf6d9a45279c76988611e1d02583fd79b5fb7c"]}, @generic="ab572df48691784a117007e088c2905c52d01b"]}, 0x244}, 0x1, 0x0, 0x0, 0x800}, 0x40041) r4 = dup(r1) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, 0x0) 23:46:45 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') r1 = syz_open_procfs(0x0, 0x0) exit(0x6) sendfile(r0, r1, 0x0, 0x1) [ 498.981839][T21313] Unknown ioctl 1075359313 [ 499.042696][T21318] QAT: Invalid ioctl [ 499.055063][T21318] QAT: Invalid ioctl 23:46:45 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) ioctl$KVM_SET_XCRS(r1, 0x4188aea7, &(0x7f0000000040)={0x2, 0x81, [{0xb6, 0x0, 0x7}, {0x7ff}]}) r2 = getpgrp(0x0) ptrace$cont(0x19, r2, 0x5, 0x5) [ 499.124878][T21313] Unknown ioctl 1075359313 23:46:45 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x580001c0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:46:45 executing program 2: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_S390_UCAS_UNMAP(r0, 0x4018ae51, &(0x7f0000000040)={0x7, 0x0, 0xfff}) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r2 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001) r3 = open(&(0x7f0000000200)='./bus\x00', 0x400000, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={0x0, 0xffffffff}, 0x8) ftruncate(r3, 0x2008000) sendfile(r1, r3, 0x0, 0x80000001) bind$inet(r3, &(0x7f0000000140)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000000c0)=0x0) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f00000002c0)=0x0) kcmp(r5, r6, 0x3, 0xffffffffffffff9c, r1) openat$cgroup_ro(r3, &(0x7f00000001c0)='cpuacct.usage_user\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'veth0_to_team\x00'}, 0x18) pwrite64(r2, &(0x7f0000000240)="7a2d49ef32df58128578f87d9318cc1c21b0fe2f433cda8b433d149f60ffd45effa20e006116c64c7ddaef7dc2c6c4ddf35971ca5df6ac025c5661b748366e8c24531b66c66c30e6adecc391bb4ea6563cef331156b9f84cfeed887f576408b2a26e720d50ec06b52e5220", 0x6b, 0x45) 23:46:45 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r1 = add_key(&(0x7f0000000040)='rxrpc_s\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) memfd_create(&(0x7f0000001200)='{lo^ppp1systemselinux\x00', 0x2) r2 = request_key(&(0x7f00000000c0)='big_key\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='lo\x00', 0xffffffffffffffff) keyctl$unlink(0x9, r1, r2) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001240)='/dev/dlm-control\x00', 0x24000, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r3, 0x89e4) add_key(&(0x7f0000000180)='ceph\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)="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", 0x1000, 0xfffffffffffffffa) [ 499.329798][T21345] Unknown ioctl 1075359313 [ 499.372333][T21345] Unknown ioctl 21545 [ 499.407728][T21345] Unknown ioctl 1075359313 23:46:45 executing program 0: pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x1000000000005, 0x5) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f00000000c0)=0x10d060000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000200)=0x14) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000240)={@ipv4={[], [], @multicast1}, @dev={0xfe, 0x80, [], 0x17}, @empty, 0x5, 0x5, 0x4, 0x400, 0x2, 0x2010000, r4}) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x100002000002, 0x11, r2, 0x0) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000080)={0x63, 0xae, 0x3f}) write(r1, &(0x7f00000001c0), 0xfffffef3) 23:46:45 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$void(r0, 0xc0045878) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) [ 499.433207][T21355] Unknown ioctl 21545 23:46:45 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x60050000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:46:45 executing program 2: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_S390_UCAS_UNMAP(r0, 0x4018ae51, &(0x7f0000000040)={0x7, 0x0, 0xfff}) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r2 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) connect$rxrpc(r2, &(0x7f0000000100)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e23, 0x1, @local, 0x1ff}}, 0x24) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={0x0, 0xffffffff}, 0x8) ftruncate(r3, 0x2008000) sendfile(r1, r3, 0x0, 0x80000001) 23:46:45 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$KDDISABIO(r1, 0x4b37) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) [ 499.629874][T21368] Unknown ioctl 1075359313 23:46:46 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='clear_refs\x00') r1 = fcntl$getown(r0, 0x9) r2 = syz_open_procfs(r1, &(0x7f0000000080)='net/protocols\x00') setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x6, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x10000}, @in6={0xa, 0x4e22, 0x1, @mcast2, 0x2}], 0x38) exit(0x0) sendfile(r0, r2, 0x0, 0x1) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) 23:46:46 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) 23:46:46 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') exit(0x0) sendfile(r0, r1, 0x0, 0x1) 23:46:46 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x60182300) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:46:46 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x20301, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f00000001c0)) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) fsetxattr$security_ima(r0, &(0x7f0000000040)='security.ima\x00', &(0x7f0000000080)=@v2={0x7, 0x0, 0x3, 0xfffffffffffff695, 0xd3, "0bcb6e3543542fa168602e905774cb319924cbc10cd8ee12a055038f6ee5e9ec2f25bf0e8e029a0bd7b22bbe3d1e83afa42158406ec5c785b2d6adcc35f9a1e33ab608202c7eed45dfe0b74f1940150b01bb09c99b4b02aa9223378ad3de9cb684238af73eab4407bebae6e769450b7f6eab24a9f0a3119f01295fd47d55276fb4adbba610fa873cc8a273e6d438a65263b184697a7498c65ecc9a23e2a25a09b86d98e8873ae4cadf76bf7854cfdc106d5fa560c04760d208cfc580782e4b80dca7b2a20b03f7c90ee33688b083ccaaa2fb3e"}, 0xdd, 0x3) listen(r0, 0x0) r2 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}}}, &(0x7f00000003c0)=0xe8) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000400)={@loopback, 0x34, r3}) 23:46:46 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) 23:46:46 executing program 0: pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000180)=0x20) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f00000000c0)=0x10d060000) getresuid(&(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x100002000002, 0x11, r1, 0x0) write(r0, &(0x7f00000001c0), 0xfffffef3) 23:46:46 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x61050000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") [ 500.449224][T21402] Unknown ioctl 1075359313 23:46:46 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0xfbfffeffffeffffa, 0x3) r1 = syz_open_dev$vcsn(&(0x7f0000001180)='/dev/vcs#\x00', 0xb2ea, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000001f00)={'vcan0\x00', 0x0}) sendmsg$can_raw(r1, &(0x7f0000002000)={&(0x7f0000001f40)={0x1d, r2}, 0xf, &(0x7f0000001fc0)={&(0x7f0000000180)=@can={{0x2, 0x3ff, 0x95d2, 0xffffffffffffff1f}, 0x5, 0x2, 0x0, 0x0, "50000429a7de809b"}, 0x48}, 0x1, 0x0, 0x0, 0x14}, 0x40000) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000100)={&(0x7f00000000c0)=[0x40], 0x1, 0x7, 0x3, 0x100, 0x8, 0x0, {0x6, 0x101, 0x9, 0x4, 0x3, 0xfffe00000000, 0x80000000, 0x10000, 0x9, 0x67e5, 0x400, 0xe7b0, 0x1f3, 0x3, "0606028a63504e2b470d9e71a3c17d2e1d4c37751979040ae10c50f8caae45bb"}}) r3 = dup(r0) ioctl$UI_SET_KEYBIT(r3, 0x40045565, 0x1be) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) 23:46:46 executing program 2: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_S390_UCAS_UNMAP(r0, 0x4018ae51, &(0x7f0000000040)={0x7, 0x0, 0xfff}) r1 = socket$inet6(0xa, 0x440000000002, 0x4000000000) close(r1) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={0x0, 0xffffffff}, 0x8) ftruncate(r2, 0x2008000) sendfile(r1, r2, 0x0, 0x80000001) 23:46:47 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mixer\x00', 0x80000, 0x0) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f0000000080)='\x91/\x00', 0x3) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x6a8, 0x470, 0x470, 0x470, 0x470, 0x138, 0x5d8, 0x5d8, 0x5d8, 0x5d8, 0x5d8, 0x6, &(0x7f0000000180), {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@mcast2, @ipv4=@multicast1, 0x3a, 0x1c, 0x1}}}, {{@uncond, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@ah={0x30, 'ah\x00', 0x0, {0x4d4, 0x4d5, 0x1, 0x64c0, 0x1}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x9, 0x32af, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e22}}}, {{@ipv6={@mcast2, @mcast1, [0xff000000, 0xff, 0xffffffff, 0xffffffff], [0xffffff00, 0xff000000, 0xff000000, 0xffffffff], 'bridge_slave_1\x00', 'lapb0\x00', {0xff}, {0xff}, 0x3a, 0x73, 0x2, 0x5}, 0x0, 0xc8, 0x110}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev={0xfe, 0x80, [], 0x26}, @ipv6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2c, 0x26, 0x2}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [0x0, 0xffffffff, 0xff, 0xff], [0xff, 0x0, 0xff000000, 0xffffffff], 'bridge_slave_1\x00', 'hwsim0\x00', {0xff}, {0xff}, 0xc, 0xfffffffffffffffb, 0x5, 0x12}, 0x0, 0xc8, 0xf0}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0xcc}}}, {{@uncond, 0x0, 0x120, 0x168, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x9}}, @common=@srh={0x30, 'srh\x00', 0x0, {0x2f, 0x0, 0x2, 0x52, 0x3, 0x10, 0x20}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@ipv4={[], [], @multicast2}, @ipv4=@local, 0x12, 0x2, 0x7f}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x708) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f00000000c0)) listen(r0, 0x0) r2 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) [ 500.640571][T21420] Unknown ioctl 1075359313 23:46:47 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x70050000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:46:47 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') exit(0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)=0x2) sendfile(r0, r1, 0x0, 0x1) io_setup(0x8, &(0x7f00000000c0)=0x0) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000100)={0x1, 0x100000000}, 0x2) io_getevents(r2, 0x3, 0x2, &(0x7f0000000040)=[{}, {}], &(0x7f0000000080)={0x0, 0x1c9c380}) 23:46:47 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x84000) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000080)={{0xffffffffffffffff, 0x2, 0x7, 0x0, 0x6b85}, 0x6, 0x74f4, 0x1000}) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r2 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) 23:46:47 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') exit(0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x1) 23:46:47 executing program 4: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x24041, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc0585604, &(0x7f0000000080)={0xef60d5321a59453a, 0x0, {0xffffffff, 0x81, 0x1009, 0x5, 0x2, 0x8, 0x0, 0x7}}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f0000000000), 0xe) listen(r1, 0x0) r2 = dup(r1) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) 23:46:47 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x71050000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:46:47 executing program 4: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) listen(0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) fchdir(r0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x9, 0x70, 0x3, 0x4, 0x9}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x21) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') ioctl$KVM_SET_FPU(r0, 0x41a0ae8d, &(0x7f0000000200)={[], 0x101, 0x3, 0xffffffffffffff7f, 0x0, 0x101, 0x2000, 0x4000, [], 0x5}) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, r1, 0x102, 0x70bd29, 0x25dfdbfd, {{}, 0x0, 0x4108, 0x0, {0x4c, 0x18, {0x79e42a0d, @media='udp\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4040}, 0x10) 23:46:47 executing program 0: pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000000)={&(0x7f0000ffa000/0x4000)=nil, 0x8, 0x0, 0x80, &(0x7f0000ffb000/0x2000)=nil, 0x7}) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f00000000c0)=0x10d060000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x100002000002, 0x11, r1, 0x0) write(r0, &(0x7f00000001c0), 0xfffffef3) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000340)={0x3, 0x0, &(0x7f0000000080)=""/11, &(0x7f0000000140)=""/248, &(0x7f0000000240)=""/225, 0xf007}) 23:46:47 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x5, 0x80000) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000000c0)={0x8, 0x9, 0x4e0, 0x49, 0x80}, 0x14) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f0000000000), 0xe) listen(r1, 0x0) r2 = dup(r1) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) ioctl$DRM_IOCTL_CONTROL(r2, 0x40086414, &(0x7f0000000040)={0x3, 0x100}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000100)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000140)=0x18) 23:46:47 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x72050000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") [ 501.446040][T21468] Unknown ioctl 1075359313 23:46:47 executing program 2: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x2080, 0x0) ioctl$KVM_S390_UCAS_UNMAP(r0, 0x4018ae51, &(0x7f0000000040)={0x7, 0x0, 0xfff}) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r2 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={0x0, 0xffffffff}, 0x8) ftruncate(r1, 0x9) getpeername$unix(r2, &(0x7f0000000100), &(0x7f00000001c0)=0x6e) sendfile(r1, r3, 0x0, 0x80000001) 23:46:47 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000080), 0x4) setsockopt$packet_int(r1, 0x107, 0x1c, &(0x7f00000000c0)=0x8000, 0x4) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x2) getegid() getgroups(0x5, &(0x7f0000000100)=[0x0, 0xee01, 0x0, 0xee00, 0xee00]) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000002c0)) getgroups(0x4, &(0x7f0000000140)=[r4, r3, r2, 0xee00]) ioctl$TUNSETGROUP(r1, 0x400454ce, r5) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) [ 501.680247][T21484] Unknown ioctl 1075359313 23:46:48 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) sendto(r1, &(0x7f0000000040)="12a80e57274de66b7f6b299fcd66bdb2db8263a2ad8ab332e780009101e59603b610d64997fa559076dfa38be895999a4d1e8498561e8e912e48e9223c435e6c4cd2bfc1941ad2fa9f13fd8edff47d3c50a5a7b0977b683b23300c", 0x5b, 0x4000000, &(0x7f00000000c0)=@generic={0xa, "3fc3e7c44753b51270c4af6a8058379104f4f41f97dfa9f409d68cf3a54c3c7d14e822f426cd99458923c80aba355a165c9c33fddaf3419042bb4f5f705e3fdd9ad174e8bbf3c364c462bbd82d75717c4c1e32fa4c537d60fd317d6e5bbb41fbe548a14ea7c1f643c072bd417fe28f11e86bee3e5c2689d98e3ae6f5148f"}, 0x80) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) [ 501.709606][T21484] Unknown ioctl 1075359313 23:46:48 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') exit(0x0) sendfile(r0, r1, 0x0, 0x1) write$FUSE_WRITE(r0, &(0x7f0000000000)={0x18, 0x0, 0x6, {0x8d}}, 0x18) 23:46:48 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x74010000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:46:48 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000040)={r1}) 23:46:48 executing program 2: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0xffffffffffffffff, 0x0) ioctl$KVM_S390_UCAS_UNMAP(r0, 0x4018ae51, &(0x7f0000000040)={0x7, 0x0, 0xfff}) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000100)='tls\x00', 0x4) close(0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={0x0, 0xffffffff}, 0x8) ftruncate(r0, 0x402008000) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000001) 23:46:48 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') exit(0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x1) 23:46:48 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x3) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f00000000c0)=@generic={0x1, 0x1, 0x4}) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x49, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={0x0, @dev, @broadcast}, &(0x7f0000000200)=0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) accept4$packet(0xffffffffffffff9c, &(0x7f00000002c0)={0x11, 0x0, 0x0}, &(0x7f0000000300)=0x14, 0x80000) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'hsr0\x00', 0x0}) accept$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000500)={{{@in=@initdev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@ipv4={[], [], @multicast2}}}, &(0x7f0000000600)=0xe8) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1f, &(0x7f0000000bc0)={@remote, 0x0}, &(0x7f0000000c00)=0x14) accept4$packet(0xffffffffffffff9c, &(0x7f0000000c40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000c80)=0x14, 0x80800) accept$packet(0xffffffffffffff9c, &(0x7f00000012c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001300)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001340)={{{@in6=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@empty}}, &(0x7f0000001440)=0xe8) recvmsg(r0, &(0x7f00000026c0)={&(0x7f0000001480)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000002600)=[{&(0x7f0000001500)=""/12, 0xc}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/179, 0xb3}], 0x3, &(0x7f0000002640)=""/110, 0x6e}, 0x2000) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000004a40)={0x0, @broadcast, @multicast2}, &(0x7f0000004a80)=0xc) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004b00)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f0000004c00)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c80)={{{@in=@remote, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@dev}}, &(0x7f0000004d80)=0xe8) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x23, &(0x7f0000007340)={@rand_addr, @loopback, 0x0}, &(0x7f0000007380)=0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000007540)={'vcan0\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x14, &(0x7f0000007640)={@dev, 0x0}, &(0x7f0000007680)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f00000077c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000007800)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000007840)={'bridge_slave_0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f0000007880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000078c0)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000007900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000007940)=0x14) recvmmsg(r0, &(0x7f000000a580)=[{{&(0x7f0000007980)=@tipc=@id, 0x80, &(0x7f0000008a00)=[{&(0x7f0000007a00)=""/4096, 0x1000}], 0x1, &(0x7f0000008a40)=""/218, 0xda}, 0x1}, {{&(0x7f0000008b40)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000008e00)=[{&(0x7f0000008bc0)=""/224, 0xe0}, {&(0x7f0000008cc0)}, {&(0x7f0000008d00)=""/252, 0xfc}], 0x3, &(0x7f0000008e40)=""/90, 0x5a}, 0x2bba}, {{&(0x7f0000008ec0)=@hci={0x1f, 0x0}, 0x80, &(0x7f000000a140)=[{&(0x7f0000008f40)}, {&(0x7f0000008f80)=""/4096, 0x1000}, {&(0x7f0000009f80)=""/185, 0xb9}, {&(0x7f000000a040)=""/149, 0x95}, {&(0x7f000000a100)=""/19, 0x13}], 0x5}, 0x4}, {{&(0x7f000000a1c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x80, &(0x7f000000a540)=[{&(0x7f000000a240)=""/144, 0x90}, {&(0x7f000000a300)=""/12, 0xc}, {&(0x7f000000a340)=""/215, 0xd7}, {&(0x7f000000a440)=""/240, 0xf0}], 0x4}, 0x1}], 0x4, 0x2100, &(0x7f000000a680)={0x77359400}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f000000a6c0)={{{@in=@remote, @in6=@ipv4={[], [], @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@ipv4={[], [], @remote}}}, &(0x7f000000a7c0)=0xe8) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f000000b000)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100100}, 0xc, &(0x7f000000afc0)={&(0x7f0000002700)=ANY=[@ANYBLOB="a8070037ce4109bf23", @ANYRES16=r2, @ANYBLOB="00012dbd7000fddbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="7800020038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000080003000300000008000400800000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="8400020040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b0000000800040009000000080007000000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r6, @ANYBLOB="080007000000000008000100", @ANYRES32=r7, @ANYBLOB="6002020038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000080003000300000008000400ff07000040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000400000008000600", @ANYRES32=r8, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r9, @ANYBLOB="080007000000000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000080003000300000008000400040000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r10, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r11, @ANYBLOB="080007000000000044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004006163746976656261636b7570000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r12, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000800030003000000080004009c00000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004000000000008000100", @ANYRES32=r13, @ANYBLOB="7c0002003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r14, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r15, @ANYBLOB="08000100", @ANYRES32=r16, @ANYBLOB="9401020040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r17, @ANYBLOB="080007000000000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b00000008000400ffff000008000600", @ANYRES32=r18, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000800030003000000080004000300000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r19, @ANYBLOB="08000700000000004c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000001c000400686173685f746f5f706f72745f6d617070696e67000000004c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000001c000400686173685f746f5f706f72745f6d617070696e670000000008000100", @ANYRES32=r20, @ANYBLOB="f800020040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000800000008000600", @ANYRES32=r21, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000800030003000000080004006fb500003c000100240001006d6f64650000000000000000000000000000000000000000000000000000000008000300050000000c00040072616e646f6d0000400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=r22, @ANYBLOB="08000100", @ANYRES32=r23, @ANYBLOB="f800020040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000001000008000600", @ANYRES32=r24, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r25, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000800030003000000080004000010000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r26, @ANYBLOB='\b\x00\a\x00\x00\x00\x00\x00'], 0x7a8}, 0x1, 0x0, 0x0, 0x40}, 0x20000800) 23:46:48 executing program 0: pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f00000000c0)=0x10d060000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x84, &(0x7f0000000140)=[@in6={0xa, 0x4e22, 0xa4, @remote, 0x2000400000}, @in={0x2, 0x4e21, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e21, 0x7, @empty, 0x4}, @in6={0xa, 0x4e20, 0x3, @ipv4={[], [], @remote}, 0x5}, @in={0x2, 0x4e23, @loopback}]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200)=@assoc_value={r4, 0x80}, 0x8) openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x100002000002, 0x11, r2, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) 23:46:48 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x75010000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:46:48 executing program 2: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_S390_UCAS_UNMAP(r0, 0x4018ae51, &(0x7f0000000040)={0x7, 0x0, 0xfff}) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r2 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e24, 0xe5, @mcast2, 0x8}, 0x1c) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffff9c, 0x84, 0xa, &(0x7f0000000140)={0x3, 0x4000000, 0x0, 0x98f, 0x81, 0x2, 0xdc2, 0x569}, &(0x7f00000001c0)=0x20) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000240)={0x0, 0xc06, 0x1, 0x7a}, &(0x7f0000000280)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000002c0)=@assoc_value={r4, 0x6}, 0x8) ftruncate(r3, 0x2008000) sendfile(r1, r3, 0x0, 0x80000001) r5 = fcntl$getown(r1, 0x9) migrate_pages(r5, 0x3f, &(0x7f0000000180)=0xce, &(0x7f0000000200)=0x9) [ 502.420494][T21529] Unknown ioctl 1075359313 23:46:48 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x76010000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:46:49 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x77020000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:46:49 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') exit(0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x1) 23:46:49 executing program 1: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000140)='clear_refs\x00') syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') exit(0x0) sendfile(r1, r1, 0x0, 0x6) 23:46:49 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x79000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:46:49 executing program 0: pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f00000000c0)=0x10d060000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x80, 0x0, 0xd, 0x10001, 0x4, 0x0, 0x100, 0x8, 0x0}, &(0x7f0000000080)=0x20) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={r4, 0xa4, &(0x7f0000000140)=[@in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e23, @local}, @in6={0xa, 0x4e22, 0x1000, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x7}, @in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e22, 0x6b5, @local, 0x8}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, @in={0x2, 0x4e23, @empty}, @in6={0xa, 0x4e20, 0x20, @dev={0xfe, 0x80, [], 0xb}, 0x30}]}, &(0x7f0000000240)=0x10) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x100002000002, 0x11, r2, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) 23:46:49 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) [ 503.236945][T21532] Unknown ioctl 1075359313 23:46:49 executing program 2: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_S390_UCAS_UNMAP(r0, 0x4018ae51, &(0x7f0000000100)={0x8, 0x0, 0xfff}) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={0x0, 0xffffffff}, 0x8) ftruncate(r2, 0x2008000) sendfile(r1, r2, 0x0, 0x80000001) 23:46:49 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x200000, {0x1000000000000000, 0x6db, 0x0, 0x100, 0x0, 0xa89}}, 0xfffffffffffffd7a) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) [ 503.427461][T21571] Unknown ioctl 1075359313 23:46:49 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x7a010000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:46:49 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0x9, 0x5db5, 0x5, 0x40, 0x11, 0x5, 0xffffffffffffffff, 0x9, 0x8, 0x400}) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) 23:46:50 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) shutdown(r0, 0x0) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) 23:46:50 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000100)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000040)=[{0x2, 0x0, [0x1000, 0x2, 0xac, 0x6, 0x5, 0x0, 0x4, 0x3, 0xff, 0x10000, 0x7ff, 0x1ff, 0x200000000000, 0x1, 0x1fffffffc000, 0xc12]}, {0x20, 0x0, [0x101, 0x0, 0x9, 0x7, 0x9, 0x9, 0x6b7, 0x7, 0xffffffffffffff7f, 0xfffffffffffffff8, 0xffff, 0x8, 0x0, 0x3, 0xa07, 0x20]}], r2, 0x1, 0x1, 0x90}}, 0x20) io_setup(0x20, &(0x7f00000001c0)=0x0) io_cancel(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8, 0x4, r1, &(0x7f0000000200)="67fff38767f16ae2de657fa29d0682e58f5195bf046ab07508278f515c885867d8229d89742381b1741b2850fad1aed986205c909a336eddf123e00555317dc14a66b69c3fe64d89bc8ff59f090cbb30aae9bf9fac9e7e7998a3f3c118db24415688c2e87e2943b5ad4feeee1431eaf03c1be5485552c1600ed035db061c523416142eb3621ce63521ba8ce08f416069995040cc603f20", 0x97, 0x7f, 0x0, 0x2}, &(0x7f0000000300)) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) 23:46:50 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x7b010000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:46:50 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') exit(0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x1) 23:46:50 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') exit(0x0) name_to_handle_at(r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="db00000009000000e31498796936fddc21adee5098c9bf46c5470b8a701f781c680315ec6a3623cfb72843d8ac543c490e3bb15993faf8521aadd7de77ed9d0cbbcf8487b04c46c3986907eda6411b2a6c756904549297de381f5bcf709e3a797019567c7f801595c953cea6039fcbc103e25f01efd737aebf0ffe7a22d9c12df18c1d86518273d2b58b81c3fe3cd0928ab87c6845e2fd175b5d9f7c67cd67682baaeb97a21a838c057f9118f7c4b6d67d384019552d26d606fb20c453c21ada97bbc0fd771b5891a5f578e4de8efa4a36414d6df4a024"], &(0x7f00000001c0), 0x1000) sendfile(r0, r1, 0x0, 0x1) 23:46:50 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x1, 0x800) getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000002c0)={@empty, 0x61, r2}) r3 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) 23:46:50 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f00000000c0)=0x10d060000) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000180)={0x1, 0x0, {0x100000001, 0x3, 0x80008, 0xc5}}) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2000000, 0x11, r1, 0x0) write(r0, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) write$P9_RREMOVE(r0, &(0x7f0000000140)={0x7, 0x7b, 0x2}, 0x7) 23:46:50 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f0000000080)={0x4, 0xfff, 0x3ff, {0x77359400}, 0x5, 0x8}) r2 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) [ 504.230386][T21617] Unknown ioctl 1075359313 23:46:50 executing program 2: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_S390_UCAS_UNMAP(r0, 0x4018ae51, &(0x7f00000001c0)={0x8f, 0x0, 0x1}) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r2 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ioctl$int_in(r0, 0x5473, &(0x7f0000000140)=0xaaf9) ioctl$sock_inet_SIOCSIFPFLAGS(r2, 0x8934, &(0x7f0000000100)={'lo\x00', 0xee}) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x200) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={0x0, 0xffffffff}, 0x8) ftruncate(r3, 0x2008000) sendfile(r1, r3, 0x0, 0x80000001) 23:46:50 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x7f040000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:46:50 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x8, {0x0, 0x1f, 0x0, 0x7f, 0x7fffffff, 0xffff}, 0x7, 0x2}, 0xe) 23:46:50 executing program 0: pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000000)=0x10d060000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x100002000002, 0x11, r1, 0x0) fsetxattr(r1, &(0x7f0000000080)=@random={'os2.', '/dev/sg#\x00'}, &(0x7f00000000c0)='keyringuser\x00', 0xc, 0x1) write(r0, &(0x7f00000001c0), 0xfffffef3) 23:46:50 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {}, 0x10000000000}, 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x4) socket$kcm(0x29, 0x8, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) [ 504.463754][T21639] Unknown ioctl 1075359313 [ 504.491416][T21639] Unknown ioctl 21619 23:46:51 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0xfffffffffffffffd, 0x0, 0x20, 0x0, 0x0, 0xffffffffffffffff}, 0x800}, 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) 23:46:51 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x800000c0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:46:51 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') exit(0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x1) 23:46:51 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') exit(0x0) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000000)={0xd, {0x3f, 0x8000, 0xfffffffffffffffd, 0x2}}) sendfile(r0, r1, 0x0, 0x1) 23:46:51 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'veth0_to_bridge\x00', {0x2, 0x4e24, @loopback}}) 23:46:51 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x80040000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:46:51 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x10b000, 0x0) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1d, &(0x7f0000000080)={@local, 0x0}, &(0x7f00000000c0)=0x14) connect$packet(r1, &(0x7f0000000100)={0x11, 0x16, r2, 0x1, 0x80, 0x6, @local}, 0x14) listen(r0, 0x0) r3 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) [ 505.255070][T21683] Unknown ioctl 1075359313 [ 505.278868][T21684] Unknown ioctl 21619 23:46:51 executing program 2: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_S390_UCAS_UNMAP(r0, 0x4018ae51, &(0x7f0000000040)={0x7, 0x0, 0xfff}) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r2 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001) link(&(0x7f0000000200)='./bus\x00', &(0x7f0000000240)='./bus\x00') r3 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000140)=0x14) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'irlan0\x00', r4}) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={0x0, 0xffffffff}, 0x8) ftruncate(r3, 0x2008000) sendfile(r1, r3, 0x0, 0x80000001) ioctl$SG_SET_DEBUG(r2, 0x227e, &(0x7f0000000280)=0x1) 23:46:51 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x80050000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:46:51 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x6, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) 23:46:51 executing program 0: pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f00000000c0)=0x10d060000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x1d, 0x20400) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x100002000002, 0x11, r1, 0x0) write(r0, &(0x7f00000001c0), 0xfffffef3) 23:46:51 executing program 4: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x8080, 0x0) sendmsg$nfc_llcp(r0, &(0x7f0000000740)={&(0x7f0000000080)={0x27, 0x1, 0x2, 0x4, 0x5, 0xfffffffffffffffb, "2fd989b9bdc98db65aa21ecac2a20c34d8f0ba3a8e4520c06622f767613abd5fa935685d3229b99a8923cef922ba6c66e49d269e410fba77597e1d9ffcbc83", 0x36}, 0x60, &(0x7f0000000600)=[{&(0x7f0000000100)="360dbcd3c884d71ee0974e1f", 0xc}, {&(0x7f0000000140)="3f84eef8c3d462f7a9aed713fc20dbe0f00aa990b40e3cfc1a7a1575cf88f94c727260ec55eba5a4995ae1ef4fb81b3187652f72574f6f3a1874ac9190fe734fa07471973fc81b1104a1c1dff82d070e999ee4310dee7129a4ced6d2f582cdee7cd4912eaa37973c84b6e886e504ef384dcf9fe44c6bf92fd56806092666cf3551d6a096649c43df983886e855ed90377dbb865435acf86dfc92d32ad634393d7800279a38a2f995", 0xa8}, {&(0x7f0000000200)="1f7d8f438909d29957e2e2026aaf07d6d2ac9e3938c02b200490627156b1f9b476db61e9ef53054590f69d2421203573b8c07cc823a3f002e590374dfaae3d34e6e673f1b214a58577c1d64882d8f51d404abb7ac0653f97b9", 0x59}, {&(0x7f0000000280)="fd454ce697db4dfea8205cc115a121f38addee5c298e79c50222f77f54fa7338b2c28716a2dbc80ef3c9b73bcc881810d97a476a43f1deec3c9f1099773973ab91e91d64e270e31366c70b656bed5e6055c90be52675ff1538194e97cca5cbc8e18143b34bc38442", 0x68}, {&(0x7f0000000300)="56567007b722bbd128a63b8712c64e0f6b424c10e5b2dc8af9d861c1789d73b40fcfa91abae15785259608694a8f3698667354d608c5a2c8aa4477e1a9ef5f3f9ba6da69673c282f3d6d9be1b0a0eda5f2f395588b4291cb740a38242f74afc6bf2efb8ecec03829b04d2fa216551201026edecd5713a680b3a857047d279cabd167bceef04874c03394efeb", 0x8c}, {&(0x7f00000003c0)="aad30aa2bb05220b92b3e6ce00151dde2f0139c5bceb59b77fdb2bb79bb320a088bdfc", 0x23}, {&(0x7f0000000400)="29f33a2085e22802e8d01c1a3ac16157d6d861c9255d53228d1069b4f850b0ecaa491310ecd61f5bf872adcc6c40be4ac972806b84de4d8b52eab60328404f550903a11ee14650df0642c3de4cdbe1c8e25c96b982d4bdd1b570f179ab4116ab507d9cc1775f56b8992c7e81c292bb4afd26881b8ad6d5101811e54b4f98c52bbe8319651ec31077e42d1aca7461c500ac94799a9fc745d025c4f06e46de71a5ebf311b522728a1afd6f8d893f5f8f8760aa98d59a71075a814b505c23ca3e6e66f8bf11053ac0d99310", 0xca}, {&(0x7f0000000500)="1ad63a53a679ab8add9042f627c3450a0ab5849c97cde0b0233375eecbbd01b6eca425b429e2645f840838d649fe34929c37139c536cf6b7", 0x38}, {&(0x7f0000000540)="0626e519b499f722eb5e67f3e102ab4ca6d9d202aa710e5b05130d48af984f06363296e175cf9832c4a066545aa751e0c1370a66537ea9bb8f16581847d1ddf5acaeaccba54a33da32f860cbac5b0c5202fdc217d9c014938b6a7239944be2b09b6dacbd02c452ef2597e7dfb2564b9258a9c5f5bb353d4d331a8b6b8b6de93bd824765039adf91af5ca69", 0x8b}], 0x9, &(0x7f00000006c0)={0x50, 0x10e, 0x5, "2aa781f047c55e240a4361b21b47df4d959461bd1cb8f1aa8450680ddbcfd54f444163eba470375ce9a4ce355a20053e8520c5ec1e551a6e844f102c760caa0e"}, 0x50, 0x11}, 0x20000000) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f0000000000), 0xe) listen(r1, 0x0) r2 = dup(r1) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) [ 505.448761][T21700] Unknown ioctl 1075359313 23:46:51 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x810000c0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:46:52 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f00000001c0)) r2 = request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='\xb0\x00', 0xfffffffffffffffa) r3 = request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)='\x00', 0xfffffffffffffff8) keyctl$link(0x8, r2, r3) 23:46:52 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') exit(0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x1) 23:46:52 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') exit(0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xf}}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1c}}], 0x20) sendfile(r0, r1, 0x0, 0x1) 23:46:52 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) write$binfmt_misc(r1, &(0x7f0000000040)={'syz1', "bd6ebef139442c0f6902730ff284d0e285fd96356ca89fa6155dce6d19e5aed55df5231e17fcd83a17ea6ced349896e76d6fc10521a50db2b0fd3839a7d3b6d2b2440506763136798007bfb486104ad8f93c268f279f91890303"}, 0x5e) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) 23:46:52 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x820000c0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:46:52 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x7, 0x0) accept$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0xfffffffffffffe11) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000080)={0xe3}, 0x4) r2 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r2, &(0x7f0000000440)="195de5be81f8ad05acd143f01dfd102696d8914f55395da4de35c738f92bf76f238437a520dd4ca6333606361e606ecebc44b142179deedb2876fbac97b545731efeee9ea7f7c46b106b14e6e2bb8d285789e421bbb3d12b9294b7bd25cbe063220655e005", &(0x7f0000000340)=""/207}, 0x18) [ 506.249418][T21704] Unknown ioctl 1075359313 23:46:52 executing program 2: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_S390_UCAS_UNMAP(r0, 0x4018ae51, &(0x7f0000000040)={0x7, 0x0, 0xfff}) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000000100)=0x3) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={0x0, 0xffffffff}, 0x8) ftruncate(r2, 0x2008000) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x2edc) sendfile(r1, r2, 0x0, 0x80000001) 23:46:52 executing program 0: pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f00000000c0)=0x10d060000) r3 = request_key(&(0x7f0000000000)='.request_key_auth\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000140)='/dev/sg#\x00', 0xfffffffffffffffa) keyctl$get_keyring_id(0x0, r3, 0x7f) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCSBRK(r0, 0x5409, 0xffffffffffffff5a) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x100002000002, 0x11, r2, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) 23:46:52 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000040)) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = dup2(r0, r0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r2, 0x2) 23:46:52 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x830000c0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:46:52 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x8000, 0x0) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x8a180e, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x200}}], [{@obj_type={'obj_type', 0x3d, '(proc)*'}}, {@subj_type={'subj_type', 0x3d, 'md5sum'}}]}}) r4 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, 0x0) [ 506.457251][T21755] Unknown ioctl 1075359313 [ 506.474204][T21755] Unknown ioctl 1074033720 23:46:52 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x80000000}}, 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) 23:46:53 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x840000c0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:46:53 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') exit(0x0) sendfile(r0, r1, 0x0, 0x0) 23:46:53 executing program 1: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000480)='/dev/snapshot\x00', 0x200003, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f00000000c0)={{0x0, 0x0, 0x0, 0x3, 0x800}, 0x80000000, 0x4, 0x20}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='clear_refs\x00') ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000300)=0x0) r3 = syz_open_procfs(r2, &(0x7f0000000340)='\x00\x00\x00\x00\xb61i\xbd\xe8\xb7C\xa1\xad\xf8r8\x1a\xbe\x05%\xbf\xbbb\xc5\xa9R\xac\x03\xbf\xa9\xe1\xf6S\x19Q\x19\xa7\xf7\xf8\xe5\xa3\x97\x89Hf\x1f\x8e-\xc5\x8e?M\xfd\xaaa\\f;D\x9e\x91\xfd\x1a\x8e\xda\xa3\xdd\b\x89\xb3') exit(0x0) sendfile(r1, r3, 0x0, 0x1) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000180)={0x0, 0xb5, 0x8, [0x1ff, 0x7, 0x9, 0xeb5a, 0xfff, 0x3ff, 0xe81d, 0x4]}, &(0x7f00000003c0)=0x18) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000400)={r4, 0x8000, 0x2, 0x2}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000001c0)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000240)={r5, @in6={{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4}}, 0x20, 0x1200, 0x40, 0x100, 0xe}, 0x98) ioctl$VIDIOC_ENUMINPUT(r1, 0xc050561a, &(0x7f0000000000)={0x0, "81449befc1de4017bb02133a00621cae478fe1fa2eda90e18eaa1f12434fd704", 0x3, 0x8, 0x0, 0x3f48ee, 0x4000001, 0x6}) 23:46:53 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x58, 0x1) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f0000000080)={0x0, 0x9, "820d573785a87a31c0"}, &(0x7f00000000c0)=0x11) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r2, 0x1}, &(0x7f0000000140)=0x8) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r3, 0x0, 0x70bd2d, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x1) ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000180)=0x5) r4 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, 0x0) 23:46:53 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x85010000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:46:53 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) r1 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000180)={0x1d8, r2, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x3c, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}]}]}, @TIPC_NLA_BEARER={0x174, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7c54}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffffffffffbff}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'ib', 0x3a, 'bridge_slave_0\x00'}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7b89}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2da4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @remote}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x9, @dev={0xfe, 0x80, [], 0xc}, 0x9a2d}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x2, @mcast2, 0x8}}}}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6a}]}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x2000, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r3, 0xc0105303, &(0x7f0000000080)={0xd68f, 0x5, 0xfffffffffffffffa}) listen(r0, 0x0) r4 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, 0x0) [ 507.267044][T21795] Unknown ioctl 1075359313 [ 507.319745][T21796] Unknown ioctl 1074033720 23:46:53 executing program 2: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_S390_UCAS_UNMAP(r0, 0x4018ae51, &(0x7f0000000100)={0x7, 0x4, 0xfff}) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) accept4$inet6(r0, 0x0, &(0x7f0000000040), 0x80800) syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141052, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={0x0, 0xffffffff}, 0x8) ftruncate(r2, 0x2008000) sendfile(r1, r0, 0x0, 0x7ffffffe) 23:46:53 executing program 0: pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x7, 0x2) sendmsg$tipc(r1, &(0x7f00000001c0)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x2, {0x41, 0x4, 0x1}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000080)="e4cc7641568f4277", 0x8}], 0x1, &(0x7f0000000180)="0651b9fba4b9864f690bd5e05a30dcd28d84cfea844fa08620480be7a10b56b72b8b06f865e0c8fdf62cc8344b07e68fdd4b74413c1d324c359ed5", 0x3b, 0x1}, 0x0) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f00000000c0)=0x10d060000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open$cgroup(&(0x7f0000000380)={0x5, 0x70, 0x9, 0x80, 0x8, 0x100, 0x0, 0xc0240000, 0x0, 0x2, 0x4, 0x75027ada, 0x40, 0x6, 0xfffffffffffffffe, 0x1f8000000, 0x8, 0x6, 0x1, 0x5bd4, 0xa74, 0x7d6, 0x7, 0x0, 0x7, 0x7f, 0x8, 0xaa95, 0x1, 0xffffffffffffffff, 0x40, 0x3, 0x6, 0x4, 0x4, 0xfffffffffffffffb, 0x3, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000340), 0xc}, 0x801, 0x0, 0x100, 0xc, 0x1, 0x9, 0x10001}, r1, 0x5, 0xffffffffffffff9c, 0xf) fcntl$getownex(r0, 0x10, &(0x7f00000002c0)={0x0, 0x0}) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x8, 0xcb, 0x20, 0x401, 0x0, 0x0, 0x4, 0xa, 0x2, 0x200, 0x0, 0x0, 0x3ff, 0x3, 0x5, 0x7, 0x3ff, 0xff, 0x6, 0x9, 0x6, 0x9, 0x1f, 0x4, 0xab9, 0x7, 0xfffffffffffff000, 0x3, 0x1f7a, 0x4eb, 0x20, 0xd3, 0x6, 0xffff, 0x3, 0x24, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000200), 0xa}, 0x100, 0xffff, 0x3b, 0xf, 0x3, 0x800, 0x6}, r4, 0xd, r1, 0xb) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000300)=@rose={'rose', 0x0}, 0x10) r5 = msgget$private(0x0, 0x400) msgrcv(r5, &(0x7f0000000400)={0x0, ""/141}, 0x95, 0x3, 0x2000) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x100002000002, 0x11, r2, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) 23:46:53 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x86010000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:46:53 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) accept4$packet(r1, 0x0, &(0x7f0000000040), 0x80800) 23:46:53 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x484, &(0x7f0000000140)={0x16, @dev={0xac, 0x14, 0x14, 0x10}, 0x4e23, 0x0, 'sh\x00', 0x1c, 0x60000, 0x5e}, 0x2c) r2 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) write$binfmt_misc(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="73797a30d906487b4eeb84fd1bcf7ff7d755d6bd74a9e3d48ae7cca4582bba4698f0deafc6781904191495e12e8ba12dddc853dfdc448569ffee19e06d7f586bec8f2351bc61752b8794ae6e1af233ce6bacaeaef2b298965dcfc61512f734a703e7250fedfc2bac35deec7de3670237d8cae1e7adc426ea7e67aa978182112674d942c9e23cd3a483d352ec6247029d15b0bf2a8eb47d"], 0x98) 23:46:53 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x4000, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) ioctl$PIO_UNIMAPCLR(r1, 0x4b68, &(0x7f0000000080)={0x4, 0x7, 0x4}) r2 = dup(r0) fcntl$setsig(r0, 0xa, 0x19) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)={{0x1cf, 0xfff, 0xe7, 0x292, 0x39, 0x2d, 0x362, 0x5}, "74905794257840c7ff9f063e2a14986479cd986c2f050b68746f4f3f54fe5a77c7df5d092da88cfffa8141377d3e287ebbcab35b4336d62ed6830c", [[]]}, 0x15b) 23:46:53 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x87010000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") [ 507.563346][T21817] Unknown ioctl 1075359313 [ 507.583152][T21817] Unknown ioctl 1075359313 23:46:54 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') exit(0x0) sendfile(r0, r1, 0x0, 0x0) 23:46:54 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='clear_refs\x00') r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r1, @ANYBLOB="000429bd7000fcdbdf25110000003c000100080004004e240000080004004e200000080004004e200000080001000a0000000800050002400000080001000200000008000b00736970000c0004004e2000003000030008000100010000000800161bffff000014000600fe80dd34d77194f2c68824abed53468f00"/134], 0x8c}, 0x1, 0x0, 0x0, 0x51}, 0xc004) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') ioctl$VIDIOC_G_AUDIO(r2, 0x80345621, &(0x7f0000000240)) exit(0x0) sendfile(r0, r2, 0x0, 0x1) 23:46:54 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x101000, 0x0) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000080)=0x8000000) r2 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) 23:46:54 executing program 2: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_S390_UCAS_UNMAP(r0, 0x4018ae51, &(0x7f0000000040)={0x7, 0x0, 0xfff}) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) recvfrom$netrom(r0, &(0x7f0000000100)=""/46, 0x2e, 0x20, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={0x0, 0xffffffff}, 0x8) ftruncate(r2, 0x2008000) sendfile(r1, r2, 0x0, 0x80000001) 23:46:54 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x87050000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:46:54 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000040)={'gretap0\x00', {0x2, 0x4e21, @loopback}}) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) [ 507.889199][T21844] Unknown ioctl 1075359313 23:46:54 executing program 0: pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f00000000c0)=0x10d060000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000100)={0x8, 0x5, 0x10000, 0xffffffff}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x100002000002, 0x11, r1, 0x0) write(r0, &(0x7f00000001c0), 0xfffffef3) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r4, 0x820, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000801) fcntl$F_GET_RW_HINT(r3, 0x40b, &(0x7f0000000240)) 23:46:54 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x8b000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:46:54 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x2600, 0x0) ioctl$CAPI_GET_FLAGS(r1, 0x80044323, &(0x7f0000000280)) listen(r0, 0x0) flistxattr(r0, &(0x7f0000000040)=""/9, 0x9) r2 = dup(r0) r3 = socket$inet6(0xa, 0x800, 0x8) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000180)={@in6={{0xa, 0x4e24, 0x8001, @dev={0xfe, 0x80, [], 0x25}, 0x101}}, 0x0, 0x5, 0x0, "cc2cad4270ee981f07f1e5c9e16e1a69e7d1d776d90b990732a22767cdaf0cabde4f975d060c4b1ff3e3410cca98a7a095a77f43e5b11ccaff0b73ec009a9de6ae53786866d26f41f015f148a0f3d9cb"}, 0xd8) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e23}, 0x1c) listen(r3, 0x8) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000140)=[@in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e20, 0x7fff, @loopback, 0x100000000}], 0x37) bind$pptp(r2, &(0x7f0000000080)={0x18, 0x2, {0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) [ 508.270186][T21858] Unknown ioctl -2147204317 [ 508.364733][T21858] Unknown ioctl -2147204317 23:46:54 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x2000, 0x0) bind$llc(r1, &(0x7f0000000080)={0x1a, 0x0, 0x8124, 0x11c, 0xff, 0x4, @broadcast}, 0x10) r2 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) 23:46:54 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x900d0000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:46:54 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') exit(0x0) sendfile(r0, r1, 0x0, 0x0) 23:46:55 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x400, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req={0x90, 0x4, 0xfffffffffffffbff, 0x6}, 0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000140)={0x0, 0xe6, "0c4c0730a0bf7f726a2606d4ed36c076b4102a9e797b25ff4cb67c1ad8fc9ef01e472342bb49738c0b6d6e42d11a24d6d133321a2db277c743c8ccac0be583fbc3f4fa9fa5bcdd2ac04bdc7fb6558d5e75dcbf6e77614c2f2500deadd3e664dd92ef641a9bb578eb1a0f8ea4ff4c090121d83b0d8484120904831999f5a98456b0d2ef4274f217062aa6d006c0c64a1d91d0aa19a6e421c89cdc28994d0ab94e8dd8d7c157fdae40922816c9d7dd62f46826e8ba6f501383e5d31510059acba80ca5f5a13a4c4b4a6f4cb8e6a52768a727ad3a4d168976763c87564f4cf4989f3b37fe406575"}, &(0x7f0000000240)=0xee) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000280)={r1, 0xa85}, &(0x7f00000002c0)=0x8) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r2, &(0x7f0000000000), 0xe) listen(r2, 0x0) r3 = dup(r2) ioctl$sock_ax25_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, 0x0, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) [ 508.685424][T21887] Unknown ioctl 1075359313 23:46:55 executing program 1: getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0xff, 0x7}, &(0x7f0000000040)=0xc) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000080)=r0, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') exit(0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x1) 23:46:55 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x91040000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:46:55 executing program 2: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_S390_UCAS_UNMAP(r0, 0x4018ae51, &(0x7f0000000040)={0x7, 0x0, 0xfff}) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={0x0, 0xffffffff}, 0x8) ftruncate(r1, 0x2008005) ioctl$SIOCAX25ADDFWD(r0, 0x89ea, &(0x7f0000000140)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast}) sendfile(r1, r2, 0x0, 0x80000001) 23:46:55 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000b00)={{{@in=@multicast1, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000740)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000780)={{{@in=@loopback, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@multicast1}}, &(0x7f0000000880)=0xe8) syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x101, 0x7, &(0x7f0000000580)=[{&(0x7f00000000c0)="bcac6134998ed882a13d737bde2024c3a779aa3fabf440f6b63da42a2613affe0ae8f9b05569066a7db914676d8c549a6dd56cde1b0b9e46d2194122cb3935a45d902536e616f3b65a729c0094a6d75e05918dfae92a94a524bb7ce90a8e6b448e3bf099864e698de42177a180e49ac1ecd81ba92b8bada0816987abaa4f75990451a576f265901cd5d83548f01e47d1b002abb3b4e36ffa417c5ebbd3bb4ac09c251df3aa48c9f3c93a6047d3b3b96612cf6529cf", 0xb5, 0x5}, {&(0x7f0000000180), 0x0, 0x8}, {&(0x7f00000001c0)="d6e4be97d79585bd0fa90411cd00c1ca29125afedb64a5651442e04cc1d491adb1fde52c926a7d43065e", 0x2a, 0x42}, {&(0x7f0000000200)="0d5f641492460324695cffd35657b2078a4834aa62bf51824a748cc8f3bad39c8531c87d301ab086f4552ca77ecdf4b74b79f42c94fe86acc56a3fcbc2a7a14ae20ed6016aa7299d65dd9ccb121932364fac5f03d41a9807485578785798664ecad9c3a679cda153264a", 0x6a, 0x7}, {&(0x7f0000000280)="0a5935e61b6385b36b9044b70a7182ec5aab2b44ba5cca5727cc59475d7b46b08471b59ca1d95dc63ddccc1e5282d8e88cdfcad2d4eeacfc7191fbdf2a690971cd701e3ccd3234077ae69c04cac790aca785b99f7be2892ca481215d0a281c8e026ebed67506bf582fbee750c4cb8d43ee88677400849b1c18f8a791d0e9d9a41c6c34507fba2602155eb0b947fe079e7b1f4354055e5c1b1d5c229f87f629cc01c78bfc4cb55438ec41d3e8665d4cd23354d9a004f99ece94e4d881da60fb042c5876b77e303afd6b92b4fdce19e850ebb42c2bd463fbda9ffbf2ae537b1969af469e80d3b1e78b6332", 0xea, 0x455f}, {&(0x7f0000000380)="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", 0xff, 0xfff000000}, {&(0x7f0000000480)="9f77b67af28882805e49cdf595818cab7199ea4751d2dee11b447542415ffba2a20acdddfde7b9f47cc38a163197575685c36b7e68bc4fac8e019010526b99b8c5eb8572cd707023647a9d259a6a52334f51ea78496cbaa10fd42d9a80dee83f0808cb70086bcd0f0808da6ce0a70d058cc9bc0db8b7ebb7a51772c5fa46cf455a2dc6099643df8bb835299fb5e01b12e889e399929e121a3cffc8f9cec44f25264404d5982258427fcd3b3f456cf33c70812155fb6db2e5bc434e49cc758c9af8e46f74a412f7eb0bcc837430755a68e3acce2e126de624226475e77feb6dd87b439d233d452062925a82b5", 0xec, 0xffffffff00000001}], 0x0, &(0x7f00000008c0)={[{@nogrpid='nogrpid'}, {@logbufs={'logbufs', 0x3d, 0xffffffffffffffff}}, {@qnoenforce='qnoenforce'}, {@biosize={'biosize'}}, {@nolazytime='nolazytime'}, {@inode64='inode64'}, {@wsync='wsync'}, {@logbufs={'logbufs', 0x3d, 0x5}}, {@mtpt='mtpt'}, {@nouuid='nouuid'}], [{@audit='audit'}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@hash='hash'}, {@subj_role={'subj_role', 0x3d, 'ppp0:\x00'}}, {@uid_lt={'uid<', r1}}, {@obj_user={'obj_user', 0x3d, '-selinux))'}}, {@uid_eq={'uid', 0x3d, r2}}, {@context={'context', 0x3d, 'root'}}]}) r3 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) [ 508.894918][T21906] Unknown ioctl 1075359313 [ 508.920178][T21904] XFS (loop4): unknown mount option [nolazytime]. [ 508.950111][T21906] Unknown ioctl 35306 [ 508.965989][T21906] Unknown ioctl 1075359313 [ 508.985002][T21912] Unknown ioctl 35306 23:46:55 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x101000, 0x0) ioctl$SIOCRSGL2CALL(r1, 0x89e5, &(0x7f0000000080)=@default) listen(r0, 0x0) r2 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, &(0x7f00000000c0)=')V\x00', 0x3) 23:46:55 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x9e000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:46:55 executing program 0: pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x900) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f00000000c0)=0x10d060000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x100, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x100002000002, 0x11, r2, 0x0) read(r1, &(0x7f0000000140)=""/210, 0xd2) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000080)={0xb, {0x6, 0x7f, 0x4, 0xd1}, {0x5, 0x9, 0xde, 0x200}, {0x4, 0x2}}) write(r1, &(0x7f00000001c0), 0xfffffef3) 23:46:55 executing program 2: pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f00000000c0)=0x10d060000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f00000001c0), 0xfffffef3) 23:46:55 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x7f, 0x9, 0x7, 0x8, 0xfffffffffffffffc, 0xa72}) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) 23:46:55 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) gettid() listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000040)={'\x00', {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) 23:46:55 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x6, 0x40500) write$P9_RSYMLINK(r1, &(0x7f0000000080)={0x14, 0x11, 0x2, {0x10, 0x1, 0x7}}, 0x14) r2 = dup(r0) ioctl$SIOCX25GSUBSCRIP(r2, 0x89e0, &(0x7f00000000c0)={'hwsim0\x00', 0x345, 0x2}) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) 23:46:55 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x9f000040) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:46:56 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x5411, 0x0) 23:46:56 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={r1, r1, 0x9, 0x2}, 0x10) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) 23:46:56 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') r2 = getpid() r3 = syz_open_procfs(r2, &(0x7f00000002c0)='net/raw6\x00') exit(0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r1, 0xc0106401, &(0x7f0000000380)={0x4f, &(0x7f0000000300)=""/79}) getsockopt$inet6_dccp_int(r1, 0x21, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendfile(r0, r1, 0x0, 0x1) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0xac, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10001}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000001c0)={r4, @in6={{0xa, 0x4e24, 0x5, @dev={0xfe, 0x80, [], 0x11}, 0x1ff}}}, &(0x7f0000000280)=0x84) getsockopt$XDP_MMAP_OFFSETS(r3, 0x11b, 0x1, &(0x7f00000003c0), &(0x7f0000000440)=0x60) 23:46:56 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xa0010000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:46:56 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x80800000400003, 0x3) r1 = syz_open_dev$media(&(0x7f0000000200)='/dev/media#\x00', 0xfff, 0x40) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000240)=[@in6={0xa, 0x4e20, 0x10001, @rand_addr="559d7fdbcd17f6979b63ecd993b1b9c5", 0x6}], 0x1c) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r2 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x8, 0x4, 0x200}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f00000000c0)={r3, 0x1, 0x40, 0x5, 0x800000000000000, 0x1}, &(0x7f0000000100)=0x14) 23:46:56 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x5411, 0x0) 23:46:56 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x10d060000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x100002000002, 0x11, r1, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"]) write(r0, &(0x7f00000001c0), 0xfffffef3) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) 23:46:56 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xa00d0000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:46:56 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffff9c, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x9}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000100)={r2, 0x101, 0x9, [0x5, 0x1, 0x80, 0x1732a9d2, 0xffffffffffff7b54, 0x4, 0x9, 0x0, 0x4]}, 0x1a) listen(r0, 0x0) r3 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) 23:46:56 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x5411, 0x0) 23:46:56 executing program 2 (fault-call:3 fault-nth:0): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') exit(0x0) sendfile(r0, r1, 0x0, 0x1) 23:46:56 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x5411, 0x0) [ 510.167072][T21987] FAULT_INJECTION: forcing a failure. [ 510.167072][T21987] name failslab, interval 1, probability 0, space 0, times 0 [ 510.194189][T21987] CPU: 1 PID: 21987 Comm: syz-executor.2 Not tainted 5.1.0-rc3-next-20190408 #20 [ 510.203365][T21987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 510.203400][T21987] Call Trace: [ 510.203433][T21987] dump_stack+0x172/0x1f0 [ 510.203459][T21987] should_fail.cold+0xa/0x15 [ 510.203481][T21987] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 510.203504][T21987] ? ___might_sleep+0x163/0x280 [ 510.203527][T21987] __should_failslab+0x121/0x190 [ 510.203549][T21987] should_failslab+0x9/0x14 [ 510.203565][T21987] kmem_cache_alloc_trace+0x2d1/0x760 [ 510.203579][T21987] ? kasan_check_read+0x11/0x20 [ 510.203606][T21987] alloc_pipe_info+0xb9/0x430 23:46:56 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x2}, 0xe) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ubi_ctrl\x00', 0x8000, 0x0) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x0, 0x4) ioctl$SG_SET_KEEP_ORPHAN(r1, 0x2287, &(0x7f0000000440)=0x94c3) io_setup(0x80, &(0x7f0000000040)=0x0) io_destroy(r2) r3 = dup(0xffffffffffffffff) ioctl$VIDIOC_S_PARM(r3, 0xc0cc5616, &(0x7f0000000140)={0xd, @output={0x1000, 0x1, {0x0, 0x14}, 0xfff, 0x5}}) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r3, 0x28, &(0x7f0000000080)={0x0, 0x0}}, 0x10) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x7, 0x0, 0x4, 0x5, 0x20, 0x7fffffff, 0x3, {0x0, @in6={{0xa, 0x4e24, 0x7, @mcast2, 0x44}}, 0x100000000, 0x6aa6786a, 0x1, 0x5, 0x8}}, &(0x7f0000000340)=0xb0) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000380)={r5, @in={{0x2, 0x4e20, @broadcast}}}, 0x84) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={r4, 0x6f8, 0x10}, 0xc) [ 510.225919][T21987] splice_direct_to_actor+0x775/0x970 [ 510.225939][T21987] ? common_file_perm+0x238/0x720 [ 510.225955][T21987] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 510.225987][T21987] ? generic_pipe_buf_nosteal+0x10/0x10 [ 510.238188][T21987] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 510.238205][T21987] ? do_splice_to+0x190/0x190 [ 510.238227][T21987] ? rw_verify_area+0x118/0x360 [ 510.238248][T21987] do_splice_direct+0x1da/0x2a0 [ 510.253080][T21987] ? splice_direct_to_actor+0x970/0x970 [ 510.253106][T21987] ? rcu_read_lock_sched_held+0x110/0x130 [ 510.253121][T21987] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 510.253134][T21987] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 510.253147][T21987] ? __sb_start_write+0x1ac/0x360 [ 510.253166][T21987] do_sendfile+0x597/0xd00 [ 510.253192][T21987] ? do_compat_pwritev64+0x1c0/0x1c0 [ 510.253214][T21987] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 510.262776][T21987] ? fput_many+0x12c/0x1a0 [ 510.262792][T21987] ? fput+0x1b/0x20 [ 510.262818][T21987] __x64_sys_sendfile64+0x1dd/0x220 23:46:56 executing program 0: pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f00000000c0)=0x10d060000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400202) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x100002000002, 0x11, r2, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) [ 510.262844][T21987] ? __ia32_sys_sendfile+0x230/0x230 [ 510.262859][T21987] ? do_syscall_64+0x26/0x610 [ 510.262873][T21987] ? lockdep_hardirqs_on+0x418/0x5d0 [ 510.262889][T21987] ? trace_hardirqs_on+0x67/0x230 [ 510.262907][T21987] do_syscall_64+0x103/0x610 [ 510.262935][T21987] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 510.273338][T21987] RIP: 0033:0x4582b9 [ 510.273355][T21987] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 510.273364][T21987] RSP: 002b:00007f221f908c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 510.273377][T21987] RAX: ffffffffffffffda RBX: 00007f221f908c90 RCX: 00000000004582b9 [ 510.273385][T21987] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 510.273392][T21987] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 510.273401][T21987] R10: 0000000000000001 R11: 0000000000000246 R12: 00007f221f9096d4 [ 510.273410][T21987] R13: 00000000004c5227 R14: 00000000004d9368 R15: 0000000000000005 23:46:57 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='clear_refs\x00') ioctl$KVM_SET_SIGNAL_MASK(r0, 0x4004ae8b, &(0x7f0000000340)=ANY=[@ANYBLOB="40000000684d9a4bb8c78c203db829b893820f820a79d406d4313c5400002100000000a518a3d1af30c107e459a671062d61f2b99ca6cfc6f5573172122acb1a0e9f17e73c9c889aacd29ddcaaaa4bbed2f72c0f498679f4f8e01e7f9890b6535db3a0f56461dafd033215b728544a4b861d0bca0a43c3ef8d0d66524cbcb63b677059028d2ceb094fdb"]) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') ioctl$SIOCRSSL2CALL(r1, 0x89e2, &(0x7f0000000000)=@default) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r3 = socket$inet6(0xa, 0x1000000000002, 0x0) r4 = epoll_create(0x9) r5 = epoll_create(0x9) ioctl$KVM_GET_MP_STATE(r0, 0x8004ae98, &(0x7f0000000080)) r6 = socket$rds(0x15, 0x5, 0x0) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0), 0x4) r7 = epoll_create(0x400100000001) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r7, &(0x7f000000e000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000040)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r1, 0x28, &(0x7f0000000280)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000300)={r8, 0x7f, 0x4516452794136b82}, 0xc) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r3, &(0x7f00000001c0)) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f000000d000)) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f000000dff4)) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r7, &(0x7f0000001800)) exit(0x0) sendfile(r0, r1, 0x0, 0x1) 23:46:57 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x5411, 0x0) 23:46:57 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xb0000040) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:46:57 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, 0x7, {0x6}}, 0x18) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x1, @broadcast, 0x4e23, 0x4, 'wrr\x00', 0x20, 0xcba, 0x3f}, 0x2c) 23:46:57 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000040)=@int=0x1, 0x4) 23:46:57 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x5411, 0x0) 23:46:57 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, {0x99e, 0x0, 0x7, 0x0, 0x7}, 0xfffffffffffffffd}, 0xe) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f00000000c0)={0x34, 0x0, &(0x7f0000000080)}) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000180)={0x0, 0x100000001, 0x80, 0x7, 0x9, 0x6}, &(0x7f00000001c0)=0x14) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000200)={r2, 0x3, 0x30}, &(0x7f0000000240)=0xc) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000100), &(0x7f0000000140)=0x8) 23:46:57 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x5411, 0x0) 23:46:57 executing program 2 (fault-call:3 fault-nth:1): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') exit(0x0) sendfile(r0, r1, 0x0, 0x1) 23:46:57 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xb7000040) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:46:57 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(r1, 0x4040ae72, &(0x7f0000000040)={0x2, 0x9, 0x8, 0x2, 0xc9}) [ 511.055985][T22044] FAULT_INJECTION: forcing a failure. [ 511.055985][T22044] name failslab, interval 1, probability 0, space 0, times 0 [ 511.090345][T22044] CPU: 1 PID: 22044 Comm: syz-executor.2 Not tainted 5.1.0-rc3-next-20190408 #20 [ 511.099528][T22044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 511.110408][T22044] Call Trace: [ 511.113748][T22044] dump_stack+0x172/0x1f0 [ 511.118122][T22044] should_fail.cold+0xa/0x15 [ 511.122742][T22044] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 511.122767][T22044] ? ___might_sleep+0x163/0x280 [ 511.122788][T22044] __should_failslab+0x121/0x190 [ 511.122805][T22044] should_failslab+0x9/0x14 [ 511.122832][T22044] __kmalloc+0x2dc/0x740 [ 511.133618][T22044] ? kmem_cache_alloc_trace+0x354/0x760 [ 511.133634][T22044] ? kasan_check_read+0x11/0x20 [ 511.133652][T22044] ? alloc_pipe_info+0x199/0x430 [ 511.133672][T22044] alloc_pipe_info+0x199/0x430 [ 511.133691][T22044] splice_direct_to_actor+0x775/0x970 [ 511.133705][T22044] ? common_file_perm+0x238/0x720 [ 511.133720][T22044] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 511.133740][T22044] ? generic_pipe_buf_nosteal+0x10/0x10 [ 511.193910][T22044] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 511.200171][T22044] ? do_splice_to+0x190/0x190 [ 511.204868][T22044] ? rw_verify_area+0x118/0x360 [ 511.209820][T22044] do_splice_direct+0x1da/0x2a0 [ 511.214698][T22044] ? splice_direct_to_actor+0x970/0x970 [ 511.220291][T22044] ? rcu_read_lock_sched_held+0x110/0x130 [ 511.226034][T22044] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 511.231513][T22044] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 511.238289][T22044] ? __sb_start_write+0x1ac/0x360 [ 511.243337][T22044] do_sendfile+0x597/0xd00 [ 511.247785][T22044] ? do_compat_pwritev64+0x1c0/0x1c0 [ 511.253106][T22044] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 511.259369][T22044] ? fput_many+0x12c/0x1a0 [ 511.263805][T22044] ? fput+0x1b/0x20 [ 511.267649][T22044] __x64_sys_sendfile64+0x1dd/0x220 [ 511.272880][T22044] ? __ia32_sys_sendfile+0x230/0x230 [ 511.278192][T22044] ? do_syscall_64+0x26/0x610 [ 511.282885][T22044] ? lockdep_hardirqs_on+0x418/0x5d0 [ 511.288206][T22044] ? trace_hardirqs_on+0x67/0x230 [ 511.293248][T22044] do_syscall_64+0x103/0x610 [ 511.297857][T22044] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 511.303754][T22044] RIP: 0033:0x4582b9 [ 511.307653][T22044] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 511.327268][T22044] RSP: 002b:00007f221f908c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 511.335698][T22044] RAX: ffffffffffffffda RBX: 00007f221f908c90 RCX: 00000000004582b9 [ 511.343679][T22044] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 511.351664][T22044] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 511.359649][T22044] R10: 0000000000000001 R11: 0000000000000246 R12: 00007f221f9096d4 [ 511.367720][T22044] R13: 00000000004c5227 R14: 00000000004d9368 R15: 0000000000000005 23:46:57 executing program 0: pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f00000000c0)=0x10d060000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000080)={r3, 0x10}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x100002000002, 0x11, r1, 0x0) write(r0, &(0x7f00000001c0), 0xfffffef3) 23:46:57 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='\x00et/\x00\x00ycas\n2\xfbd/\xb9ct6\x00') exit(0x1) sendfile(r0, r0, 0x0, 0x1) 23:46:57 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x5411, 0x0) 23:46:57 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcs\x00', 0x101000, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r0, 0x4010ae68, &(0x7f0000000200)={0x2000}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) bind$bt_l2cap(r1, &(0x7f0000000000), 0xe) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x4000, 0x0) ioctl$IMGETVERSION(r2, 0x80044942, &(0x7f0000000180)) listen(r1, 0x0) r3 = dup(r1) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) bind$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x9, {0x0, 0x1, 0x9, 0xf3, 0x3e, 0x8}, 0x1, 0xf1}, 0xe) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timerfd_settime(r3, 0x1, &(0x7f00000000c0)={{}, {r4, r5+10000000}}, &(0x7f0000000100)) 23:46:57 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xc0000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:46:58 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x5411, 0x0) 23:46:58 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000240)='/dev/cec#\x00', 0x3, 0x2) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000280)=0x4, 0x4) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) lsetxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000140), &(0x7f0000000180)=0x30) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x0, 0x0) fchmod(r1, 0x103) ioctl$VHOST_GET_VRING_ENDIAN(r2, 0x4008af14, &(0x7f0000000200)={0x0, 0x8}) r3 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) delete_module(&(0x7f0000000100)='trusted.overlay.redirect\x00', 0x0) 23:46:58 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x5411, 0x0) 23:46:58 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x5411, 0x0) 23:46:58 executing program 2 (fault-call:3 fault-nth:2): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') exit(0x0) sendfile(r0, r1, 0x0, 0x1) 23:46:58 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xc0000080) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:46:58 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) [ 511.975558][T22095] FAULT_INJECTION: forcing a failure. [ 511.975558][T22095] name failslab, interval 1, probability 0, space 0, times 0 [ 512.016280][T22095] CPU: 0 PID: 22095 Comm: syz-executor.2 Not tainted 5.1.0-rc3-next-20190408 #20 [ 512.025451][T22095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 512.035516][T22095] Call Trace: [ 512.038830][T22095] dump_stack+0x172/0x1f0 [ 512.043175][T22095] should_fail.cold+0xa/0x15 [ 512.047783][T22095] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 512.053610][T22095] ? ___might_sleep+0x163/0x280 [ 512.058480][T22095] __should_failslab+0x121/0x190 [ 512.063448][T22095] should_failslab+0x9/0x14 [ 512.067979][T22095] kmem_cache_alloc_node_trace+0x270/0x720 [ 512.073808][T22095] ? lock_downgrade+0x880/0x880 [ 512.078664][T22095] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 512.084919][T22095] __kmalloc_node+0x3d/0x70 [ 512.089425][T22095] kvmalloc_node+0x68/0x100 [ 512.093942][T22095] iov_iter_get_pages_alloc+0x862/0x1350 [ 512.099596][T22095] ? __lockdep_free_key_range+0x120/0x120 [ 512.105470][T22095] ? iov_iter_revert+0xaa0/0xaa0 [ 512.110426][T22095] ? aa_file_perm+0x40b/0xeb0 [ 512.115119][T22095] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 512.120859][T22095] ? iov_iter_pipe+0xba/0x2f0 [ 512.125556][T22095] default_file_splice_read+0x199/0x890 [ 512.131114][T22095] ? lock_downgrade+0x880/0x880 [ 512.135975][T22095] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 512.145737][T22095] ? iter_file_splice_write+0xbe0/0xbe0 [ 512.151303][T22095] ? __lockdep_free_key_range+0x120/0x120 [ 512.157071][T22095] ? aa_path_link+0x460/0x460 [ 512.161769][T22095] ? percpu_ref_put_many+0x94/0x190 [ 512.166995][T22095] ? percpu_ref_put_many+0x94/0x190 [ 512.172223][T22095] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 512.178478][T22095] ? fsnotify+0x811/0xbc0 [ 512.182824][T22095] ? fsnotify+0xbc0/0xbc0 [ 512.187154][T22095] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 512.193406][T22095] ? fsnotify_first_mark+0x210/0x210 [ 512.198718][T22095] ? security_file_permission+0x94/0x380 [ 512.204550][T22095] ? iter_file_splice_write+0xbe0/0xbe0 [ 512.210125][T22095] do_splice_to+0x12a/0x190 [ 512.214647][T22095] splice_direct_to_actor+0x2d2/0x970 [ 512.220045][T22095] ? generic_pipe_buf_nosteal+0x10/0x10 [ 512.225607][T22095] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 512.231865][T22095] ? do_splice_to+0x190/0x190 [ 512.236933][T22095] ? rw_verify_area+0x118/0x360 [ 512.241810][T22095] do_splice_direct+0x1da/0x2a0 [ 512.246700][T22095] ? splice_direct_to_actor+0x970/0x970 [ 512.252265][T22095] ? rcu_read_lock_sched_held+0x110/0x130 [ 512.258013][T22095] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 512.263486][T22095] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 512.269739][T22095] ? __sb_start_write+0x1ac/0x360 [ 512.274773][T22095] do_sendfile+0x597/0xd00 [ 512.279207][T22095] ? do_compat_pwritev64+0x1c0/0x1c0 [ 512.284496][T22095] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 512.290745][T22095] ? fput_many+0x12c/0x1a0 [ 512.295164][T22095] ? fput+0x1b/0x20 [ 512.298992][T22095] __x64_sys_sendfile64+0x1dd/0x220 [ 512.304203][T22095] ? __ia32_sys_sendfile+0x230/0x230 [ 512.309502][T22095] ? do_syscall_64+0x26/0x610 [ 512.314191][T22095] ? lockdep_hardirqs_on+0x418/0x5d0 [ 512.319494][T22095] ? trace_hardirqs_on+0x67/0x230 [ 512.324536][T22095] do_syscall_64+0x103/0x610 [ 512.329143][T22095] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 512.335075][T22095] RIP: 0033:0x4582b9 [ 512.339000][T22095] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 512.358641][T22095] RSP: 002b:00007f221f908c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 512.367069][T22095] RAX: ffffffffffffffda RBX: 00007f221f908c90 RCX: 00000000004582b9 [ 512.375058][T22095] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 512.383045][T22095] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 512.391039][T22095] R10: 0000000000000001 R11: 0000000000000246 R12: 00007f221f9096d4 [ 512.399026][T22095] R13: 00000000004c5227 R14: 00000000004d9368 R15: 0000000000000005 23:46:58 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f00000000c0)=0x10d060000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280)='/dev/hwrng\x00', 0xdc686e14a70747cf, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x100002000002, 0x42010, r3, 0x0) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, r4, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x5}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x20, 0x5, 0x3]}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8004}, 0x81) ioctl$NBD_DO_IT(r0, 0xab03) recvfrom(r0, &(0x7f0000000300)=""/218, 0xda, 0x20, &(0x7f0000000400)=@vsock={0x28, 0x0, 0x0, @host}, 0x80) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000100), &(0x7f0000000240)=0x4) write(r1, &(0x7f00000001c0), 0xfffffef3) 23:46:58 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x5411, 0x0) 23:46:58 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x0, 0x0) ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f0000000080)={0xc, 0xa, 0x11, 0x848d, 0x9, 0x9, 0x0, 0x15, 0x1}) listen(r0, 0x0) dup(r0) syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0x1, 0x2) 23:46:58 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xc0000081) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:46:58 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000001c0)=@assoc_id=0x0, &(0x7f0000000100)=0x4) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000080)={r2, 0x8, 0x5}, &(0x7f00000000c0)=0x8) exit(0x0) sendfile(r0, r1, 0x0, 0x1) 23:46:59 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x80000000) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) 23:46:59 executing program 3: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) listen(0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x5411, 0x0) 23:46:59 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xc0000082) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:46:59 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xfff, 0x248000) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000080)={0xff}, 0x1) listen(r0, 0x0) r2 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) sendmsg$rds(r2, &(0x7f0000001dc0)={&(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000001700)=[{&(0x7f0000000100)=""/178, 0xb2}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/72, 0x48}, {&(0x7f0000001240)=""/157, 0x9d}, {&(0x7f0000001300)=""/188, 0xbc}, {&(0x7f00000013c0)=""/233, 0xe9}, {&(0x7f00000014c0)=""/251, 0xfb}, {&(0x7f00000015c0)=""/37, 0x25}, {&(0x7f0000001600)=""/231, 0xe7}], 0x9, &(0x7f0000001c80)=ANY=[@ANYBLOB="580000000000000014010000070000000600000007000000", @ANYPTR=&(0x7f00000017c0)=ANY=[@ANYBLOB="0100010000000000"], @ANYPTR=&(0x7f0000001800)=ANY=[@ANYBLOB="0500000000000000"], @ANYBLOB="710000000000000002000000000000003f0000000000000000000000000000002000000000000000000000000000000048000000000000001401000001000000000000000c0a0000", @ANYPTR=&(0x7f0000001840)=ANY=[@ANYBLOB='\x00'/45], @ANYBLOB='-\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000001b80)=ANY=[@ANYPTR=&(0x7f0000001880)=ANY=[@ANYBLOB='\x00'/92], @ANYBLOB='\\\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000001900)=ANY=[@ANYBLOB='\x00'/60], @ANYBLOB='<\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000001940)=ANY=[@ANYBLOB='\x00'/102], @ANYBLOB='f\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f00000019c0)=ANY=[@ANYBLOB='\x00'/238], @ANYBLOB="ee00000000000000", @ANYPTR=&(0x7f0000001ac0)=ANY=[@ANYBLOB='\x00'/188], @ANYBLOB="bc00000000000000"], @ANYBLOB="050000000000000040000000000000000002000000000000580000000000000014010000060000000400000000040000", @ANYPTR=&(0x7f0000001c00)=ANY=[@ANYBLOB="a300000000000000"], @ANYPTR=&(0x7f0000001c40)=ANY=[@ANYBLOB="000000d012000000"], @ANYBLOB="1400000000000000967cb44a00000000ff0100000000000001000000010000004c00000000000000000800000000000018000000000000001401000002000000000200008e000000"], 0x110, 0x4}, 0x4) 23:46:59 executing program 2 (fault-call:3 fault-nth:3): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') exit(0x0) sendfile(r0, r1, 0x0, 0x1) 23:46:59 executing program 3: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) listen(0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x5411, 0x0) [ 512.852017][T22136] FAULT_INJECTION: forcing a failure. [ 512.852017][T22136] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 512.880868][T22136] CPU: 0 PID: 22136 Comm: syz-executor.2 Not tainted 5.1.0-rc3-next-20190408 #20 [ 512.890054][T22136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 512.900228][T22136] Call Trace: [ 512.900261][T22136] dump_stack+0x172/0x1f0 [ 512.900288][T22136] should_fail.cold+0xa/0x15 [ 512.900313][T22136] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 512.900346][T22136] ? ___might_sleep+0x163/0x280 [ 512.918379][T22136] should_fail_alloc_page+0x50/0x60 [ 512.918398][T22136] __alloc_pages_nodemask+0x1a1/0x7e0 [ 512.918421][T22136] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 512.918444][T22136] ? __kmalloc_node+0x3d/0x70 [ 512.918466][T22136] ? rcu_read_lock_sched_held+0x110/0x130 [ 512.950018][T22136] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 512.950038][T22136] alloc_pages_current+0x107/0x210 [ 512.950060][T22136] push_pipe+0x3fc/0x7a0 [ 512.950086][T22136] iov_iter_get_pages_alloc+0x8c2/0x1350 [ 512.950102][T22136] ? __lockdep_free_key_range+0x120/0x120 [ 512.950123][T22136] ? iov_iter_revert+0xaa0/0xaa0 [ 512.961503][T22136] ? aa_file_perm+0x40b/0xeb0 [ 512.961518][T22136] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 512.961533][T22136] ? iov_iter_pipe+0xba/0x2f0 [ 512.961556][T22136] default_file_splice_read+0x199/0x890 [ 512.961571][T22136] ? lock_downgrade+0x880/0x880 [ 512.961584][T22136] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 512.961612][T22136] ? iter_file_splice_write+0xbe0/0xbe0 [ 513.023814][T22136] ? __lockdep_free_key_range+0x120/0x120 [ 513.029552][T22136] ? aa_path_link+0x460/0x460 [ 513.034238][T22136] ? percpu_ref_put_many+0x94/0x190 [ 513.039465][T22136] ? percpu_ref_put_many+0x94/0x190 [ 513.044672][T22136] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 513.050936][T22136] ? fsnotify+0x811/0xbc0 [ 513.055308][T22136] ? fsnotify+0xbc0/0xbc0 [ 513.059647][T22136] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 513.065904][T22136] ? fsnotify_first_mark+0x210/0x210 [ 513.071223][T22136] ? security_file_permission+0x94/0x380 [ 513.076895][T22136] ? iter_file_splice_write+0xbe0/0xbe0 [ 513.082455][T22136] do_splice_to+0x12a/0x190 [ 513.086982][T22136] splice_direct_to_actor+0x2d2/0x970 [ 513.092375][T22136] ? generic_pipe_buf_nosteal+0x10/0x10 [ 513.097943][T22136] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 513.104347][T22136] ? do_splice_to+0x190/0x190 [ 513.109045][T22136] ? rw_verify_area+0x118/0x360 [ 513.113921][T22136] do_splice_direct+0x1da/0x2a0 [ 513.118798][T22136] ? splice_direct_to_actor+0x970/0x970 [ 513.124367][T22136] ? rcu_read_lock_sched_held+0x110/0x130 [ 513.130115][T22136] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 513.135689][T22136] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 513.141945][T22136] ? __sb_start_write+0x1ac/0x360 [ 513.147009][T22136] do_sendfile+0x597/0xd00 [ 513.151470][T22136] ? do_compat_pwritev64+0x1c0/0x1c0 [ 513.156773][T22136] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 513.163031][T22136] ? fput_many+0x12c/0x1a0 [ 513.167458][T22136] ? fput+0x1b/0x20 [ 513.171291][T22136] __x64_sys_sendfile64+0x1dd/0x220 [ 513.176511][T22136] ? __ia32_sys_sendfile+0x230/0x230 [ 513.181886][T22136] ? do_syscall_64+0x26/0x610 [ 513.186568][T22136] ? lockdep_hardirqs_on+0x418/0x5d0 [ 513.191856][T22136] ? trace_hardirqs_on+0x67/0x230 [ 513.196887][T22136] do_syscall_64+0x103/0x610 [ 513.201515][T22136] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 513.207421][T22136] RIP: 0033:0x4582b9 [ 513.211332][T22136] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 513.231123][T22136] RSP: 002b:00007f221f908c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 513.239555][T22136] RAX: ffffffffffffffda RBX: 00007f221f908c90 RCX: 00000000004582b9 23:46:59 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e21, 0x100000000, @remote}}}, &(0x7f0000000100)=0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={r2, @in={{0x2, 0x4e24, @local}}, 0x2, 0x6, 0x100000000, 0x80000001, 0x8}, 0x98) [ 513.247545][T22136] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 513.255523][T22136] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 513.263504][T22136] R10: 0000000000000001 R11: 0000000000000246 R12: 00007f221f9096d4 [ 513.271494][T22136] R13: 00000000004c5227 R14: 00000000004d9368 R15: 0000000000000005 23:46:59 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xc0000083) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:46:59 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'nr0\x00', {0x2, 0x4e24, @rand_addr=0xffffffff}}) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f00000000c0)=0x10d060000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x100002000002, 0x11, r2, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) 23:46:59 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x40000000000, {0x0, 0x3, 0x0, 0x8, 0x0, 0x67}, 0x4}, 0xe) listen(r0, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$RTC_WIE_OFF(r1, 0x7010) clock_nanosleep(0x0, 0x0, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)) r2 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) 23:46:59 executing program 1: r0 = socket$caif_seqpacket(0x25, 0x5, 0x0) syncfs(r0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='clear_refs\x00') setsockopt$sock_int(r1, 0x1, 0xb, &(0x7f0000000000), 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040), &(0x7f0000000080)=0x4) exit(0x0) sendfile(r1, r2, 0x0, 0x1) 23:46:59 executing program 3: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) listen(0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x5411, 0x0) 23:46:59 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, r1, 0x0, 0x1, &(0x7f0000000100)='\x00'}, 0x30) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x7f, 0x6, 0x62d, 0xffffffff, 0x0, 0x4, 0x2a11, 0x0, 0x6, 0x5da1, 0x46, 0x9, 0x4, 0x7, 0x0, 0x12000000000, 0x2, 0x0, 0xc50c, 0x8, 0x9, 0x9, 0x200000004000, 0xd33b, 0x800, 0x3, 0x3, 0x1047, 0x9, 0x0, 0x5, 0x5, 0x1, 0x7, 0x8, 0x81, 0x0, 0xfffffffffffffc01, 0x1, @perf_bp={&(0x7f0000000040), 0x1}, 0x100, 0x0, 0x4, 0x7, 0x1, 0xcb1e, 0x6}, r2, 0x3, r1, 0x2) 23:46:59 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x5411, 0x0) 23:47:00 executing program 2 (fault-call:3 fault-nth:4): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') exit(0x0) sendfile(r0, r1, 0x0, 0x1) 23:47:00 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x5411, 0x0) 23:47:00 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) io_setup(0xffffffff7fffffff, &(0x7f0000000040)=0x0) io_cancel(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xf, 0x10001, r1, &(0x7f0000000080)="e7fbd7c3d6d35968313e8ccb68629c40024fca57e783aaaaae5e91f6c8f850fb780b0a83db073cf3bfcb308a8c51e80c44241413c339b6b99f14d0776d694a8919a6b204e91c50e2544b715d2458158ccf22f3c8075235c5b3029e655b276857c3ab9c760cbc105744edc382eef467caf7fa0aba266cb103630aef1fe3ff27a446c9865ab4af5678ebaa9a1805d4b8bff0b4cde8b3ff06efb9cc120641ffd8dcda90fd73573b0d184df296fd31fcc243015ddb1e0f4dad3e3476cf7185658302192717fb06c1cfe0c672", 0xca, 0x3, 0x0, 0x1, r1}, &(0x7f00000001c0)) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) sendfile(r1, r0, &(0x7f0000000200), 0x3) 23:47:00 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xc0000084) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:47:00 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x5411, 0x0) [ 513.761389][T22184] FAULT_INJECTION: forcing a failure. [ 513.761389][T22184] name failslab, interval 1, probability 0, space 0, times 0 [ 513.836933][T22184] CPU: 0 PID: 22184 Comm: syz-executor.2 Not tainted 5.1.0-rc3-next-20190408 #20 [ 513.846104][T22184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 513.856170][T22184] Call Trace: [ 513.859472][T22184] dump_stack+0x172/0x1f0 [ 513.863816][T22184] should_fail.cold+0xa/0x15 [ 513.868431][T22184] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 513.874288][T22184] ? ___might_sleep+0x163/0x280 [ 513.879175][T22184] __should_failslab+0x121/0x190 [ 513.884138][T22184] should_failslab+0x9/0x14 [ 513.888761][T22184] kmem_cache_alloc_node_trace+0x270/0x720 [ 513.894572][T22184] ? fsnotify+0x811/0xbc0 [ 513.898912][T22184] __kmalloc_node+0x3d/0x70 [ 513.903421][T22184] kvmalloc_node+0x68/0x100 [ 513.907931][T22184] seq_read+0x832/0x1130 [ 513.912198][T22184] ? rw_verify_area+0x118/0x360 [ 513.917054][T22184] do_iter_read+0x4a9/0x660 [ 513.921559][T22184] ? dup_iter+0x260/0x260 [ 513.925898][T22184] vfs_readv+0xf0/0x160 [ 513.930049][T22184] ? alloc_pages_current+0x10f/0x210 [ 513.935357][T22184] ? compat_rw_copy_check_uvector+0x3f0/0x3f0 [ 513.941428][T22184] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 513.947681][T22184] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 513.953936][T22184] ? iov_iter_revert+0xaa0/0xaa0 [ 513.958888][T22184] ? aa_file_perm+0x40b/0xeb0 [ 513.963564][T22184] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 513.969289][T22184] ? iov_iter_pipe+0xba/0x2f0 [ 513.973986][T22184] default_file_splice_read+0x475/0x890 [ 513.979544][T22184] ? lock_downgrade+0x880/0x880 [ 513.984393][T22184] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 513.990663][T22184] ? iter_file_splice_write+0xbe0/0xbe0 [ 513.996210][T22184] ? __lockdep_free_key_range+0x120/0x120 [ 514.001931][T22184] ? aa_path_link+0x460/0x460 [ 514.006615][T22184] ? percpu_ref_put_many+0x94/0x190 [ 514.011816][T22184] ? percpu_ref_put_many+0x94/0x190 [ 514.017015][T22184] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 514.023711][T22184] ? fsnotify+0xbc0/0xbc0 [ 514.028045][T22184] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 514.034288][T22184] ? fsnotify_first_mark+0x210/0x210 [ 514.039585][T22184] ? security_file_permission+0x94/0x380 [ 514.045227][T22184] ? iter_file_splice_write+0xbe0/0xbe0 [ 514.050771][T22184] do_splice_to+0x12a/0x190 [ 514.055276][T22184] splice_direct_to_actor+0x2d2/0x970 [ 514.060647][T22184] ? generic_pipe_buf_nosteal+0x10/0x10 [ 514.066199][T22184] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 514.072444][T22184] ? do_splice_to+0x190/0x190 [ 514.077136][T22184] ? rw_verify_area+0x118/0x360 [ 514.082008][T22184] do_splice_direct+0x1da/0x2a0 [ 514.086864][T22184] ? splice_direct_to_actor+0x970/0x970 [ 514.092424][T22184] ? rcu_read_lock_sched_held+0x110/0x130 [ 514.098165][T22184] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 514.103637][T22184] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 514.109985][T22184] ? __sb_start_write+0x1ac/0x360 [ 514.115028][T22184] do_sendfile+0x597/0xd00 [ 514.119464][T22184] ? do_compat_pwritev64+0x1c0/0x1c0 [ 514.124757][T22184] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 514.131004][T22184] ? fput_many+0x12c/0x1a0 [ 514.135420][T22184] ? fput+0x1b/0x20 [ 514.139237][T22184] __x64_sys_sendfile64+0x1dd/0x220 [ 514.144450][T22184] ? __ia32_sys_sendfile+0x230/0x230 [ 514.149754][T22184] ? do_syscall_64+0x26/0x610 [ 514.154451][T22184] ? lockdep_hardirqs_on+0x418/0x5d0 [ 514.159763][T22184] ? trace_hardirqs_on+0x67/0x230 [ 514.164815][T22184] do_syscall_64+0x103/0x610 [ 514.169430][T22184] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 514.175344][T22184] RIP: 0033:0x4582b9 [ 514.179262][T22184] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 514.198889][T22184] RSP: 002b:00007f221f908c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 514.207401][T22184] RAX: ffffffffffffffda RBX: 00007f221f908c90 RCX: 00000000004582b9 [ 514.215377][T22184] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 514.223434][T22184] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 23:47:00 executing program 4 (fault-call:1 fault-nth:0): r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0xfdfdffff) [ 514.231407][T22184] R10: 0000000000000001 R11: 0000000000000246 R12: 00007f221f9096d4 [ 514.239951][T22184] R13: 00000000004c5227 R14: 00000000004d9368 R15: 0000000000000005 23:47:00 executing program 0: pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f00000000c0)=0x10d060000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x100002000002, 0x11, r1, 0x2) write(r0, &(0x7f00000001c0), 0xfffffef3) 23:47:00 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x5411, 0x0) 23:47:00 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0xfdfdffff) 23:47:00 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') exit(0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f0000000200)={0x10, 0x7ff, 0x4}) sendfile(r0, r1, 0x0, 0x1) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0xb8, 0xfffffffffffffff9}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000080)={r3, @in6={{0xa, 0x4e20, 0x0, @remote, 0x100}}}, 0x84) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000240)={0x3f, 0xffffffff7fffffff}) 23:47:00 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xc0000100) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:47:00 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x5411, 0x0) 23:47:00 executing program 2 (fault-call:3 fault-nth:5): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') exit(0x0) sendfile(r0, r1, 0x0, 0x1) 23:47:01 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x5411, 0x0) 23:47:01 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2, &(0x7f00000000c0)=0xfdfdffff) [ 514.714197][T22227] FAULT_INJECTION: forcing a failure. [ 514.714197][T22227] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 514.727556][T22227] CPU: 1 PID: 22227 Comm: syz-executor.2 Not tainted 5.1.0-rc3-next-20190408 #20 [ 514.727600][T22227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 514.727613][T22227] Call Trace: [ 514.746857][T22227] dump_stack+0x172/0x1f0 [ 514.746880][T22227] should_fail.cold+0xa/0x15 [ 514.746898][T22227] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 514.746910][T22227] ? perf_trace_lock+0xeb/0x510 [ 514.746923][T22227] ? __lockdep_free_key_range+0x120/0x120 [ 514.746947][T22227] should_fail_alloc_page+0x50/0x60 [ 514.746979][T22227] __alloc_pages_nodemask+0x1a1/0x7e0 [ 514.786230][T22227] ? find_held_lock+0x35/0x130 [ 514.791026][T22227] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 514.796787][T22227] cache_grow_begin+0x9c/0x860 [ 514.801584][T22227] ? __kmalloc_node+0x3d/0x70 [ 514.806296][T22227] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 514.812561][T22227] kmem_cache_alloc_node_trace+0x658/0x720 [ 514.818389][T22227] ? fsnotify+0x811/0xbc0 [ 514.822740][T22227] __kmalloc_node+0x3d/0x70 [ 514.827265][T22227] kvmalloc_node+0x68/0x100 [ 514.831784][T22227] seq_read+0x832/0x1130 [ 514.836056][T22227] ? rw_verify_area+0x118/0x360 [ 514.841031][T22227] do_iter_read+0x4a9/0x660 [ 514.845558][T22227] ? dup_iter+0x260/0x260 [ 514.849920][T22227] vfs_readv+0xf0/0x160 [ 514.854089][T22227] ? alloc_pages_current+0x10f/0x210 [ 514.859409][T22227] ? compat_rw_copy_check_uvector+0x3f0/0x3f0 [ 514.865513][T22227] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 514.871799][T22227] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 514.878092][T22227] ? iov_iter_revert+0xaa0/0xaa0 [ 514.883072][T22227] ? aa_file_perm+0x40b/0xeb0 [ 514.887782][T22227] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 514.893523][T22227] ? iov_iter_pipe+0xba/0x2f0 [ 514.898241][T22227] default_file_splice_read+0x475/0x890 [ 514.903803][T22227] ? lock_downgrade+0x880/0x880 [ 514.908759][T22227] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 514.915034][T22227] ? iter_file_splice_write+0xbe0/0xbe0 [ 514.920607][T22227] ? __lockdep_free_key_range+0x120/0x120 [ 514.926355][T22227] ? aa_path_link+0x460/0x460 [ 514.931053][T22227] ? percpu_ref_put_many+0x94/0x190 [ 514.936291][T22227] ? percpu_ref_put_many+0x94/0x190 [ 514.941510][T22227] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 514.947786][T22227] ? fsnotify+0xbc0/0xbc0 [ 514.953008][T22227] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 514.959295][T22227] ? fsnotify_first_mark+0x210/0x210 [ 514.964610][T22227] ? security_file_permission+0x94/0x380 [ 514.970271][T22227] ? iter_file_splice_write+0xbe0/0xbe0 [ 514.975848][T22227] do_splice_to+0x12a/0x190 [ 514.980383][T22227] splice_direct_to_actor+0x2d2/0x970 [ 514.985792][T22227] ? generic_pipe_buf_nosteal+0x10/0x10 [ 514.991380][T22227] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 514.997777][T22227] ? do_splice_to+0x190/0x190 [ 515.002481][T22227] ? rw_verify_area+0x118/0x360 [ 515.007362][T22227] do_splice_direct+0x1da/0x2a0 [ 515.012230][T22227] ? splice_direct_to_actor+0x970/0x970 [ 515.017821][T22227] ? rcu_read_lock_sched_held+0x110/0x130 [ 515.023569][T22227] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 515.029055][T22227] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 515.035315][T22227] ? __sb_start_write+0x1ac/0x360 [ 515.040365][T22227] do_sendfile+0x597/0xd00 [ 515.044817][T22227] ? do_compat_pwritev64+0x1c0/0x1c0 [ 515.050126][T22227] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 515.056383][T22227] ? fput_many+0x12c/0x1a0 [ 515.060810][T22227] ? fput+0x1b/0x20 [ 515.064639][T22227] __x64_sys_sendfile64+0x1dd/0x220 [ 515.069861][T22227] ? __ia32_sys_sendfile+0x230/0x230 [ 515.075163][T22227] ? do_syscall_64+0x26/0x610 [ 515.079863][T22227] ? lockdep_hardirqs_on+0x418/0x5d0 [ 515.085169][T22227] ? trace_hardirqs_on+0x67/0x230 [ 515.090306][T22227] do_syscall_64+0x103/0x610 [ 515.094922][T22227] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 515.101657][T22227] RIP: 0033:0x4582b9 [ 515.105571][T22227] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 515.125187][T22227] RSP: 002b:00007f221f908c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 515.133635][T22227] RAX: ffffffffffffffda RBX: 00007f221f908c90 RCX: 00000000004582b9 [ 515.141630][T22227] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 515.149621][T22227] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 515.157611][T22227] R10: 0000000000000001 R11: 0000000000000246 R12: 00007f221f9096d4 23:47:01 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x1267, &(0x7f00000000c0)=0xfdfdffff) 23:47:01 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, 0x0, 0x0) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x5411, 0x0) [ 515.165616][T22227] R13: 00000000004c5227 R14: 00000000004d9368 R15: 0000000000000005 23:47:01 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xc0000101) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:47:01 executing program 0: pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f00000000c0)=0x10d060000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x100002000002, 0x11, r2, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000000)={0x2, [0x80, 0x0]}, 0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000080)={0x0, 0x4c68, 0x6, [0x1, 0x37a4, 0x9, 0x57, 0x581d, 0x1]}, &(0x7f0000000100)=0x14) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000140)={r4, 0x279, 0x3, 0x6, 0xaba7, 0xffffffffffffffaf}, &(0x7f00000001c0)=0x14) 23:47:01 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x1274, &(0x7f00000000c0)=0xfdfdffff) 23:47:01 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, 0x0, 0x0) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x5411, 0x0) 23:47:01 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='clear_refs\x00') getsockopt$inet6_tcp_int(r0, 0x6, 0x6, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') exit(0x0) sendfile(r0, r1, 0x0, 0x1) 23:47:01 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, 0x0, 0x0) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x5411, 0x0) 23:47:01 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x1275, &(0x7f00000000c0)=0xfdfdffff) 23:47:01 executing program 2 (fault-call:3 fault-nth:6): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') exit(0x0) sendfile(r0, r1, 0x0, 0x1) 23:47:01 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x1276, &(0x7f00000000c0)=0xfdfdffff) 23:47:01 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xc0000102) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:47:02 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x5411, 0x0) [ 515.600760][T22276] relay: one or more items not logged [item size (56) > sub-buffer size (1)] 23:47:02 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x5411, 0x0) 23:47:02 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2201, &(0x7f00000000c0)=0xfdfdffff) 23:47:02 executing program 0: pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f00000000c0)=0x10d060000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$inet(r1, &(0x7f0000000000)={0x2, 0x0, @empty}, &(0x7f0000000080)=0x10) listen(r0, 0x3) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x100002000002, 0x11, r2, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) 23:47:02 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x5411, 0x0) 23:47:02 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xc0000103) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:47:02 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='clear_refs\x00') ioctl$IMCLEAR_L2(r0, 0x80044946, &(0x7f0000000100)=0x7fff) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') syz_init_net_socket$x25(0x9, 0x5, 0x0) exit(0x0) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f00000001c0)) ioctl$KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f00000000c0)={0x2, 0x0, [{}, {}]}) sendfile(r0, r1, 0x0, 0x1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x598}) write$P9_RSETATTR(r1, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0x7) 23:47:02 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2202, &(0x7f00000000c0)=0xfdfdffff) 23:47:02 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x5411, 0x0) 23:47:02 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') exit(0x0) sendfile(r0, r1, 0x0, 0x1) 23:47:02 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xc0010000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:47:02 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2203, &(0x7f00000000c0)=0xfdfdffff) 23:47:02 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x5411, 0x0) 23:47:02 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2205, &(0x7f00000000c0)=0xfdfdffff) 23:47:03 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x5411, 0x0) 23:47:03 executing program 0: pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f00000000c0)=0x10d060000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x6fdf) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x100002000002, 0x11, r2, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0xfffffffffffffffc) write(r1, &(0x7f00000001c0), 0xfffffef3) getresuid(&(0x7f0000000140)=0x0, &(0x7f0000000180), &(0x7f00000001c0)) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f00000002c0)={0x3b5, 0x66, 0x7f, 0x1ff, 0x5b7}) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000340)=0x180, 0x4) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000300)={'ip6tnl0\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x25}}}) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='bpf\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="6d6f64653d30303030303030303030303030303030303130373534342c1c91969bd84d236d6f64653d30303030303030303030303030303030303030303030362c6d6f64653d30303030303030303030303032303030303030323030312c646f6e745f6d65617375", @ANYRESDEC=r4, @ANYBLOB="2c636561737521dba148"]) 23:47:03 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2270, &(0x7f00000000c0)=0xfdfdffff) 23:47:03 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xc0010003) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:47:03 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='clear_refs\x00') r1 = getpgid(0x0) r2 = syz_open_procfs(r1, &(0x7f0000000000)='stat\x00') exit(0x0) sendfile(r0, r2, 0x0, 0x1) 23:47:03 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x5411, 0x0) 23:47:03 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2271, &(0x7f00000000c0)=0xfdfdffff) 23:47:03 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') exit(0x0) sendfile(r0, r1, 0x0, 0x2) 23:47:03 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xc0010004) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:47:03 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2272, &(0x7f00000000c0)=0xfdfdffff) 23:47:03 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x5411, 0x0) 23:47:03 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2276, &(0x7f00000000c0)=0xfdfdffff) 23:47:03 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x5411, 0x0) 23:47:04 executing program 0: pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) r2 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f00000000c0)=0x10d060000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x2a) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x100002000002, 0x11, r2, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x8000, 0x8, 0x4, 0x400000, {0x77359400}, {0x3, 0xe, 0x10001, 0xfb, 0x5, 0x80000001, "3b1cb1e6"}, 0xfff, 0x4, @planes=&(0x7f0000000000)={0xde0, 0x5, @userptr=0x200, 0xffff}, 0x4}) write(r1, &(0x7f00000001c0), 0xfffffef3) 23:47:04 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xc0010007) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:47:04 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x1275, &(0x7f00000000c0)=0xfdfdffff) 23:47:04 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x1274, &(0x7f00000000c0)=0xfdfdffff) 23:47:04 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2279, &(0x7f00000000c0)=0xfdfdffff) 23:47:04 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x1275, &(0x7f00000000c0)=0xfdfdffff) 23:47:04 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') exit(0x0) sendfile(r0, r1, 0x0, 0x3) 23:47:04 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xc0010015) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:47:04 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x1275, &(0x7f00000000c0)=0xfdfdffff) 23:47:04 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x227a, &(0x7f00000000c0)=0xfdfdffff) 23:47:04 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x1274, &(0x7f00000000c0)=0xfdfdffff) 23:47:04 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x1274, &(0x7f00000000c0)=0xfdfdffff) 23:47:05 executing program 0: pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f00000000c0)=0x10d060000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x100002000002, 0x11, r1, 0x0) write(r0, &(0x7f00000001c0), 0xfffffef3) 23:47:05 executing program 3 (fault-call:4 fault-nth:0): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x5411, 0x0) 23:47:05 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x227b, &(0x7f00000000c0)=0xfdfdffff) 23:47:05 executing program 1 (fault-call:1 fault-nth:0): r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2284, &(0x7f00000000c0)) 23:47:05 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xc001001b) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") [ 518.826235][T22434] FAULT_INJECTION: forcing a failure. [ 518.826235][T22434] name failslab, interval 1, probability 0, space 0, times 0 [ 518.870393][T22434] CPU: 0 PID: 22434 Comm: syz-executor.1 Not tainted 5.1.0-rc3-next-20190408 #20 [ 518.879565][T22434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 518.890026][T22434] Call Trace: [ 518.890058][T22434] dump_stack+0x172/0x1f0 [ 518.890083][T22434] should_fail.cold+0xa/0x15 [ 518.890118][T22434] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 518.908169][T22434] ? ___might_sleep+0x163/0x280 [ 518.913047][T22434] __should_failslab+0x121/0x190 [ 518.918150][T22434] should_failslab+0x9/0x14 [ 518.922673][T22434] __kmalloc+0x2dc/0x740 [ 518.926939][T22434] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 518.932878][T22434] ? __pm_runtime_resume+0x11b/0x180 [ 518.938278][T22434] ? scsi_ioctl_reset+0x143/0x872 [ 518.943348][T22434] scsi_ioctl_reset+0x143/0x872 [ 518.948334][T22434] ? scsi_block_when_processing_errors+0x2da/0x390 [ 518.954885][T22434] scsi_ioctl+0x23c/0x9d4 [ 518.959253][T22434] ? scsi_set_medium_removal+0x90/0x90 [ 518.964751][T22434] sg_ioctl+0x5cd/0x2b20 [ 518.969041][T22434] ? __lockdep_free_key_range+0x120/0x120 [ 518.974896][T22434] ? sg_new_write.isra.0+0xa70/0xa70 [ 518.980221][T22434] ? __fget+0x35a/0x550 [ 518.984551][T22434] ? sg_new_write.isra.0+0xa70/0xa70 [ 518.989883][T22434] do_vfs_ioctl+0xd6e/0x1390 [ 518.994518][T22434] ? ioctl_preallocate+0x210/0x210 [ 518.999660][T22434] ? __fget+0x381/0x550 [ 519.003844][T22434] ? ksys_dup3+0x3e0/0x3e0 [ 519.008295][T22434] ? tomoyo_file_ioctl+0x23/0x30 [ 519.013257][T22434] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 519.020173][T22434] ? security_file_ioctl+0x93/0xc0 [ 519.025313][T22434] ksys_ioctl+0xab/0xd0 [ 519.029498][T22434] __x64_sys_ioctl+0x73/0xb0 [ 519.034215][T22434] do_syscall_64+0x103/0x610 [ 519.038835][T22434] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 519.044748][T22434] RIP: 0033:0x4582b9 [ 519.049013][T22434] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 23:47:05 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x227c, &(0x7f00000000c0)=0xfdfdffff) [ 519.068938][T22434] RSP: 002b:00007fee568ebc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 519.077588][T22434] RAX: ffffffffffffffda RBX: 00007fee568ebc90 RCX: 00000000004582b9 [ 519.085627][T22434] RDX: 00000000200000c0 RSI: 0000000000002284 RDI: 0000000000000003 [ 519.093630][T22434] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 519.102803][T22434] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fee568ec6d4 [ 519.111040][T22434] R13: 00000000004c1ef8 R14: 00000000004d4430 R15: 0000000000000004 23:47:05 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') exit(0x0) sendfile(r0, r1, 0x0, 0x4) 23:47:05 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x5411, 0x0) 23:47:05 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x227d, &(0x7f00000000c0)=0xfdfdffff) 23:47:05 executing program 1 (fault-call:1 fault-nth:1): r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2284, &(0x7f00000000c0)) 23:47:05 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x227e, &(0x7f00000000c0)=0xfdfdffff) 23:47:05 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2284, &(0x7f00000000c0)) 23:47:06 executing program 0 (fault-call:2 fault-nth:0): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r0, r1) 23:47:06 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xc001001f) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:47:06 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x2, 0x0) 23:47:06 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2, &(0x7f00000000c0)) 23:47:06 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x227f, &(0x7f00000000c0)=0xfdfdffff) 23:47:06 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) 23:47:06 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2282, &(0x7f00000000c0)=0xfdfdffff) 23:47:06 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x5, &(0x7f00000000c0)) 23:47:06 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r0, r1) 23:47:06 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') exit(0x0) sendfile(r0, r1, 0x0, 0x5) 23:47:06 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xc0010020) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:47:06 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x5421, 0x0) 23:47:06 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2283, &(0x7f00000000c0)=0xfdfdffff) 23:47:06 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/rpc\x00') openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$RTC_UIE_OFF(r2, 0x7004) dup2(r0, r1) 23:47:06 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x6, &(0x7f00000000c0)) 23:47:06 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x5450, 0x0) 23:47:06 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x5451, 0x0) 23:47:06 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xc0010058) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:47:06 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x1267, &(0x7f00000000c0)) 23:47:06 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0xcf67c046d9920f0, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x6, 0x10000) ioctl$DRM_IOCTL_AUTH_MAGIC(r2, 0x40046411, &(0x7f00000000c0)) dup2(r0, r1) 23:47:06 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2284, &(0x7f00000000c0)=0xfdfdffff) 23:47:07 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') exit(0x0) sendfile(r0, r1, 0x0, 0x7) 23:47:07 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x5452, 0x0) 23:47:07 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x1274, &(0x7f00000000c0)) 23:47:07 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2285, &(0x7f00000000c0)=0xfdfdffff) 23:47:07 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup2(r0, r1) accept$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14) 23:47:07 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xc0010117) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:47:07 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x1275, &(0x7f00000000c0)) 23:47:07 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2286, &(0x7f00000000c0)=0xfdfdffff) 23:47:07 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0xffff, 0x40000) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000040)={{0xa, 0x4e23, 0x401, @remote, 0x4000000000000000}, {0xa, 0x4e21, 0x8000, @local, 0x30e}, 0x0, [0xc9f, 0x0, 0x8f, 0x9, 0xcbd, 0x1, 0x9, 0x5]}, 0x5c) dup2(r0, r1) 23:47:07 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x5460, 0x0) 23:47:07 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x1276, &(0x7f00000000c0)) 23:47:07 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2287, &(0x7f00000000c0)=0xfdfdffff) 23:47:08 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2201, &(0x7f00000000c0)) 23:47:08 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xc0010140) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:47:08 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup2(r0, r1) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x40, 0x10) socket$kcm(0x29, 0x0, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000080)={0xa00000, 0x1, 0x1, [], &(0x7f0000000040)={0x9d0973, 0x8, [], @p_u32=&(0x7f0000000000)=0xce9f}}) getsockname$netlink(r2, &(0x7f0000000100), &(0x7f0000000140)=0xc) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r3, 0xc0505510, &(0x7f00000001c0)={0x0, 0x1, 0x5c1, 0xfffffffffffffffe, &(0x7f0000000180)=[{}]}) 23:47:08 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x8901, 0x0) 23:47:08 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2288, &(0x7f00000000c0)=0xfdfdffff) 23:47:08 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') exit(0x0) sendfile(r0, r1, 0x0, 0x8) 23:47:08 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2202, &(0x7f00000000c0)) 23:47:08 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x8902, 0x0) 23:47:08 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2289, &(0x7f00000000c0)=0xfdfdffff) 23:47:08 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f0000000040)={0x251d, 0x779, 0x5, 0x6}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r1, r2) 23:47:08 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xc0010141) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:47:08 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x5382, &(0x7f00000000c0)=0xfdfdffff) 23:47:08 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x8903, 0x0) 23:47:08 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2203, &(0x7f00000000c0)) 23:47:09 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x1, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r1, r2) 23:47:09 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x5385, &(0x7f00000000c0)=0xfdfdffff) 23:47:09 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x8904, 0x0) 23:47:09 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') exit(0x0) sendfile(r0, r1, 0x0, 0x9) 23:47:09 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2205, &(0x7f00000000c0)) 23:47:09 executing program 0: r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x1, 0x50000) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f00000000c0)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r1, r2) accept4$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14, 0x80800) 23:47:09 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xc0011022) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:47:09 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x5386, &(0x7f00000000c0)=0xfdfdffff) 23:47:09 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x8906, 0x0) 23:47:09 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2270, &(0x7f00000000c0)) 23:47:09 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x5421, &(0x7f00000000c0)=0xfdfdffff) 23:47:09 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x8907, 0x0) 23:47:09 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r0, r1) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000000)="62ee96f5c25836326d040c3b39e29041d9efce8ac04b4cefe1507af17318ce0834278d3637c0d372ca455ce88765472ce2ad79cd2ffe3f90677ec07b7968f66045ed7fdd671a8e53bcab4fb6884c68d9", 0x50) 23:47:09 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2271, &(0x7f00000000c0)) 23:47:09 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xc001102a) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:47:10 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xc001102c) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:47:10 executing program 0: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x105001, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x3000, 0x1}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r1, r2) openat(r0, &(0x7f00000000c0)='./file0\x00', 0x400, 0x81) fcntl$setlease(r2, 0x400, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0xcd, &(0x7f00000001c0)={{0xa, 0x4e23, 0x0, @loopback, 0x6}, {0xa, 0x4e23, 0x1, @dev={0xfe, 0x80, [], 0x11}, 0x1}, 0xdb, [0x0, 0xffff, 0x6, 0xffff, 0x40, 0x0, 0x5, 0x34]}, 0x5c) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000080)=@get={0x1, &(0x7f0000000100)=""/192, 0x7}) 23:47:10 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2272, &(0x7f00000000c0)) 23:47:10 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') exit(0x0) sendfile(r0, r1, 0x0, 0xa) 23:47:10 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x5450, &(0x7f00000000c0)=0xfdfdffff) 23:47:10 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x8940, 0x0) [ 524.005420][ T26] audit: type=1400 audit(1554767230.415:40): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=22674 comm="syz-executor.2" 23:47:10 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x8941, 0x0) 23:47:10 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)) 23:47:10 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x5451, &(0x7f00000000c0)=0xfdfdffff) 23:47:10 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r0, r1) pipe2$9p(&(0x7f0000000000), 0x4000) 23:47:10 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xc1000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:47:10 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x894c, 0x0) 23:47:11 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') exit(0x0) sendfile(r0, r1, 0x0, 0xf) 23:47:11 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x5452, &(0x7f00000000c0)=0xfdfdffff) 23:47:11 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2276, &(0x7f00000000c0)) 23:47:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup2(r0, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, &(0x7f0000000000)=0xd4b5) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x22000, 0x0) 23:47:11 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x8980, 0x0) 23:47:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xc2000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:47:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x7, 0x98000) ioctl$KVM_GET_PIT(r2, 0xc048ae65, &(0x7f0000000040)) r3 = dup2(r0, r1) ioctl$NBD_SET_SOCK(r3, 0xab00, r3) 23:47:11 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x5460, &(0x7f00000000c0)=0xfdfdffff) 23:47:11 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x8981, 0x0) 23:47:11 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2279, &(0x7f00000000c0)) 23:47:11 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x40049409, &(0x7f00000000c0)=0xfdfdffff) 23:47:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xce000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:47:12 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') exit(0x0) sendfile(r0, r1, 0x0, 0x10) 23:47:12 executing program 0: r0 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0xcdc, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000180)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat(r1, &(0x7f0000000000)='./file0\x00', 0x4000, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)={0x8, 0x0, [{0x40000007, 0x1000, 0x2, 0x1, 0x1}, {0xc000001b, 0x6, 0x57c, 0xffff, 0xbde5}, {0x0, 0x7, 0x13b, 0x5e, 0x2}, {0xa, 0x7fffffff, 0x2, 0x0, 0xd400000000000000}, {0x51c6c96aa83affc1, 0x7, 0x20, 0x1, 0xfffffffffffeffff}, {0x0, 0xd0, 0x1, 0x3ff, 0xc9cc}, {0x8000000e, 0x9, 0x7, 0xf9, 0x4}, {0xc000000d, 0x5, 0x401, 0x81, 0x5}]}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r1, r3) 23:47:12 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x4020940d, &(0x7f00000000c0)=0xfdfdffff) 23:47:12 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x8982, 0x0) 23:47:12 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x227a, &(0x7f00000000c0)) 23:47:12 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xd0040000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:47:12 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x227b, &(0x7f00000000c0)) 23:47:12 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0xc0045878, &(0x7f00000000c0)=0xfdfdffff) 23:47:12 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x8983, 0x0) 23:47:12 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x800, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000080)={0x1, 0x3, 0x5, 0x202, 0x3f, 0x81, 0xc}) dup2(r0, r1) clock_getres(0x5, &(0x7f0000000000)) 23:47:12 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x89a0, 0x0) 23:47:12 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x227c, &(0x7f00000000c0)) 23:47:13 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') exit(0x0) sendfile(r0, r1, 0x0, 0x14) 23:47:13 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0xc0045878, &(0x7f00000000c0)=0xfdfdffff) 23:47:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xd9010000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:47:13 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x89a1, 0x0) 23:47:13 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x200901, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="89d8009f16c4590eac786724889e2709705899b2d4f139492f829df7606b430b890ba6094317104b5ee9c224678a7bec1303d7c8904759dc196ea64a3ec4a9fc5ad75f3ab9602f715b427e70912b20c3ce0e42f94f7000ab629f608ec9d17a88576469b1128eeaafa95f68c9152e474f942a3f6225eedd5f73de28b2b7f7470cabb4bf1b5e4af50474e8cd099ae3ae0ff154a05f315b5b154ad9a372a31ca0006ed70337953ea146abcbf6a1edda824bae47c6", @ANYRES16=r3, @ANYBLOB="00022bbd7000fddbdf25020000000c00050001000000000000000c00030020000000000000000c00060002000000000000000c000300380000000000000008000100000000000c00020000000000000000000c0003000800000000000000"], 0x64}, 0x1, 0x0, 0x0, 0x20000840}, 0x800) dup2(r0, r1) 23:47:13 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x227d, &(0x7f00000000c0)) 23:47:13 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x40049409, 0x0) 23:47:13 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0xc0189436, &(0x7f00000000c0)=0xfdfdffff) 23:47:13 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x227e, &(0x7f00000000c0)) 23:47:13 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket(0x2, 0xa, 0x4) connect$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x40, 0x2, 0x4}}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e23, @broadcast}, {0x2, 0x4e24, @empty}, {0x2, 0x4e20, @empty}, 0x1, 0x0, 0x0, 0x0, 0x100000001, &(0x7f0000000040)='ip6gre0\x00', 0xffffffffffffff7f, 0x9, 0x4}) dup2(r0, r2) 23:47:13 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x227f, &(0x7f00000000c0)) 23:47:13 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0xc020660b, &(0x7f00000000c0)=0xfdfdffff) [ 527.079860][T22878] syz-executor.0 uses obsolete (PF_INET,SOCK_PACKET) 23:47:14 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') exit(0x0) sendfile(r0, r1, 0x0, 0x300) 23:47:14 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x4020940d, 0x0) 23:47:14 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xe0060000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:47:14 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2282, &(0x7f00000000c0)) 23:47:14 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0xc0481273, &(0x7f00000000c0)=0xfdfdffff) 23:47:14 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x6, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)={0x60002004}) dup2(r0, r1) 23:47:14 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2283, &(0x7f00000000c0)) 23:47:14 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0xc0045878, 0x0) 23:47:14 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r0, &(0x7f0000000080)="4747decca1576451b3334439701982d42ee73ebf733f3fa02bdd5591d44fbd34bb022160ae731748311c5f50259b", &(0x7f0000000100)=""/45}, 0x18) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f00000000c0)=0xfdfdffff) write$binfmt_aout(r0, &(0x7f0000000180)={{0x0, 0x3, 0x5, 0x36f, 0x390, 0x80, 0x164, 0x7}, "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", [[], [], [], [], [], [], [], [], [], []]}, 0xb1e) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000cc0)=0x0) process_vm_writev(r2, &(0x7f0000002ec0)=[{&(0x7f0000000d00)=""/155, 0x9b}, {&(0x7f0000000dc0)=""/167, 0xa7}, {&(0x7f0000000e80)=""/44, 0x2c}, {&(0x7f0000000ec0)=""/4096, 0x1000}, {&(0x7f0000001ec0)=""/4096, 0x1000}], 0x5, &(0x7f0000003040)=[{&(0x7f0000002f40)=""/215, 0xd7}], 0x1, 0x0) 23:47:14 executing program 0: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x8080, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000140)={0xa, &(0x7f00000000c0)=[{0x2, 0xfffffffffffeffff, 0x100, 0x5}, {0x81, 0x100000000, 0x0, 0x8e0e}, {0x1200000000000000, 0x4, 0x7f, 0x996e}, {0x6, 0xd4, 0x5}, {0xea8, 0xfa33, 0xfa4, 0x8}, {0x1000, 0x942, 0x40, 0x498d}, {0x8b6, 0x1f, 0x85d1, 0x800}, {0x6, 0x9, 0x7, 0x101}, {0x56, 0x3, 0x0, 0x7f}, {0x8, 0x800, 0x1a, 0x20}]}) accept4$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000080)=0x1c, 0x80800) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r1, r1) 23:47:14 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xe8030000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:47:14 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0xc0045878, 0x0) [ 528.037402][T22919] QAT: Invalid ioctl [ 528.047647][T22919] QAT: Invalid ioctl 23:47:15 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') exit(0x0) sendfile(r0, r1, 0x0, 0x402) 23:47:15 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2285, &(0x7f00000000c0)) 23:47:15 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x531, 0x80) prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) clone(0x8c000000, &(0x7f00000002c0)="5bdca414a633bb8084b8eaa00f58c6b40aff4fb03f2206e9c6a8d99707387581548543ddb7f56ee6071c5c15c2a80d655303f8b3540b71bf63c15225d33d6bae9dc53fff0cc0b0d64570079ab364793bfb79a7eb3fb7d30b6f34662be1d78f53dac2d935364e35c39d9c8206ca24587376faaf83b96f75cf0df032ce4324c0b34e67261bc6610ff52dca3b97339a9cc4c8f3eab80f41c76bfc60", &(0x7f0000000080), &(0x7f0000000240), &(0x7f0000000380)="32357592dde118974fa0bd7d964fc2e19b0a54645124df2294e12d843552529d18f477f7c1f011b7eafe37060fb499d8c3489a7195329c9c4ff31264f6d152efdb90e465a3595cc240b08040be4ef474eaca55d33480dfcefda63e7b6acc4e8add9b9b885f93d2689b63ab6feb87a1c7ac23311af62bd11e21e769b9c500c1be038653463934d45dd5f02a24611b9ecb6f5fb36f90711d14b5e59c2e1c") r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x101000, 0x0) socket$rds(0x15, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000200)={r1}) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0xfdfdffff) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000280)=0x101) syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x7, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r1) ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f0000000140)={{0x2, 0x4e22, @local}, {0x308, @local}, 0x2, {0x2, 0x4e21, @empty}, 'nr0\x00'}) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000500)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f0000000600)=0xe8) setreuid(r3, r4) 23:47:15 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$TIOCLINUX3(r2, 0x541c, &(0x7f0000000100)) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x8000, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r4 = dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000240)={{{@in6=@remote, @in=@empty}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f0000000340)=0x6bc94218da017e18) 23:47:15 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0xc0189436, 0x0) 23:47:15 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xff020000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:47:15 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2286, &(0x7f00000000c0)) 23:47:15 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0xc020660b, 0x0) 23:47:15 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x200, 0x0) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1f, &(0x7f0000000040)={@dev, 0x0}, &(0x7f0000000080)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', r2}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r0, r3) 23:47:15 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2287, &(0x7f00000000c0)) 23:47:15 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x84000, 0x0) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000040)={{0x10000, 0x1}, 0x1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r0, r2) 23:47:15 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xff0b0000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:47:16 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') exit(0x0) sendfile(r0, r1, 0x0, 0xef7) 23:47:16 executing program 4: r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x80, 0x101000) fcntl$setflags(r0, 0x2, 0x1) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f00000000c0)=0xfdfdffff) 23:47:16 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x5411, 0x0) 23:47:16 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2288, &(0x7f00000000c0)) 23:47:16 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x1, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f00000001c0)={0x8, 0xcd, "c540610038e8b8fca954ea615c3055ee0ed3835101226ab2553cd66dbb6fdbb5c60d5c93fdd8acffe5f7e6764ae44a59fcc2036b1a56c9caffe4debcc7b3a41428c1d265bc3048f2ca30d111f773e1bf8a00a10f3460004786fa5fa3d551d5dd63c605da3b127bc8d3f20bdd12771b8671aa943389556070fb333e067498d628b8d351c6455ce94a6d52469bd699da0c70ed8b4a5544979dadaf864362a084739484b8f772c54de8fb007fbc217ac1bd95b98ddd4ea907b7d0ff28dfb0015b00c0e59580eecacb0cb5f3dadf29"}) r2 = socket(0x10, 0x80803, 0x200) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4}, 0x1c) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) lsetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.sockprotoname\x00', &(0x7f00000000c0)='/dev/dmmidi#\x00', 0xd, 0x3) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x3, 0x100) r4 = dup2(r0, r3) ioctl$sock_inet_udp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000100)) 23:47:16 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xffff8000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:47:16 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2289, &(0x7f00000000c0)) 23:47:16 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x100000000001, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x10000, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2f, &(0x7f0000000200)={0x8, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e24, @broadcast}}}, 0x108) listen(r0, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000080)={r2, 0xfbc5, 0xb3bf52bf40c1cd77}, &(0x7f00000000c0)=0xc) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000100)=@assoc_id=r3, &(0x7f0000000140)=0x4) r4 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x5411, 0x0) 23:47:16 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000740)='/dev/media#\x00', 0x1, 0x84002) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000780), 0x4) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0xfdfdffff) 23:47:16 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0xfdfdffff) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x2280, 0x0) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) 23:47:16 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x5380, &(0x7f00000000c0)) 23:47:16 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000440)="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") r1 = dup(r0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000000) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x5411, 0x0) 23:47:16 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') exit(0x0) sendfile(r0, r1, 0x0, 0xf07) 23:47:16 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1b2f321000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:47:16 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x1) 23:47:16 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) getsockname$tipc(r1, &(0x7f0000000080)=@id, &(0x7f00000000c0)=0x10) listen(r0, 0x200) r2 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x5411, 0x0) 23:47:16 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x5381, &(0x7f00000000c0)) 23:47:16 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000040)=0x30) getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000080)=0x33292b28, &(0x7f00000000c0)=0x4) dup2(r1, r0) 23:47:17 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x109000) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0xfdfdffff) socketpair(0x3, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x9102004}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x4, 0x70bd29, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40000) 23:47:17 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x5382, &(0x7f00000000c0)) 23:47:17 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x8, 0x0, 0x10002, 0x5}) ioctl$DRM_IOCTL_AGP_BIND(r2, 0x40106436, &(0x7f00000000c0)={r3, 0xffdf}) dup2(r0, r1) 23:47:17 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x200000, 0x0) statx(r1, &(0x7f0000000080)='./file0\x00', 0xc00, 0x1, &(0x7f00000000c0)) listen(r0, 0x0) r2 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x5411, 0x0) 23:47:17 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x1000000000000003, 0x220000) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0xfdfdffff) 23:47:17 executing program 0: r0 = dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x2040, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000200)=r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x9}) setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, &(0x7f00000000c0)={@pptp={0x18, 0x2, {0x0, @multicast1}}, {&(0x7f0000000040)=""/36, 0x24}, &(0x7f0000000080), 0x20}, 0xa0) eventfd(0x100000001) dup2(r2, r3) 23:47:17 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') exit(0x0) sendfile(r0, r1, 0x0, 0xf17) 23:47:17 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x5385, &(0x7f00000000c0)) 23:47:17 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x5411, 0x0) 23:47:17 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x101000) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000080)={0x0, 0x4}, 0x8) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0xfdfdffff) 23:47:17 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x4000000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:47:17 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fcntl$setflags(r0, 0x2, 0x1) dup2(r0, r1) 23:47:18 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x5386, &(0x7f00000000c0)) 23:47:18 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x101000, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000400)={0x0, 0x1}, &(0x7f0000000440)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000480)={r2, 0x7f}, &(0x7f00000004c0)=0x8) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r0, r3) openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x0, 0x0) r4 = request_key(&(0x7f0000000000)='pkcs7_test\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='\x00', 0xfffffffffffffffe) r5 = request_key(&(0x7f00000000c0)='big_key\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='\x00', 0xfffffffffffffffd) keyctl$unlink(0x9, r4, r5) 23:47:18 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)=0x5) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, &(0x7f0000000040)) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x5411, 0x0) 23:47:18 executing program 4: r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x5, 0x40800) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') fremovexattr(r0, &(0x7f00000003c0)=@random={'btrfs.', '(system\x00'}) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000140)={0x1c8, r1, 0x120, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NET={0x58, 0x7, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3343}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffffffffffffd}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffffc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x800}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc}]}, @TIPC_NLA_MON={0x4}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x4c, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}]}]}, @TIPC_NLA_NET={0x10, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x78}]}, @TIPC_NLA_LINK={0x10, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_BEARER={0xcc, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x8, @mcast2, 0x4}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0xb7, @rand_addr="61320b52167a3d10bacd2ac2a93559ef", 0x3a5}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x1, @mcast1, 0xe54}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x67}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100000000}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f00000000c0)=0xfdfdffff) 23:47:18 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x8000000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:47:18 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x400000fdfdffff) r1 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x4, 0x0) setsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f0000000380)=0x3, 0x4) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00000003c0)={0x0, 0x680}, &(0x7f0000000400)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000440)={r2, 0x9b, "88862410ab547812ae810d7831946ff63a205a15cfe741168f13e74371f4ffcd54468bdff4b14b3d9d3c95e24200535e540b83b37d7317b0c425afa1683e0940ff1069be7b1f932a4c39009b2bb3a66c991e1c220fafb6c4664402690196566a5f2bb69ba1548ab74b28f0d5c36bb6d7bd822e6cf85e0019bc5c72dda1b1ef1de942f319bdc7e2838fa043c25ecfc3ea2c4fc9cfe8afacc474de39"}, &(0x7f0000000500)=0xa3) r3 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x0, 0x0) r4 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='\x00', 0x48) inotify_rm_watch(r3, r4) ioctl$VT_RESIZE(r3, 0x5609, &(0x7f0000000140)={0x8, 0x101, 0x20}) ioctl(r3, 0x1f, &(0x7f0000000240)="67ae39cf1dfd99ab84531d282d3b76cc7e8d77978c288fdac637ae053b16840bc6c42ff1965feb382343c158358b2b32da10cfe2303b13fe53cdbbb4d3433b38b1ee8f84f84e6e912cab2e513f031c29a3408413c7acf1e3ed10136634a758fa28d1a7e390d7ec1385e1ada74bbd1c46e948aae6f28dc1158d9ff7ce49ed57e630fd8699aa485782fd2d39b62c7a9aafe3f43258b9c99527144c05a9408ee33b415180c431dfa3944173e3de42064900104e514f22b5680452ca68b600a5e10bae") r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x4080, 0x0) ioctl$PIO_UNISCRNMAP(r5, 0x4b6a, &(0x7f0000000180)="955e923ba7dec036d01de28d304798c6bf8f7dbae7244a2c58d58f20370a57f0512b16f556dfd59606de09805dd156981a8a6c6997033d2874fa703fa6a3a29d9cb9d6cc5f92792375bb6452df9afbac9d0c689e45ef7781ac37b33286d33d9782f7f2bfcff8db188f6e7fccb7188257f22309b3cd19ffa9f9fb7611478eb2a94409772f90b783e3a4561bde119bec8bf2bf81ce5ab4721886f7bf0a7b82f8c03daf059a26be521c79554b") 23:47:18 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') exit(0x0) sendfile(r0, r1, 0x0, 0xf27) 23:47:18 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x5387, &(0x7f00000000c0)) 23:47:18 executing program 3: r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000040)={0x0, @aes256, 0x1, "a2bae7c78b8aae86"}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f0000000000), 0xe) listen(r1, 0x0) r2 = dup(r1) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x5411, 0x0) 23:47:18 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = accept$inet6(0xffffffffffffff9c, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000040)=0x1c) setsockopt$inet6_buf(r2, 0x29, 0x3d, &(0x7f0000000080)="9b6153da3dd9944b4aa6921b2e4df03de1fca43cdeccf1a006288792ded99089a14d54366a6e5e1ee3d729244073c71b9b648b69186271ebc085b4f0d3bf58238d77b52652fb2b4e0d0bc78a4d21d9862446ae32e231db1a49714eca3578f42717c3b1b905c2766cd607f08e857c43c81aedc4ac9f2828b9e41a078d67c097161bed8288dbeac7cee2c2556f664a4a439b8e2fdd49fd0d8c1d106da797115d203142993422184f6e990166d1eb092cfc54c08d37bef720", 0xb7) dup2(r0, r1) 23:47:18 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000280)={r1, @in6={{0xa, 0x4e20, 0x7ff, @empty, 0x8}}, 0x2d, 0x3ff}, &(0x7f0000000340)=0x90) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000180)=0x2, &(0x7f00000001c0)=0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_ENUM_DV_TIMINGS(r2, 0xc0945662, &(0x7f0000000380)={0x45, 0x0, [], {0x0, @reserved}}) setsockopt$CAIFSO_LINK_SELECT(r3, 0x116, 0x7f, &(0x7f0000000100)=0x6, 0x4) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x800000080, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f00000000c0)=0xfdfdffff) 23:47:18 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1c000000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:47:18 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x5411, 0x0) 23:47:18 executing program 0: r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x4, 0x218000) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000040)=0x1ff) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r1, r2) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000080)=0x0) prctl$PR_SET_PTRACER(0x59616d61, r3) 23:47:18 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x5421, &(0x7f00000000c0)) 23:47:19 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x5, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0xfdfdffff) r1 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x1, 0x2) ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40086432, &(0x7f0000000080)=0x5) 23:47:19 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x5411, 0x0) syncfs(r1) 23:47:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x40000000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:47:19 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') exit(0x0) sendfile(r0, r1, 0x0, 0xf30) 23:47:19 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup2(r0, r1) setns(r2, 0x18000000) 23:47:19 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x5450, &(0x7f00000000c0)) 23:47:19 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0xcc96, 0xa4a3727782279c7e) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000080)={0x9, 0x4, 0x200, 0x7, 0x6, 0x2000000000, 0x6}) ioctl$VIDIOC_DBG_G_REGISTER(r1, 0xc0385650, &(0x7f0000000300)={{0x1, @name="807b16dccfd584e9e6424ae3462039aa3cdcb50633d78a1ec2215485c2237971"}, 0x8, 0x80000001, 0x37}) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0xfdfdffff) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000280), &(0x7f00000002c0)=0x4) sendto(r1, &(0x7f0000000100)="8c197084459566714b9e908f6bfd4da9e470d56b2c89d06d4195301cc1fae99c486cf5068e22dd9226f25f8e44a7362a61c2b6a754462252ccbfcf37a6784f4cd817e13c6a9d0e6c1c886ccb2acebc8a4639d692678deab335cff0b07c936d2663fcc574af5af666141cdef8a3522bf461e5727b691011a104cd7442f506c5e1590cc88ea29b5273c979f691e174e6e7969468ac9d10138c582905cffb132e3bde97989e88ff1786895c854040cfb7bd7150c9839acf6912c0d8b63593af2d75e7bc2161bfea4effc7de24a446b71b83b6b7f40e6fcb8e84dc712d3ea5cc87", 0xdf, 0x801, &(0x7f0000000200)=@ipx={0x4, 0x20000000000, 0x6, "6e51e781caac", 0x3}, 0x80) 23:47:19 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0xe5e}, 0x0, 0x3}, 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x5411, 0x0) 23:47:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x7f0510cde518) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:47:19 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x101000, 0x0) connect$vsock_dgram(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @host}, 0x10) listen(r0, 0x0) r2 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x5411, 0x0) 23:47:19 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x5451, &(0x7f00000000c0)) 23:47:19 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r1, &(0x7f0000004380)=[{{&(0x7f00000000c0)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000140)=""/173, 0xad}, {&(0x7f0000000200)=""/220, 0xdc}, {&(0x7f0000000300)=""/214, 0xd6}], 0x3, &(0x7f0000000440)=""/198, 0xc6}, 0x38}, {{&(0x7f0000000540)=@hci, 0x80, &(0x7f0000001a00)=[{&(0x7f00000005c0)=""/107, 0x6b}, {&(0x7f0000000640)=""/78, 0x4e}, {&(0x7f00000006c0)=""/8, 0x8}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000001700)=""/195, 0xc3}, {&(0x7f0000001800)=""/22, 0x16}, {&(0x7f0000001840)=""/169, 0xa9}, {&(0x7f0000001900)=""/7, 0x7}, {&(0x7f0000001940)=""/17, 0x11}, {&(0x7f0000001980)=""/73, 0x49}], 0xa}, 0x7fff}, {{&(0x7f0000001ac0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000001d00)=[{&(0x7f0000001b40)=""/179, 0xb3}, {&(0x7f0000001c00)=""/210, 0xd2}], 0x2, &(0x7f0000001d40)=""/32, 0x20}, 0x79}, {{&(0x7f0000001d80)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f00000020c0)=[{&(0x7f0000001e00)=""/234, 0xea}, {&(0x7f0000001f00)=""/162, 0xa2}, {&(0x7f0000001fc0)=""/114, 0x72}, {&(0x7f0000002040)=""/66, 0x42}], 0x4}, 0x4bc8ab84}, {{&(0x7f0000002100)=@ax25={{0x3, @default}, [@rose, @netrom, @default, @rose, @netrom, @default, @default, @rose]}, 0x80, &(0x7f0000002680)=[{&(0x7f0000002180)=""/192, 0xc0}, {&(0x7f0000002240)=""/215, 0xd7}, {&(0x7f0000002340)=""/81, 0x51}, {&(0x7f00000023c0)=""/76, 0x4c}, {&(0x7f0000002440)=""/253, 0xfd}, {&(0x7f0000002540)=""/22, 0x16}, {&(0x7f0000002580)=""/195, 0xc3}], 0x7, &(0x7f0000002700)=""/112, 0x70}, 0x80}, {{&(0x7f0000002780)=@sco, 0x80, &(0x7f0000003d00)=[{&(0x7f0000002800)=""/86, 0x56}, {&(0x7f0000002880)=""/80, 0x50}, {&(0x7f0000002900)=""/131, 0x83}, {&(0x7f00000029c0)=""/4096, 0x1000}, {&(0x7f00000039c0)=""/248, 0xf8}, {&(0x7f0000003ac0)=""/113, 0x71}, {&(0x7f0000003b40)=""/137, 0x89}, {&(0x7f0000003c00)=""/175, 0xaf}, {&(0x7f0000003cc0)=""/14, 0xe}], 0x9, &(0x7f0000003dc0)=""/24, 0x18}, 0x200}, {{&(0x7f0000003e00)=@in6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000004240)=[{&(0x7f0000003e80)=""/53, 0x35}, {&(0x7f0000003ec0)}, {&(0x7f0000003f00)=""/226, 0xe2}, {&(0x7f0000004000)=""/166, 0xa6}, {&(0x7f00000040c0)=""/42, 0x2a}, {&(0x7f0000004100)=""/124, 0x7c}, {&(0x7f0000004180)=""/147, 0x93}], 0x7, &(0x7f00000042c0)=""/175, 0xaf}, 0x5}], 0x7, 0x40002000, &(0x7f0000004540)={0x77359400}) getsockname$netrom(r2, &(0x7f0000004580)={{0x3, @null}, [@netrom, @bcast, @bcast, @rose, @null, @null, @netrom, @bcast]}, &(0x7f0000004600)=0x48) r3 = syz_open_dev$vcsa(&(0x7f0000004640)='/dev/vcsa#\x00', 0x6, 0x0) ioctl$EVIOCGBITSW(r3, 0x80404525, &(0x7f0000004680)=""/226) r4 = dup2(r0, r1) ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000003ec0)) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000000000)={0x8001, {{0xa, 0x4e20, 0x5, @local, 0x400}}}, 0x88) 23:47:19 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0xfdfdffff) signalfd4(r0, &(0x7f0000000000)={0x3b}, 0x8, 0x80000) 23:47:19 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x82) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000100)={{0x2, 0x4e20, @empty}, {0x306, @remote}, 0x18, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x17}}, 'gre0\x00'}) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r2 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x5411, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r2, 0x28, &(0x7f0000000040)}, 0x10) 23:47:20 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x5452, &(0x7f00000000c0)) 23:47:20 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') exit(0x0) sendfile(r0, r1, 0x0, 0xf38) 23:47:20 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0xfdfdffff) r1 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0xb044, 0x68680) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffffffffffff}, 0x111, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000300)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x3, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x100000001}, r2}}, 0x30) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x40000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000003c0)={0x0, 0x205, 0xfa00, {0x2, &(0x7f0000000380)={0xffffffffffffffff}, 0x0, 0x9}}, 0x5e) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r3, &(0x7f0000000200)={0xb, 0x10, 0xfa00, {&(0x7f0000000100), r4, 0x46}}, 0x18) 23:47:20 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x7f1f323fa330) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:47:20 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000240), 0x2dd) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x0, 0x0) ioctl$RTC_WIE_OFF(r1, 0x7010) syz_open_dev$sndpcmc(&(0x7f0000000200)='/dev/snd/pcmC#D#c\x00', 0x1, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000080)={0x7, 0x2, 0x80000001, 0x4}) ioctl$DRM_IOCTL_INFO_BUFS(r1, 0xc0106418, &(0x7f00000001c0)={0xffffffff, 0x8, 0x27, 0x1, 0x6, 0x1}) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000000)) listen(r0, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x100000001, 0x80) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000180)={0x0, 0x1, 0x3, 0x10000, "72b0994f4445207db6fb451747d45a2516cf721dc68fe14aeed9b837a513c0ab"}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0xc000, 0x0) r3 = dup(r0) connect$l2tp(r3, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x2, 0x1, 0x1, 0x3, {0xa, 0x4e22, 0x1, @remote, 0xffff}}}, 0x3a) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x5411, 0x0) arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) 23:47:20 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x5460, &(0x7f00000000c0)) [ 534.292538][ T26] audit: type=1400 audit(1554767240.695:41): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=23196 comm="syz-executor.2" 23:47:20 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r1, r0) 23:47:20 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x40049409, &(0x7f00000000c0)) 23:47:20 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0xfdfdfffc) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x129440, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000080), 0x10) 23:47:20 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x5411, 0x0) 23:47:20 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x4020940d, &(0x7f00000000c0)) 23:47:21 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x7fc31b604700) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:47:21 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r0, r1) 23:47:21 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') exit(0x0) sendfile(r0, r1, 0x0, 0xf40) 23:47:21 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x5411, 0x0) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000040), &(0x7f0000000080)=0x4) 23:47:21 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0xc0045878, &(0x7f00000000c0)) 23:47:21 executing program 4: r0 = creat(&(0x7f0000000380)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6100) truncate(&(0x7f0000000240)='./bus\x00', 0x4a00) r1 = open(&(0x7f00000002c0)='./bus\x00', 0x0, 0x0) ioctl$IMGETDEVINFO(r1, 0x80044944, &(0x7f0000000300)={0x3}) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) lseek(r0, 0x0, 0x2) sendfile(r0, r1, 0x0, 0x20020) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-monitor\x00', 0x200, 0x0) ioctl$BLKROGET(r2, 0x125e, &(0x7f0000000200)) r3 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r4 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000000)={0x2, 0x0, @local}, &(0x7f0000000080)=0x10, 0x800) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2275, &(0x7f00000000c0)=0xfdfdffff) r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x20000, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000280)={0x0}, &(0x7f00000003c0)=0xc) fcntl$setown(r5, 0x8, r6) ioctl$SIOCX25SENDCALLACCPT(r5, 0x89e9) 23:47:21 executing program 0: syz_mount_image$nfs(&(0x7f0000000000)='nfs\x00', &(0x7f0000000180)='./file0\x00', 0xff, 0x375, &(0x7f00000001c0), 0x2e0020, &(0x7f0000000200)='\x00') r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r0, r1) 23:47:21 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1004000000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") [ 535.261319][ T26] audit: type=1804 audit(1554767241.665:42): pid=23284 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir229052132/syzkaller.bYtV9o/757/bus" dev="sda1" ino=16554 res=1 23:47:21 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x5411, 0x0) 23:47:21 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0xc0045878, &(0x7f00000000c0)) [ 535.421624][ T26] audit: type=1804 audit(1554767241.825:43): pid=23284 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir229052132/syzkaller.bYtV9o/757/bus" dev="sda1" ino=16554 res=1 23:47:21 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup2(r0, r1) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={r2, 0x2, 0x1, 0xfffffffffffffffa, &(0x7f0000000000)=[0x0], 0x1}, 0x20) 23:47:21 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0xfdfdffff) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_virtio(&(0x7f0000000000)='cpuset\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x8000, &(0x7f0000000340)={'trans=virtio,', {[{@version_9p2000='version=9p2000'}, {@privport='privport'}, {@version_L='version=9p2000.L'}, {@afid={'afid', 0x3d, 0x7}}], [{@euid_gt={'euid>'}}, {@smackfsdef={'smackfsdef'}}, {@func={'func', 0x3d, 'MODULE_CHECK'}}, {@fowner_gt={'fowner>', r1}}, {@obj_role={'obj_role', 0x3d, 'bdev\\trusted'}}, {@audit='audit'}]}}) [ 535.489479][ T26] audit: type=1804 audit(1554767241.855:44): pid=23297 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir229052132/syzkaller.bYtV9o/757/bus" dev="sda1" ino=16554 res=1 23:47:21 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0xc0189436, &(0x7f00000000c0)) 23:47:21 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = socket$rds(0x15, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r1, 0x9d2) r2 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x5411, 0x0) 23:47:22 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') exit(0x0) sendfile(r0, r1, 0x0, 0xf44) 23:47:22 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x100c000000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:47:22 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000140)=0xfdfdffff) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x100, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000080), &(0x7f0000000100)=0x4) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f00000000c0), 0x4) 23:47:22 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x45, 0x80300) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0], 0x6, 0x2, 0x2, 0x2}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$KVM_SET_XCRS(r1, 0x4188aea7, &(0x7f0000000180)={0x1, 0x1b, [{0xd4, 0x0, 0xfffffffffffffff8}]}) dup2(r0, r2) 23:47:22 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0xc020660b, &(0x7f00000000c0)) 23:47:22 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x200000000, 0x0, 0x80000000000}}, 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x5411, 0x0) 23:47:22 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x9, 0xf4761b78c4b0acfe) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0xfdfdffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x800, 0x0) ioctl$VIDIOC_QUERYMENU(r1, 0xc02c5625, &(0x7f0000000040)={0x200, 0x7fff, @value=0x3}) 23:47:22 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x5411, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={0xffffffffffffffff, r1, 0x0, 0x1, &(0x7f00000002c0)='\x00'}, 0x30) r3 = geteuid() r4 = getgid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0xffffffffffffffff, r1, 0x0, 0x13, &(0x7f0000000340)='-%posix_acl_access\x00'}, 0x30) r6 = getuid() lstat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000480)={0x0}, &(0x7f00000004c0)=0xc) r9 = geteuid() getgroups(0x1, &(0x7f0000000500)=[0xffffffffffffffff]) r11 = gettid() r12 = getuid() lstat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r1, &(0x7f00000006c0)={&(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000280)=[{&(0x7f00000000c0)="ee20418f89a0c2b9b0f1b003c7f90ba91b9544d4579adecfab19606ad46ca2c1ad606db440d4184eb95aecc434116ec89376b1e0e6411deaee4f41bb64295b6ec283c7031ae8176c1dac", 0x4a}, {&(0x7f0000000140)="3c34f6b7dd107f589aa934602eea5eba6390f9ddfd5a9f0c8b013ba7a4c8333caeaedce06d173027d24147091f9db9e3", 0x30}, {&(0x7f0000000180)="b1e307bbfeef37bfce6262f20d9aca3ce52ca079f2a0014ec97ca62a494823dd4df62926377e20bbc01d3055dfcbe12c0e434803d440c3e399c9a09ca3d6315edf67ee0ae9779be1a263a83950ba066293ad1b0adda5fdf3772a3519efd9a036866daa54903276786c1bc4bbe7c55942091de6c319c9722310c28ac0febd05596d4f5b7f8686cdac8d63aa26b4f6e5bd48f623072c603d4d17fcf92f199eb20ee66e1a99cf621436904a41495f69912e10f508a0a1fa1af0ce396933b3e9eba33b430f00242c619ba1ea9459033883808591f6e5caaaca615bf765656a44fcdfc97c36c9c43f529eb543", 0xea}], 0x3, &(0x7f0000000600)=[@cred={0x20, 0x1, 0x2, r2, r3, r4}, @cred={0x20, 0x1, 0x2, r5, r6, r7}, @rights={0x18, 0x1, 0x1, [r1, r1]}, @rights={0x18, 0x1, 0x1, [r1, r0]}, @cred={0x20, 0x1, 0x2, r8, r9, r10}, @cred={0x20, 0x1, 0x2, r11, r12, r13}], 0xb0, 0x4000080}, 0x20008080) 23:47:22 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0xc0481273, &(0x7f00000000c0)) [ 536.360689][T23357] QAT: Invalid ioctl 23:47:22 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$KVM_NMI(r0, 0xae9a) dup2(r0, r1) 23:47:22 executing program 4: ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f00000000c0)=0xfdfdffff) r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x7, 0x200) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 23:47:22 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x2000000000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:47:23 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') exit(0x0) sendfile(r0, r1, 0x0, 0xf46) 23:47:23 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2284, &(0x7f00000000c0)=0x2) 23:47:23 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x4, 0x400) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x8) 23:47:23 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x100000001) dup(r0) 23:47:23 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timer_create(0x7, &(0x7f0000000100)={0x0, 0xd, 0x2, @thr={&(0x7f0000000000)="d824f5f615b5bc289ee691bdc2315dcbfdc264fd041e5a5f96b8cc0f12e6a0cfe7a868952679ece77820c50214b452570b07a337fd0df8f16d056ed8d11910ded28fa079f11df8a794fa0b1ba3c7", &(0x7f0000000080)="cab2bfcd635cad88ba100695fe87c072ceb6533fbb5d85cc526b475faaef7b295c3994e7c324643f3abe526f8b83944ed5328545c3c6bcea482523c28dadf75254c890300a5e780ca007a555c90e38cd012c72e26f9a4dc5e07f5c373d20712b55f0f0268fe5cbf7fcca11"}}, &(0x7f0000000140)=0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_settime(r2, 0x0, &(0x7f00000001c0)={{0x77359400}, {r3, r4+30000000}}, &(0x7f0000000200)) r5 = dup2(r0, r1) epoll_ctl$EPOLL_CTL_DEL(r5, 0x2, r5) 23:47:23 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x4000000000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:47:23 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) clock_gettime(0x7, &(0x7f0000000000)) r1 = syz_open_dev$adsp(&(0x7f00000002c0)='/dev/adsp#\x00', 0x1ff, 0x0) getsockopt$inet_dccp_buf(r1, 0x21, 0x80, &(0x7f0000000300)=""/4096, &(0x7f0000001300)=0x1000) r2 = syz_open_dev$amidi(&(0x7f00000014c0)='/dev/amidi#\x00', 0x2d9d, 0x0) clock_gettime(0x3, &(0x7f00000001c0)={0x0, 0x0}) mq_timedreceive(r2, &(0x7f0000000100)=""/141, 0x8d, 0x4e499252, &(0x7f0000000200)={r3, r4+10000000}) sendto$inet(r2, &(0x7f0000000240)="219a0bc5c958dacad3b135a1f04ea5b551d152452e95d0e57f94fb3b62f2199a", 0x20, 0x0, &(0x7f0000000280)={0x2, 0x1000, @multicast2}, 0x10) setxattr$security_ima(&(0x7f0000001340)='./file0\x00', &(0x7f0000001380)='security.ima\x00', &(0x7f00000013c0)=@ng={0x4, 0x3, "9788ef31521252a4b40c1bb48c62"}, 0xfffffffffffffd30, 0x2) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0xfdfdffff) 23:47:23 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='comm\x00') ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000080)='cpuset,&.eth0\x00') ioctl$KVM_ASSIGN_DEV_IRQ(r0, 0x4040ae70, &(0x7f0000000100)={0x400, 0x9, 0x5, 0x600}) write$smack_current(r1, &(0x7f0000000140)='mime_type\xadeth0\x00', 0xf) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) setsockopt$rose(r1, 0x104, 0x6, &(0x7f00000000c0)=0x6, 0x4) listen(r0, 0x0) r2 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x5411, 0x0) 23:47:23 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2284, &(0x7f00000000c0)=0x3) 23:47:23 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x400000, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000140)="ea246768440602db65cfe0a35c01486d", 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r1, r2) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x2, &(0x7f00000000c0)=[0xee00, 0x0]) setregid(r3, r4) 23:47:23 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x6}, 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x5411, 0x0) 23:47:23 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x8000000000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:47:24 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') exit(0x0) sendfile(r0, r1, 0x0, 0xf48) 23:47:24 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2284, &(0x7f00000000c0)=0x4) 23:47:24 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x6, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0xfdfdffff) 23:47:24 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup2(0xffffffffffffffff, r0) r2 = socket$can_raw(0x1d, 0x3, 0x1) write$P9_RXATTRWALK(r1, &(0x7f0000000100)={0xf, 0x1f, 0x1, 0x7}, 0xf) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e24, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x5}, {0xa, 0xfffffffffffffb80, 0x0, @ipv4={[], [], @rand_addr=0xfff}, 0x1}, 0x10001, [0x3, 0xffffffffffffff00, 0x3, 0x4, 0x3, 0x3f, 0x606, 0x94c0000000000000]}, 0x5c) write$P9_RSTAT(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="600000007d02000000590007007f0000005e00000000070000000000000000000018e30e0000a12e00000864a401c370f87a4f3c7e54fea9845f530000000000000025006d696d655f74797065216367726f7570776c616e30247472757374651ae442cb7e46d8497f840b794b6d073f7694f253ee3f4e92eaec9d6464d7326c13bad901d84af3c6942b656b2a3e71"], 0x60) ioctl$VIDIOC_G_SELECTION(r1, 0xc040565e, &(0x7f0000000080)={0xe, 0x2, 0x1, {0x0, 0xfffffffffffffffc, 0x3, 0x3}}) ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f00000000c0)=0x1ff) 23:47:24 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x4800, 0x0) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) r3 = fcntl$getown(r0, 0x9) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=0x0) r5 = geteuid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000001c00)=0x0) setsockopt$sock_int(r1, 0x1, 0x3f, &(0x7f0000000a00)=0xefa, 0x4) r7 = getpgid(0x0) ioctl$sock_proto_private(r1, 0x89ee, &(0x7f0000000900)="1eb5f3598cf9a285780307c5166f764536bb1645be6976f65602759f36fb8d26ff1ee1f227fdc893c7856f558b612ea4a9c408666d0c1424b5cfe42afec4baf5b0899cdc62dc0cf476a81d983695ba1916c01980521474ecce29d711a5c0709a448dc5a67d222ac3959dbbf95bc282986cecdfb3a5dd2360e7739913477582c3cb9a1f67892b72854e654d0184b253d0e1149eb23b1e0e40bf74b51f9bea343d4b8c8589b8abc343a2c04edd7ccc961e4acb552188e653a46ec1d9b9de792035947d356104bc8e58293426eece57cde832908819b6abe5f3b3cdc50e843d6e") sendmsg$netlink(r1, &(0x7f0000003000)={&(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x100004}, 0xc, &(0x7f0000002fc0)=[{&(0x7f0000000140)={0x7ac, 0x30, 0x800, 0x70bd2b, 0x25dfdbfc, "", [@nested={0xf0, 0x88, [@generic="160ae801ef9539101840be67d6c898d939dcce567b24f90f864ae06884e5e4a6b439feb455e59748b1c3d85d8f304cf10ed446cdda48530f4247bdbaa5ecad35d09d9b6cbab0221a7e6971c049a496e3bee8c2fd73cb68c4ce4ee0c2d97a774c3a14cb1184d4868fa620f078d99f48f95f0dccd2d1c3c4589361533eeeb042ff5241b94fb5d7baadd40286cb3865d82e8938373378ebce9350eb029752a4248c004402ddb83da5e36f6c6f890bafffd03ff54ee4971ce71af1dbaa6b0228aebf225f6be9bc7df29125f8a118cc9cd380676d2b5a3f23f139bebdebf2bae56ea8237ed2", @typed={0x8, 0x86, @pid=r2}]}, @typed={0x8, 0x69, @fd=r0}, @nested={0x108, 0x8c, [@typed={0x8, 0x38, @pid=r3}, @generic="4821f2afdf84ddbd8eb10390b2439231cde6ce52459deb094bc7a8150d0861a02abf3a3a6169eca9e78466b175530852100ae8661547a02e513edcbd78614a5e98f47ba421f60e01544a6847d60039de4e7c4a15c2714f332b3a2230b8348c38b3a906f2357ad3a40b08fa43f34cdbe32f2999c0e0deb9a2fc2275d69d98c79f9dfd71fc0cfaa1eebaa519b2ef13d6776513a5af1fb85ebaf0f62e4bf671d30f7d86c3c5ad34809801b3e710a67315d98c7398473c8f867107605a51d0ea8e95650666cc087e17659097dd8f12928cae351fe1804866055747deeb59748ffc1669eb642041fb1058de186398e82c2ae25c61746e57723adbce"]}, @generic="7063362d0b2e3511d79f28eb20e0169ba159e46271a13c718734ca4adb33392c765c17a06783e0beeaefdc46b6e6d1256bba4831393c40149b55acacaa977f3a1c6cd79040fd24cb7d202fa11ee677ecd5b91fb234608c55defec5657d794378cd21e1a1633461f0c9fb6f038811d26ae17b0ce9c8e3f6f7000ac0a17e535c0a853b0995881bd7cf917d7a265dac448f55060987e9429354bbf5bd9f62860ede803df49951e08af1ea3484703fc47cbdf217614be81dcfbd25ba00536ac5783fa308c653c73cb5989a7d49d627de1a0826d27159cecadf945641b64bde7b6570e0fd94", @nested={0x1a8, 0x9, [@typed={0x8, 0x89, @str='@\x00'}, @typed={0x8, 0x27, @pid=r4}, @generic="68054ff9a702b578", @generic="2b44d24f595e45d61d570fe595050780888f0098f01fcc46c21dd07e0c9a3719a6abd8e6348721c581d8d71a47e1c9031d918f1a56c8c9acdf71028f1342c03bbbe0a4c1eef7b267d3270f6cdabbbb5317800af6bb6052ae883186a68eb505bbcb3126df73431c36a9021e5761ecb3a826e404d25d8d8d1aa07082ec1731accb653969", @typed={0xc, 0x55, @u64=0x6}, @typed={0x8, 0x28, @str='lo\x00'}, @generic="35f17f5014f4ef0f0437f95f0c5c65086b8c7febf57c60fc9677541f45f89cb5b7a0ed720e573fc7eb8ff73070f1f72d5484b674fa37a5896426df4759d83ed07a3f9cef7b0ce6df9869dfd04ba8d70ba6f19f9d63097dcc4cc31728e484f29e0c0b97fe6b555f740b3490aa5a1b08d3e4e2e60c7af6fed8584c9a5d4e5e73e97427ed363632273d11791df315310a43c1135e697e27f5462f8d81bd984ead75ff7d8cf6d4db1582da2e3c2ee11bd17b451bd3592409109897a0a405978650ad8052d300ba3268ef71966bfbbba19c579299bc745573e916b9ac0e995e40a51e213e341ece17c43bff0d47d2cab2dc263f76105199"]}, @nested={0x30c, 0xe, [@typed={0x8, 0x8e, @fd=r0}, @typed={0xc, 0x60, @u64=0x3}, @generic="dd60b8708da69515731154308d14f17a7cf23d2c0abea9755c50eb9483e14c9692f600d6ad92784fc5dac2977398aa4f861e55fbc392a0e7d899dba304536a323b102117afaeb8f364a0be1567c90ced4fc39efbc4df7cf0cc3534f4ca4ceadb88d68079b3e2760a0c543b6b59e4b57d6ed3e241b2542572584f1d5c9c49c312e3113188cd86eaf34e033729d6e66aa555e58bce7d6882dcef7cdd", @typed={0xb0, 0x6c, @binary="777b19f62e9da8248e2686e89e9f1e1ac3d702e6fc0ccd84a2667a838b19bb81f52d4b045d9b7611b6efcfbf75ea08e1fe3f1a544f42ce828eaa569e1437287825c0127494806f6447f59523fffb596ee3b0fe1e1a754d8e0921e65c3f1acd34131a174248fcc1a1c1c2658bcd1b34afb5e4934047bfc0bce0b65cfa1daa234bf1c137a1df4dd85e7f5ec4e5b567aebc6561d00ffaad0059fae7148aed42e3b5dcc7a8dfdafdb2768e"}, @typed={0xa4, 0x91, @binary="558cbbe952e6ec79569bb2528b480cfd2083c17c5bcc8004d5fd6a577041b2dd9f92382b0f55aca45d814f44a17e3f2fb5c67c1a0fbbbb1cd7796d234efccbcf83ecee0f4f2a488397d91466ed314ff1e9ff8bc954da62f8d203bab0dca075537142c8faf7830110fb108bd5554ceb15146019ffe3b6adaa3c96e98339a8eb737b92df590e606364cf3d02e0dcbc13c2f4838b70af9e5f259cbae7914c"}, @generic="aa15398607eb97a21575d2fc13a04ba06fb485700830a67979f5fb8f23a8fd30d0ef569520e167e186c9023a03c77a1f924e8f928b6fbcdc9b702efcbc4efa7cfc55f07d4de9ada25feb75c22e33dded9057cdeaf01a77b3eb", @generic="fbaec7aeb8eed39890d64711a73339440dbec3f52b697d366644231883154428afdc34a08002cf580f52cc56b26876ba1d4b034a51383c88b22daba868f022371d3a59e2330930ae5620ddd2cc85316088eebbe0364df9db5e12c9434877560533236643bb35ea66522b5bdcabb479c5bd31dbe1ac56f74568cb6643c35035fd2ea56947b15d232ce2f4e73577c280ddd13ce0154a61fd85aef3eb31e237c0decf599adfbe137c4acad48c80"]}, @typed={0x4, 0x26}]}, 0x7ac}, {&(0x7f0000003040)={0x1144, 0x3c, 0x8, 0x70bd25, 0x25dfdbfc, "", [@typed={0x8, 0x26, @fd=r0}, @nested={0xe8, 0x64, [@generic="2035c65bf1d299a7217d606f107cc555c4", @generic="a15b45e4a5de31fb0705a55cf41200d3f2060920bf15c509f6b5b0745a533bd2dfc368e9f9f152043dea2a3a161da01e362d38901a7013d580cedb2dd86d17b20c1a1632207e1c1244fe38968399413696abd3d814e5e339bd31bca63df7396a76fa1fdfcf4e8c116df2374cc24b8c20defbcae24e3f2187c67db24633d23031da160cea066f0e7b74e581069b156fc4c41294d77c6dd41f0d2d7833e89d11bfafe4e6cfda9c0b640238704caff676830bf79dae101f4a83de49ddd0252dcc5f83b5eff9327e1b0c6e5042b5e1163e6d"]}, @typed={0x2c, 0x4d, @str='ppp1&mime_type}lo*vboxnet0,vboxnet0@\x00'}, @nested={0x1018, 0x42, [@generic="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", @typed={0x14, 0x55, @ipv6=@rand_addr="94b3587ffd3539cb5a1d386cabcd3d35"}]}]}, 0x1144}, {&(0x7f0000001a80)={0x144, 0x27, 0x204, 0x70bd2c, 0x25dfdbfd, "", [@generic="a63fa8a12d4f16414a96736fe3da7d9ff628dc739b7d2c655bb05b453c887b727277372367562bea51a0f5745df2f73dabb6ec42471f507a806016fc95a42640e326b08dcc866f62e31bba10", @typed={0x34, 0x7b, @binary="7a38455a9f61fa05e769b96858faba6ed2985324c52810747f68345b07e91affab20565a5314b5b90a95e7227a73018a"}, @typed={0x10, 0x1, @str='#&cpuset\'^}\x00'}, @generic="8b04b557b4b2d579aab94c4e940f8d2db6ed8c366f971d230179c2786973b3c564fe3906348c8ac90ee41a89565c7136c3bfba7be0e026d337cfd82718ca64c8f627b32756d367d30081761636e5caa2f9d19049736151bbe5fafe1ebf504725ef45751bf78238a185d1b9dcf3f6f943d3e79b1622170b465f967aa9099028fc48ce8174a0618f9e801be4918e3d4503ae6be08ced006eadb180ac024acb7abf98"]}, 0x144}, {&(0x7f0000001c40)={0x1380, 0x38, 0x210, 0x70bd28, 0x25dfdbfe, "", [@typed={0x8, 0x85, @str='\x00'}, @generic="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", @nested={0x1c4, 0x1d, [@typed={0x8, 0x16, @ipv4=@loopback}, @typed={0x94, 0x1d, @binary="7564a031a5eb6fea417254691c049a81b350ad10fd9e61ac2003bc30559d4e8f4ec5bff4e4adb4317f090cafcd86e6178d7eff22bca7071fe92a9a51362c04c5784d4c88cd8315f06078bec3611b6bd0c9836f2302b0abc765f67f68da4058dc7a7b2e5f45e55cd70ee6cf7099c5645464de847158fe9494ac7e1dab0a095b6480097991645a0405a5604a3f5101"}, @typed={0x1c, 0x64, @binary="8eb411e481f54cba4554741106770d6272d07e7b62"}, @typed={0x8, 0x38, @uid=r5}, @typed={0x8, 0x92, @u32=0x400}, @typed={0x8, 0x7c, @pid=r6}, @typed={0x18, 0x1d, @str='lo!}wlan1keyring\\)\x00'}, @typed={0x8, 0x2c, @pid=r7}, @generic="a7b8be191d8417c77ce84e024906388e6290a91e66184fc564cf20000d398a2e6a23a8af9f83c0a18f5abbc8469ada1b35a686c733d5ce57c9a1cdaa16540db9767b02710435c076f4a9c68a", @generic="a32d33532ce7d6eb9051f9b4b7ef174febda28bac44e6bf19a9ad23d689fb1a2cc42f4cd33e81f408bea1fb5953bb513ada0adcd6d3493d57ad8d4b10a940cfa3c0bdcc3dbe6f27be6c62366243a58f5f029b91db53a02247588bad950b8bb1013d7a25c2fef09f5d0f96b3d3b54c27c9ce2b16d0feb7eee0f39333e16d446bcf2d055"]}, @nested={0x114, 0x8a, [@generic="d1f61c89411c35c1b4372a32ea51cd8d4eb1df02451059e2b1fbfd3fa8ca50084a130588251ee7cfb3da523e7d4ca094da2027d2639f26585fae87018c1670e79476743fd69c5caf55fe2f19d55532f3a167a4c6c8f6275e8a35918dd8b63717e2aa95164010a5188c5717314a47f9f92960bc74c66e52c411765c1738055b2205da5457e8172c89dfe1", @generic="e3fcfc9f0ca7c3d1fe397880b260bb68c16d4ad362ddf8cd3a566c8fb09803e2c48397c3910e462bf7f4f0e5a99e347ab80faae8d342b95b4fccbb3fa29de1539a9ddb4c01c70485ab9be9d9dc1fb8d42a130ea86c4edb4d9a14fe2c5deb47b4e626d7a1e857ce592ad0ef565cd8ff1ae8a9f2214e18", @generic="ea6635b8288316044cefffe2fc93"]}, @generic="063f2f9a5964d9f6877ae2b6b67ac94b22886b295fad27b2ec4eea7043938932b9a09cd097666d161d7c424d19d1a0f7f4919d4025d7fa7d6f317843961e0f2ddc747f51cd41b271c3d51d55d9da5a9a90884a0fe0723a57ac485457adaf4f97f102e20b9ab20f93a0b1e77ad9f9dd35cead6078a51d7194bdb2aff8ba7038dd9158ffe156b30012662048bb4647"]}, 0x1380}], 0x4}, 0x10) listen(r1, 0x0) r8 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r8, 0x5411, 0x0) 23:47:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x10000000000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:47:24 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2284, &(0x7f00000000c0)=0x300) 23:47:24 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x5411, 0x0) 23:47:24 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup2(r0, r1) r3 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x9, 0x0) ioctl$RTC_EPOCH_READ(r3, 0x8008700d, &(0x7f0000000100)) splice(r2, &(0x7f0000000040), r2, &(0x7f0000000080)=0x3a, 0xffffffff80000001, 0x8) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4000, 0x0) 23:47:24 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0xfdfdffff) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4020565b, &(0x7f0000000240)={0x8001002, 0x85f8, 0x2}) fstat(r0, &(0x7f0000000100)) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x210040, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0x40bc5311, &(0x7f0000000180)={0x1, 0x2, 'client0\x00', 0x7, "9bca99a708718358", "b84927f0f59e5cbbf08de543dcf0ec94a58b20ef686e5a71248a10eaba00a813", 0xfffffffffffffff7, 0x8}) getegid() 23:47:24 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2284, &(0x7f00000000c0)=0x3f00) 23:47:24 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) sync_file_range(r0, 0x1f, 0x1, 0x0) listen(r0, 0x0) r1 = syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0x15be, 0x2000) ioctl$EVIOCSABS3F(r1, 0x401845ff, &(0x7f0000000200)={0x6, 0x2, 0x5, 0x3, 0x81}) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x480000, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000080)={r0}) r3 = dup(r0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000140)={0xf000000000000000, 0x2, {0x2, 0x2, 0x9, 0x3, 0x2}}) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x5411, 0x0) 23:47:25 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') exit(0x0) sendfile(r0, r1, 0x0, 0xf4a) 23:47:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x10322f1b000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:47:25 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2284, &(0x7f00000000c0)=0x1000000) 23:47:25 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0xfdfdffff) pipe(&(0x7f0000000000)) msgget$private(0x0, 0x40d) 23:47:25 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x40, 0x14200) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)=0x0) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000280)='NET_DM\x00') sendmsg$NET_DM_CMD_START(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000804}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r3, 0x300, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4084) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f0000000100)={{0xa, 0x0, 0x80000001, 0x10000, 'syz1\x00', 0x3}, 0x5, 0x6, 0x100000001, r2, 0x5, 0x8, 'syz0\x00', &(0x7f00000000c0)=['eth1\x00', '\x00', '\x00', '\x00', 'selinux\x00'], 0x10, [], [0x0, 0x8, 0x7, 0x8000]}) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000040)) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r4, r5) 23:47:25 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0xffffffff, 0x80000) getsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000002c0), &(0x7f0000000300)=0xb) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000080)={0x40, 0xf, 0x4, 0x30040, {0x77359400}, {0x1, 0x2, 0x9, 0x80, 0x8, 0x0, "b60082bf"}, 0x6, 0x3, @offset=0x2de08ec0, 0x4}) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000100)={'filter\x00'}, &(0x7f0000000180)=0x54) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000340)='/dev/btrfs-control\x00', 0x40800, 0x0) listen(r0, 0x0) r2 = dup(r0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cachefiles\x00', 0x100, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x5411, 0x0) getsockname$packet(r3, &(0x7f0000001240)={0x11, 0x0, 0x0}, &(0x7f0000001280)=0x14) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000240)={0x1, 0x2, 0x4, 0x0, {r5, r6/1000+30000}, {0x3, 0x0, 0x1, 0x7fff, 0x7ff, 0x20, "0af5618e"}, 0x9, 0x3, @fd, 0x4}) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x32, &(0x7f00000012c0)={@rand_addr="731c5ba6326cf13fb93687f5cfde8158", r4}, 0x14) 23:47:25 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2284, &(0x7f00000000c0)=0x2000000) 23:47:25 executing program 4: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x58, 0x101, {"aa973944932a74a33fc3984b887654f7b335268ec7b9e85104c8be85c2bd004549c71ede4b99072b565050e2d611af57e4abcc3ec3c37fdc13c5eadae17caca6"}}, {0x0, "54b40c740b0e83ec873d171543453d37b4b346df18f5b0e9640c8b1692e4c2d01e4c4ae8bfc448daec898a725659172f65b2ae7bc4696015026d85419375b7e51bf29ac83c0017afaf5e667977251952811c9c6cf953cb067bc5f278e5dca82d56ee6bcf6770a9586e1313f4d8e430013674055bcc44a83834419b2eeaec56b1cdf8b8b6ba55b987c07b3322000319567aa193372c24b0a1cd31287b3fd764644b9015a3c14341f8d91424bc6676f6f39a049cf6f00a4ba3d55aa80433ba71d8803383c5e9048f019eba752b8d1e646efc"}}, &(0x7f0000000240)=""/227, 0x12b, 0xe3, 0x1}, 0x20) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0xfdfdffff) 23:47:25 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x80400) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000040)={0x1, 0x0, 0x7685, 0xd1, 0x3, 0x1, 0x9}) 23:47:25 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) fcntl$setstatus(r0, 0x4, 0x6c00) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) r1 = dup3(r0, 0xffffffffffffff9c, 0x80000) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000040)=0x81, 0x4) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000080), &(0x7f00000000c0)=0xc) listen(r0, 0x0) r2 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x5411, 0x0) 23:47:25 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2284, &(0x7f00000000c0)=0x3000000) 23:47:25 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0xfffffffffffffffe, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x2) 23:47:26 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') exit(0x0) sendfile(r0, r1, 0x0, 0xf51) 23:47:26 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x47601bc37f0000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:47:26 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup2(r1, r0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f0000000000)=0x2, 0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r2, 0x0, 0x14, &(0x7f0000000040)='em0vmnet1\xfb}vboxnet0\x00', 0xffffffffffffffff}, 0x30) wait4(r3, &(0x7f00000000c0), 0x40000004, 0x0) 23:47:26 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) readahead(r0, 0x7, 0xffffffff) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x5411, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x7}, &(0x7f0000000080)=0x8) ioctl$VIDIOC_G_CROP(r1, 0xc014563b, &(0x7f0000000100)={0xf, {0x7, 0x1909, 0x6, 0x3}}) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000000c0)={r2, 0x8}, 0x8) 23:47:26 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000080)={0xff51, 0x4c47504a, 0x2, 0x8001, 0x3, @stepwise={{0x401, 0x8}, {0xfd9, 0x4}, {0xfa, 0x3}}}) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000100)={0x0, @bt={0x6, 0x3f, 0x0, 0x2, 0x975, 0xee70, 0x7ff, 0x4, 0x165d57c6, 0x5, 0x100, 0x7, 0x8, 0x30000000, 0x2, 0x21}}) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f00000000c0)=0xfdfdffff) 23:47:26 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2284, &(0x7f00000000c0)=0x4000000) 23:47:26 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2284, &(0x7f00000000c0)=0x3f000000) 23:47:26 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000000c0)=0x7) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mixer\x00', 0xfffffffffffffffa, 0x0) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) r2 = dup(r1) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x5411, 0x0) rt_sigsuspend(&(0x7f0000000040)={0x4}, 0x8) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x0) 23:47:26 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r0, r1) setxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.redirect\x00', &(0x7f0000000080)='./file0\x00', 0x8, 0x3) 23:47:26 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0xfdfdffff) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0xa4200, 0x0) r2 = dup(r0) linkat(r1, &(0x7f0000000180)='./file0\x00', r2, &(0x7f00000001c0)='\x00', 0x1000) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x105000, 0x0) ioctl$VIDIOC_STREAMON(r3, 0x40045612, &(0x7f0000000080)=0x9) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2275, &(0x7f0000000100)=0xff) 23:47:26 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2284, &(0x7f00000000c0)=0xfdfdffff) 23:47:26 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x4d564b00000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:47:27 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') exit(0x0) sendfile(r0, r1, 0x0, 0xf53) 23:47:27 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup2(r0, 0xffffffffffffffff) ioctl$sock_bt_cmtp_CMTPCONNADD(r1, 0x400443c8, &(0x7f0000000000)) 23:47:27 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2284, &(0x7f00000000c0)=0xfffffdfd) 23:47:27 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0xfdfdffff) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x0, 0x2000) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000080)={0x2c000000, 0xd8}) 23:47:27 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x80ffff00000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:47:27 executing program 4: ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f00000000c0)=0xfdfdffff) 23:47:27 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x1fff, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x4000, 0x0) r4 = eventfd2(0x2, 0x801) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000080)={r3, 0x8, 0x6, r4}) dup2(r0, r1) 23:47:27 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x1, 0x4) write$P9_RCREATE(r1, &(0x7f0000000040)={0x18, 0x73, 0x2, {{0x60, 0x3, 0x7}, 0x36b}}, 0x18) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x5411, 0x0) 23:47:27 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2284, &(0x7f00000000c0)=0x100000000000000) 23:47:27 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2284, &(0x7f00000000c0)=0x200000000000000) 23:47:27 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x200000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc04c5349, &(0x7f0000000200)={0x80000001, 0x7, 0x3}) syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x802) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0xfdfdffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x10000, 0x0) getsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000080), &(0x7f0000000100)=0x4) 23:47:27 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2) ioctl$SIOCAX25GETINFO(r2, 0x89ed, &(0x7f0000000040)) dup2(r0, r1) 23:47:28 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') exit(0x0) sendfile(r0, r1, 0x0, 0xf5a) 23:47:28 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) connect$bt_sco(r1, &(0x7f0000000040)={0x1f, {0x41f000000000000, 0x5, 0xeda, 0x80000001, 0x1, 0x1}}, 0x8) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x5411, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e21, 0x3, @empty, 0x4}}}, &(0x7f0000000140)=0x84) ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f0000000200)={0x39, 0x19, 0xc, 0x11, 0x7, 0x4, 0x6, 0x79, 0x1}) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000180)={r2, 0x7}, &(0x7f00000001c0)=0x8) 23:47:28 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xec0f0000000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:47:28 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2284, &(0x7f00000000c0)=0x300000000000000) 23:47:28 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0xfdfdffff) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x1, 0x0) 23:47:28 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0xfffffffffffffe01, 0x100) ioctl$UI_SET_PROPBIT(r2, 0x4004556e, 0x1f) dup2(r0, r1) [ 541.845755][ T26] audit: type=1400 audit(1554767248.255:45): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=23584 comm="syz-executor.2" 23:47:28 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2284, &(0x7f00000000c0)=0x400000000000000) 23:47:28 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x3, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0xfdfdffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x4000, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0], &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000180)={r2, 0x554091b0}, &(0x7f00000001c0)=0x8) setsockopt$llc_int(r1, 0x10c, 0x0, &(0x7f0000000000)=0x1, 0x4) 23:47:28 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x5411, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x20, 0x40, 0x80000000, 0x2, 0x9}, &(0x7f00000000c0)=0x14) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000100)=@assoc_id=r2, 0x4) ioctl$DRM_IOCTL_SET_MASTER(r1, 0x641e) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f00000003c0)=""/59) ioctl$CAPI_INSTALLED(r0, 0x80024322) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000240)={r2, 0x8}, &(0x7f0000000280)=0xc) r3 = gettid() ptrace$setregs(0xf, r3, 0x1000, &(0x7f0000000140)="6ae18308d076a78773a8a25ffb3cb4b4e9ed7ad8c19e10dddc85cdbaffee21346e84d4958a2b94b9d61f756c10a92b2393e00db6442969225b86dcf4eca447e87035b4ff2edbc9119e1283a8136b4ab77ccd4cbd9e603267ff22ee5717fd12b53e26579e2e8781670203033c82b6e0558614b2981fcd01178eaf6bf81e0f99265860ab9735e529f5d0e50ef79e592cd36c993971311e6b5c69ef1823699f40c3c43c80214ed900a191d544ac2bfa1511a89426d9a3373ce37b192c9eccd6f97abb37155a") ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000040)={0x800000000000, 0x1, 0x100000000, 0xfff, 0x1ff}) ioctl$RTC_AIE_OFF(r1, 0x7002) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0) getsockopt$ax25_int(r1, 0x101, 0x1, &(0x7f0000000340), &(0x7f0000000380)=0x4) 23:47:28 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.stat\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x104, r3, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7ff}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, [], 0x1, 0x0}}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x7}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7ff}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}]}, @IPVS_CMD_ATTR_SERVICE={0x64, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x69}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x26, 0x2}}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@initdev={0xfe, 0x88, [], 0x1, 0x0}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000000}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xc6}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x22}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) dup2(r0, r1) 23:47:28 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x5411, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x400000, 0x2) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000001c0)={0x0, 0x800}, 0x8) getresuid(&(0x7f0000000080)=0x0, &(0x7f00000000c0), &(0x7f0000000100)) quotactl(0x100, &(0x7f0000000040)='./file0\x00', r2, &(0x7f0000000140)="05152f1de328cd50817a100358b697300033a33bbde094ba0ef24181") 23:47:28 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x100000000000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:47:29 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') exit(0x0) sendfile(r0, r1, 0x0, 0xf5c) 23:47:29 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0xfdfdffff) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x101000, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, &(0x7f0000000080)={0x49, 0x5, 0x5, 0x8000}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x7}, 0x20) r2 = socket$kcm(0xa, 0x122000000003, 0x11) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000040)=@nl=@unspec={0x34050000, 0x0, 0x6c00, 0x80fe}, 0x80, 0x0}, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000100)) 23:47:29 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2284, &(0x7f00000000c0)=0x3f00000000000000) 23:47:29 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r0, r1) 23:47:29 executing program 3: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x4d, 0x2}, 0x7) listen(0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x5411, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, &(0x7f0000000080)={0x1, 0x7fffffff, 0xff}) 23:47:29 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x100008000000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:47:29 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup2(r0, r0) fstatfs(r0, &(0x7f0000000000)=""/60) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000040)=[0xb1, 0x5]) 23:47:29 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2284, &(0x7f00000000c0)=0xfdfdffff00000000) 23:47:29 executing program 4: r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) prctl$PR_SET_SECUREBITS(0x1c, 0x24) faccessat(0xffffffffffffffff, &(0x7f0000000040)='/', 0x0, 0x0) write$apparmor_current(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="7065726d70726f66696c65202f6465762f7367230087c0ce985c53718ff4a08a9819a03e115ee9302b224f4f4e3d8b767c09613119885b972681bec1d44582e6e1086e0ad92c420b744891a0f7f4562b1b4fe2ec12fabfbd350deb9ad7acf736a292dac90965b36f808a5603169003e18654af14f8d533302c3c7163e59ee6fe4f42c30a34e2b7f94d51244d6cddb1f1839944ca24575d50557db6fdba071ea69622303765eeac563eceac6fa9de7d9a4217e326111aefe45c5c237da743dbc8a929a3733dee4db622fd09490bfb0e2ca151be8b65d17ec622ad27e75b55ebe18e7e815caa546efc2288a5182b381276"], 0xffffffffffffff71) r2 = shmget(0x1, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) shmctl$SHM_LOCK(r2, 0xb) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000080), &(0x7f0000000100)=0x4) r3 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2275, &(0x7f00000000c0)=0xfdfdffff) getresgid(&(0x7f0000000140), &(0x7f0000000180)=0x0, &(0x7f00000001c0)) ioctl$TUNSETGROUP(r1, 0x400454ce, r4) 23:47:29 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) r1 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0xfffffffffffffffe, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) listen(r0, 0x0) r2 = dup(r0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001540)={'veth0_to_team\x00', 0x0}) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000001580)={r3, @local, @loopback}, 0xc) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x82000, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x5411, 0x0) 23:47:29 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x400000, 0x0) sendmmsg(r0, &(0x7f0000000040), 0x0, 0x5) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, &(0x7f0000000040)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r0, r1) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000001200)={{{@in6=@mcast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@local}}, &(0x7f0000001300)=0xe8) syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f00000000c0)='./file0\x00', 0xff, 0x2, &(0x7f00000011c0)=[{&(0x7f0000000100)="220e698032d8aadcbacaff7bed8782877fa19096fa4217aa3a6b6f08a28e329fb14499380f78cef8d42e5bb0bc49638ac33b4fb302c88c36dada371522e08d4141df38cb0db342c886896795b819d5f5c979ed814a185db9ee728f259523291fc13b65f014c958c3262b520540788ce92440a9d46214b8139ae32ee3db161944a611eaa351d5128a23bc6ca4b51753d1db91a942294060617c9313017527f1258d20dd8763b9", 0xa6, 0x7fff}, {&(0x7f00000001c0)="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", 0x1000, 0xffff}], 0x40001, &(0x7f0000001340)={[{@dots='dots'}, {@nodots='nodots'}, {@fat=@usefree='usefree'}, {@nodots='nodots'}], [{@dont_measure='dont_measure'}, {@fowner_lt={'fowner<', r2}}]}) 23:47:29 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2284, &(0x7f00000000c0)) 23:47:30 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') exit(0x0) sendfile(r0, r1, 0x0, 0xf5e) 23:47:30 executing program 4: lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000100)='TRUE', 0x4, 0x3) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0xfdfdffff) 23:47:30 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x10100c000000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:47:30 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) listen(r0, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)) r1 = dup(r0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x44) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x5411, 0x0) 23:47:30 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6ad, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2284, &(0x7f00000000c0)) socket$inet_sctp(0x2, 0x5, 0x84) 23:47:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0x4}, 0x68) r2 = dup2(r1, r1) uselib(&(0x7f0000000300)='./file0\x00') recvfrom$inet6(r2, &(0x7f0000000000)=""/221, 0xdd, 0x40002040, &(0x7f0000000100)={0xa, 0x4e20, 0xffffffffffff0001, @empty, 0x7}, 0x1c) getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000001c0)=@assoc_value={0x0, 0x2}, &(0x7f0000000200)=0xffffffffffffffbc) setsockopt$inet_int(r0, 0x0, 0x2, &(0x7f0000000340)=0x9, 0x4) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000240)={r3, @in={{0x2, 0x4e22, @multicast2}}}, 0x84) 23:47:30 executing program 0: r0 = getpgrp(0x0) get_robust_list(r0, &(0x7f00000018c0)=&(0x7f0000001880)={&(0x7f00000017c0), 0x0, &(0x7f0000001840)={&(0x7f0000001800)}}, &(0x7f0000001900)=0x18) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x0, 0x410080) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001740)=@filter={'filter\x00', 0xe, 0x4, 0x16b0, [0x0, 0x20000080, 0x200000b0, 0x200000e0], 0x0, &(0x7f0000000040), &(0x7f0000000080)=ANY=[@ANYBLOB="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"]}, 0x1738) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = dup2(r2, r3) ioctl$GIO_UNIMAP(r3, 0x4b66, &(0x7f0000001980)={0x3, &(0x7f0000001940)=[{}, {}, {}]}) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x0) ioctl$SIOCRSACCEPT(r4, 0x89e3) ioctl$CAPI_INSTALLED(r4, 0x80024322) 23:47:30 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2284, &(0x7f00000000c0)) r1 = getpgrp(0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x4, 0xff, 0x10000, 0x6573, 0x0, 0x7, 0x4, 0xd, 0x8, 0x3ff, 0x4, 0x6, 0x5, 0x2b, 0x6, 0xffff, 0x3, 0xc6208b, 0x6, 0x6, 0x4, 0x2b, 0x2, 0x1a8d, 0x8, 0x6, 0x8000, 0x7, 0x5, 0x80000000, 0x0, 0x5, 0xe27, 0x993, 0x6, 0x5, 0x0, 0x101, 0x2, @perf_bp={&(0x7f0000000080), 0xf}, 0x1, 0x9, 0x6, 0xd, 0xebd7, 0x7fff, 0x230f}, r1, 0x9, 0xffffffffffffffff, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000000)=0x31ec) 23:47:30 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x2, 0x2) setsockopt$CAIFSO_REQ_PARAM(r1, 0x116, 0x80, &(0x7f0000000080)="bfec45b2b63853d559662ac6933b", 0xe) r2 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x5411, 0x0) 23:47:30 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0xfdfdffff) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x3f, 0x8200) syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x80) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f0000000180)) ioctl$KVM_TRANSLATE(r1, 0xc018ae85, &(0x7f0000000080)={0xd000, 0x10000, 0x4, 0x81, 0xffffffffffffff5a}) ioctl$VHOST_SET_VRING_ENDIAN(r1, 0x4008af13, &(0x7f0000000100)={0x0, 0x2}) 23:47:30 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x20000000000280) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000140)={0xbf0000, 0x10001, 0x6e1, [], &(0x7f0000000100)={0x9909df, 0x5, [], @p_u16=&(0x7f0000000080)=0xdb}}) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2284, &(0x7f00000000c0)) 23:47:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x2, 0x2) openat(r1, &(0x7f0000000080)='./file0\x00', 0x0, 0x4) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r0, r2) connect$pptp(r3, &(0x7f0000000000)={0x18, 0x2, {0x1, @dev={0xac, 0x14, 0x14, 0x16}}}, 0x1e) 23:47:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x14d564b00000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:47:31 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') exit(0x0) sendfile(r0, r1, 0x0, 0xf60) 23:47:31 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0xd48c0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000200)='trusted.overlay.nlink\x00', &(0x7f0000000240)={'L-', 0xfffffffffffffff8}, 0x28, 0x3) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xa0d0080}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, r2, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xffffffffffff0000}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x7fff}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3ff}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x4000005) r3 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x5411, 0x0) 23:47:31 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x410000, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f0000000080)={0x7f, 0x0, 0x4, 0x40, 0x0}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000480)={r2, 0x0, 0x30}, 0xc) setsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f00000001c0)=0x7, 0x4) r3 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000400), &(0x7f0000000440)=0x4) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000280)={0x3, 0x8, 0x80, 0x1, r2}, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20081420}, 0xc, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000623d44783b06c273ba1deb29301df4162b75733b18fd38129c75d0b20fe4dff775bf8bc5d8d48c2e5f68d92304fcbc34d74a23efeff23d9bd9f8360e188cc0bf2caf1370efee2c", @ANYRES16=r4, @ANYBLOB="10002dbd7000ffdbdf250100000008000300070000001d83d8fb0f27c6f7c1f43475a9076b436bb0ac0bf00a79226192873a68c3ab82124630dd04c2e709b43744a1e2cd56572c7376ec0aff509dbdf44d318a91086279819dd41a87e604f08452cb334581609da1c171144170e1735a937611e12d2df61edc53d9ff49064f080848c4a9e6b5eef6c0f1f9b866e9b89efb8bc04ad2ab1620072be3f2caa9e2"], 0x3}, 0x1, 0x0, 0x0, 0x1}, 0x4008804) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2275, &(0x7f00000000c0)=0xfdfdffff) 23:47:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) pwrite64(r0, &(0x7f0000000000)="9afaf98b5e1a4c1aaa9ed25a6c3952b4bc3137b8d3a1281f015d9effd9d98377d4f99d3568e2a9a52ab16fbbc6bd5cee96383f0b12ce77b7548910e54abfd4977d7792a9cd76dacbb8c3833eb84605448251f83633cde51a22ae1fc79dd0bd1e2ede62816c3eb6bd9045c5ff0e8c73019fb3e6719ebe3b2033365de81c9b", 0x7e, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r0, r1) 23:47:31 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x5, 0x2) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000200)) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2284, &(0x7f00000000c0)) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0xc0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000240)={0x4, 0x760, 0xe481, 0x5c, 0x40, 0x3, 0x7, 0x7, 0x1000, 0xe4d, 0x8}, 0xb) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x8, 0x2}, &(0x7f0000000100)=0x18) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000140)={0x127c, 0x6, 0x1, 0x0, 0xf86, 0x7, 0xfa, 0x7, r3}, &(0x7f0000000180)=0x20) [ 544.652687][ T26] audit: type=1400 audit(1554767251.065:46): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=23724 comm="syz-executor.2" 23:47:31 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x400, 0xfffffffffffffffd) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x200080, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000100)={0x9b0000, 0xfffffffffffffffc, 0x4, [], &(0x7f0000000080)={0x9909ce, 0x8, [], @ptr=0x5}}) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2284, &(0x7f00000000c0)) ioctl(r1, 0x3, &(0x7f0000000140)="6c18c20f9cf5d3644eb75e344b18dfe287b323285420c1f0a3658528b1ec0ee2bdfc18ec97b72583fdaeb371f7c929362fd623446808501dbc2200fb6a979d30d9381b54ed7b1ed11b3abc2237a0eb35361050e2e7aa51b2ebf0f9c2af2e80e56d2cc7a0f4b652d77666fb7d4694ce827b1f9ac9ca7946ff53c1b801558140cc1ffce694d19d0a1ac6c3202b5d1446fef37129b12fac581fbcad56b357997641baf26713c9e9e4aff4e874b977ab79b587451cebee57bb80f4866022c6ef7fd40a4ed0b57ea7ddd3ee738bebadd315") setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000240)={{0xa, 0x4e22, 0x6c2, @local, 0x40}, {0xa, 0x4e22, 0x8114, @mcast1, 0x80}, 0x6, [0xfffffffffffffffe, 0x1130c8ba, 0x0, 0xb8, 0x484d73da, 0xff, 0x7f, 0x3]}, 0x5c) 23:47:31 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x5411, 0x0) 23:47:31 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup2(r0, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x7, 0x30}, &(0x7f0000000040)=0xc) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000080)={r2, 0x0, 0xd8ab}, 0x8) 23:47:31 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0xfdfdffff) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000180)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000280)=0xe8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'irlan0\x00', r2}) 23:47:31 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x80, 0x0) ioctl$sock_proto_private(r0, 0x89e0, &(0x7f0000000280)="0dbb5a01c8da1d907052ab78a2ddd260fa0f18097029d37a67077ffa05e9ca1a72c19d7cc7752cda91a4ea8270731da5b466ae078b01582c9d29c07af447e9b7ec675928b0d6fc0490d71bd163344cc5221accdb746a3407e72cc29367e933dbe904d36e38a339a406b41ca5ae1d193ed997e83ebef96a5054cba37d8dae0b77962f255848a472cd48397a11eb6e08042d52ead86070482180e55865094f1f7009ccd3d41e4006fbabcd52") r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r2 = accept4$inet6(0xffffffffffffff9c, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000140)=0x1c, 0x80800) ioctl$sock_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000180)) r3 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x7fff) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000001400)={r0, &(0x7f0000000200)="bdbf4191f0d67f9071af3fbc2ceb185b846c93c185d60a4f524de2504584a53dd74277333dab7c63", &(0x7f0000000400)=""/4096}, 0x18) mknod$loop(&(0x7f0000000240)='./bus\x00', 0x6004, 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000015c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f00000016c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001680)={&(0x7f0000001600)={0x6c, r4, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x363d}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x40}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8001}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7f}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7f}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x881}, 0x1) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xed}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) r6 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r5, r6, &(0x7f00000000c0)=0x200, 0xdd) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) sendto$inet(r3, &(0x7f00000014c0)="82f236155e33529f5f0bd56429b145b159dbcf7a18a3fa1becd32dfa8299f5e3bdd821248ae341e4c7bec13a380ea658b4d0f30462077f3649dfbb410e47f89ce8c62ebe7d31c6dc72b212712739b877d281f046dae17d09998255f7ad12f96cee3d6c059bae069e66dbca2abe32fd711c2c522249a1ee605c16c6d044fb80d440d622ab", 0x84, 0x400803c, &(0x7f0000001580)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000001440)={0x7, 0x2, {0x0, 0x3, 0x5, 0x2, 0x6}}) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2284, &(0x7f00000000c0)) 23:47:31 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0xfdfdffff) r1 = creat(&(0x7f0000000000)='./file0\x00', 0xa2) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000100)={0x5, 0x0, [{0xc0000007, 0x1, 0x4, 0x3, 0x4, 0x7fffffff, 0x6}, {0x2, 0x2, 0x1, 0x9, 0x2, 0x480000000000, 0x7}, {0x40000001, 0x9, 0x2, 0x0, 0x8, 0xd79, 0x1f}, {0x0, 0x5, 0x4, 0x9f, 0x9, 0x6, 0x2}, {0x4000000f, 0x1, 0x2, 0x200, 0x948, 0x8000, 0xffff}]}) 23:47:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x200000000000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:47:32 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') exit(0x0) sendfile(r0, r1, 0x0, 0xf62) 23:47:32 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x5411, 0x0) faccessat(r1, &(0x7f0000000080)='./file0\x00', 0xa0, 0x10000000001bfd) 23:47:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(&(0x7f0000000000)='./file0\x00', 0x62) dup2(r0, r1) 23:47:32 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0xfdfdffff) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x3406, 0x40000) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="d3d99947", 0x4) 23:47:32 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mount(&(0x7f00000003c0)=ANY=[@ANYBLOB="24db9fd76773ef3a2c09ce5b0620ea4e4be9482ea147ffa0a500f6d3eea76138b2f5f2dd93743f001a0b0e65cd034059967453bc0922ebaf289e829bf2bf4d37db2ef5227a9bcc489d6133a008c020dd3f7ec266406edc486b9df41cd22abbb0f210c175bdae188c7b32f8c8bdc968b1667572e31f1ae1c03fdaa4544e0000008016f2cc79a39bc991fe"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='vfat\x00', 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000002}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xcc, r2, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x20, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x100000000}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x20, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xdc}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_BEARER={0x54, 0x1, [@TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_LINK={0x20, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x78c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$SIOCNRDECOBS(r1, 0x89e2) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2284, &(0x7f00000000c0)) 23:47:32 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x20100c000000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:47:32 executing program 4: r0 = syz_open_dev$sg(&(0x7f00000001c0)='/dev/sg#\x00', 0x0, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x4, 0x2, 0x1c}, 0x24) bind$rxrpc(r1, &(0x7f0000000080)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @multicast1}}, 0x24) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0xfdfdffff) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x200001, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{}, {}, {0x0}]}) ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, &(0x7f0000000140)={r3, 0x200000000000007}) 23:47:32 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x80, 0x40080) ioctl$KVM_GET_NR_MMU_PAGES(r1, 0xae45, 0x4) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2284, &(0x7f00000000c0)) 23:47:32 executing program 3: r0 = accept4$inet(0xffffffffffffff9c, 0x0, &(0x7f0000000040), 0x800) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000080)={'filter\x00'}, &(0x7f0000000100)=0x78) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f0000000000), 0xe) listen(r1, 0x0) r2 = dup(r1) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x5411, 0x0) 23:47:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) syz_open_procfs$namespace(r2, &(0x7f0000000040)='ns/uts\x00') dup2(r0, r1) 23:47:32 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x24d564b00000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:47:32 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x2fd) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x5411, 0x0) 23:47:33 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') exit(0x0) sendfile(r0, r1, 0x0, 0xf64) 23:47:33 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0xcb) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000000)={'ifb0\x00', {0x2, 0x4e21, @multicast2}}) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2284, &(0x7f00000000c0)) 23:47:33 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x2, 0x4000) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000180)={0x0, 0xb53c}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000200)={r1, 0x3, 0xffffffffffff8000, 0x80000001}, &(0x7f0000000240)=0x10) r2 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f00000000c0)=0xfdfdffff) fsetxattr$security_evm(r0, &(0x7f0000000000)='security.evm\x00', &(0x7f0000000100)=@ng={0x4, 0x10, "5a3ae25045c1ee90c2"}, 0xb, 0x2) 23:47:33 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup2(r0, r0) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000000)={{0x2, 0x4e23, @multicast2}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14, {0x2, 0x4e20, @local}, 'bcsf0\x00'}) 23:47:33 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) setsockopt$inet_group_source_req(r1, 0x0, 0x2f, &(0x7f0000000040)={0x2, {{0x2, 0x4e23, @loopback}}, {{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1c}}}}, 0x108) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x5411, 0x0) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000180)='trusted.overlay.origin\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x1) 23:47:33 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x300000000000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:47:33 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3, 0x10000) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0xfdfdffff) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x30000, 0x0) ioctl$VIDIOC_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f0000000100)={0x0, @reserved}) 23:47:33 executing program 1: r0 = accept(0xffffffffffffff9c, &(0x7f0000000100)=@ethernet={0x0, @remote}, &(0x7f0000000000)=0x80) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000080)=0x4, &(0x7f0000000180)=0x4) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x7fffffff, 0x40000) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2284, &(0x7f00000000c0)=0x6) 23:47:33 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'bond_slave_0\x00', {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x5411, 0x0) 23:47:33 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r0, r1) 23:47:33 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x2, 0x1013fc) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2284, &(0x7f00000000c0)=0x5) 23:47:33 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x73e2cd53a5043b9e) ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000180)) ioctl$TIOCSBRK(r2, 0x5427) accept4$bt_l2cap(r0, &(0x7f00000001c0), &(0x7f0000000200)=0xe, 0x80000) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x200, 0x0) ioctl$TIOCMGET(r3, 0x5415, &(0x7f0000000240)) accept$ax25(r3, &(0x7f0000000100)={{0x3, @null}, [@default, @remote, @rose, @default, @null, @remote, @remote, @netrom]}, &(0x7f0000000080)=0x48) 23:47:33 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') exit(0x0) sendfile(r0, r1, 0x0, 0xf74) 23:47:33 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpu.stat\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0x80045530, &(0x7f00000001c0)=""/165) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r0, r2) ioctl$VIDIOC_SUBDEV_G_FMT(r3, 0xc0585604, &(0x7f00000000c0)={0x1, 0x0, {0x5, 0x40, 0x3017, 0xb, 0x4, 0xb, 0x3, 0x5}}) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000140)={'bond_slW\x12\x17\x0f\x9d\xc9\x151\xff', 0x8}) ioctl$PPPIOCSMRU(r3, 0x40047452, &(0x7f0000000000)=0x2) ioctl(r0, 0x9, &(0x7f0000000040)="c92e13664b1481ff34fa02c1fef6f536edb81267750e87a289b7e269cac18982cce181bb35ff651a8107ff357e85d21cd0a63da355ca79ddf2e090f9a6e5e4f3debd54c341f6fb29cabaf3b5d10b9a63af81b43f3151e81c1a554623660bea5466ec") 23:47:33 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x30001c000000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:47:33 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0xfffffffffffffffd) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x5411, 0x0) 23:47:33 executing program 1: openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2284, &(0x7f00000000c0)) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000080)) 23:47:33 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$update(0x2, r1, &(0x7f0000000100), 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0xfdfdffff) [ 547.534556][ T26] audit: type=1400 audit(1554767253.945:47): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=23888 comm="syz-executor.2" 23:47:34 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x3) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f00000000c0)={r0}) setsockopt$packet_int(r1, 0x107, 0x100012, &(0x7f0000000180)=0x40000000007, 0x2) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x8, 0x0, 0x12}) r2 = dup(r0) ioctl$sock_inet_sctp_SIOCINQ(r2, 0x541b, &(0x7f0000000080)) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000140)=0x5, 0x4) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x5411, 0x0) 23:47:34 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) ioctl$CAPI_GET_ERRCODE(r0, 0x80024321, &(0x7f0000000080)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup2(r1, r1) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 23:47:34 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0xfdfdffff) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000000)) 23:47:34 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0xaa8, 0x800) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e20, @loopback}}, [0x3, 0x9, 0x20, 0x4, 0x97, 0x6b, 0x8000, 0xe77, 0xd25, 0xc76, 0x0, 0x2, 0xbc5, 0x6]}, &(0x7f0000000140)=0x100) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000180)={r2, 0x29d7, 0x7}, &(0x7f00000001c0)=0x8) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r0, r0) 23:47:34 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2284, &(0x7f00000000c0)) pipe2(&(0x7f0000000000), 0x4800) 23:47:34 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x30100c000000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:47:34 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setitimer(0x2, &(0x7f0000000140)={{0x77359400}, {0x0, 0x2710}}, 0x0) getitimer(0x2, &(0x7f0000000040)) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000040)) r2 = socket(0x0, 0x1, 0x8) ioctl$SIOCX25SDTEFACILITIES(r2, 0x89eb, &(0x7f0000000080)={0x2, 0xefc, 0x80000001, 0x8, 0x4, 0x7, 0x21, "e5ef6d1afd71d42cc15b21f78572d9a5aaf5531b", "937313071af6899ae5154dadb672bcee05b6d8a6"}) r3 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x5411, 0x0) sendmsg$xdp(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000000c0)="dd2364596ad9250a5762d56fbb29b8c0c1f711e567e322550a40f581f46570c7e3837de4fb5d00bbb5297f1be6339fb632e084b3e2dfc9bab56c7425e445ebf43b913eaa671006f207ce", 0x4a}, {&(0x7f0000000180)="c2052bc3c60dcee3590a48b826055462bff8f038ac528c5d66b921c51da8412b6e0f19ff29103863664a40991c5d8056c14e2d56c19b403f5162df873de985de282434d2ec479051ec3f8294cc1f9ec91a49a81850bd7f", 0x57}, {&(0x7f0000000200)="317314c85b686d8fbe0f21e9a2e877ac772e3860b4c232856380283b384f3309b0960e73bb819d4b15d325f06717f4b9cacb72bad3d207e9aeef5959416203bb46fca08cab439431346cb1c4e432f2dffdf85482c90fe5cb825300e4f8643f81396f43da7fcca5b00a0d7d1825e1a63440bfc008b85a715262e4a8f043cc55139ba160caf2134603d25c28f6abb89868615c174af18be7bc16be73fe28f645b75c031ca4d6e7994f403d59a219fd561d74e83f5c7013433d22c1d3f9f98be5a88526e2beace39ddef63104ffabd64e08f63f637d3e708e359a26d7", 0xdb}, {&(0x7f0000000300)="ad38dea4292b5f7dcc535a6b6d26e58bf159f40c1e105c340718da9ea7cf177fe9d3e878a4637d078682687c4439126d9d23c62a5ffedb0146343c8a38f0513d9396da72ceabd3a91a706458dcc52ae55001da366c68fb16d5ab1865cd71f20730df95e69d739083e6cd7efbdaecd28e7b0519a139b925554c7ee44640bb866ef5fbd44ae73b446da157eaa4478d922f03bcaf9f0428c9ede7a222de3a3e7347d92ca71a646bfe0b76ce9910781c044ae74c9c36867617a0c9b9c0c162decf52463345d612d8a5edd25dee6dcef048812ae7f410bdab148a20e4", 0xda}, {&(0x7f0000000400)="b20df3226074d6beaf1899cb03ff1ad3b860ddae3bb2c51c63b2125464c27aaee8fb09d70abe20bf7f64721044687bab8bdc92a467ed4b194e10a569c18febaa178df691e360c37046671f3a32dba1ab75b37189328b0e7ef9c63c0076ba15ced1967926bfe8e3d3a0294a116033659a7153b887d32ff7cf4f0195f847c726f41d057c472f89181ff147243a0a7d05ac5ec3de47b37361053b3cabcc8ee6cfb85935", 0xa2}, {&(0x7f00000004c0)="782e6a952193e50a8d0630e3a4fe1b6c290cab9cfd76f205d712df7fdcc638b353bd13bfaa6738fc7647cfa1566701a3f719d4383d05f524bdf26aba7e08062d483dc232b9acd1fe2572854711c131432c9958dce88ab855b1ee52c6558802645638ea3d78b93b2af1aa7cc894b327621f35de770a89eb2ee8a70a1685b6f04adc128f0e76f91527c1ea715aa193713967d56ab10a4b2e2703db7ad3812149016b0aeff036aaf4a9ffe88ec3", 0xac}, {&(0x7f0000000580)="05cca020e05aab5c5df4af9aa40198190e586d", 0x13}, {&(0x7f00000005c0)="641bf7a7be147aa8e5811dfe4b611111b880ac860a5f4d4c00f0667858222fcccee952b3344cd9a8f6d53c3ca7287c264e3c15a824d4c4ddadb2302c18c58343c22d350b2b08cbc6d37730d7d82c469668c72194c6f682203794f6dff8b77e4518e7565eb3d809642dc713e9bf250ed58012516144b9c1a987479689948d64bb23d3732097df3d48f90d1fcf81f6e887052bb644662d0cb606bc068e13d59d498ae2a2f9f87be5f55844b1045a60b42a5f5c5e092be9f0106ddfce7c84a0dc838058853e60c30f616c028d806289a7af40b2d6e824c840ace7c7b70f79", 0xdd}, {&(0x7f00000006c0)="dda91c94d1ccc255ac083d1129b6037b578e210ea19b9bb6364488dc8b50387a26ae5c77c767fb81afd3cbd474d1803c31c9dd7156a60f847ff03f3dbecbc58322fce92732963bdff168deb291a733d4368f783e5e4bd9d039da36ffaced909b618018b75499883567df3e3faa118bc04339e74adafc9f44ed926014aa795691a7c8fa872f38493aa80ac4edaf48b9143d60ae7c52d1dd86ac5d512b09b1", 0x9e}], 0x9, 0x0, 0x0, 0x40}, 0x10) 23:47:34 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') exit(0x0) sendfile(r0, r1, 0x0, 0xf7c) 23:47:34 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x0, 0x0) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @remote}, 0x10) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0xfdfdffff) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x80042, 0x0) 23:47:34 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='trusted.overlay.redirect\x00', &(0x7f0000000180)='./file0\x00', 0x8, 0x2) r1 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x101000) ioctl$VIDIOC_S_CROP(r1, 0x4014563c, &(0x7f00000000c0)={0x2, {0x80, 0x2d, 0xd8, 0x7}}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f0000000200)={0x8, 0x3, 0x9, 'queue1\x00', 0x8}) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2284, &(0x7f0000000000)=0x20000007) getrlimit(0xf, &(0x7f00000001c0)) write$FUSE_DIRENT(r1, &(0x7f00000002c0)={0x70, 0xfffffffffffffff5, 0x2, [{0x0, 0x4, 0x6, 0x1, '!user-'}, {0x5, 0x9, 0x7, 0x9, 'queue1\x00'}, {0x5, 0x5, 0x8, 0x6, '>vmnet0['}]}, 0x70) 23:47:34 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup2(r0, r1) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x800442d2, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @dev}, {}, {0x0, 0x0, 0x0, @dev}]}) 23:47:34 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x34d564b00000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:47:35 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x5) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x80, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x8, 0x5f, 0x1, 0xffffffffffffff7f, 0x4, 0x0, 0x6, 0x8, 0x0}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000140)=@sack_info={r2, 0x5, 0x4}, &(0x7f0000000180)=0xc) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000240)={0x80000000}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000001c0)={'filter\x00', 0x4}, 0x68) ioctl$KVM_TRANSLATE(r1, 0xc018ae85, &(0x7f0000000280)={0x4, 0x2, 0x10, 0x6, 0x2}) 23:47:35 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000080)={0x3, 0x1, 0x6, 0x3, 0x100000001}) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$KVM_GET_CLOCK(r3, 0x8030ae7c, &(0x7f0000000040)) dup2(r0, r1) 23:47:35 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) accept4$bt_l2cap(r0, 0x0, &(0x7f0000000040), 0x800) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) fchdir(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x5411, 0x0) 23:47:35 executing program 1: openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x4040) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x420, 0x70bd2b, 0x25dfdbff, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x1, 0x1, 0xc9b0, 0x1}}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r2 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2284, &(0x7f00000000c0)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') 23:47:35 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x400000000000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:47:35 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$KVM_DEASSIGN_PCI_DEVICE(r2, 0x4040ae72, &(0x7f0000000000)={0xffff, 0x0, 0x40, 0x1, 0xfffffffffffffe00}) r3 = dup2(r0, r1) ioctl$RTC_PIE_ON(r3, 0x7005) 23:47:35 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x3, 0x104) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0xfdfdffff) 23:47:35 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') exit(0x0) sendfile(r0, r1, 0x0, 0xf84) 23:47:35 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/psched\x00') setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000080)=[@mss={0x2, 0x2}, @mss={0x2, 0x1}], 0x2) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r2 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x5411, 0x0) 23:47:35 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup2(r0, r1) bind$nfc_llcp(r2, &(0x7f0000000040)={0x27, 0x1, 0x2, 0x5, 0x5, 0x630e, "2379b3d8277822e16ee2caadb97a4ab5cd468f3aaca0949d79c07d8dce945b7d1711dc74e01b9a98d3fd472a8f2f0941790c4e7a901142f1a3208b5d9f27e5", 0x24}, 0x60) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000000)={0x0, @speck128, 0x2, "34ffc1cf907bb311"}) ioctl$TIOCCONS(r0, 0x541d) 23:47:35 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r1 = dup2(r0, r0) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000000)=0xb5) 23:47:35 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2284, &(0x7f00000000c0)) r1 = dup(r0) setsockopt$inet_group_source_req(r1, 0x0, 0x2f, &(0x7f0000000240)={0x8, {{0x2, 0x4e23, @loopback}}, {{0x2, 0x4e22, @empty}}}, 0x108) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000100)={{{@in=@initdev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@dev}}, &(0x7f0000000000)=0xe8) ioctl$SIOCAX25ADDUID(r0, 0x89e1, &(0x7f0000000200)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, r2}) 23:47:35 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x40001c000000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:47:35 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x101000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x5) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x6ebb, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000180)=0x3f) syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x3f, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000001c0)="c2e0dadfad2402a628267cccd187481483bedc8d8fdb25316e0ee65da9fb902c4186bcaa6b906c1820fc3a9ffa5ee6920bd2c4ecea1fa7ba8e926eb87159517307dfc1cfb2a1b65adba199aabb598c039788525a47b6d54e6dab82214458ccfd956c23eb50bbf50cfec3a9b62ce6f7ded509c1c314a60bb7ceea3408bcb50e58e03d657196cf0baa1da227feafd757b3291c9ca03f30ae60370eeb48f25ae1993e4bc2f9211183eac86df72d7ed4e0c36fb64cb3f85629ae6ad5abeb6258b35698a531553e0813254d9f", 0xca) 23:47:36 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x80000, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@initdev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6}}, &(0x7f0000000080)=0xe8) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000240)) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@local, 0x69, r2}) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2284, &(0x7f00000000c0)) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000280)) 23:47:36 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r0, r1) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x10000, 0x0) 23:47:36 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x400, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={0x0, 0x4, 0x9}, &(0x7f0000000100)=0xc) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000140)={r1, 0x7}, &(0x7f0000000180)=0x8) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r2, &(0x7f0000000000), 0xe) listen(r2, 0x0) r3 = dup(r2) ioctl$KVM_S390_VCPU_FAULT(r3, 0x4008ae52, &(0x7f0000000040)=0x6) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x5411, 0x0) 23:47:36 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000000100)={{0x108, 0x3, 0x7, 0x3bb, 0x130, 0x5, 0x2d, 0xffffffffffff8001}, "07419435ef0e7b4283566f544a63bb4f7fbab5f397731b1d7e0200e39a4ccd61b827a6effc38aaeaf13f1b0aa2c1fa30f42bedf317ee75e8428861dadb36c15f1271bd8a5735312bbb4fffe6cc1c2cb8319030160814bd54a442ec05cf9af5c43c88a3f4c150c417e4ca3bb413749f284ad5eae88edf66f4185469f7c3dceb5b68227bd92f286096f21d85354a0481809dac3a77ba4247fc8741713abc496a44efe4c4c731341494d0674397fb0f9d95a01859aee4", [[], [], [], [], [], [], []]}, 0x7d5) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0xfdfdffff) 23:47:36 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x3) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x5411, 0x0) listen(r0, 0xe7fd) 23:47:36 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') exit(0x0) sendfile(r0, r1, 0x0, 0xf99) 23:47:36 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x400940000000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:47:36 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x400000, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000180)={0xc, 0x8, "607b94353e1f5f57"}, 0xe) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x800) write$FUSE_STATFS(r2, &(0x7f0000000100)={0x60, 0x0, 0x1, {{0x2, 0x1, 0x6, 0x8, 0x4376, 0xfffffffffffffffa, 0x6, 0x1000}}}, 0x60) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2284, &(0x7f00000001c0)) 23:47:36 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) rename(0x0, 0x0) fadvise64(r1, 0x29, 0xeb, 0x7) ptrace$getregs(0xffffffffffffffff, 0x0, 0x0, 0x0) close(r2) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)={'syz1', "cff48b349e9a74fdd49f406ce292cb5c5162968d20be9d5839d5566a5863bb4a3729a290163ff601016841f858e00eeb01d04255d0d19869865e4a66c9db253427538cd9a64046d5d001681cf1823d77ec80bb5017f832b298562c1e956ad8a74052f4a15ab27b50b205a80c23954f361852a1b9efc5d7e6fc444f080a97b59a28e95d13bfef19d3584789aee39a42a2889fd95def394dbccf97947a6333d710be361be5da7bd7a8319bbc65dfaea8db4fedd654423382bbf714a9d03acbb45932f9d88804dc712f4185295f11a529d8c12e9f2472e399a991f3"}, 0xde) dup2(r0, r1) 23:47:36 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x0, 0x4}}, 0xfffffffffffffe57) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) listen(r1, 0xfffffffffffffffc) r2 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x5411, 0x0) 23:47:36 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000000180)) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0xfdfdffff) memfd_create(&(0x7f0000000140)='\x00', 0x5) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x82000, 0x0) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000080)=0x9) 23:47:36 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x101, {}, 0xfffffffffffffffc}, 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x5411, 0x0) 23:47:36 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0xfdfdffff) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) 23:47:36 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x0, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f00000000c0)={'bond_slave_1\x00'}) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000040)=0xffff, 0x4) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) io_setup(0x800, &(0x7f0000000080)) dup2(r0, r2) 23:47:37 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1000, 0x50000) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xa0, r1, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8000}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xc, 0xa}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x26}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}]}, 0xa0}, 0x1, 0x0, 0x0, 0x841}, 0x4000) r2 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f00000000c0)=0xfdfdffff) 23:47:37 executing program 1: syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) 23:47:37 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$VIDIOC_G_AUDIO(r1, 0x80345621, &(0x7f0000000040)) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x5411, 0x0) 23:47:37 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') exit(0x0) sendfile(r0, r1, 0x0, 0xf9e) 23:47:37 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x44d564b00000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:47:37 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x0f\xbb\x14\x7f\xd7\x9d', 0x200002, 0x0) dup2(r0, r1) 23:47:37 executing program 1: r0 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000000)=0x60) r1 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x1, 0xa00) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) ioctl$TIOCSCTTY(r1, 0x540e, 0x7) fadvise64(r0, 0x0, 0x6, 0x5) r2 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2284, &(0x7f00000000c0)) 23:47:37 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0xfdfdffff) r1 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0xffffffff, 0x808000040) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000140)) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000), &(0x7f0000000100)=0x10) 23:47:37 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x5411, 0x0) 23:47:37 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0xfffffffffffffffc) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x5411, 0x0) 23:47:37 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0xfdfdffff) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xf48, 0x40) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000080)=0x9, 0x4) 23:47:37 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2284, &(0x7f00000000c0)=0x10000) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x8000002, 0x80180) ioctl$BLKRESETZONE(r1, 0x40101283, &(0x7f0000000080)={0x9, 0x8}) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000100)={0x57, 0x100, 0x8, {0xfe, 0xad0}, {0x5, 0x81}, @ramp={0x6, 0xfffffffffffffffa, {0x7fffffff, 0x2750480b, 0xd50, 0x800}}}) 23:47:37 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup2(r0, r1) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @broadcast}, 0x10) 23:47:38 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x3ff, 0x75e993d32e93f984) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) r3 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x12e, 0x400000) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000180)={0x12, 0x10, 0xfa00, {&(0x7f0000000080), r2, r3}}, 0x18) listen(r0, 0x0) getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f00000001c0), 0x2) r4 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x5411, 0x0) 23:47:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x500000000000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:47:38 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') exit(0x0) sendfile(r0, r1, 0x0, 0xfa7) 23:47:38 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x4042, 0x0) bind$tipc(r1, &(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x1, 0x1}}, 0x10) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000000)=0xfdfe0000) ioctl$KVM_DEASSIGN_PCI_DEVICE(r1, 0x4040ae72, &(0x7f0000000200)={0x731dc42c, 0xff, 0x101, 0x4, 0x4b}) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x100, 0x0) ioctl$PPPIOCDISCONN(r1, 0x7439) fsetxattr$security_smack_entry(r0, &(0x7f0000000180)='security.SMACK64\x00', &(0x7f00000001c0)='!keyringcpuset+vboxnet1trusted\x00', 0x1f, 0x3) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f00000000c0)={0x57ac}, 0x1) 23:47:38 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r0, r0) 23:47:38 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x5, 0x200000) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000100)={{{@in6=@mcast1, @in=@dev}}, {{@in=@initdev}, 0x0, @in6=@mcast2}}, &(0x7f0000000200)=0xe8) ioctl$VIDIOC_G_ENC_INDEX(r1, 0x8818564c, &(0x7f0000000240)) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2284, &(0x7f00000000c0)) r2 = socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f0000000000)) 23:47:38 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x5411, 0x0) ioctl$sock_netrom_SIOCDELRT(r1, 0x890c, &(0x7f0000000040)={0x0, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={'rose', 0x0}, 0x888c, 'syz0\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x9, 0x8, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}) 23:47:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x600000000000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:47:38 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = accept4$inet(0xffffffffffffff9c, 0x0, &(0x7f0000000040), 0x80800) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={0x0, @remote, @broadcast}, &(0x7f00000000c0)=0xc) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000100)={r2, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r3 = dup(r0) r4 = getpgrp(0x0) ioctl$TIOCLINUX3(r3, 0x541c, &(0x7f0000000180)) sched_getattr(r4, &(0x7f0000000140), 0x30, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x5411, 0x0) 23:47:38 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x2b4c, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0xfdfdffff) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x1, 0x0) ioctl$TIOCNOTTY(r1, 0x5422) 23:47:38 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2284, &(0x7f00000000c0)) r1 = accept$unix(0xffffffffffffff9c, &(0x7f0000000100)=@abs, &(0x7f0000000000)=0x6e) fcntl$notify(r1, 0x402, 0x2) 23:47:38 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fremovexattr(r1, &(0x7f0000000000)=@random={'trusted.', 'wlan0[\x00'}) dup2(r0, r1) 23:47:38 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x5411, 0x0) 23:47:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x700000000000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:47:39 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') exit(0x0) sendfile(r0, r1, 0x0, 0xfad) 23:47:39 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r1 = dup(r0) getsockopt$inet_dccp_buf(r1, 0x21, 0xcc, &(0x7f0000000000)=""/3, &(0x7f0000000080)=0x3) msgget(0x2, 0x80) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0xfdfdffff) 23:47:39 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000000)) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2284, &(0x7f00000000c0)) 23:47:39 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x5411, 0x0) sync_file_range(r0, 0x7, 0x7, 0x4) bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x30, {0x0, 0x10001, 0x20, 0x336, 0x8, 0x4}, 0x7f, 0x3}, 0xe) 23:47:39 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000380)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}}}, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r2, 0x8917, &(0x7f0000000480)={'hsr0\x00', {0x2, 0x0, @empty}}) syz_open_dev$video4linux(0x0, 0x0, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000440)='/dev/cachefiles\x00', 0x100, 0x0) write$apparmor_current(r3, &(0x7f00000004c0)=@profile={'changeprofile ', 'msdos\x00'}, 0x14) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000200)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r4) stat(&(0x7f0000000280)='./bus\x00', &(0x7f0000000300)) perf_event_open(0x0, 0xffffffffffffffff, 0x0, r4, 0x1) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendmsg(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)}, 0x4000) write$UHID_INPUT(r5, &(0x7f0000000980)={0x8, "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", 0xfffffffffffffd14}, 0x10a9) truncate(&(0x7f0000000080)='./bus\x00', 0x200) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, &(0x7f0000000500)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, 0x0) sendfile(r5, r5, &(0x7f00000000c0), 0x808100000000) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_tables_targets\x00') r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(r6, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, r7, 0x12, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x100000000}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK={0x30, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}]}]}, 0x58}}, 0x4840) fstatfs(r4, &(0x7f0000000540)=""/78) dup2(r0, r1) 23:47:39 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x70001c000000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") [ 553.093513][ T26] audit: type=1400 audit(1554767259.505:48): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=24188 comm="syz-executor.2" 23:47:39 executing program 3: socketpair(0x5, 0x0, 0x12200000000, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000180)=ANY=[@ANYBLOB="020000000aa8a7f3ffc9bda8aa60b4c70371af1b6a243a5b5efe31275a5465e515d9c56ab3afb2d5c5dcff63cd63b4b7ecb7799a2cb8b730642ad634821a6dc38158b71a1bffec45a5f8af30c505647a44818fe8", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0xc) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000100)={0x4b9, 0x1, 0x8008, 0x3, 0x1f0d2f29, 0xa5, 0x1ff, 0x3, r1}, &(0x7f0000000140)=0x20) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r2, &(0x7f0000000000), 0xe) listen(r2, 0x0) r3 = dup(r2) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x5411, 0x0) syz_execute_func(&(0x7f0000000080)="c4a2190d21c4615a5a7b0e46da46194238368f2818a2dec2460f18cdc46195147c3000f0800c339336d9ff80c18b") 23:47:39 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000100)={0x0, @null, @netrom={'nr'}, 0x0, 'syz0\x00', @remote, 0x0, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose, @remote, @bcast, @rose, @default, @netrom]}) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r2 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r2, &(0x7f0000000200), 0x10) setsockopt(r2, 0x65, 0x1, &(0x7f0000000080), 0x1d0) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x4, 0x4, &(0x7f0000346fc8)=ANY=[@ANYBLOB="1800000000000000000061102c00000000000000"], &(0x7f0000007dc0)='GPL\x00'}, 0x48) r3 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r4 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x0, 0x400000) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffff9c, 0x84, 0x1, &(0x7f0000000100)={0x0, 0x8, 0x2ed9, 0x3, 0xfffffffffffffffc, 0xe96}, &(0x7f0000000180)=0x14) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000001c0)={r5, 0x1ff}, 0x8) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2275, &(0x7f00000000c0)=0xfdfdffff) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)=0x101) 23:47:39 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x10000000, 0x1ffffe) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, &(0x7f0000000140)) ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f00000000c0)={0x1, 0x0, {0x5144, 0x1f, 0x0, 0x9, 0xe, 0x3, 0x2, 0x7}}) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2284, &(0x7f0000000000)=0x3) 23:47:39 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x10000, 0x0) ioctl$CAPI_NCCI_OPENCOUNT(r2, 0x80044326, &(0x7f0000000040)=0x80) dup2(r0, r1) prctl$PR_SET_TIMERSLACK(0x1d, 0x2) 23:47:39 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x800000000000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:47:39 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0xfffffffffffffffd, 0x20000) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2284, &(0x7f00000000c0)) 23:47:40 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') exit(0x0) sendfile(r0, r1, 0x0, 0xfaf) 23:47:40 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000040), &(0x7f0000000080)=0x8) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x5411, 0x0) 23:47:40 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0xfdfdffff) 23:47:40 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000200)={0x0, 0x0, 0x1, [0x101]}, &(0x7f0000000240)=0xa) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) close(r1) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2284, &(0x7f00000000c0)) 23:47:40 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = accept4(r0, &(0x7f0000000000)=@caif, &(0x7f0000000080)=0x80, 0x80800) r3 = dup2(r0, r1) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000180)={{{@in=@broadcast, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@empty}}, &(0x7f0000000280)=0xe8) getsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f00000002c0)={@multicast2, @initdev, 0x0}, &(0x7f0000000300)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000001640)={{{@in6=@dev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@local}}, &(0x7f0000001740)=0xe8) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000001780)={0x0, @local, @initdev}, &(0x7f00000017c0)=0xc) getsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000001800)={@dev, @rand_addr, 0x0}, &(0x7f0000001840)=0xc) accept4$packet(r2, &(0x7f0000001cc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001d00)=0x14, 0x80000) sendmsg$TEAM_CMD_NOOP(r3, &(0x7f0000002000)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x12800}, 0xc, &(0x7f0000001fc0)={&(0x7f0000000340)=ANY=[@ANYBLOB="64020000", @ANYRES16=r4, @ANYBLOB="02002bbd7004fedbdf250000000008000100822dbad0a53fa5439df65ba1e92d95eb372f36ca57feefa32fb8ac6fe7f81da150cfb9bc68802a8fb0a0f7cac916eea5a2746aee8076e36ddbffea68a47e74f75ae4a7c1776123f01e61f1d2ad1f5554f6cca8cac065862ed554ea6a3a6ee7c28740bd93f5c850a7240588a8b2019e6e0225bc9a0d18414f622d", @ANYRES32=r5, @ANYBLOB="4c0102005c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000002c000400060000964a0000000000320500000000bb0000fa070000000002d4053f0a00000100d0d3000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r6, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004000100000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000800030003000000080004000400000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b00000008000400ba250000080007000000000008000100", @ANYRES32=r7, @ANYBLOB="f400020038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000080003000300000008000400000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r8, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r9, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000600000008000600", @ANYRES32=r10], 0x264}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) openat(r3, &(0x7f00000000c0)='./file0\x00', 0x2000, 0x7) 23:47:40 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x801004000000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:47:40 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x400000, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000001ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001f00)=0x14) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000001f40)={r1, @loopback, @rand_addr=0x95}, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r2, &(0x7f0000000000), 0xe) listen(r2, 0x0) r3 = dup(r2) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x5411, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000040)={{0x2, 0x4e24, @loopback}, {0x6, @broadcast}, 0x8, {0x2, 0x4e20, @rand_addr=0x7ab}, 'gre0\x00'}) 23:47:40 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r1 = getegid() setgid(r1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0xfdfdffff) r2 = accept4$x25(0xffffffffffffff9c, &(0x7f0000000000)={0x9, @remote}, &(0x7f0000000080)=0xffffffffffffffca, 0x7fffc) ioctl$SIOCX25GCALLUSERDATA(r2, 0x89e4, &(0x7f0000000100)={0x6f, "b1dc05cad64674020db0d59bf3c783f3198f02bc2b2a8cf5b227aebdbb89705289ee4c4b43360bd68790b674a457cdcbb34b1e080d005a3bd0fbbd9a1febcbdeb26c2a138726fb1a8bf4e6a50263c159995fbd7b263b7c2840c949a6a99a20a19b4ad41803af0decd243ac8bfe5862a89c288e0f73854cc8dadd6358ec1816e9"}) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f00000001c0)) arch_prctl$ARCH_SET_GS(0x1001, 0xffffffffffffff02) 23:47:40 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x83, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x6) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2284, &(0x7f00000000c0)) 23:47:40 executing program 0: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r0, r1) 23:47:40 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0xfffffffffffffffa, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0xfdfdffff) 23:47:40 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x803000000000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:47:41 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') exit(0x0) sendfile(r0, r1, 0x0, 0xfbc) 23:47:41 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x5411, 0x0) fcntl$setpipe(r1, 0x407, 0x7f) 23:47:41 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) dup2(r0, r1) 23:47:41 executing program 1: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x802, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x404040) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2284, &(0x7f00000000c0)) 23:47:41 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5428, 0x7fffffff) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000080)) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f00000000c0)=0x102000fdfdfffe) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x8000, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000100)=""/246) 23:47:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x900000000000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:47:41 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x3, 0x2) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x5411, 0x0) memfd_create(&(0x7f0000000040)='selinux\x00', 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) 23:47:41 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2284, &(0x7f00000000c0)) ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000000)) 23:47:41 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x1, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x101000, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0xfdfdffff) 23:47:41 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x8101, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getuid() r6 = getuid() mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x100000, &(0x7f0000000200)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}, {@max_read={'max_read', 0x3d, 0x8c4}}, {@max_read={'max_read', 0x3d, 0x3}}, {@blksize={'blksize', 0x3d, 0x800}}, {@max_read={'max_read', 0x3d, 0x3c}}, {@blksize={'blksize', 0x3d, 0x400}}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}], [{@euid_gt={'euid>', r5}}, {@appraise_type='appraise_type=imasig'}, {@euid_gt={'euid>', r6}}]}}) dup2(r0, r1) 23:47:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xa00000000000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:47:41 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0xfdfdffff) membarrier(0x2, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x2, 0x40080000) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000080)={0x1ff, 0x10001}) sendfile(r1, r1, &(0x7f0000000000), 0x81) connect$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x4, 0x3}}, 0x10) bind$netrom(r1, &(0x7f0000000140)={{0x3, @default, 0x7}, [@bcast, @default, @bcast, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}, 0x48) 23:47:42 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') exit(0x0) sendfile(r0, r1, 0x0, 0xfbe) 23:47:42 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000000)='team\x00') sendmsg$TEAM_CMD_NOOP(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)={0x14, r2, 0x1}, 0x14}}, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2284, &(0x7f00000000c0)) 23:47:42 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffa4f7}, 0xe) listen(r0, 0x1) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x5411, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0xffff, {0x400, 0xe00000, 0x5, 0x7f, 0x8, 0x1000}, 0x7, 0x1f}, 0xe) sendmsg(r2, &(0x7f0000002540)={&(0x7f0000000080)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f00000021c0)=[{&(0x7f0000000100)="351950957ae8466b84a61263caa178edf9adf2c3e9b8dd65bc938c2bf10168b4b67d600b1c181534ff6b0f7cd77f21db7bd7c538fe32e61c999a470430944dabc76ce6606d4a8f78209370ffbc2455c577e3bd127946608cc7e6089b7be77a6d6a581f7ffe5e", 0x66}, {&(0x7f0000000180)="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", 0x1000}, {&(0x7f0000001180)="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", 0x1000}, {&(0x7f0000002180)="030bd3b41d212e98f657eb638e2f49edf05465d82fa3fe2c2c01df32e3a106601e9fa9f7d08c01761b7c95d3", 0x2c}], 0x4, &(0x7f0000002200)=[{0xa0, 0x0, 0x100000001, "16cc3a6774fe256298a678c7f73278f3e21ef6317409ff6b3cb1a6dd6e6c81778e8d2f329dd46533d83142920458cbfe8149f4aa0416519b25354e52813c96aeb7ac779f3a0a60c5c449229760272d06b816350a6362c38e8c27d8339b6a8c815b194a65c9f040ec2087b5926c11540ab8b5887f72dc55984fa303c44eaaedbdb5dee420f86c5d008d7d5dbcac61eb"}, {0xc8, 0x13b, 0x84f5, "8f17561e37fc92a8f3a2cbc4752520a24d1bcf93c5762147aef7d82dec68546a117c825918abeec0de7ff7bffe5c9316a1b8d17b4440fcf9eb6add78f978bcd6144334ddef620b3497a9e4bfc33d5fb2225d108cb63468261efc42779281e42a44e266e3f224e6034dca1d2cb13727ae373e9eaf1007ec3d2196ff19ee027832c66b2ee7e440440b7c21e7a6a7b40f4fdeb21aa123bd0c61da7a431daf4f073a17dbeddac242cd4ca8d3f8341ede72e54ce8ce952f"}, {0x80, 0x0, 0x9, "3efe48eecc5ab0ffe6a417721231c84f85bc8ab6a6378c70bfab3aa8a488110253e4b66e1bf662ac0d8577f8dd1b90bb9a39c42a6516fc47c869ae1b8018f717623a872ffcc79182c0524fc4eba9c9b5ee76a7697b33147e433024ec51f40f748e3c0abe41b6d51969d02c6e"}, {0x50, 0x10d, 0x7, "7ba1d57b10b4f8dcdc96e16418d5516934fc3f73fc22f7b86056cba0623bf88967aac651cb914c5c00c4f0f3299dc8b96db37652da5b2e1e60"}, {0x108, 0x109, 0x0, "472686c20b808cf7d53231f353873f456833ef48f44b1c3b1d9b6e89b1cfbd162d2d3460e2fa164aa5e13b50bde4fd42291d2b01837213a9b0c623b7acae615f47cecd8275c336815eb8057463b508fda3421830a658cec3a19eb7f22b0dc38b2509e60f5423b80e36bc06331843d5692a4524de12d9e61a165b1fe237b70fa067c35e219d2d2b6e12f730e77bd6ddb53651292f7264a3af573f90403f4531d2f4e483e0dcebc3dd65207af80382c699dd6f841c447307877c85e347c374c93548f5bf687c1136c3ce7faaa2543a1e9c9a41d911417639994343503329ce346a9759699fd83bf98f718130799116c1643d6f446e5d"}], 0x340}, 0x1) 23:47:42 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup2(r0, r1) io_setup(0x7, &(0x7f0000000000)=0x0) io_submit(r3, 0x6, &(0x7f0000000540)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x100000000, r2, &(0x7f0000000040)="9102555e6cc6e81b9ca49e579bb932f07045f4dd54474d4da5eba9cd0aa080fd9e4e15260d7a2dac5c7f3bde0c0031", 0x2f, 0x7fffffff, 0x0, 0x1, r2}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x7, 0x2, r1, &(0x7f00000000c0)="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", 0xfe, 0x2, 0x0, 0x0, r2}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2, 0x1, r2, &(0x7f0000000200)="6c94c1fedef0646a155319a86ffd40a9ccb4d9b0828af66c1c4c4381e7fcf64170abeb49ba5e2acb426fa3a87253f6fda0450751569bda68db20d0524e1b298008b95626477499d54011f2042b94d1c41216e36d2ed41b7d2102a663fc9601e138f4ea9c3a82cf4cffd38821896ed8c90a7a651c9722d7939763666a2406f5df5c18b49048a4fa2beddb769c78f44159edecb925a896bea1716165d039fd8c3b41aab73d25e44882eae6aed701e7e5e23d4772f9a6b8992c57293348", 0xbc, 0x9, 0x0, 0x2, r2}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x800, r0, &(0x7f0000000300)="5a7903fe6ae0d1d9c8d9c20bede2b72f04b47c0f53f76f9f6f2549040bc8c79d77518d36e6890d89ff9823aedb2977953547e610b3e20fa4c99a3275b5d41747be1267b746e2850c01c5d4781c7d8cfcfa9c53ae58b25b35734221c2d97ab157c69029148db69a79eb49d9941c6a61e3a964cd23a5a574dd923397f81dd825856fd957c86eae02292c09a539622c0f6475b606a87c26a1140426cfee8289410a6eccce6e2ea1b2e0d84338a4bd35bcca7b257545df30707daefd130051f6400216953afb9efcbecace0d04a18e12be9c13e0bdc743ebc394dbc25b69afacef73", 0xe0, 0xa82, 0x0, 0x1, 0xffffffffffffff9c}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x2, r2, &(0x7f0000000440)="34b1294595a6c5bfe411", 0xa, 0x1, 0x0, 0x3}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0xf, 0x9, r2, &(0x7f00000004c0)="06", 0x1, 0x0, 0x0, 0x0, r1}]) 23:47:42 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x80) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x3, 0x0) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f0000000080)=""/33) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0xfdfdffff) 23:47:42 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xa01000000000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:47:42 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x20000, 0x0) ioctl$SIOCAX25GETINFOOLD(r1, 0x89e9, &(0x7f0000000080)) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0xfdfdffff) 23:47:42 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2284, &(0x7f00000000c0)) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_ENUMAUDOUT(r1, 0xc0345642, &(0x7f0000000080)={0x80000001, "c38439efda923057840dde31347ab7434232e33a276aa51a73e90a25f93b926c", 0x3, 0x1}) 23:47:42 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x6) write$binfmt_elf32(r0, &(0x7f0000000080)={{0x7f, 0x45, 0x4c, 0x46, 0x8, 0x4, 0x8001, 0x4, 0x800, 0x3, 0x6, 0x9, 0x2d, 0x38, 0x2f, 0x7fff, 0x80, 0x20, 0x2, 0x5, 0x5, 0x34671bcb}, [{0x7, 0x5, 0xfffffffffffffe00, 0x522, 0x8, 0x0, 0xffffffff, 0xfffffffffffffff9}], "db856f0e0fed56887f0d99f631b998fcf6f20db3136221aa309e3a0f365889a92cc0cc850ada603b5162b9d77642ce6db74598a2f25d0743d4076b37656504eff4925a6d51fc7dca7f2ff060b62beaa82e8a8105af7ee72999f4c52b3fa86d93", [[], [], [], [], [], []]}, 0x6b8) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x5411, 0x0) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000740)={'filter\x00'}, &(0x7f00000007c0)=0x54) 23:47:42 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup2(r0, r1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffff9c, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x4, 0x8}, &(0x7f0000000040)=0x8) socket$unix(0x1, 0x2, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000080)={r3, 0x7, 0x0, 0x9307, 0x4, 0xcb8}, &(0x7f00000000c0)=0x14) 23:47:42 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0xfdfdffff) syz_open_dev$rtc(&(0x7f0000000000)='/dev/rtc#\x00', 0xff800000000, 0x5f29948019ab68e3) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000100)={0x9, 0x9, 0x2, "9c4e55a67e4e5be03f7e2c2af08fb91a624c546862621bb0e941f0c4777ae5fb", 0x31435641}) 23:47:42 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, [], 0xd}}, 0x1c) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x3fc, {0x0, 0x8000000000000, 0x0, 0x0, 0xffffffffffffffff, 0x1ff}, 0x200000000, 0x2}, 0xb) fchdir(r1) listen(r1, 0x0) r2 = dup(r1) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x5411, 0x0) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f00000000c0)) 23:47:43 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') exit(0x0) sendfile(r0, r1, 0x0, 0xfc0) 23:47:43 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2284, &(0x7f00000000c0)=0xffffffffffffffff) 23:47:43 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xb00000000000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:47:43 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x80, 0x8) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0xfdfdffff) 23:47:43 executing program 0: r0 = syz_open_dev$mouse(&(0x7f00000002c0)='/dev/input/mouse#\x00', 0xfffffffffffffff7, 0x400000) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000040)={0x3, 0x2200000, "2afc95016c6d14767ff84eba401f59740f83d8f4fc2e2f9b", {0x9, 0x20}, 0x5}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000080)="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") ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f00000001c0)={0x1, 0x0, {0x0, 0x6, 0x3}}) r2 = getpgrp(0xffffffffffffffff) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000180)=0x0) kcmp(r2, r3, 0x5, r1, r0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r1, r4) 23:47:43 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0xfffffffffffffffd) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x5411, 0x0) 23:47:43 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2284, &(0x7f00000000c0)) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x4140, 0x0) ioctl$KVM_GET_CPUID2(r1, 0xc008ae91, &(0x7f0000000200)={0x6, 0x0, [{}, {}, {}, {}, {}, {}]}) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SIOCAX25ADDUID(r1, 0x89e1, &(0x7f0000000180)={0x3, @default, r2}) openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x400, 0x0) 23:47:43 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r3, 0x1b}}, 0x10) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1) dup2(r1, r0) 23:47:43 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0xffc, 0x0) r1 = dup3(r0, r0, 0x80000) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000100)={0x5, 0xfff, 0x2}) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0xfdfdffff) r2 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0xf9, 0x4100) bind$rose(r2, &(0x7f0000000080)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) 23:47:43 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) sync_file_range(r0, 0x4, 0x1f, 0x4) listen(r0, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0xffffffff, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000080)) dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x5411, 0x0) 23:47:43 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x800, 0x0) write$rfkill(r2, &(0x7f0000000080)={0x3, 0x5, 0x1}, 0x8) sendmsg$nl_netfilter(r1, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000000406050101000000000064deeb0000800c00010016000000ff02f1ce2e5e00e1ffff1f57ffffffff"], 0x2c}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r2, 0x40505331, &(0x7f0000000140)={{0xfd60, 0xaa}, {0x9, 0x3}, 0x296, 0x2, 0x65ce}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000000040)={0x3, 0x100000001}) dup2(r0, r3) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f00000000c0)={{0x5, 0x7, 0x1, 0x3, 0x3, 0xfffffffffffffff7}, 0x70}) 23:47:43 executing program 1: lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2284, &(0x7f00000000c0)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x800, 0x10) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000001200)={0x0, 0x9}, &(0x7f0000001240)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000001280)=@assoc_id=r3, &(0x7f00000012c0)=0x4) ioctl$EVIOCGSW(r2, 0x8040451b, &(0x7f0000000200)=""/4096) fcntl$notify(r0, 0x402, 0x4) ioctl$TIOCMGET(r2, 0x5415, &(0x7f0000000080)) [ 557.296497][T24495] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 557.310115][T24495] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 557.322789][T24495] Unknown ioctl 1079006001 [ 557.327946][T24495] Unknown ioctl 1074310947 [ 557.334321][T24495] Unknown ioctl 1074021321 [ 557.341067][T24500] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 557.349717][T24500] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 557.360760][T24500] Unknown ioctl 1079006001 [ 557.365981][T24500] Unknown ioctl 1074310947 [ 557.370598][T24500] Unknown ioctl 1074021321 23:47:44 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') exit(0x0) sendfile(r0, r1, 0x0, 0xfc2) 23:47:44 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) r1 = syz_open_dev$mice(&(0x7f0000000300)='/dev/input/mice\x00', 0x0, 0x408802) getsockopt$inet6_dccp_int(r1, 0x21, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0x4) listen(r0, 0x0) r2 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x5411, 0x0) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000200)={0x3, 0x4, 0x1, {0xb, @win={{0x0, 0x0, 0x3, 0x3}, 0xf, 0x465, &(0x7f00000000c0)={{0x7fffffff, 0x6002, 0x9, 0x8c}, &(0x7f0000000080)={{0x1000, 0xffffffff00000000, 0x9, 0x45f5}, &(0x7f0000000040)={{0x5, 0x4, 0x3}}}}, 0x3, &(0x7f0000000100)="7ed5f54dc1a69f4be418396f6a20a37ddb061ac69b1c89eb8fdd09ecd8f4148583c4c8f2a6d30adb327be8ad2ca8a5cfb006c9721769b8d16745f71a180bcba4bb937ced96a4bd92cd61c18c7a2a7e672cf1b792585a4aa52ad1b3fe06e9ca1a4cc49a48fac553ff222d53b0a105da19066d1b84eaad9858e06c2b226d1d06db543d8f4d0d8a67de58ba941dbb00c887ea3c33e588e71ca24451206bdd889c8559680077bbf35b11a12ff56e688759b01f6c1c5fadafb45d53f563c8f69a17bedea1c4d8137845"}}}) 23:47:44 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000080)=0xfdfdffff) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x80000, 0x0) ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f00000000c0)={0x72, 0x6, 0x6, 0xc, 0x4}) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000100)={0x0, 0x5}, &(0x7f0000000140)=0x8) prctl$PR_GET_CHILD_SUBREAPER(0x25) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000180)={r2, 0x17, "7406d1be54aee4cdd5b3bf508ccf5469af121edb03390f"}, &(0x7f00000001c0)=0x1f) 23:47:44 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xc00000000000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:47:44 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x4000) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2284, &(0x7f00000000c0)) r1 = accept4(0xffffffffffffff9c, 0x0, &(0x7f0000000000), 0x80000) sendto$llc(r1, &(0x7f0000000100)="1e0a1718e6604dc5ebf541154eefa71bd9fa6862dd6b3f6fd1724f62f81a7ee23738242497a6bc838ac78eca9bb74b6020aa4307ac735290d6c981993b93ba0e9dc6f4d67ad5571e8ab2e08eabe933f6616f66872c91bf082e783c13817cbaa2d3fd0cfc853d7e58506d3700eeec33", 0x6f, 0x20008804, &(0x7f0000000080)={0x1a, 0x30d, 0x5, 0x6, 0x2dee, 0x9, @local}, 0x10) 23:47:44 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r0, r1) 23:47:44 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r1 = accept4$ax25(0xffffffffffffff9c, &(0x7f0000000340)={{}, [@default, @bcast, @bcast, @remote, @remote, @remote, @null]}, &(0x7f00000003c0)=0x48, 0x80000) fstat(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SIOCAX25DELUID(r1, 0x89e2, &(0x7f0000000480)={0x3, @bcast, r2}) ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000100)) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2284, &(0x7f00000000c0)=0x3) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x800) r3 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x1, 0x2) sendmsg$nl_crypto(r3, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x240000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)=@upd={0x110, 0x12, 0xc00, 0x70bd28, 0x25dfdbfd, {{'drbg_nopr_ctr_aes256\x00'}, [], [], 0x2000}, [{0x8, 0x1, 0x20}, {0x8, 0x1, 0x7ff}, {0x8, 0x1, 0x9}, {0x8, 0x1, 0xfffffffffffffff7}, {0x8, 0x1, 0x400}, {0x8, 0x1, 0x1f}]}, 0x110}, 0x1, 0x0, 0x0, 0x4000}, 0x10) r4 = syz_open_dev$mice(&(0x7f0000001a40)='/dev/input/mice\x00', 0x0, 0x800) setsockopt$CAIFSO_REQ_PARAM(r4, 0x116, 0x80, &(0x7f0000001a80)="c0e50e127ffcaf7e1e", 0x9) 23:47:44 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000000)=0xfdfdffff) 23:47:44 executing program 0: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x40103, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x1c9c380}}, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r1, r2) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r0, 0x4) 23:47:44 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x80ffffffff) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x5411, 0x0) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, &(0x7f0000000040)='\x00', 0x1) 23:47:44 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xd00000000000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:47:44 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x400000, 0x4) setsockopt$llc_int(r1, 0x10c, 0x0, &(0x7f0000000080), 0x4) r2 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x5411, 0x0) 23:47:45 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') exit(0x0) sendfile(r0, r1, 0x0, 0xfc4) 23:47:45 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video2\x00', 0x2, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0xfdfe0003) 23:47:45 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup2(r0, r1) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000000)={{{@in6, @in=@remote}}, {{@in=@multicast2}, 0x0, @in6=@loopback}}, &(0x7f0000000100)=0xe8) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r2, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)={0x1a0, r3, 0xf00, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x94, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x34f}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'lapb0\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x51bf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth1_to_team\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @local}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x80000000, @rand_addr="f000e91e5999e1bd6d917d5fcd5d780f", 0x8}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_SOCK={0x10, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0xe8, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffffffffca47}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'lapb0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x7, @loopback, 0x400}}, {0x14, 0x2, @in={0x2, 0x4e23, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x6, @mcast2, 0x8}}}}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x24008800}, 0x8000) 23:47:45 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0xffffffffffffffff) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2284, &(0x7f00000000c0)) 23:47:45 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) fstat(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r1, r2) listen(r0, 0x0) r3 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x5411, 0x0) 23:47:45 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xe00000000000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:47:45 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x4) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x81, 0x200c00) ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f0000000080)=""/128) r2 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x5411, 0x0) 23:47:45 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000080)) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0xffffffffffffffff, 0x200) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001100)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)="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", 0x1000, r1}, 0x68) getgid() ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f00000000c0)=0xfdfdffff) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000001180)={0x6, 0x8, 0x0, 0x0, 0xe13, 0x5}) 23:47:45 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x8, 0x4) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2284, &(0x7f00000000c0)) 23:47:45 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = shmget(0x3, 0x4000, 0x100, &(0x7f0000ffa000/0x4000)=nil) r3 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x5, 0x800) write$apparmor_exec(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff0379585dcfe65075726974795d65"], 0x15) getsockopt$inet_dccp_buf(r3, 0x21, 0xc0, &(0x7f0000000100)=""/65, &(0x7f0000000180)=0x41) shmctl$SHM_INFO(r2, 0xe, &(0x7f0000000000)=""/91) dup2(r0, r1) 23:47:45 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0xfdfdffff) 23:47:45 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x28440, 0x0) ftruncate(r1, 0x80000000) r4 = dup2(r0, r2) getsockopt$inet_tcp_int(r0, 0x6, 0x4, &(0x7f0000000200), &(0x7f0000000240)=0x4) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') sendmsg$NBD_CMD_STATUS(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xc0, r5, 0x102, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x54, 0x7, [{0x8, 0x1, r4}, {0x8, 0x1, r1}, {0x8, 0x1, r3}, {0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8, 0x1, r4}, {0x8, 0x1, r4}, {0x8, 0x1, r4}, {0x8, 0x1, r4}, {0x8, 0x1, r4}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}]}, 0xc0}, 0x1, 0x0, 0x0, 0x40001}, 0x4) 23:47:46 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') exit(0x0) sendfile(r0, r1, 0x0, 0xfc7) 23:47:46 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2284, &(0x7f0000000480)) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f0000000200), &(0x7f0000000240)=0x0, &(0x7f0000000280)) r4 = dup2(r0, r0) write$FUSE_ENTRY(r4, &(0x7f0000000380)={0x90, 0xfffffffffffffffe, 0x4, {0x0, 0x0, 0x4, 0x9, 0x7fff, 0xd05, {0x0, 0x9, 0x80, 0xffffbffffffffc00, 0xfe, 0x3, 0x200020, 0x40000000020, 0x97c0, 0x8, 0x4, r3, r2, 0x0, 0x2}}}, 0x90) mount$9p_virtio(&(0x7f0000000000)='/dev/sg#\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x2010005, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=virtio,access=', @ANYRESDEC=r1, @ANYBLOB=',noextend,measure,func=CREDS_CHECK,fowne\x00>', @ANYRESDEC=r3, @ANYBLOB=',hash,rootcontext=user_u,dont_hash,\x00']) 23:47:46 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, &(0x7f0000000380)=0xc) syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x8, 0x3, &(0x7f00000002c0)=[{&(0x7f00000000c0)="6b483c1efeddb534690e7e1db9847c67f66d214aa38527de438829dedf9a1ba8ea00b05322d6fd0d321b2a93f0f79a8e0b31d4e433fc0ce61831749c0764ce931672bf2591c23632a381e8269c4a85bb7af8262c095183fff0cf96b30fa256ff77013d7da40f43dfdd40ee85438a443061c604e73c13701e6d1458c016c3ac1d9efb1a976fe3d5257118fe4f04b87c4f48759d8644baba05b7b52fdf22a29e5849af781cefd4d82196c55bfb2f2c1b2f5bce82245083ff03033db81a061ea6bce2dcb29013ac1e4e230c81dd9d7ee8", 0xcf, 0x9}, {&(0x7f00000001c0)="b2696f7ca7268bba73a59f7eb9", 0xd, 0x9}, {&(0x7f0000000200)="db3ee100ef51553b5801d3c80c40a9767a0adf6eb239e82c698566ec49da70fbaa02c373123cb0a2b8769406fbd0a4d7b83edbd7c9820842704ed5fb959e6fad0e4fe9dbb519df1e67356f86c1ff2ae67b0049e6eb6ca1ce43a5985468bda8f8c38f7e301e1884b379b804bb6be3c2f8e87b6c60087535e5aee280497e42c3baa8e5a808409df7bde741a52dd89f0e", 0x8f, 0xb536}], 0x0, &(0x7f00000003c0)={[{@swidth={'swidth', 0x3d, 0xb6}}], [{@euid_gt={'euid>', r1}}]}) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r2 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x5411, 0x0) 23:47:46 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xf00000000000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:47:46 executing program 4: r0 = socket$isdn(0x22, 0x3, 0x7) flistxattr(r0, &(0x7f00000001c0)=""/93, 0x5d) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f00000000c0)=0xfdfdffff) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x101000, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) syz_init_net_socket$rose(0xb, 0x5, 0x0) epoll_pwait(r2, &(0x7f0000000140)=[{}, {}, {}], 0x3, 0x7, &(0x7f0000000180)={0x62}, 0x8) 23:47:46 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup2(r0, r1) ioctl$KVM_GET_ONE_REG(r2, 0x4010aeab, &(0x7f0000001040)={0x10001, 0xfffffffffffffffe}) ioctl(r2, 0x3, &(0x7f0000000040)="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") [ 559.722167][T24616] XFS (loop3): unknown mount option [euid>00000000004294967295]. 23:47:46 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0xfdfdffff) ioctl$SG_GET_TIMEOUT(r0, 0x2202, 0x0) 23:47:46 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) prctl$PR_SET_PTRACER(0x59616d61, r1) dup2(0xffffffffffffffff, r0) 23:47:46 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x400000200000, 0x80000) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2284, &(0x7f00000000c0)) [ 559.838431][T24623] XFS (loop3): unknown mount option [euid>00000000004294967295]. 23:47:46 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0xffffffffffffffe9, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0xfdfdffff) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000000)) 23:47:46 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f000000e1c0)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) mkdirat$cgroup(r1, &(0x7f000000e200)='syz0\x00', 0x1ff) r2 = socket(0x0, 0xa, 0x3f) setsockopt$RXRPC_SECURITY_KEY(r2, 0x110, 0x1, &(0x7f0000000080)='rose', 0x4) ioctl$sock_bt_bnep_BNEPCONNDEL(r2, 0x400442c9, &(0x7f0000000000)={0x80000001, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) getsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000000c0), &(0x7f0000000100)=0xb) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$llc_int(r1, 0x10c, 0x8, &(0x7f000000e280)=0x9, 0x4) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000040)=@rose={'rose', 0x0}, 0x10) r4 = dup2(r0, r3) ioctl$VIDIOC_TRY_ENCODER_CMD(r4, 0xc028564e, &(0x7f000000e240)={0x3, 0x1, [0x68a, 0x10001, 0x5, 0x86, 0x200, 0x590c, 0x1f, 0x5]}) openat$mixer(0xffffffffffffff9c, &(0x7f000000e2c0)='/dev/mixer\x00', 0x0, 0x0) 23:47:46 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000000)) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2284, &(0x7f00000000c0)) 23:47:46 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x5411, 0x0) 23:47:46 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1000000000000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:47:46 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') exit(0x0) sendfile(r0, r1, 0x0, 0xfd2) 23:47:46 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x101000, 0x0) ioctl$RTC_UIE_OFF(r0, 0x7004) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f00000000c0)=0xfdfdffff) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000080)) 23:47:46 executing program 0: r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80800) setsockopt(r0, 0x9, 0x8, &(0x7f0000000000)="711a65b6e326c9e2d95a8efe77fd754615581633d6efb6670eb8d2ef32df5536fb679dcf9eb7d9279cd0b2936968acffdf52f96f8287d4a8e3d0f0bb89d452e648021c4cfdb1571271152522af00321ed7df23269abc91d280f1450ba65cb1e1c9f983a7ca01c9dd539d8b86b27c7f1d6d3bca86b85bbe06ec348349396fad3548baabba79f1c5bbb81f88f63e9b38f2cfdd92b31759154da361791f2b27717239f95b5693c19e9778e5e210afe12c5f8f5c59a28deb7d45e0155ab9b7b68460ab6aac", 0xc3) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = request_key(&(0x7f0000000100)='logon\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)='-proc-ppp0\x00', 0xffffffffffffffff) keyctl$set_timeout(0xf, r3, 0xa3) dup2(r1, r2) 23:47:46 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x3) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2284, &(0x7f00000000c0)) r1 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x0, 0x80) sendmmsg$alg(r1, &(0x7f0000001ac0)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="7ec977be6d9cdcca420ea39908c727965a6a851b0d9fcad0168e9ebe57dfd513794e28a595d40c271fc5b7295ee9cd060c66b04e3ac0362591614e2f0dde18702e10d306ab48329e53539f090babfae132ab0bc08a839f70a6ad33b9f83eff858293d6977343a4d0bf613a641a646d884f137cc1d08d803b184746768c77b1dbbbc594acec946546da1c308c1e18fa2969ee3dc29edbc8a4d40179fc033cd7883a1dcd727519b01feffa30a4e8f4c5d29930fa8d6193955e84a2eb52719e50943d1742f1b86c232d0fe68956343d0ca53c4c9bab77b186a992248daa0f41", 0xde}], 0x1, &(0x7f0000000240)=[@assoc={0x18, 0x117, 0x4, 0x100000000}, @assoc={0x18, 0x117, 0x4, 0x3000000000000000}, @assoc={0x18, 0x117, 0x4, 0x7dc5cdae}, @assoc={0x18, 0x117, 0x4, 0x8001}, @op={0x18}], 0x78, 0x4}, {0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="7b7824f7eef9ff006afa235fbbafa2bc261607bf0b37f9246b1fe6d1e9c29868f6036a478010cf17910cda85b4af4a59db0787792f3af509f329fdc45a22dc773e9a12b7fb4adbbb89d08a095e9af71548bd1f72c3993040c630520e94cb6fe15100e85ceda69d4e3a6ce4a925c703b111b325c1551a5a31f658839b5a657807980a43a459ff", 0x86}, {&(0x7f0000000380)="43650c77d56ca7cfcbe613055033848e8a3e6c2247f3f2cc04c913168328b16a9e7d0dff968687f2ccb235c7d2498bf78cc2ba545454656ace16e7e12457eaf775f7dc08df00025fa939a63e8d78fa9764e4e4c4d4e5443aaeaae045bf8d597f859393b14e8d5f77ac99bc6b8fd9", 0x6e}, {&(0x7f0000000400)="ca7ef5db29d7a22fe2a3d08f3e746d9af5a2f2ed550de23f858c081ada047a3236ed309405f6eda769cd987d5deb2727ae805773172bd4b4ab8e20d651b9912512a86d5b109a377439234859c16b900bdc8627eeebdd70cd55f036c5c1992926ad554b6d3e911e0fe5b5cd2e1e4b4d66fb232523692d3931d5fcd63cce43e40f790bc9eb7f2d10fa812ccebccaa96bb68fa92dbbb4a7157622b4d36ad3abb1b776045fca7476b37bc5c845b15bf30f1129af12d07aadea0b034e95aa59c024ae434ecd61d0eba256393a85da4e", 0xcd}], 0x3, 0x0, 0x0, 0x24000010}, {0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000000540)="a3a7b903d78cda3db7240f8c2077a3630f2cca3a99732d89b9c64de1477785321b638d00cf9836b383ab7e32476c716c569c8a67a2cd62280397c67b49407f76e0e7d1302cdabe23b1d976ab421f4c2bc955b6857b2cb9df805421af062f2e3ff06d89cd2db99907acaad37808492718603b3c12f4cb47ae7d4a1c05788dc1906d02b317349b4f71227674665694c544e935c52b934c856805ed2964a825cff1edc652896a3337e4e5bd8c6030a379550da5536050bf942dbb13455a349874b067c4c5bed3697ae9cb0a33f241272e1efeae265d7b3bc0d49e57e0bd33d2ed886175f122246220be7a82b2ccadd367f0f4", 0xf1}, {&(0x7f0000000640)="2c08586916d012e19ec7188f54df0b4462df2067634ba432d53586d9f148ad27473d98521323ccde57078aa9b443b158c4d7df4fd0acb81ae6108a9cb54414f79e4ca53549093271fef9a1393e9f2781f36488b77d58fd30495f28619b37d2c9a624b7c602b2dbd5557cc58bb841504de95f107db365985c5db00f73fe7ec70853c04d4a553a094b24a20693a8397c76dfbf4a3c", 0x94}, {&(0x7f0000000700)="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", 0x1000}, {&(0x7f0000001700)="367961b8f6bd8107b0ed87391b0a1a6f231679ecbc77cfc157cfedd3f7ee743fb1f90d42ad813b3ce1a3972230ddd807d86cd998f49d447020fc1384cb1f85b169cf3d796362f9bbf0dd64bdd78a6c16e7d43128fd3c94370f13f902e88ebffccca5d978a7e73170fa6648414015895230f4675011c08da0cb0ca54bd54a72ef015b42c8714c1c4048d14be37fc92c", 0x8f}], 0x4, &(0x7f0000001800)=[@assoc={0x18, 0x117, 0x4, 0x571}, @assoc={0x18, 0x117, 0x4, 0x1}], 0x30, 0x844}, {0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000001840)="ecce4b23189a02", 0x7}, {&(0x7f0000001880)="7ca6fcbe00715ead80d48cfb9f432aa1e3b45de88451ac5697685f04eca2", 0x1e}, {&(0x7f00000018c0)}, {&(0x7f0000001900)="369f979fb948b558b95325476d362771d4b4bc149f4b1c6474c834bf48a00d820a1d0aa421948a847504947e9b6d08faf1e16bb58e5c8ec897adc44627961112d1dd8de5b789fe93a6eb212d7c6178ed9a6a6a2687be04a57598c12ff2e4a1", 0x5f}, {&(0x7f0000001980)="e629d5d35175b97f76cf42f2b2753d4f571c88ca5027e7b47519bdd4c01cfb912868bb21c53bfc78b6674f3c8416684ac148ff02cce171adc4abea6ec03811a7d969c82da68e012da23e97efb444e30e44cf3881530cf237e26b530264f18b20d4", 0x61}, {&(0x7f0000001a00)="9162b78f6af0d7b7d1d6", 0xa}], 0x6, 0x0, 0x0, 0x4040010}], 0x4, 0x40000) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f0000000000)) 23:47:47 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x100, 0x0) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f0000000100)={{0x4000, 0x6, 0xe, 0x5, 0x7b, 0x0, 0xcb, 0x5d1, 0x82, 0x7, 0x49780646}, {0x4004, 0x4000, 0xf, 0x7fff, 0x3, 0x1, 0x2, 0x80, 0x7, 0x680, 0x80000001, 0x7}, {0xd000, 0x3000, 0x8, 0x4, 0x1, 0x8, 0x88, 0x81, 0xfffffffffffffff8, 0x5, 0x8001, 0x8a}, {0x0, 0x0, 0x3, 0x4, 0xffffffff, 0x81, 0x800, 0xfffffffffffffe00, 0x9, 0x8001, 0x8, 0x9}, {0x1002, 0xf000, 0xf, 0x7, 0x6f4, 0xfffffffffffffbff, 0x3ff, 0x1ff, 0x8, 0x6, 0x3ff, 0x1000}, {0x5000, 0xf000, 0xd, 0xff, 0xf3, 0x3, 0x8000, 0x1, 0x8001, 0xa6c, 0x10000}, {0x3000, 0x100000, 0x3, 0x6a, 0x7, 0x100020000000000, 0xffffffffffffffff, 0x401, 0xffffffffffffffd3, 0x3, 0x7ff, 0x9}, {0x3000, 0x6000, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x4ef1727f, 0x9, 0x6b6, 0x1, 0x60000000000, 0x3, 0x1}, {0x2000}, {0x4000, 0x3004}, 0x20010004, 0x0, 0x0, 0x100, 0x9, 0x1, 0x5000, [0x7, 0x8, 0x4, 0xc76]}) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0xfdfdffff) 23:47:47 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2284, &(0x7f00000000c0)) 23:47:47 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x2100, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) eventfd2(0x793, 0x80801) socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r0, r1) socket$inet_udplite(0x2, 0x2, 0x88) 23:47:47 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x84400, 0x0) fsetxattr(r1, &(0x7f00000000c0)=@known='system.posix_acl_access\x00', &(0x7f0000000100)='/dev/vsock\x00', 0xb, 0x2) ioctl$SIOCRSSL2CALL(r1, 0x89e2, &(0x7f0000000080)=@bcast) listen(r0, 0x0) r2 = dup(r0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000240)=0x8, 0x4) fcntl$setflags(r1, 0x2, 0x1) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x5411, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f0000000140)={0x1, 0xe5, "519860facab75e837273c76ff9ee76830a1d027ff75550b8f6a12e677eebddcca10f7baabffd515b2a328a3cd6b79bc730de29220ef7a80608cdde0c5a3226575f85e915fc1cdf3a7c5df7d1401af5853f2787e58a1184548044808d52dc42166dcf4f9ac5f076104e20b6a99c3a13505e3171087a008960c0d27796b9efd4f24015a100e8c7ffe357305267a827c2cbed98877fc3b12b9ea7110918a33a0bba384d6fb439a60ddae39f648c9b41c9ae98220f59f27771bba59b5bf8648844bfbc4fe672b7fdd06780dbed2304580c7b2831fc7f789b0ddd0b5152c498d35cde16f320c7df"}) 23:47:47 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x4000000000000) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0xfdfdffff) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r0, 0x5386, &(0x7f0000000000)) 23:47:47 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1100000000000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:47:47 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x7, 0x80) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2284, &(0x7f00000000c0)) 23:47:47 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200)='/dev/hwrng\x00', 0x698601, 0x0) accept4$alg(r0, 0x0, 0x0, 0x80800) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup2(r1, r1) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f0000ffb000/0x3000)=nil) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000000)={0xd5}, 0x4) 23:47:47 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') exit(0x0) sendfile(r0, r1, 0x0, 0xf000) 23:47:47 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video0\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000080)={0x0, 0x7, 0x2012, 0x1}) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x3fe) 23:47:47 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x101000, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000080)) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) sendto$rxrpc(r1, &(0x7f00000000c0)="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", 0xfe, 0x20004004, 0x0, 0x0) r2 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x5411, 0x0) 23:47:47 executing program 1: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x0, 0x20001) openat$cgroup_ro(r0, &(0x7f0000000140)='cpu.stat\x00', 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2284, &(0x7f00000000c0)) 23:47:47 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup2(r0, r1) fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f0000000000)) 23:47:47 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1200000000000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:47:48 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000300)='/proc/capi/capi20\x00', 0x280, 0x0) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x0, 0x4) r2 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000240)={0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r2, 0xc010641d, &(0x7f0000000280)={r3, &(0x7f0000000840)=""/207}) write$binfmt_elf32(r0, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x4, 0x8, 0xfff, 0xca, 0x2, 0x3e, 0x0, 0x3da, 0x38, 0x2c2, 0x8000000, 0x6, 0x20, 0x2, 0x2, 0x7, 0xff}, [{0x0, 0x2e, 0xfffffffffffffe01, 0x2e2ecbca, 0x3, 0x10000, 0x8, 0x5}, {0x3, 0x5, 0x3, 0xfa3000, 0x3, 0xffffffffffffffff, 0x1, 0x81}], "8784d1baefbd8138c0ae77a1acc2d3e75ee3d840ee887d24fe3ab0cc2a2e38df13710c99bd3d808b98082e1143d59c010eca04294bb4d8f291089f4c6e943f909c44fdab22774557bd67837c09fd6cd79de0e70b998b9a7d99c01312cf526ce897b653606e619ad733d187023be214872b6c43c03dc0", [[], [], [], []]}, 0x4ee) ioctl$VIDIOC_G_FBUF(r2, 0x8030560a, &(0x7f0000000180)={0xc, 0x1, &(0x7f0000000080)="54043c41b0bc3eb4c5efb45b45e6265063d034d7b742cf05126899213f820810b15768d96454eaeb224a6c9a45650ef3415648f75e945df16594e08da7840ec6e5cff5853e09c3b3090a1c7bc8d2d7d4e193119635c829fa21dc2b0842e90d836aa33eae8442d70c2e39ac52e991cd75106be0f94d55a27d0364272bad8e347364efc1b5bb59f5405fedc66b96ad97a1ebfa50", {0x9, 0xfb7, 0x3731775b, 0x7, 0x0, 0x6, 0x0, 0x6}}) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x101000, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000200)=0x10000, 0x4) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2284, &(0x7f0000000140)=0x8004) ioctl$TIOCGPTPEER(r1, 0x5441, 0xffffffffffffffff) 23:47:48 executing program 4: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x20a6c0, 0x0) ioctl$KVM_NMI(r0, 0xae9a) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x1ff, @local, 0x80}], 0x1c) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1}) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000140)=0xfdfdffff) sendto(r0, &(0x7f0000000180)="4779421304879eb002438203b8b278299470f8dd2a8ad4319c91f1257c68549314232a94ba8053a9c73e2f0ccf84c99b7fc07db72f559d5c8abca9fdc6f7de1e8a4cc8c14bc3500d2efe8c1a79a8794e12947e8db771a87ab33785a84171cad35992df163b0f6c49f4c69538a8c9f045f638102d1833d113ff2c4738d1173c85b0c4498fa679bd97b84c42f4", 0x8c, 0x800, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x2, 0x3, 0x1, 0x0, {0xa, 0x4e20, 0xa7, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x5}}}, 0x80) 23:47:48 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='gretap0\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) sendto(r0, &(0x7f0000000100)='s', 0x1, 0x0, 0x0, 0x0) close(r0) 23:47:48 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, {0x0, 0x4, 0x0, 0x0, 0x18}}, 0xfffffffffffffeea) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000040)=0x4, 0x4) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x5411, 0x0) 23:47:48 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1300000000000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:47:48 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001200)={r0, &(0x7f0000000180), 0x0, 0x1}, 0x20) 23:47:48 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') exit(0x0) sendfile(r0, r1, 0x0, 0x7ffff000) 23:47:48 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x400, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0xfdfdffff) 23:47:48 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2284, &(0x7f00000000c0)) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x102, 0x0) ioctl$KVM_TRANSLATE(r1, 0xc018ae85, &(0x7f0000000080)={0x4, 0x4000, 0xc3d, 0x0, 0x5}) 23:47:48 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, {0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x42221dec}}, 0xe) listen(r0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x40, 0x0) setsockopt$inet_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000000080)="4938a30d7b108ae668ca045d6411095fab8c9db6ebb439dccd659abba8f21a63cb88cbded662b3993689e1ccbb78779ffa0c7fab00ab29b12fa4b502b97c5c3a1c231fdbef2daf6db14c6db3408fd2003571caf2a651fc260f757c2b78c35ae839e2819f4b18fe3842a9444a3316a501a7285e313b694c8f05d1e1b8491b39f8d91e41d62657f1b23d795aacd7a0bd24f66119fe5bf621bd35571f49e6641decf09398288e43d079548d50182392e4e4dea773eb9bcb67be1c3b6a81363686ea69cc8de5433fc0ff7ae20184535bdf7943371e8f510799b2d4bd270244772d55a0e7f7e9dd7adf93a6ce0465f3d54b4a7043205a1fba306a8277254c9e18a6a9e8c84cd1f22d84f25f2b87e39be4e50944c2020eddbd6430ecb7c74bf5d4eb46e10fc27a4735ba165c5d3f3d219a2852fb21297126b2803cd2ef7e3bb77dea9f3f3b838aa725e088514608fc4cf62494f5639f4c0ea54312c9e8eeb3cf07b3dfda3a31e1857216491d9013b40d8e202d7a72ab097046eafc7fcd9b0e2ab001598edbb74eb4513ef8e17f469e583451ea60b73c0805b81c1a1b99ac6e57a6d9af764efa8eef30b2d2a28c72058cda7d398dcea00fb90f563970e3c98400bce8d99a7343d3c107ad662109c29931f975ded46b0f047f0c7920f20e68562d46963efa1f9206b47fd85489031e4f4129199152a1c41c7e3bdcbb7d3d037cc51b9d586ddffebeb4228f347bdfd3b48b7a05cb2ceca50f8eab277c3520dd40c48e17799e3157abb4285dafa73220b917cc6c4b69ee857cad59c440812fca5bf6f45cad2557684027bcae546ea7e287e5ff71ced05a7c85f5631d8d7daa4d4037d7496dcc99711a5d998bacddce4553c5d8665f6c77f11d95be4ee4aeb84bbca727f2ecb64651826c23e0218661995786a14ffb650d87b7fade036e9c9682001ab46f6e0d80932b36b526ce66884dedfe29a70e204141a1e0eb57c2471eb8eac9e6c2b71b0e6eec27b84898e2b52efc9ba6bd8f02f9a57f3d0e97b33703c10cb56af14ffc1542355c71beb6994cbb3ff7eb6a8da0141eeefcd53d0eaca94c04b35e150a24ebc952604fb43048cd56260eaaff7c00e1ca9a891ce1ac6fe6610aeb12656f98bad1e84f4eaaa15f37a5309ba3085ab1bcc1a8b24ddb326ccf35643044210d3260d862f68ded6b0f8695bd31423fcdf146b187fa572631cc94f4819f8ba85a971d2b6fb27a567cb9048ee8251ce18d2fcfa84ed7c1c97864a4193b28b11f486f2ff2395350d5ab42edf56d57cf79ed0edfb87734ec60b211049c51d471418e36e9972fddda6655b4a493cff73e4964d1accda1d07ac7f0b6553c1cf4b20981495222c614f73475525bd3c579e9143d29c718de3212b4c7657ec358ac9cff4c6ab9475ad17c0679337ea2194106545206391e47ee798bd94f46bb12e6d09ae1dc9ba30e1fafa7df9b1eaed8de3198a3d9c5fb8362b6882513115156e2f6839af043b58ca2378203b5327f920360f039dba7be51f5c86f9db0c78dd27732e2027a44c376288ba265358b1e768e4ad674aef77d579ed2486aa813025ad9cf9aadacf00465aa8a8ca2119f497ffca557d4463c2dba1ad9f78c9d964452773c967fbf877a5c77357070ab845e300794fc8836f4ab9f93179156db0c49ec61b37d9f45761fdf34e341ce5af38c8250454012e8b36e8d93fb68e30002e5caa640ac16fe43c72a3b5c26a4befba801f55a1176f83b70b88562dbe32d9d177bec6cd6cb837b4a840212343b28ffd54afafb976459f2704138d5eaa30fb57ebcceb07562d2996454fd1447f2629c33b93c8ddfbb221d3d84f97672effe530977bfa0e8b4b247b1233bab4f6bda420eedfda086869395c3f39a3aeab906763f34fdf5afed4f1ddd1bc2b47f09ea6b0684bde2c082179932c04b66994e0e818fd2d5a454fb5f7849dea653029037fe391105d84b9a8e778a8d828b36fb8872a934926115ef8e18257c08c57b56c342c7e0f57f97473c80302daa5368dd3fe0e98f7528a12fe90f57a12c8083a1dd70ca7a2ea1806ee5f6fd1a375b150e634e752b0ef9a0d72f14222108e97822e88eea0be787cddce5a7919feb04d48b49d736d0b214a380a5eb75c3085a0e1dd0220b6e4b665ae4aa3cf37e7162c4453fc550a9bc3b8ace4ef1214e1c9e2a9f47a28576fb1715470fa03b35cec404fd479eb9286b450e280d45e3517b2eebc44ad2188261d3dd127bca26e335f073b4e99e9abb89fcecf03fdaef946fa1b31e38a890813b5247b6266d65cb944e8ece50a57eed5558c49c1dbaa75170f346356dbc5a6d036d472dc05afbac942f7816a289551c0888723bde44032cc4048eeb2e0705ad95829af0964d691a4478622b1d50153f12d882128bfff659b94cb89d685e5678da4c9c50266766f57374ea2bb4e0cba44ac84e2d5eea5ca8a4c3fd27adacce71d165cee6135ccf3dfaff7615b92de062487d078c635f0309d45b758010a8083e64af9dd975508a08db9ab1e92a190e6c22c8059f5aca1b2762b3311f39cc47a1effc4e7382bc7fb44985822aa12d6d2bb6a72d148ad6ca7692f569c2f9efa0ae827dbc07647efd68b456111962624d04ee379f618ec54f28f66a2b9cb3bee894b6216146e3b01c28695944c2d4b7655f32b0b51a508bc262e0db40f06b845fba7a3413e7b95a3ea1c8e2e345887634190eec21f975727d3757e39a5358b17653bd8e0f06d1a1379d66afbe95626e3c03a2456fea0e74692ccec3814c9724d5d222d35a99abbebf42bf539bc61ff8302c1c2f47fcc970450d487605222aeef2d17c9662dda4e978de34dbbf859a57e160d2e6545cfe38d8d70276553957800dd6e1e0c5430c938dae5c3c39b560f9377d6706df86e9ccf2b7895e3b8e5af4943c0ea337eb9558e5538278c1946daef7559a8fd37d87a4dd879ec1a76ab88c3955b3838413bb1b75b57b6680b39a30bf53c325fe61f2d94106c3c273e23b6dd1996a491c499d8144c18bbbb06b610468a4d041efb03804fe39c694f88c65592d607647f7c4ba8bc09127e4d9878e24accb00895d202c9cacb9cfb4a62e17a0f996edecff9dc49b56b327ca9883f1f36cff4fa97f4ee1c036a63e19cdf63ef3ef7855e9fb9557743ffe7a5d92d1f216112a2ae66f785352102f36068808837a653499645c0857c41cda3cc18da8ac800afa59efd14021a7153ce3c3c7ee8d9f0577e36dd7ebaa68531d5065a2738a6cc020ae63f2504203ec46fa14daa213b77212ca045706ed4fc1662c748aef6e2698de055cd096d5f20089167f9f6f413c20c9bb6876e6da56e1d88714d6609799ee81d2ba10e773bf244a11f0e7905ca26e240260ff73b27de21da074ac9dfc4adaf36270e87614b9a9a774bcdaea37a9a557a01eb4716cb7b948bf49be9ab9d384e308a45c829b8402538791a7d2772ed32f48bd90c19f2a05600fe1cd089165a4e8cd8c4e8d6313c44c1e52664c42da872320b1f062fffde9a0ff83dca1aea35221290a044b211ad61fd9ba4dfe5552d18c5e3ece28d292f3d811194b107fb8947421ba5ed27ad5fb74bdd715e55922d3c88969f5a3e258457ceca1582a5ccaa2a7bc5257e55f149422e1d1b239985f3fe2f308fd9e0f0245ac9996dbf99a44e38e4111002076325d0adc3296b5dd60f715746839747f4ed13565d50539c7239cf2af0fc5751fb32ee44fdc4e2ee1a56fd06198fd1d7b006d81864ba5478a9420d52be2e6e93fa4356c7cdb0306929087e897995c7ecff90c2b1f355147992fff3fe7739b3c164a3f580967b37627f22838678cb8179d113a7db90744420236829755471f839be130c82283c4087662fe0f31e9d6ec0ea7d54f07cebec850aa7e586410612867fe37b034f80f41fadb04c96921cfbed7e1abfe04b342db23021dd215bb5efac57e4bc38cb84863b0784e81602058236ed189233e565b07d9c522237209b8d66418fe8495ba98961d4c42f890b8e8af5a9e120e7f73a3a550a98a6ac9638051f01f327cb2219e5f7300797cf39e1a58e5930c99cb6ada4335e85b510446a95a1c958ab4f82cc492d9cc9a806086fa70de72d07e4af150d89ba1c51e3453e940206847689560edb9fefca6eada82e8d439000a61e007cb722d2b6f8c4467303170d08323abbea49384b9f8baa85e5a7693f823c66de0c74b101674fbf277742bd7c25b4c6ea198a1e5705a84f754bad1007efed13cce20c0535056617f1960eba5b74e490ce1b9f571f6021f761882cee02146f7f9f293c8147fbe0d6ec5a36a43d934328fac85b90af631668fa57dfe24cade5ba559c0d9c855601c0eaeadbb37331da776a5a29de161e843d4626cb7d44db8fe07715b463a6f6d6b02950309c931beecc9cc71f9f72135e9a8978b53e3e4f84495fe321e1707749a375270952de007ca71e150336509b0e5bafae98bb3621177565056205c7c7357d2b76c59847294b250fc2be838db84b92731f2f8436615e0fe705a87fee28be7fcdba35e06960be79377bca8d32540e4f47edcaf804205e8f9b1f86bb621aca8c96dd47a29c2dd73a3bc0fa9f07fe7d593f094f02b4443e29713e8233505468666de3ef97635ea7bac3fd5b350da38edfadb982fe4b2e36e7f5d2952257035ea93125599191f7a4f5eac69bbbb3db7259a26dd417b7e56ee3ad4ee87f08c8e86adae2918df559201de6962363bc7659106e59abc620c832576346df34760b94c53368bd4b50cfdecf716b356223f39d78cd153daeb752fc39f0ba894fb14f34ba5079251d22ea884fcdd61e2966589d5ba9075df66b6044620cce829f8882c22ef72d04ea3b1e7a631efe7746c9f74040fbb67c7f896811325f4a17b92c3464e1ca883e21876e2c8029dd0ce87775e7f85173388f21330d7516dbaf2912f76452b9dd9f9440af6fd15bd43d13751a10c2ec4ddb2ecfa412764f394ab4bb69d1b297c31b55973acd94384cde720dbf020084fb377fa8197ca8278b203dec0677d552b0d09ff67d58f2c23f1ad0b1d2ade48ee88e8913de6e83025f779d12f39aa9d0f51b503d7cac48fd375d3f84b1186db67802997dd26cfd0ff29b6879228e4ab66d04074b1558f072f29dee94a7f3065d6056bf6fb03f6de8bdfc7d6e04ca79d2f3c97b320a8bf6f24c5b38b2c7b82f02205b71bb1894edebdb62a38f6829884684bac12835e7aebc369ca8ae0cc01855b2aa59b5cb0ee188d3522e4da0a769913c431f8b7824ae097ee989cc7aceee6a8fb66c710ba78c634bbe7d6fc1196d2f6ac6169f9dea1b8a2a020fb4114313f15298c5b55824d4e6cdda04daba973c49b1d612581ac92238fdccd86d06fc54d1b75741b6e53ab4a9d0ccbc9acc2edfcabadba0d05682a423f2085281fa45cfc32da8d4b0450ce40258fa7ceb7c5f44b1d68b2ab6eb089a43fcfe8f9b805cc9a31ff7df947b961d878f7aad93fd178641961f65f8158d30ea5b27a90bf7f23c04396b5f35820d4ed30824f4f1f341242bb6f1e8a704b61a348469b058d06e7cd7b71b8150a0fe3935eabb54019b328311a3be40caeb268b741f4f2f19d87887e1f25aeb995a9d5ae58b6b12a442d20381030dfb19848a805cbe457621db29748ededb0a6277a2156892ce9ad901251f679face946f94b7552717514d60d1cc2647d512186d3ffe6da1cb99a9286404a41063cd3e42fcb33c36e04a3fc1afb82f2b6216f7a695d286c50b6e90cc1e8c6dd0fe8deafd3656481a6c9443282b48042f349fcd3ddcba98fd31b1b49f65d0f9d52b1f", 0x1000) r2 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x5411, 0x0) 23:47:48 executing program 0: clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) setitimer(0x2, &(0x7f0000000080)={{0x77359400}, {0x0, r0/1000+10000}}, 0x0) setitimer(0x2, &(0x7f00000001c0)={{}, {0x0, 0x7530}}, 0x0) 23:47:48 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1400000000000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:47:48 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x11, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x5411, 0x0) 23:47:48 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='coredump_filter\x00') r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) socket$packet(0x11, 0x2, 0x300) getsockopt$packet_buf(r0, 0x107, 0x16, &(0x7f0000000240)=""/8, &(0x7f0000000280)=0x3f) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x400800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x7e0, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x1000000000005, 0x300) r4 = socket$inet_tcp(0x2, 0x1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4}, 0x1c) setsockopt$sock_int(r4, 0x1, 0x2b, &(0x7f0000f59ffc)=0x80, 0x4) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f00000000c0)=0x6, 0x4) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev}}, 0x1c) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40042406, &(0x7f0000000200)='..cp^set\x00') ioctl$sock_inet_SIOCGIFPFLAGS(r4, 0x8935, &(0x7f0000000380)={'rose0\x00', 0x200040}) getpid() socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000300)={'ip6gretap0\x00', 0x80000008}) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"]) setrlimit(0xd, &(0x7f0000000140)={0xc9d9, 0x6}) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000003c0)) getsockopt$IP_VS_SO_GET_TIMEOUT(r4, 0x0, 0x486, &(0x7f00000001c0), &(0x7f0000000400)=0xc) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6001, 0x1) unlink(&(0x7f0000000440)='./file0\x00') ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) sendto$inet(r1, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='ip6tnl0\x00', 0x10) shutdown(r1, 0x1) 23:47:49 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0xfdfdffff) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x4080, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(r1, 0xc0106418, &(0x7f0000000080)={0x2, 0x3fd5, 0x8000, 0x4, 0x4, 0x7}) 23:47:49 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2284, &(0x7f00000000c0)) r1 = dup3(r0, r0, 0x80000) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000100)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@local}}, &(0x7f0000000000)=0xe8) ioctl$TUNSETOWNER(r1, 0x400454cc, r2) 23:47:49 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x5411, 0x0) fcntl$getown(r0, 0x9) 23:47:49 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0xfffffffffffff801, 0x101100) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2284, &(0x7f00000000c0)) [ 562.982301][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 562.988202][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 562.994249][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 563.000094][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 563.142372][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 563.148254][ C0] protocol 88fb is buggy, dev hsr_slave_1 23:47:49 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') exit(0x0) sendfile(r0, r1, 0x0, 0xfffff000) 23:47:49 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x8) 23:47:49 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1500000000000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:47:49 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x88001, 0x0, 0x1eca, 0x0, 0x0, 0x20}, 0x6}, 0xe) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x400, 0x0) ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f0000000140)={0xf, 0x40, 0x6, 0x4, 0x56b0000}) listen(r0, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000040), &(0x7f00000000c0)=0x68) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RATTACH(r3, &(0x7f0000000200)={0x14, 0x69, 0x2, {0xa8, 0x2, 0x3}}, 0x14) write$FUSE_INIT(r3, &(0x7f0000000140)={0x50}, 0x50) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f0000000180)=ANY=[], 0xffffff6b) splice(r2, 0x0, r5, 0x0, 0xbca1, 0x0) read$FUSE(r2, &(0x7f0000004440), 0x1000) read$FUSE(r4, &(0x7f0000000440), 0x44c4e9d8) write$selinux_attr(r3, &(0x7f0000000300)='system_u:object_r:system_map_t:s0\x00', 0x22) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x5411, 0x0) 23:47:49 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x2, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2284, &(0x7f00000000c0)) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x422200, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000100)={{0x1, 0x3, 0x0, 0x1, 0x4}, 0x6, 0x5, 'id0\x00', 'timer0\x00', 0x0, 0xfffffffffffffff9, 0x7, 0x5, 0x8}) 23:47:49 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="100000003e00010100000000113300117404fcf382fa1a902f832138f7b634f8e657328b0fba85287dc399253d451b0eeab808d52c1880ffbc6e59b5540d3ae5039b5fbe00000000000000003b24cf7f5a718a4f837944c4fe09000000f15cbc626ac679fd3ea176504ee86e3452cc9d745a0c7d3cb85014fd46a1bbb619a432726a6caf7b0686980a"], 0x1}}, 0x0) [ 563.382374][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 563.388211][ C0] protocol 88fb is buggy, dev hsr_slave_1 23:47:49 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000000)) ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000080)) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, &(0x7f0000000100)) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2284, &(0x7f00000000c0)) 23:47:49 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$VIDIOC_G_FREQUENCY(r1, 0xc02c5638, &(0x7f0000000080)={0x9, 0x7, 0x100000001}) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0xfdfdffff) 23:47:49 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000fb1000)=[{&(0x7f0000000180)="480000001400197f09004b0101048c590a88ffffff010001000000000028213ee20600d4ff5bffff00c7e5ed5e00000000000000000000eaf60d18125d4b18857a9eace3dbe8b12c", 0x48}], 0x1) 23:47:50 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x8001, 0x2) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000100)=""/90) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000080)=0x645d1845, 0x4) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2284, &(0x7f00000000c0)) 23:47:50 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0xc040, 0x0) ioctl$VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000080)=0x6) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0xfdfdffff) 23:47:50 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x150001c000000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") [ 563.862454][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 563.868345][ C1] protocol 88fb is buggy, dev hsr_slave_1 23:47:50 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') exit(0x0) sendfile(r0, r1, 0x0, 0xffffff1f) 23:47:50 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) fstat(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r1, r2) listen(r0, 0x0) r3 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x5411, 0x0) 23:47:50 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x2df, 0x40) accept$alg(r1, 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2284, &(0x7f00000000c0)) 23:47:50 executing program 4: r0 = getuid() syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0xffffffffffffffb4, 0x4, &(0x7f00000014c0)=[{&(0x7f0000000280)="803c612f52b3488948c3c9ffd7a9245f28d7cdaba067617b76c07248e3fbf8d863ca71323564367cb44eaa5140a6eb363e2bc5ed82014a54449d383c34b545618957cd2eaa96cb30ba7dbaac1284080863ad24", 0x53, 0x32e}, {&(0x7f0000000300)="a5d5e452cc03f3f29e772bec3c490f5ca6bf6bfb2476d840cc85c744458ba01f5d1f36516fcad007cbd7d3096a20f803f378bbf896937cc42961726d7ef6a02d8c3fdec85337274f4f10493c21ef5ce4aba8a8f60be0bcecf9134c5f4f939398d752ea73fb755242fe3ce4bae6420a36cef803110e35a9c99b7942220f353a1d620aac", 0x83, 0x1f}, {&(0x7f00000003c0)="ac4688831a357d04627dc55c3e1a3e50e1c796e03b646ea43ba4891c7b0f0ed0928702094ff528f63d7ae379379c5a0f47600c1a04df0f4b481308a3504ce0c6a8046b02b93f97ef54f63e966c30227ba566d6f174f180af67b0b2878a25fa67278751051b56eab16052d6517c1c5507ad5e4019d44f75dcada467643b7010b0e67b22616dfaa0918088e98569bc32cbecdd2d38b72c504cda74bbe71976fe244f95eadaf412e5ee6d5bcece5dfef11f4000aa5ca1a6c710cfce864c7184e846e27afcc60f9b89de03935d74e6cb54b521f2c1ebb214dbf952e458ae9f1b2e4345ee9d0907e992a8737e788d964829", 0xef, 0x4}, {&(0x7f00000004c0)="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", 0x1000, 0x11}], 0x800000, &(0x7f0000001680)=ANY=[@ANYBLOB="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", @ANYRESDEC=r0, @ANYBLOB=',\x00']) r1 = syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x2, 0xfffffefffffffffa) lsetxattr$trusted_overlay_opaque(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='trusted.overlay.opaque\x00', &(0x7f0000000180)='y\x00', 0x2, 0x1) r2 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000040)={'team_slave_1\x00', @remote}) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000240)=0xfdfdffff) 23:47:50 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1600000000000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:47:50 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x0, 0x202) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000080), 0x4) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) listen(0xffffffffffffffff, 0x0) getpeername$ax25(r0, &(0x7f00000000c0)={{}, [@null, @default, @remote, @netrom, @netrom, @default, @remote, @default]}, &(0x7f0000000140)=0x48) r1 = dup(0xffffffffffffffff) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x5411, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000180)={'batadv0\x00', {0x2, 0x4e23, @remote}}) 23:47:50 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2284, &(0x7f0000000000)) [ 564.385407][T24886] XFS (loop4): unknown mount option [grpi+]. 23:47:50 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) fstat(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r1, r2) listen(r0, 0x0) r3 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x5411, 0x0) 23:47:50 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vfio/vfio\x00', 0x0, 0x0) r2 = semget(0x0, 0x4, 0x400) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) semctl$SEM_STAT(r2, 0x4000000003, 0x12, &(0x7f00000000c0)=""/78) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0xc0305302, &(0x7f0000000080)={0x1f, 0x4, 0x10001, 0x4, 0xff, 0x4}) r3 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x5411, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="cb383c9aabdf327a47f1d17cd2c951431db0e03dc4318675b469fe43eccf5777755a20ad7d3f4c96837988969aa89562fa8faf6797729737e025c9bae2d7e18136b9a40382489b47fe965e0c37498eb27e2f37cb35325dcb24a25450a36221e54513c4a80ad8aa4c3628d2c75558cd75b549f0a0ca72cfcb87b3b46406225b12b3f3ec829b6b2b057fafc8973d099ac9f2484c", 0x93) ioctl$NBD_CLEAR_QUE(r3, 0xab05) ioctl$UI_SET_SWBIT(r3, 0x4004556d, 0x2) 23:47:50 executing program 4: r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x10) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_CROP(r1, 0xc038563c, &(0x7f0000000140)={0x1, 0x0, {0xa81, 0x5, 0x80, 0x6}}) setsockopt$X25_QBITINCL(r1, 0x106, 0x1, &(0x7f0000000080), 0x4) setsockopt$X25_QBITINCL(r1, 0x106, 0x1, &(0x7f0000000180), 0x4) write$P9_RSETATTR(r1, &(0x7f00000001c0)={0x7, 0x1b, 0x1}, 0x7) r2 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, &(0x7f0000000240)={{0x0, 0x0, 0x561b9b84, 0x1, 0xdd6}, 0x0, 0x10001, 'id1\x00', 'timer1\x00', 0x0, 0x47b, 0x1ff, 0x40, 0x81}) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f00000000c0)=0xfdfdfffc) 23:47:51 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2284, &(0x7f0000000000)) 23:47:51 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) fstat(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r1, r2) listen(r0, 0x0) r3 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x5411, 0x0) 23:47:51 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') exit(0x0) sendfile(r0, r1, 0x0, 0xffff8880a95e4001) 23:47:51 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xbcf, 0x10040) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000080), &(0x7f0000000100)=0x40) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0xfdfdffff) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000140)) 23:47:51 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x8800, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0x1, 0x2) splice(r0, &(0x7f0000000100), r1, &(0x7f0000000180), 0x7f, 0x6) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r2, &(0x7f0000000000), 0xe) listen(r2, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x400480, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(r3, 0x5380) r4 = dup(r2) syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) remap_file_pages(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x1, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x5411, 0x0) 23:47:51 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1700000000000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:47:51 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) fstat(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r1, r2) listen(r0, 0x0) dup(r0) 23:47:51 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0xfffffffffffffffd, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x2, 0x40000) connect$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x3, {{0x42, 0x2}, 0x1}}, 0x10) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2284, &(0x7f00000000c0)) ioctl(r1, 0x9bec, &(0x7f0000000180)="550e45efd1cdf9930d8ba166b8065bde45f0e5c62c58addc01f98cd7610675afc4cb775aaca1e63e068cfa6912e48d2f223527d2e668a21281f958ee3ebde924a0ae518955c300c2ec39a5cb30aa787d3613df11741a77aff38b442ebae42a86103d5fdeead00461c5e5ae94d014867a57911176a155c19c46f206bb641c4964a25cdf35a210136b593bd43d7eb3079c4ee3e57820fbf72337f2cd5594dd47c202765653e1e8f6ed1d4c51bab2a267c848408d18b6760f267517d7451434a63bf4a5d675daeaea3cf326bdd831cffea9615e23600e19fb18") r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x10000, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) 23:47:51 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) fstat(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r1, r2) listen(r0, 0x0) [ 565.323546][T24938] mmap: syz-executor.3 (24938) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. 23:47:51 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x101080, 0x0) sendmmsg$nfc_llcp(r1, &(0x7f0000002e00)=[{&(0x7f0000000100)={0x27, 0x0, 0x0, 0x4, 0x8, 0x2, "d61015d33895c6229336aba9252bdc6d8bf4734d983ba7e7b26700616b625ab9a85136c93e440f7c443d1459a3ad4999585c51388ebd97dc242aa00f606ed1", 0x27}, 0x60, &(0x7f0000000080)=[{&(0x7f0000000180)="2469ec0d9aeebf8a725f6590689add690fd8b1306eb2e2559627abfe01690ed57522f993205f50783380bf15f04eac70167d34be00b50cd8445c64a131d158c79f63c3aff14f46617797893f3b611c00ca02b731ceec4bcc1671a76173b0f918426a5ab75871a5981ee6c710555be372a2a208724d8a0d5741925c3da0a43a9c73d2c5cdd380269fb1e22d5cca3e1f1c06c448a142705bea2ba7c609abb57ee5bbe7175450979ae9321a29f53f70a03996574fe7bb5e3794c27813d9eee029712570e511febbb4178eadc7d055f386bc6c444973ca65fa5fa882ec15064547827be8048340dfe4b3f131", 0xea}], 0x1, &(0x7f0000000280)={0xe8, 0x117, 0x9, "50d6cf27c1f6f99f407303c863339aa72c501c991a3fc150377e32f48d7452f41b68b74f4b5795f28b4510d23d08d0b957055bf22359ad0af5147baef3fc3243dda856b5e7e8d7b74f8298778cad3e73f6fce50ab52b879459898b9c697b21f9bedeaeaa6850b07b94b0bd8dfc5f88d1755227ae06405d80fe790750084c28862b137577d986f7b1a50ee8950e2db2a756bbe4ef3c7342b44e08cd0e9a0a51332d3bffc613d5ea39173f3db615f6d64ea3ac2d1d1d5d8d9d75d3d933690f033902b27b5bb70df6e7af5f0b6f262cd092de"}, 0xe8, 0x4880}, {&(0x7f0000000380)={0x27, 0x1, 0x2, 0x6, 0xffffffffffff5dea, 0x7b1b, "91c96de60866869884d6ad67d455c574d13f002960543f6fccf6ad25655a979709abbcff88b25f3cd3f7fbe1a35dd1fa0046686901f2f63209fdf2ecb0722c", 0x2}, 0x60, &(0x7f0000001880)=[{&(0x7f0000000400)="29f78d548f941636134cc30d02585fe3064843b7b63a80d135fa386a72b9c3769937573bac6b1d443e13032d198a6c61eefcae42de689dfe26af6f4e33f620739b70679ca1baabd28b68283367c82343a795c33a8aebb22086210ecb0954b1cc7dffe951b3aac5c53f0274f2ea041af76e850242a36514538f91cd56a5e0e02d918cdab49c57e97a8cb012f1688952687ebcb13927d4702cf3bd8e89653ee673e66a2310cf3c96ef4cd629508012461df5d3973177d1f10b", 0xb8}, {&(0x7f00000004c0)="62befb523d7e17e6197bfc8810fea5f739bd6d05b6bc1124ac6501783c3a421f983d1c1d0a7758534c21396ac7590752c38f643f2b172736f45fefea5516f93c7a8c79dbf134b30cdb63132168419c34353dc441d8feff8a5fa566633df80a46634d755b284739e3ebe406571aec75bb88a2f0ebb8030d8a4c5615226d8f96a9f5b95f9b3e9ff6cd689ae3c38f217f5d7a434872ce6797a3aa", 0x99}, {&(0x7f0000000580)="61ba743fdf82ea609acf54d4363186d1", 0x10}, {&(0x7f00000005c0)="a8a22493e04e35f821e30f91586f2e8fb2f0869ac2a7f3ce0dd3b8f58cc35acfee4e551fe83036ddb560e0afcd615312a8c3977772e777ac6f5890e3b8606966ff43d76e0bf40df0bc563e0a3c5d0222c06367c04ffd32ecaae5d424fe0f28629637d791d486a68d1a201c2e77e3c70c9cdee91d7874dde9e1b68b35b89626890ce9acea34b4ad6188de00e32876b2896b5f4564b9d051edb4dc3fa4ea4839fad17ce5b2a2a140b344d5494a1b87efda20", 0xb1}, {&(0x7f0000000680)="99979d72d1ca5fcec7b87c67d63d1072dab6c0de438ea7e38f09792949b38383944989fe0dd1b4c0171564c2a0a7e8a50f0d6b96a6ef58bb286291c11c479992009bc6f4ec333f8f7f23ae7d814137e2cd67e2130b8a71b25807b70e1c1a5ce80979858d33ce4e2cd6978331bdcc7bf3fcb0a4a211eb3b55f3b273c91d2244759283a19d79561a8b8258c97b460f8cbbbb197c3be6f94442033e8177320997893a88f4f7", 0xa4}, {&(0x7f0000000740)="04", 0x1}, {&(0x7f0000000780)="7714ab6781b7be82352e4d4be9788da1f6b83b17b7bf66128041b67805a80394dafe05683b85f7318f23098bfc62ab53b4137127935d1a1fd172571b96d2744ddcd9ec718b81aea3e81e2bad31afee51d35c8f7737ef20b927ccc0d1d15b192de613de78e85b55a8c11f36cbd80a01fa9bff13592e7d510f132b65c712abe810ccecd817c3aeab71c0f36dc09e152e0fa03c2c20c39644c077720a027a2369fec6f6590cdb6afe9b51539199a3cd772ef4e1cfb6930a14a1c6fef091c8cc457c7396be0a48a00c860fd98ae4719a652e2c26762b16319ba7720aabcffee41531d043616ab644f91b4548f3a02aed3ccd085bc9f9ec558a6e507218801500d9f0291a579c77d76f8116da51015a73fe0b12689a452929aa8d8f08e642d7add25d8f440e5bffe8f543c8e122664567fb163c9e957dda22fca3a0e7b3ec445ccb1253f7ebe033886b0bdc27b06257f3d5970d3f41acc188b49a4ecef34fac41d851e70a34214cbd96aed347e8ee49b52226cac5fcfbf15c393e8978aa6c836e318a0785acfd8de32bb297f22b48f0895e727c2c323dd0930099259c3211aae74f28e01d21dfc265d7f7054cbb551d0212441fd1d9fea57208716c1bb35f605b49df0431f1419049caf3e554a6d321d1466ec5261a429f91290b94e08d4afb87fe27ced30f1c3b239d314d616366f76176d64e18ddf46a520bee07798883204e9bb94e4a93abc654389d7adbe3cad91cb8e80c43763fa5f05dfcb4e5297ed7f2f72fc8dfe38d41dace4c9e7b443b368a209b7bb28984ed838992bd1ffbade89e30775d4b2a5138f49e378a9a2cf5f082dd43445c8f741abc7d624d4b29b532d3534dabb8a6c3637f0be9c99b19ddc73ae2ce092321ebe0b2d017f08abfee964c49fd24cf2e3880e88dc8619204a6cf2fc2e59e78ad3f5ba802fc24ef0dc11b65d63a4c689ebdbf7f37e8b7514a63c199382385709459cfe31effc4c61e8db0372ff957fd49c25afb1bca91a3e68b6a6256e5de178a20bfe258de1e4a1cb87f09e2125b9e3eddf14a03eafe01a02c602a969e64faf3d2b380e414a45863dd8a61603ccda824b95f69ed5c4299122b50987c909b1d0026b5dbf5fe9c6a6cab961e992b7fcb4ebedfb2776dd63eca9b183d2023563f0af9bfdd8140564a4b42204cbcf1dfdd1c40c8e79ecedbb0bf269b246b39d2264517a6c362efa9a21a42f6ca73065d9bf9064c8a3d933c9f4d832830de65b546fed0ed0d0d9af2afdef18a9a977213187e21d3d5f598f812f105559263869bba4c095a7d8b2eb0157f48039a4216dd8959e0c8c6b3df24d55265b5f0fce4798d145f46741985b7aba1f6a599ea202db991e0166591f246acb46742d25dfabf54f83b1e933aa5433c106af99ced5d6b8b151803ea94f0d049930c41dd7c5e3e8ddc0f71f1e3298630134a13b05277bb86d9b6388a77ea6160ad81df9da57f0ea7a7c92c67db5a77f5f973879a7780c18d5f917080cedb53423e8d7ddc8d5f52990ded5009bd0b4d6389c5231665eef7655b461d5d0fcfa2b9b142a497220a09bdd18692d3d5a6476333df7436deb98366d20c6bdf61dcca8d6cf35faeb3804ad3db9ef7aa87f279661e2475205fa74598d340abbb59ac1636eb147bab3512249d9c6ca45d68b3b7f4c0d9a3860ac0d1c50b84fdf9b515c8dc0b70cbe0de87726cfe739c4528012a4d8a8539093da79d205178df515ee320d08869308768f4444fa47292e77c817d069b4bb48cd082c9ee8c7923ac5b9c3847e3df9abb818bd618cb70c006e6b9e0dd0bae711818c8c7dd4b9c8ea8da9b7ad194d4e34bd3d7e850dfa99a568a3bb080ed5db80f97fd7d586901c547326cfe5e8064d6de7f56984cad1e73c95eec256ffbbd975fefe8fe9077fe3853f3bb0dee8fe9f0b9b5c9e9eb370ec60172b32705973ba404d3efb32d7630f0802f183f5a8f8477f1c679d7848d88e761defd4637380312f9d9324b9991ba516f175d30430136629544b6e64f92931d2cfcb0f661790c61379c15ef40dd6453432c4363761a5bfd0ebfdce717ddb2475fe85fb8e31f013b3ee73b226c734bfdd9d965a178d1b3b5186ff2ed9cf13e85ecec5093fec21203c8fa7b0cc3707847887f75936e0bf0de17126b3c16f7e7f7aeda0bb1b88fe67adcd15f152ff8933774e50a8e3243c19e6efd9255dc3c9110a82e91471cc7396dce6c00917930f60e2c49d1e865e730301609575275938795ffed75a80ec97a00c33beae1ad64b10808b92e36b97c3d9b13be2e76db9fe8ef1c7c7aec2039a3994231714fc3a270993eecd313d58676d94984e2975af7a398cbdba70d38ce161eef7288063616fd08b63c313f84c5b5e09f582ccb5987e1c40f7b65c0b909244dc7843b1b4296aff02dfc9e6aa7a41ea38342a6d2c1c7703829e974a797568f92dcc84343b9234991a83bb3ec24d77eafeebe320ffe0b6bf584cb53ccbf9c47d315bfb48bc1dc9dfadf9803877f133dbe38db1e18a82f15d6b03b36695347af77e8d7e431479bf4e0acc4a3e8bc285bc7586344cc14a395d96076105819b77ccadc159ab3a6541ce36e8b4e62cf85f8c1d5c2b04f36ecc3dd8badc6d783b19bbd0199d345deefb633f09b25bd8bed6336814e1203ac1e25b7efc29a0c4167ed55b4db850bc1772d91cab8f74b81f51def6c1a19c22f6c3cc6237a9d5301333f867047013a005cbceacb37d9058e9ca5f49d450ad5b3558ac766a362a13a415d15d08857bc4357c035b8cb885350a3f9de03906d2753505cb162e024a401e348227773f5d349f2b7f0684129cf371bce8059559fc8d0410baa70a681eb2527e97889200acca1b85cda0ce2fc96cdf5ffdd18cba6041d55facaf6908f65018b74755a4ecb5ff50d835902f49fad84af45be37c5befb0efae253c80c7c8607bd6399ae9486b1405fa06fb2c6178829cd6d9439ce0336a5e5da08d0be1e4d24e288c1bb51ce73c0ae344c5c014135e3748fb2cf6cd5e93dc6e6650efc4ddd4d72684008e16442fb4055999dfa51cc4f03065b52463161485387d5bf5bff1313bb62eb5b6cac93f3257a6810f462023b3264568fc79977ce87f1bbd840e0e7cf089c68308826b739655e938195d91c1d77dd71d3fefe325c2c47ddb132b7a98df33c3c0f75e030c9c3ea9b9d36f4f92b78bd92a7590a4fcaec8b83cc0f4f619e4e39bdf2e15cd6decd4ac1e7a2e506b0db0788d1b5ec6353827d6b5671a2b6a0f243c66153e7e89acc4627c695fb37091f2ff8b700218c276645ac42769c3604134121867a08781f578c8b8f7cf8a05d866d5258e1a384bcab54253b0592d62571a08354ed59c51342dfb9a1d3469d6062a0c19cda6976a3d585e488936a957d93eb778ab49e1d8431a69329b1e50906a839c0a44cae78e59119b610ad526a84cccde271edfad8b66437f5610ebecf980c7c38ad0cbbe27fb6030616d7cce6b4d7ef65ef620d786784bbe257fdfe6bd5323e1eb7438bd3d65f1c4d551ba11b840bcd914c580abfaa89bd1195a97e399eaae3a8572937109c068a0e153a8af52d6aff2dd9a9940aac87d756baa515ddfe4343d702fcb7102b6995b0644a4320480ef0d71028722fbb13b83537dec5f35999d14657ce7b3a39f77da908ea3afd1b5242a66cadd46a7fdf56adee6b46d351d2939a772642d8b92a02fc3211671ec846fff77262ad443d18866107379c60cc244eb84ffbf2761a0e0cd64a31384729d5d7fb0f673a5f84262e87d92741ee45c251223d49afac1767856f9fa637edc76941e8542bfeeed78600cc7c27367c37f16107b175239fbd906d07b4805be2b220cd38897c807b91b3036007580cb05a4389bed2c44c4a3e4eeac9dea5db4bdd3d7346001b8587132cf9ba48a6e7f11e8a671fd87eba5313315f7d6d95bc91f401963e1503bc2a36176e9a03773dc62792c18ff5722062929d43af979a8de4e59bab736029b4f07589fc16463e666198257fc3d60e5bce5c02f06968ee8852e796d6e0bb38ff44fd24921bdffce46575d8e5e90076fd9f570a6223bd3dcde4218b90857cd3fc21a603ebea9e181718fad0cfd0ad5fc501c7bb84dcd3aaee3c520febaf0c36e48c436035d36b4568426658ce8ffc30f461c5c9d371fe755d450186e4d79d45c1cf04a4f315eb9847947335bc99c9f8b0ba9a2cab3bd10ffd5bedd874b5f50a3a37e29c4a0edbfb1dbc4453e16913f3f3235116988bf372ed894346bb147270e2d07ce4e2147bc3aee1f317fe1793ae936a182de209689b116cbdec6dd80dd25771b74a27c18b2b65549e7039444ad1e53be0391d8571d05df19d17f7b0f203eb87e74e7f9aad9506621723b962b6ebfc8a5092d75131e75aeb6c65b7cc1ce1ce055819148612e72726fdca3e2d09f2489b4a8832a8566af212d07405be929581a9262f601dc8d21acb276463938233e4288a3bb45034e2386026eaa8dff91f8f80157ff1bbbb989e48d52355427e88701d84c1093ebda5428395a8ff3a3cd09b73401c77c2dd4448af1895215cfee01d7bf907a0252653b710db732c2ffc773ceed3218eb3736d6fc9803c91c3b1e7815445ee729440144247921c4ef1d14d53774a809d71b23461324b9569f85d221cfa37025481bab2b0764b35ff5243919c6bf019f95f309e18485d1ef31e4d307214012452dc41e60e17756ba9c3c0cb4d77efe49a24dd7d80b83527d6c9753e4d29d6d1185e4088e0e4a08a69ba7e3b7310b6494c20f719d87976d3858f4ad734e137b896811ccf791b2893095330c61d7fb2b922361f94301aa49104fb31b3f7144669def7b855b60067d3d7c3bc362459b28652fa8f9b43d185a5ae7fee54eeeb8306e959aa44eb85deab04117b7dcc6e4217dce93aa20bb85b7a92ffb1396ff37da33f3400ab28693ba81a9e30fa01c47fe5f13f3d3e6bb1e0aa43d98ec27804a957fe615e61aac2d86beb9ef99574c5b57bc1dedaa857a99f60ab4a22c6af19411ef29ce6107a62b9306c073d1ff1219e2a17401a014724ac07cfc84bf34b37989c54ca6e2efa0521d2d4e929886854b14c332dd75fa2536a57d5bcb7b3ee9e8d876f8d97cb07c4fff03b483a580eca0eb8e59322ee69d4fb9ea2fd6812a58c3d9953b4bb08859665e3ac9262a148ec2b5f7921ad8124178c61d853241602feb8d03f94067d85cd319c41f6fe1c3bdf63c6048c8dbeb8ce2321358eafb9c075eb8ad784e2e986b0373d71cb60bd5a4605988cfc41d26be8501dd90e04c41917f675bf33532cb5db2d6138259432e39622dec008071b774fcd9e3c9dd114238cff33362621769e929c898a3cf91d438d849a13bafafca97fe62eae6a266ab3f886beb97f841d2cec529e9ae81bbe39ef36b8e0cfe02ebf92f8db8d6be75b9aeb283f4f3e93d2112397d836cb4088e11e58264fc738def87a42b29685d0abdcae4324e173421aa6356fb949a6090a2b391f2bf821c2f8fe525968e9996b575245cd623aa046d365b409faf0e58e057d96a536f88353d351e3b45902fac3d4b64a107d3bbb08bb9999823525981f718df1e252f51c128736baf40766b6344c4611b17b2444146ea358588ddbb4ca22ca77be38aacf9dbb62fc83bcccbca3959e92ff9b19a8cbbaee937c59700ad52143cbd119abdec78346596c315d6ad88c47290001d6785ebd1bde22a561f8d3f66dd512522ec5c2654724374a087991e708c6936df4befee582882beb4029e7f3d8f50f63a7f4228fd58866e59e4c228bb2b79375ede07a0897fa3b1379bd65e920", 0x1000}, {&(0x7f0000001780)="7e8c7dff83f2cedbb2c48db88c8a765688ae29e2a1d1e52e518f", 0x1a}, {&(0x7f00000017c0)="91290403bb1c99c346951b036b6cb9246c5711c7de313d5ab783c67027b85d78f16fe4a354a18ef711bbd8c33cd8da3c1632f90167b24dd972b589422c822c28689744ab131aab0e04f157f2dc4c0d101b7851e08ce7194b35ab2f50a00e421754c9960f46337d429ff6fb8a43c670ae", 0x70}, {&(0x7f0000001840)="ec65d82351c8e0304f2e5eec81caf178bd", 0x11}], 0xa, &(0x7f0000001940)={0xe8, 0x10d, 0x1, "1ffc9b10adb25c4d5178f5ad275c87136baaf0058d6337168c3fff583310b2946b595fead610ae49157e61a9166936ec2d0d5e2069359069ced3a505fa44ed000acf6ace96fb20d76a02ea9f0a327e0521d495537ef4fbf158649977b04bd188751f4d0741a0021c911f7b5817abe2d14610258a1183abd36287ff949877facd3df650e38487d9488616e530031e2aa6a85a2437e0a80df1cf5392103157835349a130bf233627b3b18feaf2a403c4baf8953d82c13a46aac71b254b0e13d75fda6b8c78b8ee2dc1e07dbd3afefbe777462f477172a384"}, 0xe8, 0x20000010}, {&(0x7f0000001a40)={0x27, 0x1, 0x0, 0x1, 0x1, 0xffffffff, "1303143692482d34c682c48954b01aedcc07aec8024e902dc0399208457f5b645ba8cd251d26154aa1d2da6fe4ccda0cfe337c0b2a9109ba73cb1146993b2e", 0x35}, 0x60, &(0x7f0000001d40)=[{&(0x7f0000001ac0)}, {&(0x7f0000001b00)}, {&(0x7f0000001b40)="ccdce816ad5e7f6730d6344709e2bfc62f22d66bcbdcb217d07b0afa7083413f5e88727ccc03064a41c96a84d2a992eb", 0x30}, {&(0x7f0000001b80)="19480f682e5b8e7340bd7f6ad3c34d5af8d7a617aed0ecfb837c25a9dc5d3bd012185bb1a4ec0b660cce9740a36d1abbae4ca136aaa57f6a9db631bc51446fecc531ea1de77bac4976db285748f104708f34d487f1087699c0a66bb40be49e400e50a4e1df9ef06c0ebc81196f52f7c95a58d8e412abed255d23b9f3855a", 0x7e}, {&(0x7f0000001c00)="70488c129cbc8f640fad3f2b7dcdd7f4404e7191c87aaca2f73ada17ca41532f1c15d985c8b375cffc739dc021eeb3355c7e1f157966df571ed36ee1841b3c7e", 0x40}, {&(0x7f0000001c40)="1dd926ca8a5dc3a581a06fa56740f324c1f9f2a0daab30a6862d68ed96c80aabd0df26845ba390f62b711f2763cf02f33e56cfd43e0b2318ad98bd73488c7a4d1bc8a37280ee0995c0f8f6fae74fd879370101936d85ab8075a22e1cf0f3f87e81b1ba8c05b6fb2bcbb0f38f4e06144d0909858216579f20b6c2ba21fd4f4fbdc7ca21d88248980302616af9fd48dcbd806f7b41e1eed6", 0x97}, {&(0x7f0000001d00)="41e7f5170d1c0d08eda69cdfd0125d6609d621b75d95b13230009e663fd4631183b7ed917f8c96a196dfc961e873eb1b97bb0e7ab6f2542ec2089e77e70d19", 0x3f}], 0x7, &(0x7f0000001dc0)={0x1010, 0x101, 0x5, "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"}, 0x1010, 0x40}], 0x3, 0x10) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0xc0305302, &(0x7f0000001ac0)={0x9, 0x8, 0x0, 0x100000001, 0x3e, 0x61}) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2284, &(0x7f00000000c0)) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x6) 23:47:51 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x3846cc43, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0xfdfdffff) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x60000, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r1, 0xc040563e, &(0x7f0000000040)={0x1, 0x0, 0x2, 0x4, {0x1, 0x100, 0x6, 0x4}}) 23:47:51 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x5411, 0x0) 23:47:51 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x170101c000000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:47:51 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0xfffffffffffffffc, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2284, &(0x7f0000000040)) 23:47:52 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') exit(0x0) sendfile(r0, r1, 0x0, 0xfffffffffffff000) 23:47:52 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) fstat(r0, &(0x7f0000000140)) fstat(r0, &(0x7f00000000c0)) listen(r0, 0x0) 23:47:52 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x27c0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000140)={0x3, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000180)={0x1000, r2, 0x0, 0x2}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r3, 0xc0045520, &(0x7f0000000080)=0x6) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0xfdfdffff) socket$can_bcm(0x1d, 0x2, 0x2) 23:47:52 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x5411, 0x0) socket$inet(0x2, 0x7, 0x1) 23:47:52 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x8) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') r2 = msgget$private(0x0, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mixer\x00', 0x10000, 0x0) msgctl$IPC_INFO(r2, 0x3, &(0x7f0000000300)=""/127) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x42}, 0xc, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="77010401", @ANYRES16=r1, @ANYBLOB="000025bd7000ffdbdf25130000000c693ea23e000400200001002a004e2000000007ff02000000200002000a004e207ffffffffe8000000000000001000000000000bbdc02000438000400200001000a004e22000001ff583a9ec2d16a7c96086bb721751f0f2f020007001400020002004e207f00000100000000000000001400020008000300040000fd070002000800007a32000000000800030000000000000800030000a5f226232007c2bdc1067e00000008000300020000000000000014000100199f391d004e22e0000002000000000000090020000211b6366c000a004e22000007fffe800000000000000000000000000020010000001000010069623a626373453000000000b50c8ca0db303db8919eed06ae703d4f72a1db22eb97418a2d1c7a82c06e9cd66ef9f9b01a8894af0abcea5fc8266d760451f07778d1b08b33b441fcc801e014cb43bb7778abc217446409c7b509b8dc92f444bbbd0a73e35010e2f4200e9bdca2c42d239e5f256b2297f82a841dd14d00000000000000000000002cf9ff7ae159e5d36ec9c98a8a3b489b2e171e23103f5c185a08fc7b327929b9938b9c97719d11f690d5e67410369c7c65864bc323a47f00be5567b794a7f0bace3926c42454c8de5ec4e649b8a39f9789"], 0x120}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) ioctl$SIOCGIFMTU(r3, 0x8921, &(0x7f0000000140)) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video1\x00', 0x2, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r4, 0x2284, &(0x7f00000000c0)) 23:47:52 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1800000000000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:47:52 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) fstat(r0, &(0x7f0000000140)) listen(r0, 0x0) 23:47:52 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0xfdfdffff) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x222800, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000080)) 23:47:52 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000040), 0x2) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x5411, 0x0) 23:47:52 executing program 1: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) ioctl$VHOST_GET_FEATURES(r0, 0x8008af00, &(0x7f0000000000)) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x4) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2284, &(0x7f0000000100)=0x5) 23:47:52 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000200)={0x0, 0x0, 0x1, [0x101]}, &(0x7f0000000240)=0xa) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) close(r1) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2284, &(0x7f00000000c0)) 23:47:52 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x18e5cd10057f0000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:47:53 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000240)='attr/prev\x00') exit(0x0) sendfile(r0, r2, 0x0, 0x1) 23:47:53 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) 23:47:53 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000180)={@rc={0x1f, {0x5, 0x81, 0x100000001, 0x9, 0x3a3f, 0xfffffffffffffff9}, 0x7cee}, {&(0x7f0000000040)=""/248, 0xf8}, &(0x7f0000000140), 0x2b}, 0xa0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x5411, 0x0) 23:47:53 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2284, &(0x7f00000000c0)) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x2, 0xffff}) write$cgroup_int(r1, &(0x7f0000000100)=0x6, 0x12) ioctl$SIOCX25GCAUSEDIAG(r1, 0x89e6, &(0x7f0000000140)={0x7ff, 0x80}) 23:47:53 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000200)={0x0, 0x0, 0x1, [0x101]}, &(0x7f0000000240)=0xa) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) close(r1) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2284, &(0x7f00000000c0)) 23:47:53 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1900000000000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:47:53 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000200)={0x0, 0x0, 0x1, [0x101]}, &(0x7f0000000240)=0xa) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) close(r1) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2284, &(0x7f00000000c0)) 23:47:53 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x43) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x8001, 0x4000) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000080)={0x9, 0xffffffff}) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2284, &(0x7f00000000c0)) sendto$x25(r1, &(0x7f0000000140)="657bb1f240cf4b9ecc61bdb7b19c50b212bf5214a5cf3233682c489e0a1e289945747a539a89cddcddcd1a7ab4f8637e2dd72db8ac22be44ad5f425522a57cc94c98eee9599f73a350bea9725e8627e7e3b22b8addb678ce35d99c3bf5a7326f924f2bd7b80e6e6f45a1d300c46b2d1b54a573d18e50956bdc7401aef7fc203f380b91ef8f9e23db41098ff96901d046fd5c646515c7ebb39e78304dd8fd2d5b290cc74968", 0xa5, 0x40000, &(0x7f0000000200)={0x9, @remote={[], 0x3}}, 0x12) 23:47:53 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) r1 = dup2(r0, r0) ioctl$sock_netrom_SIOCDELRT(r1, 0x890c, &(0x7f0000000040)={0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0='bpq0\x00', 0x5, 'syz1\x00', @bcast, 0xfff, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast]}) listen(r0, 0x0) r2 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x5411, 0x0) 23:47:53 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) listen(r0, 0x0) 23:47:53 executing program 1: syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f00000003c0)='/dev/dmmidi#\x00', 0x6c2c, 0x80000) ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f0000000400)={0x0, 0x1e, 0x2, 0x0, 0x9, 0x2, 0x4, 0x88, 0x1}) r2 = socket$inet6(0xa, 0x2, 0x0) setitimer(0x1, &(0x7f0000000180)={{}, {0x0, 0x2710}}, 0x0) timer_create(0x0, 0x0, &(0x7f00000047c0)) r3 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/attr/current\x00', 0x2, 0x0) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getegid() fchown(r3, r4, r5) r6 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x3f, 0x800000000101) fcntl$getown(r0, 0x9) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000440)={[], 0x0, 0x1, 0x0, 0x7fff, 0x81}) r7 = openat$cgroup_ro(r6, &(0x7f0000000b00)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002740)}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x7dc, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x4000)=nil, 0x2000) shmdt(r8) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x4030582a, &(0x7f0000000000)) ioctl$sock_FIOGETOWN(r2, 0x8903, 0x0) fstat(0xffffffffffffffff, 0x0) syz_open_dev$mouse(0x0, 0xff2f, 0x38) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000007c0)) ioctl$sock_SIOCGSKNS(r2, 0x894c, 0x0) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, 0x0) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0}, 0x4800) fchmodat(r1, &(0x7f00000004c0)='./file0\x00', 0x110) 23:47:53 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000200)={0x0, 0x0, 0x1, [0x101]}, &(0x7f0000000240)=0xa) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) close(r1) 23:47:54 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') exit(0xfffffffffffffffc) init_module(&(0x7f0000000080)='$bdevmnodevsecurityposix_acl_accessmime_type+*\\vboxnet0)\'securityproc`\x89\x00', 0x48, &(0x7f0000000000)='vboxnet0{}-GPL\x00') sendfile(r0, r1, 0x0, 0x1) sendmsg(r0, &(0x7f0000001700)={&(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @random="46c5e2c763c2", 'ip6erspan0\x00'}}, 0x80, &(0x7f0000001600)=[{&(0x7f00000001c0)="a58a5a75d180ecdfbb72ea67873f9b63f82f3e6cee8a12ffd6d768430ea682ecbc548d39b98028428d7669c5e4dd3bfd44af4dcc42e32edfaac9840b95556c1ae13217513e4dddb28ab3e476fe4205bfcd5aabe4d19b74cd963e2b7c64d1e597e451389a983b9f4670540a4a5ac5c629607faf0bb168691dcbb87c82760ff978313c8ac919d969537ff7e54e2c37a5310a0725a9", 0x94}, {&(0x7f0000000280)="d0d116c1353a74e96125fb89650ce661c4cc39f7df49f16fa000fd96874456762ee189c88d48df67c2d7846ea3ee", 0x2e}, {&(0x7f00000002c0)="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", 0x1000}, {&(0x7f00000012c0)="f4365db31ca98cf2839bd0c914b960080696e5bc13d3600a07a90092f7f87c52e4a888df1216bcb76f1c727a067bf63830ce6f6641243780fdbcd6a2d7584c", 0x3f}, {&(0x7f0000001300)="a51322c9f76f5a81d968be2e365e947e67b5b5d5501494ea09646d2c1e6865ccc9903a4ad4c96e49cbf11a396b6f631b5d3f19d4d9ae887cebd247edda463ce12f49cf39e1cdb93b4768877a21b859c7fe79e4e513255441f6e7c104cb08dbbda60e1595d1e0d850d828325a7e969b78b1714759899957602fc6f79a3369c9c3cf6703415aed751a00545c6c0689793a470e95388fcb64a6a40d4508f7c8668cbe52289d34ac110cd12e60b786fe3e086e4ecfff787a2449abf3242794474c67e219a2d69e39dba71019404d3722e32dcd1aeff1bb259070c831efa5c7a2b9fba8e0519b214dff41b6715c83fd1dceabdf", 0xf1}, {&(0x7f0000001400)="13aecde5a8f8394071e5fbdc680959ef026164d9da58cf3a0050403ff3e7e705dceabefaf19c889def61b71271b23e69e25f973652f394c16953591c08a150da07061b4faab930b4cdec159548c10d0af9a147dd0c6edf3d1c6966843449e064326bb3d592c6f9709c84c72841314ddaaafb2517c91e7616218be603001bd4e24c9d2a5ca94629e695070ae439a65f8163648042587a90a4ab40a6f5d472c81ddeb64608961b469bafec2bc21fad7be388d1593e82af5a0fe2f3b7534c6885db0076e81e737113ae641dc17615c298b69bf364d6be987bfa14701078f7970bb76eb10647483891e36e6ae75d976cc67781efe720c41838c5c8818781d4b66e", 0xff}, {&(0x7f0000001500)="dbcd02ee864f8298bc9b36fc1363becfd0171596eab5b3a5bbf2362221ce38ddb3f51cba4f907af5879ef3109073f75f868ec30555e8a5f5f79dcf84869f74e90997c84aeb10134dfce1fb1bb70d9277228dcab13427edfeba85fc89e5458af75e1d80e4c72b72835b0c975613d8d48c", 0x70}, {&(0x7f0000001580)="50f430cf31032fdef6079dee3ee62f7c374b957e8657af943a65a9acbae7f64dc3809455f8236723527b382febe06c159f676bebe822d63ea3acaaeb97f1", 0x3e}, {&(0x7f00000015c0)="96675408b4293b04928e09dd124f2543b32617beb05e6261fd57bbd8c7c0", 0x1e}], 0x9, &(0x7f00000016c0)=[{0x38, 0x1, 0x9, "50f253939db632af63de33dfdffad966a5e3cc069ba4a5986ce8a42e6c2ca55642e5"}], 0x38}, 0x40000) 23:47:54 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x20802, 0x0) ioctl$PPPIOCATTACH(r1, 0x4004743d, &(0x7f0000000080)=0x3) listen(r0, 0x0) r2 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x5411, 0x0) 23:47:54 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) listen(r0, 0x0) 23:47:54 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1a00000000000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:47:54 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000200)={0x0, 0x0, 0x1, [0x101]}, &(0x7f0000000240)=0xa) close(0xffffffffffffffff) 23:47:54 executing program 1: r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x6, 0x10002) r1 = memfd_create(&(0x7f0000000080)='{\x10', 0x3) fcntl$addseals(r1, 0x409, 0x9) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0x0) ioctl$VIDIOC_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000100)={0x0, 0x0, [], {0x0, @bt={0x8, 0x1000, 0x1, 0x3, 0x5922a3f2, 0x4, 0x4, 0x2, 0x0, 0x70, 0x7, 0x9, 0x0, 0x8000, 0x10}}}) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) r2 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2284, &(0x7f00000000c0)) getsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000080), &(0x7f0000000200)=0xfffffffffffffdae) [ 568.022788][ C1] net_ratelimit: 22 callbacks suppressed [ 568.022797][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 568.034331][ C1] protocol 88fb is buggy, dev hsr_slave_1 23:47:54 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) listen(r0, 0x0) 23:47:54 executing program 1: r0 = socket(0x11, 0x3, 0x0) getsockopt$packet_int(r0, 0x107, 0x0, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r2 = dup(r0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000100)) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000140)={'bond_slave_0\x00', {0x2, 0x4e21, @local}}) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x1a3, 0xfa00, {0x1, &(0x7f0000000000), 0x117, 0x4}}, 0x20) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2284, &(0x7f00000000c0)) 23:47:54 executing program 3: syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x1, 0x2) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000080)={0xa, [0xe4, 0x40, 0x1e, 0x800, 0x8, 0x26a000, 0x3, 0xffffffff, 0x7, 0xda33]}, 0x18) sendmsg$kcm(r1, &(0x7f0000003540)={&(0x7f0000000100)=@ipx={0x4, 0x2, 0x2, "b18fbfa1e0aa", 0x8}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000180)="8f4762ab8dff6af4441d2e411fc8f3d8ee792bf532e232c46187f5060a20c670ce6990b76fdf61128530e034745a4235b2e57d1445aae97ffbffaec040759bd45365ca79b890600abf136dbecfe99f73f178144b2aeb1d8eb1ee9b76ba5dda8d12702623c114fe64345362d6aea8b4f78a64ed9677b3e42a7edde6eb2301667240051937f276d2ddf7475ce26f0d5d725abc4f2b933722bb9f77b5c61badb149b4996027c43ce6ec43bfce7ba690ee2a439463ba467d58b4f53c52d0283cd5e9e4a9258dedee8f0fd081d36d66f368058792976983cc36325b4b9d5dc0052159174e6fbedb02a5f8a31b", 0xea}, {&(0x7f0000000280)="43ff307726315d80b3737eef0625f250dc16090404d839c55d3b1f65393578371c794e1fd99465593c4521dd37c2001996b98ff88b32824d6cdd8de4538b6229ab9f14ac4dacbdfcdb277aa281b8f07154d31be3f151a41a55f8a47c87e1423a1ecc9aa84c749aace19f4bdb350e925c5834b67d0165e4b94641cbd96bc1936964d6ec51542abc9432cebc759d4109648055771a8bf6a492741278ad399eacbf6016c2a2efcb614bd136e8af1b913efc2eaee6f6e85b8033820dd1ba5ba7c683ae500cc0894b41dc33979c7bf6c10ee01efd49f0b39aace046bf2f7a682aaec5792a3604c7fcdf103d14f9248ba369059e78e1a9200997", 0xf7}, {&(0x7f0000000380)="0df1d1197a64733943e0b200e889a62a8bf943d15a968d85d7e674ebbb4f7d31c02f21603036eeea3e4c053fcb1a08b24274e91caf4b6bd4998da668ff19e8284f0a4da11c3def5098fc70a06033c553562850dc1248d5e3b8097e2fe97af1ae0606c9b5202778ef2fcd73b1f385c568c9a7145bc16d13085be20af7019a16d5e3680a762e5a4f302230a9f798c6ec0ba352cf71cbb430d4a556e20c9a9bf64454ed55d2b664a6b5085d97a03c4f7cf40d775bf9de215a346a276d6883f2acdcf5fc1cd960279ba29f5f0b33866c5010be", 0xd1}], 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x3050}, 0x10) listen(r0, 0x0) r2 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x5411, 0x0) 23:47:54 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000200)={0x0, 0x0, 0x1, [0x101]}, &(0x7f0000000240)=0xa) close(0xffffffffffffffff) 23:47:54 executing program 0: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) listen(0xffffffffffffffff, 0x0) 23:47:54 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1b00000000000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") [ 568.502294][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 568.508222][ C0] protocol 88fb is buggy, dev hsr_slave_1 23:47:55 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000000)={'bpq0\x00', {0x2, 0x4e24, @local}}) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') fcntl$setpipe(r0, 0x407, 0xa2da) exit(0x0) sendfile(r0, r1, 0x0, 0x1) 23:47:55 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) write$selinux_attr(r1, &(0x7f0000000040)='system_u:object_r:dbusd_exec_t:s0\x00', 0x22) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x5411, 0x0) listen(r1, 0xa00000000000) 23:47:55 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2284, &(0x7f00000000c0)) openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0xa0000) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) getsockname$llc(r1, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000100)=0x10) socket$pppoe(0x18, 0x1, 0x0) 23:47:55 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000200)={0x0, 0x0, 0x1, [0x101]}, &(0x7f0000000240)=0xa) close(0xffffffffffffffff) 23:47:55 executing program 0: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) listen(0xffffffffffffffff, 0x0) 23:47:55 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1b0001c000000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:47:55 executing program 0: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) listen(0xffffffffffffffff, 0x0) 23:47:55 executing program 4: openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) close(r0) 23:47:55 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x5411, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000080)=0xffffffffffffffc1, 0x4) 23:47:55 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x1ff, 0x1080000) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2284, &(0x7f00000000c0)) 23:47:55 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) 23:47:55 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) close(r0) [ 569.222277][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 569.228098][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 569.234545][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 569.240311][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 569.382302][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 569.388113][ C0] protocol 88fb is buggy, dev hsr_slave_1 23:47:56 executing program 2: fcntl$getown(0xffffffffffffff9c, 0x9) getpid() getpgrp(0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000280)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000240)='numa_maps\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') exit(0x0) sendfile(r1, r2, 0x0, 0x1) 23:47:56 executing program 3: openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0xffffffffffffffff, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x5411, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000040), &(0x7f0000000080)=0x4) 23:47:56 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1c00000000000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:47:56 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x4000, 0x0) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) write$P9_RSTATFS(r0, &(0x7f0000000040)={0x43, 0x9, 0x2, {0xdbab, 0x0, 0x81, 0x451, 0x200, 0x7, 0xffffffffffffaa69, 0x8000, 0x6182}}, 0x43) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000180)={0x1e4, r1, 0x408, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8000}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x800, @loopback, 0x9}}, {0x14, 0x2, @in={0x2, 0x4e21, @broadcast}}}}]}, @TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}]}, @TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x100000001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffffffffff9}]}, @TIPC_NLA_LINK={0xe8, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}]}, @TIPC_NLA_SOCK={0x40, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xc5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xf4ed}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x401}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80}]}, @TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x40880}, 0x8000) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2284, &(0x7f00000000c0)) 23:47:56 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) 23:47:56 executing program 4: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) close(r0) 23:47:56 executing program 4: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) close(r0) 23:47:56 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000040)='bridge_slave_1\x00') listen(r0, 0x0) r1 = dup(r0) ioctl$sock_netdev_private(r1, 0x89fe, &(0x7f0000000080)="1dd43f895f0ccd0d825e1b414a258b5f756c94efbe74c478b9be232019ef1a4a41b805e82f283c8be761966db087fecf527ce2ea1a096b5b978e7e2394113272e958ea9c74869cefb8fb91abd87db33529e50b83257667d206600f480a2150") ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x5411, 0x0) 23:47:56 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x80000000, 0x3) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2284, &(0x7f00000000c0)) exit_group(0x6) 23:47:56 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) 23:47:56 executing program 4: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) close(r0) 23:47:56 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x1, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2284, &(0x7f00000000c0)) 23:47:57 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') exit(0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x1) 23:47:57 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1d00000000000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:47:57 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) listen(r0, 0x0) 23:47:57 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000040)='bridge_slave_1\x00') listen(r0, 0x0) r1 = dup(r0) ioctl$sock_netdev_private(r1, 0x89fe, &(0x7f0000000080)="1dd43f895f0ccd0d825e1b414a258b5f756c94efbe74c478b9be232019ef1a4a41b805e82f283c8be761966db087fecf527ce2ea1a096b5b978e7e2394113272e958ea9c74869cefb8fb91abd87db33529e50b83257667d206600f480a2150") ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x5411, 0x0) 23:47:57 executing program 4: syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) close(0xffffffffffffffff) 23:47:57 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2284, &(0x7f0000000080)) 23:47:57 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2284, &(0x7f00000000c0)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x13) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000000100)=""/192) sendto$netrom(r1, &(0x7f00000001c0)="b758964a4a428fcbf407dd89edee9fb6becfa477a518f757b0b205c82c1088108fdfbd234417bc379a8759e8c0c32e7a684ec9c2ee18dbf97f951b1cd30a3711093dfa853c3ca8b5eed8a26f150594664b8e64d1c632cd854b4e", 0x5a, 0x80, 0x0, 0x0) 23:47:57 executing program 4: syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) close(0xffffffffffffffff) 23:47:57 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) listen(r0, 0x0) 23:47:57 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000040)='bridge_slave_1\x00') listen(r0, 0x0) r1 = dup(r0) ioctl$sock_netdev_private(r1, 0x89fe, &(0x7f0000000080)="1dd43f895f0ccd0d825e1b414a258b5f756c94efbe74c478b9be232019ef1a4a41b805e82f283c8be761966db087fecf527ce2ea1a096b5b978e7e2394113272e958ea9c74869cefb8fb91abd87db33529e50b83257667d206600f480a2150") ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x5411, 0x0) 23:47:57 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2284, &(0x7f00000000c0)) ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f0000000000)) 23:47:57 executing program 4: syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) close(0xffffffffffffffff) 23:47:58 executing program 2: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') exit(0x0) sendfile(r0, r0, 0x0, 0x1) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000000)='trusted.overlay.upper\x00', &(0x7f0000000080)={0x0, 0xfb, 0xe8, 0x4, 0x94a4, "544f49214be37eaf93d9892412f867bb", "071d3d830d200c02e5b99f7c08f1a8e5d155d442e4a5654c3bf08af50f77e76b389349d2a2214f07305d04ad33f6dd6c012cacd5499a5e64ee4b0fec6326cd7c705e7114b931d85c0aac56ecdedff104dcdc82338806e259bcb7082294800d6b673d4a4a759946c611df12abff52034f0f795c81b849955d39c1e6c86e761a0b3aeb495beeae30c2d5a4e5bbabb0932ddf4c7297e9a1560bc082201209a50b8ad3d5578e483697af22ec57fe0e7d354c3e15f772a338ac5e96c827e767d59c68d20cd69d882908a3aa58b4c1ab8eba2695753c"}, 0xe8, 0x1) connect$bt_rfcomm(r0, &(0x7f00000001c0)={0x1f, {0xcc7b, 0x2, 0x8, 0x6, 0x10000, 0x8}, 0x1}, 0xa) 23:47:58 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1e00000000000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:47:58 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) listen(r0, 0x0) 23:47:58 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000040)='bridge_slave_1\x00') listen(r0, 0x0) r1 = dup(r0) ioctl$sock_netdev_private(r1, 0x89fe, &(0x7f0000000080)="1dd43f895f0ccd0d825e1b414a258b5f756c94efbe74c478b9be232019ef1a4a41b805e82f283c8be761966db087fecf527ce2ea1a096b5b978e7e2394113272e958ea9c74869cefb8fb91abd87db33529e50b83257667d206600f480a2150") ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x5411, 0x0) 23:47:58 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x6, 0x80, [], &(0x7f0000000080)={0x9b0961, 0x6, [], @p_u32=&(0x7f0000000000)=0x3}}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2284, &(0x7f00000000c0)) 23:47:58 executing program 4: syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f00000003c0)='/dev/dmmidi#\x00', 0x6c2c, 0x80000) ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f0000000400)={0x0, 0x1e, 0x2, 0x0, 0x9, 0x2, 0x4, 0x88, 0x1}) r2 = socket$inet6(0xa, 0x2, 0x0) setitimer(0x1, &(0x7f0000000180)={{}, {0x0, 0x2710}}, 0x0) timer_create(0x0, 0x0, &(0x7f00000047c0)) r3 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/attr/current\x00', 0x2, 0x0) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getegid() fchown(r3, r4, r5) r6 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x3f, 0x800000000101) fcntl$getown(r0, 0x9) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000440)={[], 0x0, 0x1, 0x0, 0x7fff, 0x81}) r7 = openat$cgroup_ro(r6, &(0x7f0000000b00)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002740)}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x7dc, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x4000)=nil, 0x2000) shmdt(r8) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x4030582a, &(0x7f0000000000)) ioctl$sock_FIOGETOWN(r2, 0x8903, 0x0) fstat(0xffffffffffffffff, 0x0) syz_open_dev$mouse(0x0, 0xff2f, 0x38) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000007c0)) ioctl$sock_SIOCGSKNS(r2, 0x894c, 0x0) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, 0x0) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0}, 0x4800) fchmodat(r1, &(0x7f00000004c0)='./file0\x00', 0x110) 23:47:58 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f0000000000)=0x80) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000080), &(0x7f0000000180)=0x4) flock(r0, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2284, &(0x7f00000000c0)) 23:47:58 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, 0x0, 0x0) listen(r0, 0x0) 23:47:58 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) accept4$bt_l2cap(r0, 0x0, &(0x7f0000000040), 0x800) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) fchdir(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x5411, 0x0) 23:47:58 executing program 1: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffff9c) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0xc558, 0x2, 0x2, 0xeb, 0x0, 0x1, 0x31, 0x101, 0x77e, 0x8, 0x2}, 0xb) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r2 = syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0x40, 0x40800) ioctl$PPPIOCSCOMPRESS(r2, 0x4010744d) syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x4, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2284, &(0x7f00000000c0)) r3 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x7, 0x82) ioctl$EVIOCSKEYCODE_V2(r3, 0x40284504, &(0x7f0000000180)={0x9, 0x4, 0x7, 0xe5a, "88768bd0436306c199daddd79bbff55b444ce94efcebf7696202924fac06b2bf"}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x22880, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@multicast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@dev}}, &(0x7f00000003c0)=0xe8) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0}, &(0x7f0000000440)=0xc) r7 = getuid() fstat(r4, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = getegid() fsetxattr$system_posix_acl(r0, &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000500)={{}, {0x1, 0x5}, [{0x2, 0x4, r5}, {0x2, 0x1, r6}, {0x2, 0x2, r7}], {0x4, 0x4}, [{0x8, 0x4, r8}, {0x8, 0x4, r9}], {}, {0x20, 0x4}}, 0x4c, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000080)={0x2, [0x0, 0x0]}, &(0x7f0000000280)=0xc) 23:47:58 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1e01000000000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:47:58 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, 0x0, 0x0) listen(r0, 0x0) 23:47:58 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) accept4$bt_l2cap(r0, 0x0, &(0x7f0000000040), 0x800) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) fchdir(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x5411, 0x0) 23:47:58 executing program 1: 23:47:58 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, 0x0, 0x0) listen(r0, 0x0) 23:47:58 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') exit(0x0) sendfile(r0, r1, 0x0, 0x1) 23:47:58 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1f0001c000000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:47:58 executing program 4: syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f00000003c0)='/dev/dmmidi#\x00', 0x6c2c, 0x80000) ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f0000000400)={0x0, 0x1e, 0x2, 0x0, 0x9, 0x2, 0x4, 0x88, 0x1}) r2 = socket$inet6(0xa, 0x2, 0x0) setitimer(0x1, &(0x7f0000000180)={{}, {0x0, 0x2710}}, 0x0) timer_create(0x0, 0x0, &(0x7f00000047c0)) r3 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/attr/current\x00', 0x2, 0x0) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getegid() fchown(r3, r4, r5) r6 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x3f, 0x800000000101) fcntl$getown(r0, 0x9) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000440)={[], 0x0, 0x1, 0x0, 0x7fff, 0x81}) r7 = openat$cgroup_ro(r6, &(0x7f0000000b00)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002740)}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x7dc, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x4000)=nil, 0x2000) shmdt(r8) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x4030582a, &(0x7f0000000000)) ioctl$sock_FIOGETOWN(r2, 0x8903, 0x0) fstat(0xffffffffffffffff, 0x0) syz_open_dev$mouse(0x0, 0xff2f, 0x38) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000007c0)) ioctl$sock_SIOCGSKNS(r2, 0x894c, 0x0) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, 0x0) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0}, 0x4800) fchmodat(r1, &(0x7f00000004c0)='./file0\x00', 0x110) 23:47:59 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000100)={0x2, 0x7f, "a12eb9a3a24a39737db1ae4ff74caa96402a01a691ff729f1f0622cfc6cb3baeabc632c6b7d6d75be95dba4dfb91e6608a2ee1b9f3e7222cb09260bb77a6a4b21970889b288c16d5d43bf9da964b066847da8d633bb6da5d724b59686bc3093045b79b44b39e75a3be4b579c726131e5738629c59111ecef6943a1407cf5ac"}) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2284, &(0x7f00000000c0)) 23:47:59 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) accept4$bt_l2cap(r0, 0x0, &(0x7f0000000040), 0x800) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = dup(r0) fchdir(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x5411, 0x0) 23:47:59 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(0xffffffffffffffff, 0x0) 23:47:59 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x200001c000000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:47:59 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0xfffffffffffffff9, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2284, &(0x7f00000000c0)) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) 23:47:59 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(0xffffffffffffffff, 0x0) 23:47:59 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) accept4$bt_l2cap(r0, 0x0, &(0x7f0000000040), 0x800) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) dup(r0) fchdir(r0) 23:47:59 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(0xffffffffffffffff, 0x0) 23:47:59 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2284, &(0x7f00000000c0)=0xa82) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x20080) r2 = fcntl$dupfd(r1, 0x406, r0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000240)={0x9, 0x4, 0x8, 0x0, &(0x7f0000000140)=[{}, {}, {}, {}]}) r3 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x0, 0x0) write$P9_RXATTRWALK(r3, &(0x7f0000000100)={0xf, 0x1f, 0x2, 0x3}, 0xf) 23:47:59 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x80, 0x0) ioctl$sock_proto_private(r0, 0x89e0, &(0x7f0000000280)="0dbb5a01c8da1d907052ab78a2ddd260fa0f18097029d37a67077ffa05e9ca1a72c19d7cc7752cda91a4ea8270731da5b466ae078b01582c9d29c07af447e9b7ec675928b0d6fc0490d71bd163344cc5221accdb746a3407e72cc29367e933dbe904d36e38a339a406b41ca5ae1d193ed997e83ebef96a5054cba37d8dae0b77962f255848a472cd48397a11eb6e08042d52ead86070482180e55865094f1f7009ccd3d41e4006fbabcd52") r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r2 = accept4$inet6(0xffffffffffffff9c, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000140)=0x1c, 0x80800) ioctl$sock_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000180)) r3 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x7fff) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000001400)={r0, &(0x7f0000000200)="bdbf4191f0d67f9071af3fbc2ceb185b846c93c185d60a4f524de2504584a53dd74277333dab7c63", &(0x7f0000000400)=""/4096}, 0x18) mknod$loop(&(0x7f0000000240)='./bus\x00', 0x6004, 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000015c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f00000016c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001680)={&(0x7f0000001600)={0x6c, r4, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x363d}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x40}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8001}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7f}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7f}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x881}, 0x1) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xed}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) r6 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r5, r6, &(0x7f00000000c0)=0x200, 0xdd) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) sendto$inet(r3, &(0x7f00000014c0)="82f236155e33529f5f0bd56429b145b159dbcf7a18a3fa1becd32dfa8299f5e3bdd821248ae341e4c7bec13a380ea658b4d0f30462077f3649dfbb410e47f89ce8c62ebe7d31c6dc72b212712739b877d281f046dae17d09998255f7ad12f96cee3d6c059bae069e66dbca2abe32fd711c2c522249a1ee605c16c6d044fb80d440d622ab", 0x84, 0x400803c, &(0x7f0000001580)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000001440)={0x7, 0x2, {0x0, 0x3, 0x5, 0x2, 0x6}}) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2284, &(0x7f00000000c0)) [ 573.382297][ C1] net_ratelimit: 18 callbacks suppressed [ 573.382306][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 573.393851][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 573.399683][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 573.405472][ C1] protocol 88fb is buggy, dev hsr_slave_1 23:47:59 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r3 = socket(0x22, 0x2, 0x4) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) getsockopt$inet6_buf(r3, 0x29, 0x0, 0x0, 0x0) exit(0x0) openat$cgroup(r1, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) sendfile(r0, r1, 0x0, 0x1) 23:47:59 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x80, 0x0) ioctl$sock_proto_private(r0, 0x89e0, &(0x7f0000000280)="0dbb5a01c8da1d907052ab78a2ddd260fa0f18097029d37a67077ffa05e9ca1a72c19d7cc7752cda91a4ea8270731da5b466ae078b01582c9d29c07af447e9b7ec675928b0d6fc0490d71bd163344cc5221accdb746a3407e72cc29367e933dbe904d36e38a339a406b41ca5ae1d193ed997e83ebef96a5054cba37d8dae0b77962f255848a472cd48397a11eb6e08042d52ead86070482180e55865094f1f7009ccd3d41e4006fbabcd52") r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r2 = accept4$inet6(0xffffffffffffff9c, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000140)=0x1c, 0x80800) ioctl$sock_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000180)) r3 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x7fff) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000001400)={r0, &(0x7f0000000200)="bdbf4191f0d67f9071af3fbc2ceb185b846c93c185d60a4f524de2504584a53dd74277333dab7c63", &(0x7f0000000400)=""/4096}, 0x18) mknod$loop(&(0x7f0000000240)='./bus\x00', 0x6004, 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000015c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f00000016c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001680)={&(0x7f0000001600)={0x6c, r4, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x363d}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x40}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8001}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7f}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7f}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x881}, 0x1) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xed}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) r6 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r5, r6, &(0x7f00000000c0)=0x200, 0xdd) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) sendto$inet(r3, &(0x7f00000014c0)="82f236155e33529f5f0bd56429b145b159dbcf7a18a3fa1becd32dfa8299f5e3bdd821248ae341e4c7bec13a380ea658b4d0f30462077f3649dfbb410e47f89ce8c62ebe7d31c6dc72b212712739b877d281f046dae17d09998255f7ad12f96cee3d6c059bae069e66dbca2abe32fd711c2c522249a1ee605c16c6d044fb80d440d622ab", 0x84, 0x400803c, &(0x7f0000001580)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000001440)={0x7, 0x2, {0x0, 0x3, 0x5, 0x2, 0x6}}) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2284, &(0x7f00000000c0)) 23:47:59 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) accept4$bt_l2cap(r0, 0x0, &(0x7f0000000040), 0x800) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) dup(r0) 23:47:59 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x221001c000000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:47:59 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x1267, &(0x7f00000000c0)) 23:47:59 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000180)='/dev/amidi#\x00', 0xfe, 0xab8f69cbf40e14bc) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x2030, r1, 0x0) openat$cgroup_ro(r1, &(0x7f00000001c0)='pids.current\x00', 0x0, 0x0) ftruncate(r0, 0xc81) r2 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000100)={{0x3, @rose}, [@default, @default, @bcast, @default, @netrom, @default, @bcast, @default]}, &(0x7f0000000000)=0x48, 0x80800) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='ip6gre0\x00', 0x10) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2284, &(0x7f00000000c0)=0x4) [ 573.542269][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 573.548091][ C0] protocol 88fb is buggy, dev hsr_slave_1 23:48:00 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x9, 0x10000) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000080), &(0x7f0000000100)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, r1, 0x0, 0x1, &(0x7f0000000200)='\x00'}, 0x30) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000280)=0x0) r3 = getpgrp(r2) syz_open_procfs$namespace(r3, &(0x7f0000000140)='ns/user\x00') timer_create(0x7, &(0x7f0000000180)={0x0, 0x0, 0x0, @tid=r3}, &(0x7f00000001c0)) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2284, &(0x7f00000000c0)=0xfffffffffffffffc) 23:48:00 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) accept4$bt_l2cap(r0, 0x0, &(0x7f0000000040), 0x800) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) 23:48:00 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x1267, &(0x7f00000000c0)) 23:48:00 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x80, 0x0) ioctl$sock_proto_private(r0, 0x89e0, &(0x7f0000000280)="0dbb5a01c8da1d907052ab78a2ddd260fa0f18097029d37a67077ffa05e9ca1a72c19d7cc7752cda91a4ea8270731da5b466ae078b01582c9d29c07af447e9b7ec675928b0d6fc0490d71bd163344cc5221accdb746a3407e72cc29367e933dbe904d36e38a339a406b41ca5ae1d193ed997e83ebef96a5054cba37d8dae0b77962f255848a472cd48397a11eb6e08042d52ead86070482180e55865094f1f7009ccd3d41e4006fbabcd52") r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r2 = accept4$inet6(0xffffffffffffff9c, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000140)=0x1c, 0x80800) ioctl$sock_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000180)) r3 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x7fff) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000001400)={r0, &(0x7f0000000200)="bdbf4191f0d67f9071af3fbc2ceb185b846c93c185d60a4f524de2504584a53dd74277333dab7c63", &(0x7f0000000400)=""/4096}, 0x18) mknod$loop(&(0x7f0000000240)='./bus\x00', 0x6004, 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000015c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f00000016c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001680)={&(0x7f0000001600)={0x6c, r4, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x363d}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x40}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8001}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7f}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7f}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x881}, 0x1) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xed}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) r6 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r5, r6, &(0x7f00000000c0)=0x200, 0xdd) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) sendto$inet(r3, &(0x7f00000014c0)="82f236155e33529f5f0bd56429b145b159dbcf7a18a3fa1becd32dfa8299f5e3bdd821248ae341e4c7bec13a380ea658b4d0f30462077f3649dfbb410e47f89ce8c62ebe7d31c6dc72b212712739b877d281f046dae17d09998255f7ad12f96cee3d6c059bae069e66dbca2abe32fd711c2c522249a1ee605c16c6d044fb80d440d622ab", 0x84, 0x400803c, &(0x7f0000001580)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000001440)={0x7, 0x2, {0x0, 0x3, 0x5, 0x2, 0x6}}) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2284, &(0x7f00000000c0)) [ 573.782354][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 573.788227][ C0] protocol 88fb is buggy, dev hsr_slave_1 23:48:00 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x2900000000000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:48:00 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2284, &(0x7f00000000c0)) [ 574.262516][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 574.268371][ C1] protocol 88fb is buggy, dev hsr_slave_1 23:48:00 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x9, 0x2, 0x2, 0x1, 0xfffffffffffffffe, 0x80000001}, &(0x7f0000000080)=0x20) exit(0x0) sendfile(r0, r1, 0x0, 0x1) write$USERIO_CMD_REGISTER(r1, &(0x7f00000000c0)={0x0, 0x400080}, 0x2) 23:48:00 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) accept4$bt_l2cap(r0, 0x0, &(0x7f0000000040), 0x800) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) 23:48:00 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x1267, &(0x7f00000000c0)) 23:48:00 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x9, 0x10000) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000080), &(0x7f0000000100)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, r1, 0x0, 0x1, &(0x7f0000000200)='\x00'}, 0x30) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000280)=0x0) r3 = getpgrp(r2) syz_open_procfs$namespace(r3, &(0x7f0000000140)='ns/user\x00') timer_create(0x7, &(0x7f0000000180)={0x0, 0x0, 0x0, @tid=r3}, &(0x7f00000001c0)) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2284, &(0x7f00000000c0)=0xfffffffffffffffc) 23:48:00 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2284, &(0x7f00000000c0)) ioctl$KVM_SET_NESTED_STATE(r0, 0x4080aebf, &(0x7f0000000100)={0x3, 0x0, 0x2080, {0x3000, 0xd004}, [], "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", "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"}) 23:48:00 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x2a1001c000000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:48:00 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x4000, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000080)=r1, 0x4) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2284, &(0x7f00000000c0)) 23:48:00 executing program 0: ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x1267, &(0x7f00000000c0)) 23:48:00 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) accept4$bt_l2cap(r0, 0x0, &(0x7f0000000040), 0x800) 23:48:01 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x2900000000000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:48:01 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2284, &(0x7f00000000c0)) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x802, 0x0) recvfrom$rose(r1, &(0x7f0000000100)=""/206, 0xce, 0x1, 0x0, 0x0) 23:48:01 executing program 0: ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x1267, &(0x7f00000000c0)) 23:48:01 executing program 2: r0 = fcntl$getown(0xffffffffffffffff, 0x9) r1 = syz_open_procfs(r0, &(0x7f0000000040)='attr/exec\x00') setsockopt$inet_udp_int(r1, 0x11, 0xa, &(0x7f0000000000)=0x20, 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') exit(0x8000003ffffffffe) sendfile(r1, r1, 0x0, 0x2) sendfile(r2, r2, &(0x7f0000000080)=0x3c, 0x1) 23:48:01 executing program 3: accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x800) 23:48:01 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x2c00000000000080) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:48:01 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2284, &(0x7f00000000c0)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x181000, 0x0) 23:48:01 executing program 0: ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x1267, &(0x7f00000000c0)) 23:48:01 executing program 4 (fault-call:2 fault-nth:0): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) 23:48:01 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) 23:48:01 executing program 0: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x1267, &(0x7f00000000c0)) 23:48:01 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r0, 0x5386, &(0x7f0000000000)) ioperm(0x2, 0x2, 0x5) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2284, &(0x7f0000000100)=0x400f7) 23:48:01 executing program 3: accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x800) 23:48:02 executing program 0: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x1267, &(0x7f00000000c0)) 23:48:02 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) accept$ax25(r0, &(0x7f0000000100)={{0x3, @null}, [@remote, @default, @rose, @rose, @bcast, @default, @remote, @bcast]}, &(0x7f0000000000)=0x48) r1 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x2, 0x400480) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000180)) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x4, 0x1, 0x2}}, 0x14) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2284, &(0x7f00000000c0)) 23:48:02 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') alarm(0x3) exit(0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x4000, 0x152) sendfile(r0, r1, 0x0, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, r3}, 0xc) 23:48:02 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x1000000) 23:48:02 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x2c1001c000000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:48:02 executing program 3: accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x800) 23:48:02 executing program 0: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x1267, &(0x7f00000000c0)) 23:48:02 executing program 1: ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2284, &(0x7f0000000140)=0x1) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) uname(&(0x7f0000000180)=""/4096) 23:48:02 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x100000000000000) 23:48:02 executing program 1: r0 = accept4(0xffffffffffffff9c, &(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @local}, &(0x7f0000000000)=0x80, 0x800) accept$inet(r0, &(0x7f0000000080), &(0x7f0000000180)=0x10) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2284, &(0x7f00000000c0)) 23:48:02 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) accept4$bt_l2cap(r0, 0x0, &(0x7f0000000040), 0x800) 23:48:02 executing program 0: syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x1267, &(0x7f00000000c0)) 23:48:03 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x30a33f321f7f0000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:48:03 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x8000000000000000) 23:48:03 executing program 0: syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x1267, &(0x7f00000000c0)) 23:48:03 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2284, &(0x7f00000000c0)) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x7, 0x10003) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000080)=0x200) 23:48:03 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) accept4$bt_l2cap(r0, 0x0, &(0x7f0000000040), 0x800) 23:48:03 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x3, 0x2, 0x80000000, 0x3}, {0x9, 0x0, 0x40, 0x3}]}) exit(0x0) sendfile(r0, r1, 0x0, 0x1) 23:48:03 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) 23:48:03 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x3400000000000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:48:03 executing program 0: syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x1267, &(0x7f00000000c0)) 23:48:03 executing program 1: ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2284, &(0x7f00000000c0)) fstat(0xffffffffffffff9c, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_xen(&(0x7f0000000000)='\x14self$\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x1000, &(0x7f0000000180)={'trans=xen,', {[{@nodevmap='nodevmap'}, {@mmap='mmap'}, {@version_u='version=9p2000.u'}, {@access_uid={'access', 0x3d, r0}}, {@posixacl='posixacl'}, {@cache_mmap='cache=mmap'}], [{@dont_measure='dont_measure'}, {@context={'context', 0x3d, 'root'}}, {@appraise='appraise'}]}}) 23:48:03 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) accept4$bt_l2cap(r0, 0x0, &(0x7f0000000040), 0x800) 23:48:03 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000380)={r0}) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f00000003c0)={'filter\x00', 0xc9, "2adae3ab7c981c182d54a09ba492710dbe39643e9536010fe3681efa3443415d9f02e8b7527ae78f4d4c96ded80d29cda1da250b6e810b1343dfe5b2079f4b1ec0bbbe01ddc4c525a2ea1baccb6c3c81741f4adf2fb26c6dc0ab8fbb9a232564fd5b9a5665280e37fb647289ae57a36e7862eb92a214af8ea9da07b56947f1157c686be3790b8aa203da31d59b8b374db27862f918fa5baaa888cba6bdd792ebee6af9dde453ef892c29d33b2f0c071bd6681a3a797d5b9e62672dd3d630d801b06c3870c75fc32568"}, &(0x7f00000004c0)=0xed) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000080)) syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0xad, 0x2) listen(r1, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0xfffffffffffffffc, 0xa0000) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x12}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0xdf, r3, 0xb02, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x5c, 0x5, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA={0x9c, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfd}]}]}, @TIPC_NLA_LINK={0x58, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2ace}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffff734}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x41}, 0x4004) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') 23:48:03 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x1267, 0x0) 23:48:03 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x80000001, 0x100) getpeername$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000140)=0x14) r3 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x6, 0x200000) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x0, 0x6, 0x8, 0x3f, 0xc, r1, 0x8, [], r2, r3, 0x9, 0x9}, 0x3c) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2284, &(0x7f00000000c0)) 23:48:03 executing program 3: syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x800) 23:48:03 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x3a00000000000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:48:04 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x1267, 0x0) 23:48:04 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') exit(0x0) sendfile(r0, r1, 0x0, 0x6f) 23:48:04 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r1, 0x5, 0x8, &(0x7f0000000000)=""/29, &(0x7f0000000080)=0x1d) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2284, &(0x7f00000000c0)) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$IMSETDEVNAME(r2, 0x80184947, &(0x7f00000003c0)={0xa000, 'syz0\x00'}) 23:48:04 executing program 3: syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x800) 23:48:04 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) 23:48:04 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x1267, 0x0) 23:48:04 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x3b00000000000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:48:04 executing program 1: socket$inet_dccp(0x2, 0x6, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x401, 0x800000000200) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2284, &(0x7f00000000c0)) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x1, 0x200040) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x5}, &(0x7f0000000100)=0xc) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000140)={r2, 0x8}, 0x8) 23:48:04 executing program 0 (fault-call:1 fault-nth:0): r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x1267, &(0x7f00000000c0)) 23:48:04 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0xfffffffffffffffd}}, 0xe) listen(r0, 0x14) 23:48:04 executing program 3: syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x800) 23:48:04 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x8403, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x2) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) [ 578.422411][ C1] net_ratelimit: 22 callbacks suppressed [ 578.422420][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 578.434276][ C1] protocol 88fb is buggy, dev hsr_slave_1 23:48:04 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x1267, &(0x7f00000000c0)) [ 578.902284][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 578.908123][ C0] protocol 88fb is buggy, dev hsr_slave_1 23:48:05 executing program 2: r0 = getpgid(0xffffffffffffffff) r1 = syz_open_procfs(r0, &(0x7f0000000040)='attr/exec\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') exit(0x0) sendfile(r1, r2, 0x0, 0x1) 23:48:05 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xff, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000180)={'bond_slave_0\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1c}}}) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000080)={0x80, 0x1, 0x8, 0x1, 0xfffffffffffffff9, 0x3800000000000, 0x7}) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000100)=0x1, &(0x7f0000000140)=0x4) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x100000001) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2284, &(0x7f00000000c0)) 23:48:05 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x3f00000000000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:48:05 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) accept4$bt_l2cap(r0, 0x0, 0x0, 0x800) 23:48:05 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffff00, {0x40, 0xe8, 0xb67, 0xf0c6, 0x1, 0x6}, 0x0, 0x2ff}, 0xe) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x2000, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f0000000200)={0x9, 0x4d, 0x5, 0x30842cf4, 0x67, 0x393}) r2 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x1, 0x44000) sendto$rxrpc(r2, &(0x7f00000000c0)="7148d73324b4ba7183e03390a58383ae68797659773f828ce79a3a208da89ca322c6c971fe9403bbddfe83cd18e882f28ec8dc441b8570ec9bb515fda33b10da3a8ee65f45bc16021534549d60df848c120c0aaf960565c92f375ea0b467ae6df7d94c2b70eb9d757ef19c5f567e6ea0f0a22a18ef235e3def88220cadb5efdb50f29e9c88b37200f9faa83fa94aacff6a38fddbc9e10ff28d0f72605d31cfe34d36a431f81b98710f87e8bcec72826ed45b5a072cf53519efc279cb64ee4eaca966f4bb190b8f52761eed68b3a9b420a5af27814e35a59c538f6ed22884715ceeab1c50", 0xe4, 0x1, 0x0, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) 23:48:05 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2, &(0x7f00000000c0)) 23:48:05 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) accept4$bt_l2cap(r0, 0x0, 0x0, 0x0) 23:48:05 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x1274, &(0x7f00000000c0)) 23:48:05 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2284, &(0x7f00000000c0)) 23:48:05 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = geteuid() lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(r0, &(0x7f0000000100)={0xa0, 0x19, 0x1, {0x402, {0x2, 0x3, 0x4}, 0x40, r1, r2, 0x8000, 0x3, 0x101, 0x3, 0x8, 0x1, 0x5, 0x3, 0x10001, 0x1ff, 0xffffffff, 0xc71e, 0xae, 0x9, 0xea2a784}}, 0xa0) 23:48:05 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x1275, &(0x7f00000000c0)) 23:48:05 executing program 3 (fault-call:1 fault-nth:0): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) accept4$bt_l2cap(r0, 0x0, 0x0, 0x0) [ 579.533512][T25699] FAULT_INJECTION: forcing a failure. [ 579.533512][T25699] name failslab, interval 1, probability 0, space 0, times 0 [ 579.555601][T25699] CPU: 1 PID: 25699 Comm: syz-executor.3 Not tainted 5.1.0-rc3-next-20190408 #20 [ 579.564750][T25699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 579.574901][T25699] Call Trace: [ 579.574933][T25699] dump_stack+0x172/0x1f0 [ 579.574969][T25699] should_fail.cold+0xa/0x15 [ 579.582656][T25699] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 579.582678][T25699] ? ___might_sleep+0x163/0x280 [ 579.582698][T25699] __should_failslab+0x121/0x190 [ 579.602975][T25699] ? sock_destroy_inode+0x60/0x60 [ 579.608018][T25699] should_failslab+0x9/0x14 [ 579.612534][T25699] kmem_cache_alloc+0x2b2/0x6f0 [ 579.617398][T25699] ? ksys_dup3+0x3e0/0x3e0 [ 579.621840][T25699] ? sock_destroy_inode+0x60/0x60 [ 579.626873][T25699] sock_alloc_inode+0x1d/0x260 [ 579.631646][T25699] alloc_inode+0x66/0x190 [ 579.635992][T25699] new_inode_pseudo+0x19/0xf0 [ 579.640711][T25699] sock_alloc+0x41/0x270 [ 579.644989][T25699] __sys_accept4+0xe2/0x6a0 [ 579.649505][T25699] ? wait_for_completion+0x440/0x440 [ 579.654805][T25699] ? __ia32_sys_listen+0x80/0x80 [ 579.660020][T25699] ? fput_many+0x12c/0x1a0 [ 579.664444][T25699] ? fput+0x1b/0x20 [ 579.668259][T25699] ? ksys_write+0x1f1/0x2d0 [ 579.672781][T25699] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 579.678696][T25699] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 579.684139][T25699] ? do_syscall_64+0x26/0x610 [ 579.688802][T25699] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 579.695391][T25699] ? do_syscall_64+0x26/0x610 [ 579.700069][T25699] __x64_sys_accept4+0x97/0xf0 [ 579.704816][T25699] do_syscall_64+0x103/0x610 [ 579.709404][T25699] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 579.715276][T25699] RIP: 0033:0x4582b9 [ 579.719164][T25699] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 579.738830][T25699] RSP: 002b:00007fad71b0bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 579.747249][T25699] RAX: ffffffffffffffda RBX: 00007fad71b0bc90 RCX: 00000000004582b9 [ 579.755224][T25699] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 579.763177][T25699] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 579.771196][T25699] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fad71b0c6d4 [ 579.779154][T25699] R13: 00000000004be06a R14: 00000000004ce838 R15: 0000000000000003 [ 579.787372][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 579.792368][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 579.793193][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 579.798895][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 579.804728][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 579.816145][ C1] protocol 88fb is buggy, dev hsr_slave_1 23:48:06 executing program 2: pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$inet6_dccp_int(r0, 0x21, 0x6, &(0x7f00000001c0)=0x3, 0x4) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000000)=""/34) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') exit(0x0) sendfile(r1, r2, 0x0, 0x101) getsockopt$X25_QBITINCL(r2, 0x106, 0x1, &(0x7f00000000c0), &(0x7f0000000200)=0x4) prctl$PR_SET_NAME(0xf, &(0x7f0000000080)='$\x00') 23:48:06 executing program 1 (fault-call:1 fault-nth:0): r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) close(r0) 23:48:06 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x1276, &(0x7f00000000c0)) 23:48:06 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x4000000000000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:48:06 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x20a00, 0x0) getpeername$ax25(r1, &(0x7f0000000200)={{0x3, @netrom}, [@default, @bcast, @bcast, @remote, @default, @null, @rose, @bcast]}, &(0x7f0000000280)=0x48) listen(r0, 0x0) 23:48:06 executing program 3 (fault-call:1 fault-nth:1): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) accept4$bt_l2cap(r0, 0x0, 0x0, 0x0) 23:48:06 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2201, &(0x7f00000000c0)) 23:48:06 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x10) [ 580.162516][T25719] FAULT_INJECTION: forcing a failure. [ 580.162516][T25719] name failslab, interval 1, probability 0, space 0, times 0 [ 580.246548][T25719] CPU: 1 PID: 25719 Comm: syz-executor.3 Not tainted 5.1.0-rc3-next-20190408 #20 [ 580.255702][T25719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 580.265752][T25719] Call Trace: [ 580.269056][T25719] dump_stack+0x172/0x1f0 [ 580.273396][T25719] should_fail.cold+0xa/0x15 [ 580.277997][T25719] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 580.283807][T25719] ? ___might_sleep+0x163/0x280 [ 580.288776][T25719] __should_failslab+0x121/0x190 [ 580.293715][T25719] ? sock_destroy_inode+0x60/0x60 [ 580.298737][T25719] should_failslab+0x9/0x14 [ 580.303257][T25719] kmem_cache_alloc_trace+0x2d1/0x760 [ 580.308625][T25719] ? kmem_cache_alloc+0x32e/0x6f0 [ 580.313677][T25719] ? ksys_dup3+0x3e0/0x3e0 [ 580.318097][T25719] ? sock_destroy_inode+0x60/0x60 [ 580.323120][T25719] sock_alloc_inode+0x63/0x260 [ 580.327879][T25719] alloc_inode+0x66/0x190 [ 580.332204][T25719] new_inode_pseudo+0x19/0xf0 [ 580.336880][T25719] sock_alloc+0x41/0x270 [ 580.341121][T25719] __sys_accept4+0xe2/0x6a0 [ 580.345620][T25719] ? wait_for_completion+0x440/0x440 [ 580.350905][T25719] ? __ia32_sys_listen+0x80/0x80 [ 580.355843][T25719] ? fput_many+0x12c/0x1a0 [ 580.360255][T25719] ? fput+0x1b/0x20 [ 580.364061][T25719] ? ksys_write+0x1f1/0x2d0 [ 580.368565][T25719] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 580.374034][T25719] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 580.379517][T25719] ? do_syscall_64+0x26/0x610 [ 580.384196][T25719] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 580.390262][T25719] ? do_syscall_64+0x26/0x610 [ 580.394952][T25719] __x64_sys_accept4+0x97/0xf0 [ 580.399735][T25719] do_syscall_64+0x103/0x610 [ 580.404334][T25719] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 580.410233][T25719] RIP: 0033:0x4582b9 [ 580.414158][T25719] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 580.433858][T25719] RSP: 002b:00007fad71b0bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 23:48:06 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) close(r0) 23:48:06 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0) listen(r0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0xffff, 0x404000) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) [ 580.442280][T25719] RAX: ffffffffffffffda RBX: 00007fad71b0bc90 RCX: 00000000004582b9 [ 580.450252][T25719] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 580.458222][T25719] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 580.466308][T25719] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fad71b0c6d4 [ 580.474365][T25719] R13: 00000000004be06a R14: 00000000004ce838 R15: 0000000000000003 23:48:06 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2202, &(0x7f00000000c0)) 23:48:07 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) close(r0) 23:48:07 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') exit(0x0) sendfile(r0, r1, 0x0, 0x1) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, r2, 0x801, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6f2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) 23:48:07 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2203, &(0x7f00000000c0)) 23:48:07 executing program 3 (fault-call:1 fault-nth:2): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) accept4$bt_l2cap(r0, 0x0, 0x0, 0x0) 23:48:07 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x3) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x10000000000000, {0x0, 0x2}, 0x0, 0x3ff}, 0xe) listen(r0, 0x0) 23:48:07 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x4001000000000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") 23:48:07 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x10001, 0x0) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @local, 'veth0_to_bond\x00'}}) epoll_wait(r0, &(0x7f00000000c0)=[{}, {}, {}], 0x3, 0xffff) r1 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) close(r1) ioctl$KVM_SET_SREGS(r0, 0x4138ae84, &(0x7f0000000100)={{0x0, 0x2001, 0x1f, 0x5, 0x7, 0xffffffffffffff00, 0x6086bede, 0xfffffffffffffffa, 0x1, 0x1, 0x80000000, 0xd9}, {0xf000, 0x1001, 0xf, 0x3, 0x5, 0x9, 0x10bf, 0x9db, 0x8, 0x2, 0x2, 0xafcd}, {0x1000, 0x0, 0xf, 0x1, 0xc3c, 0xc1d1, 0x119, 0x3, 0x5, 0xb8e3, 0x0, 0x4}, {0x14000, 0x6000, 0x8, 0x9cb, 0x8001, 0x1, 0xfff, 0x7, 0x100, 0x8, 0x4, 0x8}, {0x1, 0x1000, 0xf, 0xf7c, 0x6, 0x0, 0x2, 0x4, 0x4, 0x8, 0x5, 0x8}, {0x1000, 0x0, 0xf, 0x3ff, 0xfff, 0x3, 0x9, 0x9, 0x3, 0x6, 0xb, 0x7}, {0x2000, 0x15004, 0x9, 0xc76, 0x5, 0xffffffffffffff26, 0x1f, 0x3f, 0x7, 0x8, 0x4, 0x313c}, {0x100000, 0x1, 0x0, 0x0, 0x8, 0x80000001, 0x5, 0x1, 0xa83, 0x14ad8d63, 0x5, 0x3}, {0x100000, 0x1000}, {0x5000}, 0x80000002, 0x0, 0x4000, 0x20020, 0x2, 0x1000, 0x4, [0x8000, 0x81, 0x54fd9229, 0x401]}) [ 580.952725][ T26] audit: type=1400 audit(1554767287.365:49): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=25716 comm="syz-executor.2" [ 581.016145][T25752] FAULT_INJECTION: forcing a failure. [ 581.016145][T25752] name failslab, interval 1, probability 0, space 0, times 0 [ 581.082347][T25752] CPU: 1 PID: 25752 Comm: syz-executor.3 Not tainted 5.1.0-rc3-next-20190408 #20 [ 581.091493][T25752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 581.102291][T25752] Call Trace: [ 581.105590][T25752] dump_stack+0x172/0x1f0 [ 581.105617][T25752] should_fail.cold+0xa/0x15 [ 581.114512][T25752] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 581.120345][T25752] ? ___might_sleep+0x163/0x280 [ 581.125206][T25752] __should_failslab+0x121/0x190 [ 581.130145][T25752] should_failslab+0x9/0x14 [ 581.134649][T25752] kmem_cache_alloc+0x2b2/0x6f0 [ 581.134666][T25752] ? find_held_lock+0x35/0x130 [ 581.134686][T25752] ? __alloc_fd+0x430/0x530 [ 581.152530][T25752] __d_alloc+0x2e/0x8c0 [ 581.156810][T25752] d_alloc_pseudo+0x22/0x70 [ 581.161491][T25752] alloc_file_pseudo+0xe2/0x280 [ 581.166342][T25752] ? kasan_check_read+0x11/0x20 [ 581.171186][T25752] ? alloc_file+0x4d0/0x4d0 [ 581.175693][T25752] ? __alloc_fd+0x430/0x530 [ 581.180217][T25752] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 581.186463][T25752] sock_alloc_file+0x4d/0x170 [ 581.191178][T25752] __sys_accept4+0x259/0x6a0 [ 581.195774][T25752] ? __ia32_sys_listen+0x80/0x80 [ 581.200707][T25752] ? fput_many+0x12c/0x1a0 [ 581.205117][T25752] ? fput+0x1b/0x20 [ 581.208927][T25752] ? ksys_write+0x1f1/0x2d0 [ 581.213442][T25752] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 581.219279][T25752] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 581.224736][T25752] ? do_syscall_64+0x26/0x610 [ 581.229413][T25752] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 581.235930][T25752] ? do_syscall_64+0x26/0x610 [ 581.240618][T25752] __x64_sys_accept4+0x97/0xf0 [ 581.245399][T25752] do_syscall_64+0x103/0x610 [ 581.249995][T25752] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 581.255880][T25752] RIP: 0033:0x4582b9 [ 581.259771][T25752] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 23:48:07 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000040)={0x3, @sliced={0x9, [0x400, 0x2000000, 0x9, 0x8, 0x5, 0x4, 0x8, 0x9, 0x9, 0x8b2f, 0x1, 0x0, 0x7, 0x2, 0x100, 0x100, 0x8000, 0xe7b, 0x100000001, 0xd6a, 0x9, 0x0, 0x2e82, 0xd3c, 0x3, 0x1f, 0x7ff, 0xae0f, 0x81, 0x7, 0x6, 0x1, 0x5, 0x34, 0x20, 0x800, 0x20, 0xfffffffffffffffb, 0xfffffffffffffffa, 0x0, 0x100, 0x8000, 0x5, 0x508200, 0x8, 0xfb5, 0x200, 0x55c6], 0x100000000}}) listen(r0, 0x3f) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0xfffb, 0x0) ioctl$BLKSECTGET(r1, 0x1267, &(0x7f0000000180)) [ 581.279373][T25752] RSP: 002b:00007fad71b0bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 581.287788][T25752] RAX: ffffffffffffffda RBX: 00007fad71b0bc90 RCX: 00000000004582b9 [ 581.295765][T25752] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 581.303833][T25752] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 581.311799][T25752] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fad71b0c6d4 [ 581.319769][T25752] R13: 00000000004be06a R14: 00000000004ce838 R15: 0000000000000003 23:48:07 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) close(r0) 23:48:07 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2205, &(0x7f00000000c0)) [ 581.342998][T25752] kasan: CONFIG_KASAN_INLINE enabled [ 581.348463][T25752] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 581.364920][T25752] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 581.371894][T25752] CPU: 0 PID: 25752 Comm: syz-executor.3 Not tainted 5.1.0-rc3-next-20190408 #20 [ 581.381005][T25752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 23:48:07 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2270, &(0x7f00000000c0)) [ 581.391077][T25752] RIP: 0010:d_alloc_pseudo+0x33/0x70 [ 581.396417][T25752] Code: 41 54 49 89 fc 48 83 ec 08 e8 39 d9 b7 ff 4c 89 ee 4c 89 e7 e8 1e f1 ff ff 48 ba 00 00 00 00 00 fc ff df 48 89 c1 48 c1 e9 03 <0f> b6 14 11 84 d2 74 05 80 fa 03 7e 10 81 08 00 00 00 40 48 83 c4 [ 581.416027][T25752] RSP: 0018:ffff8880542d7c60 EFLAGS: 00010246 [ 581.422191][T25752] RAX: 0000000000000000 RBX: 1ffff1100a85af94 RCX: 0000000000000000 [ 581.430166][T25752] RDX: dffffc0000000000 RSI: ffffffff81b8a01f RDI: 0000000000000282 23:48:07 executing program 1: r0 = socket$inet6(0xa, 0x80006, 0x859) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x3}) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) close(r1) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x6, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}, &(0x7f00000000c0)=0x10) r3 = dup2(r2, r2) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r3, 0x800442d3, &(0x7f0000001380)={0xfffffffffffff224, 0x1, 0x800000000, @empty, 'irlan0\x00'}) 23:48:07 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2271, &(0x7f00000000c0)) [ 581.438135][T25752] RBP: ffff8880542d7c78 R08: ffff8880507a0280 R09: ffffed1015d05bc8 [ 581.446108][T25752] R10: ffffed1015d05bc7 R11: ffff8880ae82de3b R12: ffff8880a9830a40 [ 581.454080][T25752] R13: ffff8880542d7cc0 R14: ffff8880aa397628 R15: ffff88809dd934f0 [ 581.462058][T25752] FS: 00007fad71b0c700(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 581.470996][T25752] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 581.477578][T25752] CR2: 00007f0511328000 CR3: 000000008e8b0000 CR4: 00000000001426f0 [ 581.485552][T25752] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 581.493524][T25752] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 581.501502][T25752] Call Trace: [ 581.501527][T25752] alloc_file_pseudo+0xe2/0x280 [ 581.501543][T25752] ? kasan_check_read+0x11/0x20 [ 581.501556][T25752] ? alloc_file+0x4d0/0x4d0 [ 581.501571][T25752] ? __alloc_fd+0x430/0x530 [ 581.501586][T25752] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 581.501608][T25752] sock_alloc_file+0x4d/0x170 [ 581.501624][T25752] __sys_accept4+0x259/0x6a0 [ 581.501642][T25752] ? __ia32_sys_listen+0x80/0x80 [ 581.501655][T25752] ? fput_many+0x12c/0x1a0 [ 581.501667][T25752] ? fput+0x1b/0x20 [ 581.501682][T25752] ? ksys_write+0x1f1/0x2d0 [ 581.501700][T25752] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 581.501714][T25752] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 581.501728][T25752] ? do_syscall_64+0x26/0x610 [ 581.501744][T25752] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 581.501757][T25752] ? do_syscall_64+0x26/0x610 [ 581.501774][T25752] __x64_sys_accept4+0x97/0xf0 [ 581.501790][T25752] do_syscall_64+0x103/0x610 [ 581.501806][T25752] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 581.501818][T25752] RIP: 0033:0x4582b9 [ 581.501833][T25752] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 581.501841][T25752] RSP: 002b:00007fad71b0bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 581.501854][T25752] RAX: ffffffffffffffda RBX: 00007fad71b0bc90 RCX: 00000000004582b9 [ 581.501862][T25752] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 581.501870][T25752] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 581.501879][T25752] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fad71b0c6d4 [ 581.501887][T25752] R13: 00000000004be06a R14: 00000000004ce838 R15: 0000000000000003 [ 581.501901][T25752] Modules linked in: [ 581.503617][ T3879] kobject: 'loop1' (00000000ed74b608): kobject_uevent_env [ 581.514648][T25755] kobject: 'kvm' (00000000cbc24285): kobject_uevent_env [ 581.527195][ T3879] kobject: 'loop1' (00000000ed74b608): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 581.551593][T25755] kobject: 'kvm' (00000000cbc24285): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 581.564032][ T3879] kobject: 'loop0' (00000000416b38d5): kobject_uevent_env [ 581.659153][T25752] ---[ end trace 2249b8f4446f8db8 ]--- [ 581.665272][ T3879] kobject: 'loop0' (00000000416b38d5): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 581.676708][T25752] RIP: 0010:d_alloc_pseudo+0x33/0x70 [ 581.684200][ T3879] kobject: 'loop1' (00000000ed74b608): kobject_uevent_env [ 581.691386][T25752] Code: 41 54 49 89 fc 48 83 ec 08 e8 39 d9 b7 ff 4c 89 ee 4c 89 e7 e8 1e f1 ff ff 48 ba 00 00 00 00 00 fc ff df 48 89 c1 48 c1 e9 03 <0f> b6 14 11 84 d2 74 05 80 fa 03 7e 10 81 08 00 00 00 40 48 83 c4 [ 581.701065][ T3879] kobject: 'loop1' (00000000ed74b608): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 581.715285][T25752] RSP: 0018:ffff8880542d7c60 EFLAGS: 00010246 [ 581.737785][ T3879] kobject: 'loop0' (00000000416b38d5): kobject_uevent_env [ 581.742689][T25752] RAX: 0000000000000000 RBX: 1ffff1100a85af94 RCX: 0000000000000000 [ 581.746681][ T3879] kobject: 'loop0' (00000000416b38d5): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 581.769672][T25752] RDX: dffffc0000000000 RSI: ffffffff81b8a01f RDI: 0000000000000282 [ 581.780506][ T3879] kobject: 'loop5' (00000000cb164078): kobject_uevent_env [ 581.789754][T25752] RBP: ffff8880542d7c78 R08: ffff8880507a0280 R09: ffffed1015d05bc8 [ 581.806386][ T3879] kobject: 'loop5' (00000000cb164078): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 581.815209][T25752] R10: ffffed1015d05bc7 R11: ffff8880ae82de3b R12: ffff8880a9830a40 [ 581.856752][T25752] R13: ffff8880542d7cc0 R14: ffff8880aa397628 R15: ffff88809dd934f0 [ 581.866103][T25752] FS: 00007fad71b0c700(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 581.879670][T25752] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 581.886371][T25752] CR2: 0000000000625208 CR3: 000000008e8b0000 CR4: 00000000001406e0 [ 581.894643][T25752] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 581.903128][T25752] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 581.911139][T25752] Kernel panic - not syncing: Fatal exception [ 581.918119][T25752] Kernel Offset: disabled [ 581.922440][T25752] Rebooting in 86400 seconds..