87ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:02:59 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b51010000000027}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:02:59 executing program 4: openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) 17:02:59 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c833b1e68be0e1cab90b51b1623963298038b867090ab88effd05eb9ae29"], 0x2c) poll(&(0x7f0000000180)=[{r0}], 0x200000000000004f, 0x0) 17:02:59 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b510100fdffffff}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:02:59 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0xff0b) 17:02:59 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000280)=0x1) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x200000a1}], 0x1) fsetxattr(r0, &(0x7f0000000040)=@random={'osx.', '/dev/sg#\x00'}, &(0x7f0000000100)='/dev/sg#\x00', 0x9, 0x1) 17:02:59 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x5, 0x200) fstat(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(r1, &(0x7f0000000300)={0xa0, 0x19, 0x1, {0x32, {0x80, 0x2, 0x6}, 0x0, r2, r3, 0x1ff, 0x0, 0x0, 0x40000000, 0x0, 0x6, 0x1, 0x4, 0x9, 0x1, 0x8, 0x2, 0x6, 0x80000001, 0x3}}, 0xa0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="cdae"]) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 17:02:59 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c833b1e68be0e1cab90b51b1623963298038b867090ab88effd05eb9ae29"], 0x2c) poll(&(0x7f0000000180)=[{r0}], 0x200000000000004f, 0x0) 17:02:59 executing program 4: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x80103, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x1f) r1 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x82, 0x0) accept4(r2, &(0x7f0000000180)=@generic, &(0x7f0000000080)=0xfedb, 0x80800) 17:02:59 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b51010034000000}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:02:59 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b510100ecb90100}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:02:59 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[], 0x0) poll(&(0x7f0000000180)=[{r0}], 0x200000000000004f, 0x0) 17:02:59 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c833b1e68be0e1cab90b51b1623963298038b867090ab88effd05eb9ae29"], 0x2c) poll(&(0x7f0000000180)=[{r0}], 0x200000000000004f, 0x0) 17:02:59 executing program 4: r0 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000200)='syz0\x00', 0x200002, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xffffffffffffff01) 17:02:59 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000180)={{0x0, 0x2a9d}, 0xfffffffffffffffc, 0x0, 0x0, {0x4}}) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000280)=0x1) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x200000a1}], 0x1) 17:02:59 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x8000, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0x10, &(0x7f0000000200)=@sack_info={0x0, 0x49f, 0x3}, &(0x7f0000000240)=0xc) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000280)=@assoc_value={r3, 0x100000000}, 0x8) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="cdae"]) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) r5 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x404080, 0x2) r6 = dup3(r4, r1, 0x80000) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000180)={0x0, r6}) ioctl$KVM_RUN(r4, 0xae80, 0x0) socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fchdir(r7) 17:02:59 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYPTR64=&(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRESDEC=r0], @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB="8341c1e4af86266ed28888719944791420c5b263ca4e2722f6de44f089d05fd3c90c4e14c3763cac024ade8233d694f67c3595c87dd03c38ef74640083e442ad5759273cdbe2ad84aed1f2a67346d458ef8671727eb3faaa9d1340d240257579d489ea525a31c9fe7ca3c9a34080411f4da612ac03d62671c59295033a0cf5426dc9cda1a9faaeb85aa6dffaf04c8b165166e6d92ad5eef4fd9763b7885b395decfe3b6b155fd51a27cceaf89500c46d34fd76082c3e4b4116137e440c164231af61fdd274c41653443e958dec00a13215311260d84fad75ac6f2d6b225166e06c95143e6c229977a92a8259c0a55487e77e40964fb0982078b79dd21fe908cf1dfe3decbd82ba7666ced4275f7d42d19b71166a9aaca42fa0f042e8f8bdce45765b34d718407a715373a32182818106ca232f85947708876b23c862a552a10bac4d999f275204fe9b67ee3fb5d2b9682f8fa79dae7f6727d3e355abb294e0830ab62b27d60f65aa001634456482a4ee820db3b051112f6b0d6f8f537520d4304dcf344cb802cf4903ffaf54f99a1c961a549fd48f1f175eef5af9eab8487d1cb75dfeabead7df6c7852f0fb2d6dbcc77c777038065d5cda5705cd02ff16eb77e618a93f3d9bd1f9423e18edbe8f6f0bb6ae9d031c6187e45b4abfdc8a82e3a1564d7f4d6275faf230ee5f79002a9ae22f44136feb57dff800610eb64ea4f8dc42cea044b003c72c1e95e0d419193293c51ee193365cfd87ba53e54d35aa0bbb93ff84d5ffce259d3dbe02288d3ff25a5811d93f2494358d1617fab47b44af04840cafd6ac42122249cae52762e8d9cc9c7f8e5d03674ff8cf87b87910671b3da9f1735724d4ee39b05c55efef2ca80048bd1af576fe325c894407bd16c4566efbd02277278ebd32b6ecf2c32a09175066e397b21df43bbebe670033383c4773f041917ab73ca3c52fe2006c318ca16da328d07c5ee5817d7fb9243020a2e6915067cacb69cf5bd97e20a90e824136391ef8c5ac16640c968bd84152f9b4d2ddd4834f46fecb1ae18a3b45af28169934073d26aa23516af88a94a5e7d5398786e06bb029cec17107c5ea5aa3b713122cd9b8d6cc82fb44de3f9ddaecea5c4ae1f5c2f055574cb042c650e1d24ed6dd20eca5605c25ad44d20d6b2a247af3205ff06c4f4662bd0cdfb79871bb5acfcc9682c4a2fe8644628adae69d04116bb7f6cbd96c4be0bdddb5c7a3af18f65338b7afc05b0e04c8038e29f3444dacbe711e5c7d943235f06f85cf2d668a3f97ca20912a55b6ef301529557e4f9815cb15c39d0083bf0422f2d626aca6b506f2a4760297df3ffa1e6477a8858db3011110ac24ce50a68bc4908194b3fe88b3c591689f04171bdc983b69490e741f2e5672840852457dafe5ad10963b2c3bec154aec327458df6615290a3b8325fdf8a632509205e8118103bde34a7a8fd355910004fe50a3b6862b9bc90d92ed59b9a28af84583f8146754f5861d588a987c5a68008f92c60db7de300b8d852c6c543278336e6cf3c3d2209f75c16ce42a4f14d54fa404dc3b9d42b50d41c54fbf5f53ac0f64230853014e708020babab61d43ff7c15ad6ca2a8de459809adf1e4c2010eccb733965add2a65414c2c1bd28c9f19ca2f35bdb8c76b7e869ccae2e1ceee9c4f2d410102f802525ff43ba6b280ee98b2432c5d8627531bc25ede25b71c21304e6876ef0314e85714d4fd747ddfaa1259693ec3c7a5bd2019c69b71144c0a338d39c17b3fa99acbf2553bd29e2846a6d968a0056372eaa46b78966e657834883a2ec3ee0f1b0ada59ec3cf0568a9913d679638247f602803d9c6eaab0753b23516bc81c0c86e2041aeab6a06f9befdba8f10b300f7874eb815f5faa834c4e383d84dfd9c4d9d1c0ba46d2355582ed678071951617143c1929096653b964d79bb5ba542daafc0e4a7af79b6806d2718086c73bef8b4f452db01efaa7a5136825f43f0602c4ee58200be8ea7f40bb9f22fb721790bc0721fc72ad765195c5acfe09377f7c1f76d34a351f0d853db19b841f13d03f88465b8d2d469140b71d37e5638baf783d440409e2660df71b0a55d8df0fc385f3cb17768107184b213b51c86ed6fe71f9b81542f0472c25b0ac172ac5b78e786b6fbfc32170a5d3e76a3e0944d9eb60098565c1ca181e4b75571dab8bd20d02e82d7f8283de7aeff1689b4538a4c9090e0b878414f09af75e7507a3c25583e4f8a5c24b4e285ed6cfc50d74e4fb3788e0f5268481bc8c9b9799973a6ab1dcbe3fd902dbfb3e6cd02dfbb53dfa8659a6981ad11f63a39839a84b65db99065e0bb4d598d8570de5f522a85d6ac50ac05057e044cc4b08a89323ff7b69b5860514b9a31f64ad911556d37333d3906765da62dca796bdde91a1a0a99bfca30d13bb19622be08cfb6ecce4905eaae9421c2441d6b7dcade701475efa1db3fb10f851201c899d129058f1b91d19218f12a51e621d3159c3ae23ebd7c0541bf8a493b63964369bdfba290ef49f48665806b990716dc21eb75d175753d602f04d703671875da0281fa93dd66896876b1302c21116d18594568153f7cf9b7bf4af766891aecc2ca14ab062af4468a994dc84d1c28d9271b4a189fafdff156ce6dc85009afbcb9992fc182bf113cb22d2682e9fecda4ab45cc7372ec35bc60f8bb75d08a09d9a9b0ebcd24e48afe46eb64761236b9196dab2c20ead54901284055bd13ad0c9cbcbc52caab32ce07238b8ed9560c9ed8b63daab80c66ad8c1dab344267e7cee9ff5d09f24324b05774551b7f73bbdb728aca6d82763749f5610e4722532a873860468faa88fa65bc62011f20213bd40783c9585fc0f99ad59401493a7a36126841aa4063affb8b084bf5e537820b32c0daf6cbbec3f66c09023677a294641d7ccfaef65489dce758abc657cfce874b58c67838e2ca059e0bd6f677ad787b6dd2e47079c6fcc74332064eacbade86149c30f1ce876d5125b5b936e4c6bfc3c324d569225465ce2673d1fb1bfc7e60a20618c64aa1b63a0493076ada57631881959cc373a4227202cf60c472f806617ac241eafff56caacbeb788310bca451b1053e228db21e47d1a9e866901925a1bc5ef504d82b8454bc577ada269ca549fa3ef665e181750f3668dffd4399ecd1697c0bf5974385edb976b53de581502ef93500003b4bd1d861dfcc0d6ee33758988b8534f71a33cb3a6d62fd598f716cd605fdcea279b52e30ce02dd17bf981063ecd1ad88398db9f624c80626b66333a1558ee3b6729b924f71e3b0daa964d87188ea9a8d66690fcc9923eb876754e09903f297914e61e5a77fadfff7a20f6e9d40e880bb5bf5aa335873c5d8f5e6421c67f5feed61185cab1a3c1eb7505fc6daaf46c0def3c9db0b96a2e6c21f6396e68c189ac0ee8f1cb37d19b8ab0678848599fee22b88e39f6bca7eabbbe971115e4d8c5696061060e14674b64b5dc8dd3ae810883b2d61fe392868462ee022d55e65e824d65ada95816e84916d109b62eea574b2e9647dbabba7618b631423e6ab132ce7b2cc3810ebf06219a3f7b8194866e02c2116212ae98a2021ba729033e54547e7ffa24cf1c25de8f1d6bf8c10358c339886aed052ba4e69472f7fa7670a5349ebafdb5e3e117a79d375aa624eb62c2ffc763cb9e587a0702ae32dc3fc10d1cf7a451660debc2e9a331ba8a328e82cdd4af76237fcbb4b70e72a71d811c6eeeb38f46b4780b27f4e68fd5b012912f75eb1adb1678455ad50b3b15bb46d33aa5e3d1568d0b123b76d0ab690a6beefacf4517d8af42d289a7381661371d6577a1a68a9184036c162091b569a7f95bd9f3f4aee035746169a8d698d0b119bf2105142dc90eb98621b2374429d50c4eb673c32d68c94ef3898d96ef8c0292d088b68e8670be6807a2c6bd47369859eb8fcfe2ced1f66f40c547372d64859791e86896dee4f6df2c4c1e0b03ae0144c92ea5a100383f6f9593d281f8e7bf9864f3bf22529fbbe16cb8a3bbcd10c4100d31648d13f35b917b4c6a86f54d5c96b83b62c5b3858051bc553adef1e1a865c779616c68478d19b3c2f2bf3b29d05793ee5fb8fb4ac9068bace1888a6c2923bfea88c736272254db57a85751f609ea28e91db05344953b6f6495e3b5d262425e62e44dba37e689d4a57a2e4620b713fc2d244959fef709b9cc68a7b2375721f174ffad5b49eb2838f4537e2014cdc8bfda39e2cbc0650026052b934c9dcd1fc3b38d12046a67bf72f14f1e593a6243750f401fd1155a9586c424184656144aec6f76d84715aab524ae8d827cdf48ae3ec35538422fd70584a810acec09f2594513f0eb48b403d972b3d181fa06db572b28b1f207aee198867ddde853029eee82bb3fedb9997a679be2d059ec104f2fc13f00dfbad6746950816e05c671cef11d263e25d715972fea5e5756861be5e7ba1cf7e1668c17aa3e92510f2a33ead3af5727e722e950f4ab7240537f84e299c9f48943c4ec0b036b83f4e0b1f81af44ceae9e4141ee3eeb677674416921123507b59889f2044d24cbe48abe8d0534696c902d4c07d7ec2be71dbdb4ed0b9748fe0278ef310c2f6502ddae254d1275ef734c653bee238ab5bfb1067a907e4a15a68975e69917579fae9c1fa8764a6513e455557f780582d1e2dfc3b797d747ac18d160069cb1817cc454043eb23d8a38731b8031878a4396e2c7ea87d9d22b17a4a281eb5576d8afb24eb16abcf132a0e9eebde5bd1fdd5211413cc7555946e77384ac55e7801820962a01890856a3abe9122ceb1b146b42e98b89b6a4b0860d985bd1c0acef5c47c09695b04875faf165fbef819a6fcac3e11144af7eacb4fc66e7a7a86decabdac4e2d0e644395efcb2e819c361f7d8650d609ea2e0e8fd230afb09d6995709f43f0555825bef7d99db1e7c1d02d39f8943f7e84d4b828e634f581fd1f89840a6ea0f9654777f4785f18a85eb615649d4ef8852cd85dbb4f4815e51998531da80ff1dfc6390b4942033eb65196501a4a1f7517081b3e78a27f628fae56ee8a12fa87d5af73d19f66eec13b724a55f3510b1fc36157b8ec987ec11483c37e78ca3e9ac0ca464abde665085d2c891c17e07b4a4345500d1288394ebdbdf4b5668399462c59238aa081deed1091db082d263197e41df8d933a8fd14ca64fe89b6ca5d3f44a4a55ca54e74ca7105d10da767774e8a6461e0df8bd7c752c5a7fb3f832a1bf9674d96d94e0a065c33130145669f7da81a1eb372572fcb0e3c72ab89ce08bfdccf5bfdffacf96ed587b301c45afd9a47db730ba5b2f595934e4ee7d7788be64fa9b7bf8cd73d5cdca4e7707d2f7caef479ea2a10bd6ce85c6c4ac119d02042d93725f352083a31f9f9387b41d4207635f5584a2f9abe5dc75571db226708672000d96e840e6c81374f2bd4b14883d562237f2c452e4716502e820c4b437fe60117327f16e4cc4515d366fc29d3c64e0169d22aeb174efc67c7bdfe9611c93c45caa9f75f50ce8ea6b53d4ce385b19682a6d79704620ef5ee7a5cf420f96b72dad040d17dbbdab617e3dca2c225f7dbe8c142c70e20999de9265d3f97a38c63643533740aed29c3a5ad96a4d061973de86ebde205508654cbbaab15834fc84096399f88ed31e85299bfedb960b866c05a461b645ed932b68bdf55a8c5416367f64c63d3babb11b38eacf54b9415899f304693830e5346b8d66283b12d2a7daabc58bd7f1adcebee84928cc8486aa7292d0745b4c582b8eacf638ea81a84c476cf5ab350", @ANYRES64=r0]], 0x10) 17:02:59 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b5101000000007b}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:02:59 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c833b1e68be0e1cab90b51b1623963298038b867090ab88effd05eb9ae2930cf7dd2"], 0x30) poll(&(0x7f0000000180)=[{r0}], 0x200000000000004f, 0x0) 17:02:59 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b5101000000d500}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:02:59 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = memfd_create(&(0x7f0000000080)='\x00', 0x2) ioctl$sock_inet_SIOCGARP(r2, 0x8954, &(0x7f0000000180)={{0x2, 0x4e21, @multicast1}, {0x6}, 0x40, {0x2, 0x4e23, @rand_addr=0x1}, 'ip6_vti0\x00'}) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="cdae"]) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) userfaultfd(0x80800) ioctl$KVM_RUN(r3, 0xae80, 0x0) 17:02:59 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b51010000003e00}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:02:59 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c833b1e68be0e1cab90b51b1623963298038b867090ab88effd05eb9ae2930"], 0x2d) poll(&(0x7f0000000180)=[{r0}], 0x200000000000004f, 0x0) 17:02:59 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000040)={r0, 0x0, 0xfffffffffffffff9, 0x33b}) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000280)=0x1) socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="158dd25d76605170") readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x200000a1}], 0x1) 17:02:59 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/autofs\x00', 0x40400, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000480)='/dev/adsp#\x00', 0x7, 0x80501) ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, &(0x7f0000000400)=ANY=[]) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 17:03:00 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x2) syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x1a5800) write$UHID_DESTROY(r0, &(0x7f0000000080), 0x4) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x20800, 0x0) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000100)={0x3, 0xffffffffffffff9c}) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) 17:03:00 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000280)=0x1) r1 = syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0x5, 0x40000) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000200)={0x0, 0xeec}, &(0x7f00000002c0)=0x8) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000340)="eae8fca1012d73f6e244edfab31b9c7003ada942485b5717131bf8b0614952dfc81c226f2138d314f6a570b7cb723c4afff9efe07a54e436f128f1d5390229a789705ef4840e79e9d0d7b7d85eccf54057a6e1aa02570839d92f4411b88cab7304aca786abe899ea02fe17c598884854fdaa12c190f3011e40aad3e15c3a141838a5a734d6448b8ac4c090ef", 0x8c) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000300)={0xce45, 0x8, 0x7f, 0x2, r2}, 0x10) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x200000a1}], 0x1) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x400, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x4000, 0x0) ioctl$NBD_SET_SOCK(r4, 0xab00, r5) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000180)={r0, r4}) 17:03:00 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c833b1e68be0e1cab90b51b1623963298038b867090ab88effd05eb9ae2930"], 0x2d) poll(&(0x7f0000000180)=[{r0}], 0x200000000000004f, 0x0) 17:03:00 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b5101000000003e}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:03:00 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x2) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000080)=""/75) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000100)={0x0, 0x57ac}, &(0x7f0000000140)=0x8) ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f00000001c0)) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000180)={r2, 0x9, 0x7, 0x4}, 0x10) 17:03:00 executing program 4: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r4 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) tkill(r4, 0x1000000000016) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000280)=0x1) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x57}], 0x1) 17:03:00 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000080)=ANY=[@ANYBLOB="f4aeeb16c555cc1ce5d88b99e162944ac0531133b04a4067"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:03:00 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) syz_emit_ethernet(0x8a, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaabbffb9db563eff91002600810041008847ff00000000000000000000000000bbb283e6a33bff6f09ea573b10000011bb1190395f5b07b08e12549fc1ffffff07e5950745dfcee377bf7b62b969908630c03f997c64ca881c52246f6eb5942666256dcb6981dba6b943bec68c51900d7732f522f69d357cde03f0f601f7f4407afbbaf4f2fdb5c90ce74c946483c373c7b3796a1cb7ca394cf923a9aa302c47ba51f222eaf9d2c7bba42bf996d6392bfb13f3d34191c1182b12995557f93950fefd6a628cbb671e4e5b8939b088e9edc64203f9cb4afbf4f3ea"], &(0x7f0000000100)={0x1, 0x1, [0x27d, 0x5b4, 0x8ca, 0x55]}) ioctl$KVM_PPC_GET_SMMU_INFO(r0, 0x8250aea6, &(0x7f0000000140)=""/107) 17:03:00 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c833b1e68be0e1cab90b51b1623963298038b867090ab88effd05eb9ae2930"], 0x2d) poll(&(0x7f0000000180)=[{r0}], 0x200000000000004f, 0x0) 17:03:00 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b51010000000052}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:03:00 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b51010000000036}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:03:00 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c833b1e68be0e1cab90b51b1623963298038b867090ab88effd05eb9ae2930cf7d"], 0x2f) poll(&(0x7f0000000180)=[{r0}], 0x200000000000004f, 0x0) 17:03:00 executing program 3 (fault-call:11 fault-nth:0): r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r4 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) tkill(r4, 0x1000000000016) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000280)=0x1) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x57}], 0x1) 17:03:00 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000100)=0x4) socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8915, &(0x7f0000000180)="153f6234488d0200000070ce7a546f49224d54f38432a6e0f3968339696ee99c4fa2438ce7520d1327e87e69276a76e08679f492288a5aead82dc5e461") readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x200000a1}], 0x1) 17:03:00 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="cdae"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:03:00 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b510100ef000000}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:03:00 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c833b1e68be0e1cab90b51b1623963298038b867090ab88effd05eb9ae2930cf7d"], 0x2f) poll(&(0x7f0000000180)=[{r0}], 0x200000000000004f, 0x0) 17:03:00 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b51010000000036}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:03:00 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r4 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) tkill(r4, 0x1000000000016) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000280)=0x1) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x57}], 0x1) 17:03:00 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c833b1e68be0e1cab90b51b1623963298038b867090ab88effd05eb9ae2930cf7d"], 0x2f) poll(&(0x7f0000000180)=[{r0}], 0x200000000000004f, 0x0) 17:03:00 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b51010000004c00}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:03:00 executing program 4 (fault-call:5 fault-nth:0): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r1 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) tkill(r1, 0x1000000000016) 17:03:00 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="c9ae"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:03:00 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r4 = gettid() semop(0x0, &(0x7f0000000040)=[{0x3f00000000000000, 0xffff}], 0x1) tkill(r4, 0x1000000000016) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000280)=0x1) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x57}], 0x1) 17:03:00 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c833b1e68be0e1cab90b51b1623963298038b867090ab88effd05eb9ae2930cf7dd2"], 0x30) poll(&(0x7f0000000180), 0x0, 0x0) 17:03:01 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x400000000000, 0x0) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000280)=0x1) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x200000a1}], 0x1) ioctl$int_out(r1, 0x2, &(0x7f0000000040)) 17:03:01 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b510100000000f2}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:03:01 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r1 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) tkill(r1, 0x1000000000016) 17:03:01 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c833b1e68be0e1cab90b51b1623963298038b867090ab88effd05eb9ae2930cf7dd2"], 0x30) poll(&(0x7f0000000180), 0x0, 0x0) 17:03:01 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r4 = gettid() semop(0x0, &(0x7f0000000040)=[{0x3f00, 0xffff}], 0x1) tkill(r4, 0x1000000000016) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000280)=0x1) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x57}], 0x1) 17:03:01 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c833b1e68be0e1cab90b51b1623963298038b867090ab88effd05eb9ae2930cf7dd2"], 0x30) poll(&(0x7f0000000180), 0x0, 0x0) 17:03:01 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="cdae"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:03:01 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r4 = gettid() semop(0x0, &(0x7f0000000040)=[{0x4000, 0xffff}], 0x1) tkill(r4, 0x1000000000016) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000280)=0x1) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x57}], 0x1) 17:03:01 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b5101000f010000}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:03:01 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r1 = gettid() semop(0x0, &(0x7f0000000040)=[{0x100000000000000, 0xffff}], 0x1) tkill(r1, 0x1000000000016) 17:03:01 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c833b1e68be0e1cab90b51b1623963298038b867090ab88effd05eb9ae2930cf7dd2"], 0x30) poll(&(0x7f0000000180)=[{}], 0x200000000000004f, 0x0) 17:03:01 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="cdb3"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:03:01 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x2) lsetxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)=@random={'os2.', '\x00'}, &(0x7f00000003c0)='/dev/vcs\x00', 0x9, 0x1) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYRESOCT=r0, @ANYRESDEC=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRESDEC=r0, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESHEX=r0, @ANYRES64=r0], @ANYRESOCT=r0, @ANYRES64=r0, @ANYRES64=r0], 0x2f) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000280)=0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000040)={@mcast2, 0x0}, &(0x7f00000002c0)=0x14) connect$packet(r1, &(0x7f0000000300)={0x11, 0x7, r2, 0x1, 0x3e, 0x6, @local}, 0x14) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x200000a1}], 0x1) 17:03:01 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c833b1e68be0e1cab90b51b1623963298038b867090ab88effd05eb9ae2930cf7dd2"], 0x30) poll(&(0x7f0000000180)=[{}], 0x200000000000004f, 0x0) 17:03:01 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r4 = gettid() semop(0x0, &(0x7f0000000040)=[{0x4000000000000000, 0xffff}], 0x1) tkill(r4, 0x1000000000016) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000280)=0x1) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x57}], 0x1) 17:03:01 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b51010000002100}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:03:01 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r1 = gettid() semop(0x0, &(0x7f0000000040)=[{0x1000000, 0xffff}], 0x1) tkill(r1, 0x1000000000016) 17:03:01 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c833b1e68be0e1cab90b51b1623963298038b867090ab88effd05eb9ae2930cf7dd2"], 0x30) poll(&(0x7f0000000180)=[{}], 0x200000000000004f, 0x0) 17:03:01 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x20000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0xe63a, 0x40) setsockopt$IP_VS_SO_SET_TIMEOUT(r3, 0x0, 0x48a, &(0x7f00000000c0)={0xbec, 0xfffffffffffffff8, 0x1}, 0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) fcntl$notify(r3, 0x402, 0x4) setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f00000003c0)={0x3f}, 0x4) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000001c0)={{{@in6, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@dev}}, &(0x7f0000000300)=0xe8) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0xc) write$P9_RVERSION(r3, &(0x7f0000000400)={0x15, 0x65, 0xffff, 0x4, 0x8, '9P2000.u'}, 0x15) fchownat(r3, &(0x7f0000000180)='./file0\x00', r4, r5, 0x400) 17:03:01 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r4 = gettid() semop(0x0, &(0x7f0000000040)=[{0xffffffff00000000, 0xffff}], 0x1) tkill(r4, 0x1000000000016) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000280)=0x1) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x57}], 0x1) 17:03:01 executing program 0 (fault-call:4 fault-nth:0): r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c833b1e68be0e1cab90b51b1623963298038b867090ab88effd05eb9ae2930cf7dd2"], 0x30) poll(&(0x7f0000000180)=[{r0}], 0x200000000000004f, 0x0) 17:03:01 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b510100000000bb}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:03:01 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r1 = gettid() semop(0x0, &(0x7f0000000040)=[{0xe000000, 0xffff}], 0x1) tkill(r1, 0x1000000000016) [ 494.105712] FAULT_INJECTION: forcing a failure. [ 494.105712] name failslab, interval 1, probability 0, space 0, times 0 [ 494.143805] CPU: 1 PID: 20243 Comm: syz-executor0 Not tainted 4.19.0-rc4+ #27 17:03:01 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b51010097ffffff}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) [ 494.151158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 494.151167] Call Trace: [ 494.151191] dump_stack+0x1c4/0x2b4 [ 494.151213] ? dump_stack_print_info.cold.2+0x52/0x52 [ 494.151243] ? __lock_acquire+0x7ec/0x4ec0 [ 494.172039] should_fail.cold.4+0xa/0x17 [ 494.172063] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 494.172081] ? print_usage_bug+0xc0/0xc0 [ 494.172110] ? graph_lock+0x170/0x170 [ 494.172129] ? graph_lock+0x170/0x170 [ 494.172154] ? mark_held_locks+0x130/0x130 [ 494.201425] ? find_held_lock+0x36/0x1c0 [ 494.205524] ? ___might_sleep+0x1ed/0x300 [ 494.209708] ? arch_local_save_flags+0x40/0x40 [ 494.214318] ? lock_release+0x970/0x970 [ 494.218318] ? arch_local_save_flags+0x40/0x40 [ 494.222934] __should_failslab+0x124/0x180 [ 494.227199] should_failslab+0x9/0x14 [ 494.231025] __kmalloc+0x2d4/0x760 [ 494.234591] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 494.240164] ? do_sys_poll+0x276/0x1180 [ 494.244164] ? _copy_from_user+0xdf/0x150 [ 494.248345] do_sys_poll+0x276/0x1180 [ 494.252199] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 494.257758] ? _parse_integer+0x134/0x180 [ 494.261931] ? graph_lock+0x170/0x170 [ 494.265756] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 494.271316] ? _kstrtoull+0x188/0x250 [ 494.275147] ? compat_core_sys_select+0xb10/0xb10 [ 494.280010] ? graph_lock+0x170/0x170 [ 494.283829] ? lock_release+0x970/0x970 [ 494.287822] ? arch_local_save_flags+0x40/0x40 [ 494.292434] ? find_held_lock+0x36/0x1c0 [ 494.296518] ? graph_lock+0x170/0x170 [ 494.300375] ? lock_downgrade+0x900/0x900 [ 494.304552] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 494.310128] ? proc_fail_nth_write+0x9e/0x210 [ 494.314657] ? proc_cwd_link+0x1d0/0x1d0 [ 494.318756] ? find_held_lock+0x36/0x1c0 [ 494.322844] ? kasan_check_write+0x14/0x20 [ 494.327108] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 494.332067] ? wait_for_completion+0x8a0/0x8a0 [ 494.336687] ? __lock_is_held+0xb5/0x140 [ 494.340776] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 494.346339] ? check_preemption_disabled+0x48/0x200 [ 494.351396] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 494.356961] ? poll_select_set_timeout+0x156/0x240 [ 494.361926] ? do_restart_poll+0x2e0/0x2e0 [ 494.366195] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 494.371762] ? do_syscall_64+0x9a/0x820 [ 494.375765] ? do_syscall_64+0x9a/0x820 [ 494.379770] __x64_sys_poll+0x197/0x530 [ 494.383771] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 494.389178] ? __ia32_sys_pselect6+0x270/0x270 [ 494.389207] do_syscall_64+0x1b9/0x820 [ 494.397677] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 494.403053] ? syscall_return_slowpath+0x5e0/0x5e0 [ 494.407986] ? trace_hardirqs_on_caller+0x310/0x310 [ 494.413024] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 494.418064] ? recalc_sigpending_tsk+0x180/0x180 [ 494.422869] ? kasan_check_write+0x14/0x20 [ 494.427151] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 494.432042] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 494.437249] RIP: 0033:0x457679 [ 494.440456] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 494.459376] RSP: 002b:00007fe3b1d6ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 494.467115] RAX: ffffffffffffffda RBX: 00007fe3b1d6f6d4 RCX: 0000000000457679 [ 494.474419] RDX: 0000000000000000 RSI: 200000000000004f RDI: 0000000020000180 [ 494.481702] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 494.488991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 494.496279] R13: 00000000004d4740 R14: 00000000004c302f R15: 0000000000000000 17:03:02 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r4 = gettid() semop(0x0, &(0x7f0000000040)=[{0xe, 0xffff}], 0x1) tkill(r4, 0x1000000000016) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000280)=0x1) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x57}], 0x1) 17:03:02 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r1 = gettid() semop(0x0, &(0x7f0000000040)=[{0x3f000000, 0xffff}], 0x1) tkill(r1, 0x1000000000016) 17:03:02 executing program 0 (fault-call:4 fault-nth:1): r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c833b1e68be0e1cab90b51b1623963298038b867090ab88effd05eb9ae2930cf7dd2"], 0x30) poll(&(0x7f0000000180)=[{r0}], 0x200000000000004f, 0x0) 17:03:02 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000080)=ANY=[@ANYBLOB="8f56edc69999"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000000), 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x400000, 0x0) ioctl$UI_GET_VERSION(r3, 0x8004552d, &(0x7f0000000180)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 17:03:02 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000280)=0x1) r1 = memfd_create(&(0x7f0000000180)='/dev/sg#\x00', 0x4) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000002c0)=""/233) socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8915, &(0x7f0000000100)="153f6234488dd25d766070") open(&(0x7f0000000040)='./file0\x00', 0x200, 0x2) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x200000a1}], 0x1) 17:03:02 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b51010018000000}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:03:02 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c833b1e68be0e1cab90b51b1623963298038b867090ab88effd05eb9ae2930cf7dd2"], 0x30) poll(&(0x7f0000000180)=[{r0}], 0x200000000000004f, 0x0) 17:03:02 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r4 = gettid() semop(0x0, &(0x7f0000000040)=[{0x5000000, 0xffff}], 0x1) tkill(r4, 0x1000000000016) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000280)=0x1) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x57}], 0x1) 17:03:03 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b51010094000000}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:03:03 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r1 = gettid() semop(0x0, &(0x7f0000000040)=[{0x600, 0xffff}], 0x1) tkill(r1, 0x1000000000016) 17:03:03 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="cdae"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000000), 0x0) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x2, 0x6261e541}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f00000001c0)={r4, 0x92}, &(0x7f0000000200)=0x8) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:03:03 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c833b1e68be0e1cab90b51b1623963298038b867090ab88effd05eb9ae2930cf7dd2"], 0x30) poll(&(0x7f0000000180)=[{r0, 0x200000000000000}], 0x200000000000004f, 0x0) 17:03:03 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r4 = gettid() semop(0x0, &(0x7f0000000040)=[{0x500000000000000, 0xffff}], 0x1) tkill(r4, 0x1000000000016) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000280)=0x1) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x57}], 0x1) 17:03:03 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r1 = gettid() semop(0x0, &(0x7f0000000040)=[{0x6000000, 0xffff}], 0x1) tkill(r1, 0x1000000000016) 17:03:03 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b5101000000002c}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:03:03 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="cdae"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 495.706477] sg_write: 18 callbacks suppressed [ 495.706492] sg_write: data in/out 65499/33 bytes for SCSI command 0x0-- guessing data in; [ 495.706492] program syz-executor5 not setting count and/or reply_len properly [ 495.743536] sg_write: data in/out 65499/33 bytes for SCSI command 0x0-- guessing data in; [ 495.743536] program syz-executor5 not setting count and/or reply_len properly 17:03:03 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b5101000000004c}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:03:03 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c833b1e68be0e1cab90b51b1623963298038b867090ab88effd05eb9ae2930cf7dd2"], 0x30) poll(&(0x7f0000000180)=[{r0, 0xffc99a3b}], 0x200000000000004f, 0x0) 17:03:03 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r4 = gettid() semop(0x0, &(0x7f0000000040)=[{0xe000000, 0xffff}], 0x1) tkill(r4, 0x1000000000016) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000280)=0x1) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x57}], 0x1) 17:03:03 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r1 = gettid() semop(0x0, &(0x7f0000000040)=[{0x4000, 0xffff}], 0x1) tkill(r1, 0x1000000000016) 17:03:03 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x101000, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc058534f, &(0x7f0000000080)={{0x0, 0x5}, 0x1, 0x0, 0x55a, {0x0, 0x4}, 0xfffffffffffffffd}) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000280)=0x1) socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x9, &(0x7f0000000180)="153f6234488dd25d766070") readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x200000a1}], 0x1) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5387, &(0x7f00000001c0)) 17:03:03 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0xc0040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="cdae"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:03:03 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c833b1e68be0e1cab90b51b1623963298038b867090ab88effd05eb9ae2930cf7dd2"], 0x30) poll(&(0x7f0000000180)=[{r0, 0x10000000}], 0x200000000000004f, 0x0) 17:03:03 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b5101000000001e}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:03:03 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r1 = gettid() semop(0x0, &(0x7f0000000040)=[{0xe00, 0xffff}], 0x1) tkill(r1, 0x1000000000016) 17:03:03 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r4 = gettid() semop(0x0, &(0x7f0000000040)=[{0x40000000, 0xffff}], 0x1) tkill(r4, 0x1000000000016) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000280)=0x1) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x57}], 0x1) 17:03:03 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000480)}) timer_create(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="b70da8c5614ddb2bb492395e9650b7e797f67661f5a2fe", &(0x7f0000000240)}}, &(0x7f00000001c0)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) clone(0x820002102011ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000200)) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f9, &(0x7f0000000140)='sit0\x00') r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="cdae"]) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000000), 0x0) r5 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000180)="66d057efefe36968c1df510dcba8c72e41e9591ef9184fa98ac76b3f990bdc65a84a8cb31b754040578ed4c2e1b5fc0e86f17bbf5719f3c3b295ba0240c3e383dd2a4d5d020bf3429ff227e5", 0x4c, 0xffffffffffffffff) r6 = request_key(&(0x7f0000000240)='cifs.spnego\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000300)='/dev/kvm\x00', 0xfffffffffffffffa) keyctl$instantiate(0xc, r5, &(0x7f0000000200), 0x0, r6) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 17:03:03 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c833b1e68be0e1cab90b51b1623963298038b867090ab88effd05eb9ae2930cf7dd2"], 0x30) poll(&(0x7f0000000180)=[{r0, 0x10}], 0x200000000000004f, 0x0) 17:03:03 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b510100edb90100}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:03:03 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r1 = gettid() semop(0x0, &(0x7f0000000040)=[{0x3f00000000000000, 0xffff}], 0x1) tkill(r1, 0x1000000000016) 17:03:03 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r4 = gettid() semop(0x0, &(0x7f0000000040)=[{0x1000000, 0xffff}], 0x1) tkill(r4, 0x1000000000016) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000280)=0x1) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x57}], 0x1) 17:03:03 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b5101000000cb00}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) [ 496.338565] sg_write: data in/out 65499/33 bytes for SCSI command 0x0-- guessing data in; [ 496.338565] program syz-executor5 not setting count and/or reply_len properly [ 496.361076] sg_write: data in/out 65499/33 bytes for SCSI command 0x0-- guessing data in; [ 496.361076] program syz-executor5 not setting count and/or reply_len properly 17:03:04 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c833b1e68be0e1cab90b51b1623963298038b867090ab88effd05eb9ae2930cf7dd2"], 0x30) poll(&(0x7f0000000180)=[{r0, 0x2}], 0x200000000000004f, 0x0) 17:03:04 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:03:04 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r1 = gettid() semop(0x0, &(0x7f0000000040)=[{0x40000000, 0xffff}], 0x1) tkill(r1, 0x1000000000016) 17:03:04 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b51010000007900}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:03:04 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r4 = gettid() semop(0x0, &(0x7f0000000040)=[{0x500, 0xffff}], 0x1) tkill(r4, 0x1000000000016) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000280)=0x1) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x57}], 0x1) 17:03:04 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x2) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/mixer\x00', 0x200, 0x0) write$P9_RATTACH(r1, &(0x7f0000000500)={0x14, 0x69, 0x2, {0xc, 0x2, 0x5}}, 0x14) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200)='/dev/hwrng\x00', 0x200000, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f00000003c0)={@mcast2}, &(0x7f0000000400)=0x14) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000280)=0x1) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x200000a1}], 0x1) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x8000, 0x0) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@remote}}, &(0x7f00000001c0)=0xe8) accept$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000480)=0x14) getsockname$packet(r3, &(0x7f0000002e40)={0x11, 0x0, 0x0}, &(0x7f0000002e80)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000002f00)={{{@in6=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@dev}}, &(0x7f0000003000)=0xe8) getpeername$packet(0xffffffffffffff9c, &(0x7f0000003080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000030c0)=0x14) sendmsg$TEAM_CMD_NOOP(r4, &(0x7f0000003340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000003300)={&(0x7f0000003100)={0x1cc, r5, 0x1, 0x70bd28, 0x25dfdbfc, {}, [{{0x8, 0x1, r6}, {0xb4, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x14}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r7}}}]}}, {{0x8, 0x1, r8}, {0xf4, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0xb}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0xa3}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x6c}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x6}}}]}}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x40000}, 0x20040000) 17:03:04 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c833b1e68be0e1cab90b51b1623963298038b867090ab88effd05eb9ae2930cf7dd2"], 0x30) poll(&(0x7f0000000180)=[{r0, 0x3b9ac9ff}], 0x200000000000004f, 0x0) 17:03:04 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r4 = gettid() semop(0x0, &(0x7f0000000040)=[{0x5, 0xffff}], 0x1) tkill(r4, 0x1000000000016) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000280)=0x1) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x57}], 0x1) 17:03:04 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b51010000001e00}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:03:04 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c833b1e68be0e1cab90b51b1623963298038b867090ab88effd05eb9ae2930cf7dd2"], 0x30) poll(&(0x7f0000000180)=[{r0, 0x1000000000000000}], 0x200000000000004f, 0x0) 17:03:04 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r1 = gettid() semop(0x0, &(0x7f0000000040)=[{0x3f00, 0xffff}], 0x1) tkill(r1, 0x1000000000016) 17:03:04 executing program 2: r0 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000300), 0x0, 0x0, 0xfffffffffffffffe) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) keyctl$setperm(0x5, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000200)) keyctl$describe(0x16, r0, &(0x7f0000000240)=""/140, 0x8c) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x1, 0x0) ioctl$BLKSECDISCARD(r5, 0x127d, &(0x7f0000000180)) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="cdae"]) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r6, 0xae80, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x20003, 0x1) 17:03:04 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r4 = gettid() semop(0x0, &(0x7f0000000040)=[{0x100000000000000, 0xffff}], 0x1) tkill(r4, 0x1000000000016) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000280)=0x1) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x57}], 0x1) 17:03:04 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b51010000004a00}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:03:04 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c833b1e68be0e1cab90b51b1623963298038b867090ab88effd05eb9ae2930cf7dd2"], 0x30) poll(&(0x7f0000000180)=[{r0, 0x100000000000000}], 0x200000000000004f, 0x0) 17:03:04 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r1 = gettid() semop(0x0, &(0x7f0000000040)=[{0xe, 0xffff}], 0x1) tkill(r1, 0x1000000000016) 17:03:04 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c833b1e68be0e1cab90b51b1623963298038b867090ab88effd05eb9ae2930cf7dd2"], 0x30) poll(&(0x7f0000000180)=[{r0, 0x1000000000000}], 0x200000000000004f, 0x0) [ 496.970654] sg_write: data in/out 65499/33 bytes for SCSI command 0x0-- guessing data in; [ 496.970654] program syz-executor5 not setting count and/or reply_len properly [ 497.030326] sg_write: data in/out 65499/33 bytes for SCSI command 0x0-- guessing data in; [ 497.030326] program syz-executor5 not setting count and/or reply_len properly 17:03:04 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b510100000000cb}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:03:04 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r4 = gettid() semop(0x0, &(0x7f0000000040)=[{0xe00, 0xffff}], 0x1) tkill(r4, 0x1000000000016) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000280)=0x1) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x57}], 0x1) 17:03:04 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r1 = gettid() semop(0x0, &(0x7f0000000040)=[{0x6, 0xffff}], 0x1) tkill(r1, 0x1000000000016) 17:03:04 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c833b1e68be0e1cab90b51b1623963298038b867090ab88effd05eb9ae2930cf7dd2"], 0x30) poll(&(0x7f0000000180)=[{r0, 0xffc99a3b00000000}], 0x200000000000004f, 0x0) 17:03:04 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="cdae"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x3, 0x2) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000000c0)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000180)=0x18) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000001c0)={r4, @in6={{0xa, 0x4e22, 0x9, @loopback, 0x8}}, 0x20, 0x8000, 0xc87, 0xea6, 0x18}, &(0x7f0000000280)=0x98) ioctl$DRM_IOCTL_VERSION(r3, 0xc0406400, &(0x7f0000000540)={0x5, 0x6, 0x94, 0x8c, &(0x7f0000000300)=""/140, 0xae, &(0x7f00000003c0)=""/174, 0x8b, &(0x7f0000000480)=""/139}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:03:04 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000100)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) r2 = dup3(r1, r1, 0x80000) ioctl$RTC_AIE_ON(r2, 0x7001) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = dup2(r0, r0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r3, 0x12, 0x2, &(0x7f0000000180)=""/94, &(0x7f0000000040)=0x5e) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f00000002c0)) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/33, 0x21}], 0x1) 17:03:04 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r4 = gettid() semop(0x0, &(0x7f0000000040)=[{0xe00000000000000, 0xffff}], 0x1) tkill(r4, 0x1000000000016) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000280)=0x1) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x57}], 0x1) 17:03:04 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r1 = gettid() semop(0x0, &(0x7f0000000040)=[{0x600000000000000, 0xffff}], 0x1) tkill(r1, 0x1000000000016) 17:03:04 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c833b1e68be0e1cab90b51b1623963298038b867090ab88effd05eb9ae2930cf7dd2"], 0x30) poll(&(0x7f0000000180)=[{r0, 0x1000000}], 0x200000000000004f, 0x0) 17:03:04 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b510100000000c8}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:03:04 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000080)=ANY=[@ANYBLOB="cdae54d9e5a6fec5a058dab30e5a150adc09638c692ecc47fb8cb1d64d1bd872be918c5068da2f79beae7fce4eff15a8820692b7a8bb33baf17036e4e891279e7ceaa73df387cb5586a83dc79b1f5bc3531bed2234cd4d1410f383714a17a5e6f1e8c7"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x0, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000001040)={0x0, 0x0, 0x2080}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:03:04 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c833b1e68be0e1cab90b51b1623963298038b867090ab88effd05eb9ae2930cf7dd2"], 0x30) poll(&(0x7f0000000180)=[{r0, 0x2000000}], 0x200000000000004f, 0x0) 17:03:04 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r4 = gettid() semop(0x0, &(0x7f0000000040)=[{0x3f000000, 0xffff}], 0x1) tkill(r4, 0x1000000000016) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000280)=0x1) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x57}], 0x1) 17:03:04 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r1 = gettid() semop(0x0, &(0x7f0000000040)=[{0xe00000000000000, 0xffff}], 0x1) tkill(r1, 0x1000000000016) 17:03:05 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b5101000001b9eb}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:03:05 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c833b1e68be0e1cab90b51b1623963298038b867090ab88effd05eb9ae2930cf7dd2"], 0x30) poll(&(0x7f0000000180)=[{r0, 0x0, 0x2}], 0x200000000000004f, 0x0) 17:03:05 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r0, 0xae80, 0x0) 17:03:05 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0xffffffffffffffff, 0x1000040000000002) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x80, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000100)={0x8000, 0x9, 0x200, 0xc9, 0x9, 0xfa9, 0x81}, 0xc) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f00000001c0)=0xffffffffffffffff) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0x2) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f00000002c0)) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x200000a1}], 0x1) ioctl$EVIOCGPROP(r2, 0x80404509, &(0x7f0000000340)=""/108) 17:03:05 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r4 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff, 0xffffffff00000000}], 0x1) tkill(r4, 0x1000000000016) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000280)=0x1) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x57}], 0x1) 17:03:05 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r1 = gettid() semop(0x0, &(0x7f0000000040)=[{0x4000000000000000, 0xffff}], 0x1) tkill(r1, 0x1000000000016) 17:03:05 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c833b1e68be0e1cab90b51b1623963298038b867090ab88effd05eb9ae2930cf7dd2"], 0x30) poll(&(0x7f0000000180)=[{r0, 0x0, 0x100000000000000}], 0x200000000000004f, 0x0) 17:03:05 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="cdc2"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x0, 0x3, 0x5, 0x7fffffff, 0xfffffffffffffbff, 0x2, 0x1f, 0x2, 0x1000, 0x16374eae, 0xfffffffffffffff9, 0x9, 0x4}, {0x401, 0x5, 0x1, 0x3ff, 0x4, 0x7, 0x9, 0x10000, 0x0, 0xfc, 0x100000001, 0xe7e, 0x293f}, {0x4, 0xfffffffffffffb64, 0x9, 0xde0, 0xbcd2, 0x2, 0x5, 0x5, 0x7, 0x80, 0x80000001, 0x1, 0x8}], 0x100000001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:03:05 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b510100000000d0}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) [ 497.691933] sg_write: data in/out 65499/33 bytes for SCSI command 0x0-- guessing data in; [ 497.691933] program syz-executor5 not setting count and/or reply_len properly [ 497.711352] sg_write: data in/out 65499/33 bytes for SCSI command 0x0-- guessing data in; [ 497.711352] program syz-executor5 not setting count and/or reply_len properly 17:03:05 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c833b1e68be0e1cab90b51b1623963298038b867090ab88effd05eb9ae2930cf7dd2"], 0x30) poll(&(0x7f0000000180)=[{r0, 0x0, 0x1000000000000000}], 0x200000000000004f, 0x0) 17:03:05 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b5101000000005d}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:03:05 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r4 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff, 0x3f000000}], 0x1) tkill(r4, 0x1000000000016) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000280)=0x1) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x57}], 0x1) 17:03:05 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r1 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff, 0xe}], 0x1) tkill(r1, 0x1000000000016) 17:03:05 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x200000, 0x112) bind$unix(r1, &(0x7f0000000480)=@abs={0x0, 0x0, 0x4e23}, 0x6e) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0xc) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="cdae"]) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000000200), 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) accept$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000000c0)=0x1c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x8000, 0x3, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 17:03:05 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c833b1e68be0e1cab90b51b1623963298038b867090ab88effd05eb9ae2930cf7dd2"], 0x30) poll(&(0x7f0000000180)=[{r0, 0x0, 0x1000000}], 0x200000000000004f, 0x0) 17:03:05 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x40080, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300)='/dev/hwrng\x00', 0x100, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001500)={{{@in=@rand_addr, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000001600)=0xe8) sendmsg$nl_route_sched(r1, &(0x7f00000016c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)=@getqdisc={0x38, 0x26, 0x400, 0x70bd26, 0x25dfdbff, {0x0, r2, {0x0, 0xffff}, {0xfff3, 0x1}, {0xffe0, 0x3}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x800) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000001c0)=0x1) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x9, 0x0, 0x2000}, 0x4) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x200000a1}], 0x1) 17:03:05 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b51010000000022}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:03:05 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r1 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff, 0x600000000000000}], 0x1) tkill(r1, 0x1000000000016) 17:03:05 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c833b1e68be0e1cab90b51b1623963298038b867090ab88effd05eb9ae2930cf7dd2"], 0x30) poll(&(0x7f0000000180)=[{r0, 0x0, 0xffc99a3b}], 0x200000000000004f, 0x0) 17:03:05 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r4 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff, 0x500}], 0x1) tkill(r4, 0x1000000000016) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000280)=0x1) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x57}], 0x1) 17:03:05 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000180)=ANY=[@ANYBLOB="c0731506900111bdeaf9565da823f75c262db29f4eb796a27bc97e22936f4606a9a1cafc413a7cf42641ff95f322706df1a79015f0eb106b64bf78bdaf563755872c01f4ed9e9f32a9423f573db4020b67f1c452c7df6d950e5f0f03ffff322a1b21221321aa1a860dfd32cd295cd2dd791282d5a01a3bc43a5226b3e45567ab25702917acf9dab20a107b79ce03f90eab120c005fbc2114fe3a6b5905683bf941b0d08e121d4d8f41a77787e754ff391a7517cf4d8b0f01915d1f9ea2408afb4c16a5871e950e5688630b6117d389bec5428c22190767e6fbefd200"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000000e000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000400)=[@efer={0x2, 0x1000}, @efer={0x2, 0x4000}], 0x2) r3 = socket(0x40000000015, 0x805, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000200)='/dev/vcs#\x00', 0xffffffff80000000, 0x801) ioctl$VT_ACTIVATE(r4, 0x5606, 0x6) accept4$inet(r3, 0x0, &(0x7f0000000040), 0x800) getsockopt(r3, 0x114, 0x271c, &(0x7f0000000000)=""/13, &(0x7f000033bffc)=0xd) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) semget(0x0, 0x2, 0x100) socket$inet6(0xa, 0x807, 0x80000000) syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x9, 0x400000) sched_setaffinity(0x0, 0xfffffe75, &(0x7f00000000c0)=0x9) r6 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setflags(r6, 0x2, 0x1) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r5, 0x10, &(0x7f00000003c0)={0x2}) pipe(&(0x7f0000000100)) r7 = socket$inet6(0xa, 0x400000000001, 0x0) clock_settime(0x8, &(0x7f0000000240)={0x0, 0x1c9c380}) r8 = dup(r7) setsockopt$inet6_tcp_int(r8, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r7, &(0x7f0000000300)={0xa, 0x800004e20, 0x1, @loopback}, 0x1c) sendto$inet6(r7, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) get_robust_list(r5, &(0x7f0000000340)=&(0x7f00000002c0)={&(0x7f0000000280)={&(0x7f00000001c0)}}, &(0x7f0000000380)=0x18) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) r9 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r9, 0x2007fff) sendfile(r8, r9, &(0x7f0000d83ff8), 0x8000fffffffe) 17:03:05 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c833b1e68be0e1cab90b51b1623963298038b867090ab88effd05eb9ae2930cf7dd2"], 0x30) poll(&(0x7f0000000180)=[{r0, 0x0, 0x10000000}], 0x200000000000004f, 0x0) 17:03:05 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c833b1e68be0e1cab90b51b1623963298038b867090ab88effd05eb9ae2930cf7dd2"], 0x30) poll(&(0x7f0000000180)=[{r0, 0x0, 0x2000000}], 0x200000000000004f, 0x0) 17:03:05 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b51010000006000}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:03:05 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r1 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff, 0x3f00000000000000}], 0x1) tkill(r1, 0x1000000000016) 17:03:06 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r4 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff, 0xe00}], 0x1) tkill(r4, 0x1000000000016) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000280)=0x1) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x57}], 0x1) 17:03:06 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c833b1e68be0e1cab90b51b1623963298038b867090ab88effd05eb9ae2930cf7dd2"], 0x30) poll(&(0x7f0000000180)=[{r0, 0x0, 0x3b9ac9ff}], 0x200000000000004f, 0x0) 17:03:06 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) r1 = syz_open_dev$dmmidi(&(0x7f00000001c0)='/dev/dmmidi#\x00', 0x100000001, 0x800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000003c0)={{{@in6=@ipv4={[], [], @local}, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f00000004c0)={r2, 0x80, 0x7, 0x3, 0x1ff, 0x2}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc, 0x0, 0x0, {0x7eb}}) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000280)=0x1) r3 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x100000001, 0xc00) r4 = gettid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000002c0)={{{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@rand_addr}}, &(0x7f0000000100)=0xe8) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000180)={0xfffffffffffffffb, 0x101, r4, 0x4, r5, 0x6cf, 0x0, 0x8001}) r6 = socket$inet6(0xa, 0xffffffffffff, 0x8) ioctl(r6, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x200000a1}], 0x1) 17:03:06 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b510100000000e0}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:03:06 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r4 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff, 0x500000000000000}], 0x1) tkill(r4, 0x1000000000016) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000280)=0x1) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x57}], 0x1) 17:03:06 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r1 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff, 0xe000000}], 0x1) tkill(r1, 0x1000000000016) 17:03:06 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c833b1e68be0e1cab90b51b1623963298038b867090ab88effd05eb9ae2930cf7dd2"], 0x30) poll(&(0x7f0000000180)=[{r0, 0x0, 0x10}], 0x200000000000004f, 0x0) [ 498.738652] sg_write: data in/out 65499/33 bytes for SCSI command 0x0-- guessing data in; [ 498.738652] program syz-executor5 not setting count and/or reply_len properly [ 498.760067] sg_write: data in/out 65499/33 bytes for SCSI command 0x0-- guessing data in; [ 498.760067] program syz-executor5 not setting count and/or reply_len properly 17:03:06 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b510100f9000000}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:03:06 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c833b1e68be0e1cab90b51b1623963298038b867090ab88effd05eb9ae2930cf7dd2"], 0x30) poll(&(0x7f0000000180)=[{r0, 0x0, 0x200000000000000}], 0x200000000000004f, 0x0) 17:03:06 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r1 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff, 0x4000}], 0x1) tkill(r1, 0x1000000000016) 17:03:06 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r4 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff, 0x3f00000000000000}], 0x1) tkill(r4, 0x1000000000016) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000280)=0x1) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x57}], 0x1) 17:03:06 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f00000003c0)=ANY=[@ANYBLOB="95ac4054a8d878fb536d11a5a984647f881f6bf2f929e9dd7f7fab11b97b77182136d589a754bbf2689d099814e0a9ec17cb3a0738b302939d0e0877617a02f92d86c0cede7a7aa040593613b72d3632d133ecf523266a52d5674b63b8890593ace4a016d6cbb8f3ff5cef1e02b9bd15001da85e69831955732836804ad124fde56af131abd9b14e41ba2f9b6d2f8c001cc9b7ef038a5feb6dd9f1e3ce66244e7de1c209d755826d304c32d074750e1552b12c727c28bcf88cfce0"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) clone(0x22028000, &(0x7f0000000180)="bd4ec2dc3e5da4db4ba28ea510c88cd9e960bb66df0d30ead63071b5f82b993f38b10871785bc86aa983e3db192abf5f2efa821f870d32490aa4135adea8fb917ceb7b8312e0862e8d34230ee8e21a9e8339a170a3f1f97d02faad82b3db9f35e6119cae539b1a453bb1ba0d75e906acd5bd455d9dfa3dfb679f1a1af6eeb3d7bbbc569f748a2d33febef2ed563a437b4db18706769c9552deee24a32d59f72d6413cbf3b00cbedcad7909e857428fca11e69a4104bf39a87c92ee9462a3ae71f83f09", &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000300)="c12dea5f99e2af2b622dfc175c1b1da7981769c07747acc078fe0a47963e19f841bc616a9b508e072e2ffe50bd908544621c3259845501fe31a90f84ac4534d564b2fc560a99321c843064c86c406f62c544f8ec4e33bfe9ff16135bb596a4d2669faf944967729fe8d97b05b3b3d8bd90eb8379ce3c737b51d58a970f721e9daeca1dd10a35df5018a9ec7070b080b8d7cf737a4b9de4250674fef337835e8ef25f291f759420d260a2fb06dd8ca6e78c0bdc557179fa31c20eb03c") 17:03:06 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000280)=0x1) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x200000a1}], 0x1) 17:03:07 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c833b1e68be0e1cab90b51b1623963298038b867090ab88effd05eb9ae2930cf7dd2"], 0x30) poll(&(0x7f0000000180)=[{r0, 0x0, 0xffc99a3b00000000}], 0x200000000000004f, 0x0) 17:03:07 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b51010003000000}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:03:07 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c833b1e68be0e1cab90b51b1623963298038b867090ab88effd05eb9ae2930cf7dd2"], 0x30) poll(&(0x7f0000000180)=[{r0, 0x0, 0x1000000000000}], 0x200000000000004f, 0x0) 17:03:07 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r1 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff, 0x3f00}], 0x1) tkill(r1, 0x1000000000016) 17:03:07 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r4 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff, 0x1000000}], 0x1) tkill(r4, 0x1000000000016) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000280)=0x1) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x57}], 0x1) 17:03:07 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c833b1e68be0e1cab90b51b1623963298038b867090ab88effd05eb9ae2930cf7dd2"], 0x30) poll(&(0x7f0000000180)=[{r0}], 0x200000000000004f, 0x1000000) 17:03:07 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000280)=0x1) r1 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x2000) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f00000002c0)={'filter\x00', 0x0, 0x0, 0x0, [], 0x1, &(0x7f0000000200)=[{}, {}], 0x0, [{}]}, 0x88) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x200000a1}], 0x1) 17:03:07 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c833b1e68be0e1cab90b51b1623963298038b867090ab88effd05eb9ae2930cf7dd2"], 0x30) poll(&(0x7f0000000180)=[{r0}], 0x200000000000004f, 0x10000000) 17:03:07 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r1 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff, 0x4000000000000000}], 0x1) tkill(r1, 0x1000000000016) 17:03:07 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b51010000000085}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:03:07 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="cdae"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000001c0)="ab553fec", 0x4) r4 = accept$alg(r3, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000300)=ANY=[], 0xffffffaa) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r4, &(0x7f0000004740)=[{{&(0x7f00000007c0)=@pptp={0x18, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000940)=""/191, 0xbf}, {&(0x7f0000000b40)=""/166, 0xa6}, {&(0x7f0000000c00)=""/197, 0xc5}], 0x3, &(0x7f0000000ec0)=""/210, 0xd2}}], 0x1, 0x0, &(0x7f0000004840)) sendmmsg$alg(r4, &(0x7f0000003f00)=[{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)="6d34bf6415214b0fd4598368147362a5f6506b70e7f58031d9292b452d3749b7d9f08a9fa023102a04ff86aa80a3bf42c43a7578b6c15a15f2f04b4619275579062165a07bddc47db566bcad68ce123366718644b5c9a4f81472c7de727ea32a1233d92252aaf0", 0x67}, {&(0x7f0000000300)="c5cd00ef8c2761847ec1ccd1b4e4bca6e89abea3d2c72311db1ac753c44a03cb5e2eac39125189921a1fbe23fa83c96dd6b943be7d4fa8993a4cfee6bd03e521768a024fda2fa12c1e1c0a7294fd6d1d5d98858ba81dc461ce58c402a7972d52f0ee15fc636775227f6a42f0d2fb377b61cec4329f9a971449a5d6ac12f98b2d8a683b052f5588e109a85f8ec8f4207cce03a4f36a3d7751105353c4b801c176e3991d9074a53ad3d46ef95f88bdaebc32ff6dc7263a62873befe9b631f4ac2afeb6dc3daa685587bba8", 0xca}, {&(0x7f00000000c0)}, {&(0x7f0000000180)="a8731af0543ffb9c0ae9f2025e3e3bf865493951aab407f9818fbff171", 0x1d}, {&(0x7f0000000280)="08b7b4455ab91af37d639a27439f29d781771af70d89", 0x16}, {&(0x7f0000000400)}], 0x6, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}, @op={0x18}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2}, @op={0x18, 0x117, 0x3, 0x1}], 0x90, 0x1}, {0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000580)="6282b66230d54989b0d2ee4f9184cc0c5c82f18dfc7c61ef700b9997abb3ed3380d48aceb75ddb0aba85f5c317d80ee2900b79f4a9a948088cf94b2335ef2fea567d1a8cda33bc43f57ecdbf2b203a300c785c8d39ea9a46ba8de35aadd08324bceafd8fa40f34f467559ab33e3291f3a4454abe6b0d556843aa29f0668fd5ef7e31a80d821ad867d50463ac", 0x8c}], 0x1, &(0x7f0000000680)=[@assoc={0x18, 0x117, 0x4, 0x7}], 0x18, 0x800}, {0x0, 0x0, &(0x7f0000002040)=[{&(0x7f00000006c0)}, {&(0x7f0000001040)="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", 0x1000}, {&(0x7f0000000700)="253ee7ca89b7977c4927e91c8f2ff3953f44027069945ad819c46b65352c53992ecd18668a5333827b2d2153ab455d4c253b0ba5979d", 0x36}, {&(0x7f0000000740)="c6c5012890f914b7254deebee6b6f4ca08da9eabf350ba7deac69ed905f078dc86fd1ede472838f4bf3377e3857d3bfe9585b18e4d5e7f5304268f22a6ddb3aa990960c8138c559468f2ee47cb1c3130c17d5aa2f69c2aecf00496d3f06f06c00e4a3dcd2ceb098a374b", 0x6a}, {&(0x7f0000000840)="b1616faa80fb29f98d6dd7c5aed05f8e30bb0ba76d6f0190b071a50b03cdc03489dcf50d4928cc91cd9545cc6d8ea7a129f3d030ac00ba98962c81654484673f60ba296176ebdb09c135703e1174a7ba8510087561a35d7b0d6b7b784d88b21074bf0c276cf65a3cb48d275c77248575e05749efda1f8d3454c70edf2a6cccffa70392ae8728d2f5ba7401eb99a45f", 0x8f}, {&(0x7f0000000a00)="45ae87e75162f17354aa10ee6182e5550aad6432528405aaaed512ed72c0fb8d4df37f8aebaf52cef546d45445d9fca64f7c01fc14583648ac625172612106eabcab6192c0404ba0e3ae1dca2316146d718e2af5c460fabe9d2422fe1e", 0x5d}, {&(0x7f0000000a80)="671174699d0acf1e46bf68672e3831d59848e9f9821a330cf74b90447961a71a7662d4d21ae57ddb815b10d03d3d4e5abd1aad08e0d7e0f8780b315eaf7f0907367d0f4498997962c8018e69b3a4c122f3d708f0011a", 0x56}, {&(0x7f0000000d00)="22b03d886d36975336acc2bd4c5e86b625dfd24c6997407ad4cf14a4ef8541a73b29af121041fbf1ad745ae869a05154f9c107e6b3e63615b5aac400b93bd19ecd2fa7d4b728fe8e0297c40601323bbeb6407b7eef8774f3cc17ddc7", 0x5c}, {&(0x7f0000000d80)="75cae925756a448db95120a11974ba2ae895a09ca5093c45b5360f0ebade459113f8b73ee8a0b2156bbbe1372867f26415c5c8dbc694a48217defe0dd71d8c70dbee53b56764417f34378f5286bd74b1e3ea12e1e4d5", 0x56}], 0x9, &(0x7f0000000e40)=[@iv={0x38, 0x117, 0x2, 0x1f, "5cedc54d080d5e416d1eb10d5c9566c740ab5328cc2bc373c9f69ca6b0fc13"}, @op={0x18}], 0x50, 0x40080}, {0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000002100)="c77a761c6d2d74606bf97929ccb139c8b4d7b23a34c36652cd98625923aa81303e15d61ded2444f3a74159cd39cfa541d332d6bb4aba364b65f53f607c24a2e8e843d1a555602a4daa09eae39ced37093ad540ebb6fee61ec18769a810a6b767c2b5645c96e6bc36e25296e63472516004ed73cdc737a27ad02ae73604ff90ea556f7559d49b96cec3539c36e92a51b525477addce02e2875fba26128560863490569d430fa553703e64833d90a344c4f3e4b32de3dcf450ae69289d0af2e9309fc64f6fc991e01bebddb4374cb94c2d9869e1d68c672286f6d784a1df63caeadecc9acfaebcba93dd61a31b69c501895d917a", 0xf3}, {&(0x7f0000002200)="ff8a1e9e2494d0e05951128fd4a36a19477efd720f488c8862861dbd3fd6172bca98836918025622194a3c1e74bd0a530a26bb35c79b8bf843c91a3797f051fa1c9083ebbaba7554450816a64cbb39263b915c36327cafd6e2bc96f124a8854dd8367f08b86aeca324b4187f6eda6519c7e8ac2b3a0d6a329a8f70b3b77f165142dfe720da041dccc5880dc7abc02c4eeec759a27650cd457a65b9691464de1643d1f87366ac77e51bfe297f30e37e1f57db4966a0d9f8bc763cde5456567ee04421a0e5383a658f32465bb7eab45f1e9baa912ae717257fe5b5487d8e808a1f06aa0411521f7cda729e4d3a835691b750b727", 0xf3}, {&(0x7f0000002300)="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", 0x1000}, {&(0x7f0000003300)="8b67ae440d3f66dc1da7d9c5347884180beebdae1c5128fc0a281495a3919d154bee4f0b2be80b49aa2d73004c072cd3925119bda10b543b66b265f9849dd28f639c4fe0767d369dce5fb6fc867d87f8c6de795faa0c0de6aa8fcd41f68c0ddcfcd4740f14223cfdf6075dcd3b48963320efcabf4999fd5a3a7e0350a73ae43edba9c525d6d1df8bd316d3f127800927dbf09f35a496c1db737503ae584694b28812ea663d550552", 0xa8}, {&(0x7f0000000900)="725f63867592f8", 0x7}, {&(0x7f00000033c0)="961f3171cb8e3fcbee389c236e914551a54635a57f24a31f8474c32c0289bf52888f5ed252a99ac577324bd23b50f206f3b27931e7fd636ba91537d6311153ee657158e29c6d4f74e9bab59e64f44a8f64441579dcd073799d2912f81f290889375cc153c62cdf5e4cce91f6e4987e4ccbc31d08391d41905ac7cfc4323712e2925060544266894c6bdfd7aa830b3d346a220975aaceb15bed795b4da588b34e63e730", 0xa3}, {&(0x7f0000003480)="6c896cb7a67e7e7197bdaa9c0186f7bc6cf7dbf83453ec0ba57e93bbd36e6ba98eefbf8a9ca7d175ddd09dbef8db1fae12e9bf211d581d5911b2803bfd528673a90019b7e68b190d2539b4fa9b12721fb5efe16ad6b8313f26e85d36b536a377eb10df5f7b0128b7bc90bca0dac41e186bc7978194bf", 0x76}, {&(0x7f0000003500)="55c73682f36c51cbecf637638b72b15fe95d32ea216977c12cded9d78fc355f7275a595105bbfcb91114cc0c583d466396e233ce41e25e8e2d1032d80740016e216aa117ec56f59bb939087bc788951ca3cfe0f8179d5db981810646af8e4192ff1c546c485e12f10d6355b398a7c8cb9eba30ae16a62a33fef2d94b60005c0ae6d04f5bc007f7d0dd389605c3fbea96f3b53f05d8b3c8abe50e85c2953b2c8de9e6a7a6299b8c60fd94f14323a3f7378d89dd6500e26cf5951b921dedc18e17e825d824aa401832afbc4e", 0xcb}, {&(0x7f0000003600)="fdcf8ee81e0a5d0983fa2687117ec50578b732469ba52bdfb31541fdbe66aa2c405448245a2dbc9471b334a712806bcbe800568d17da58c86ebfa6acd65c3e851a309d34520999c75e784bf61e12542ba855f5ab39a5602417d008c09161e97929924d2cac544e0d2d5b1c98895e045259e9fab614a599d0212a7d65ad564799855214679f469710f9151f2efd347e5048e7a5332eb34ac1382331b3ccd88200814885b2958554", 0xa7}, {&(0x7f00000036c0)="9a239b2ce5a9fbb7310f12124a83f69f1cb9a877b0544aec6e2ae6c937917b706d064b8e24ed0373cd507793cc049227f8b3a07ba62eba7958ac03b0df47dd1cbac563b6765ab6d9cadeea32a8676bb86175f33da1f9fec3810a2e4ece79f2732029179b2a435a4c337619f80cd4750d67dd2e90fc369d3662ce47229ce7", 0x7e}], 0xa, &(0x7f0000003800)=[@op={0x18}, @assoc={0x18, 0x117, 0x4, 0x6}, @iv={0x38, 0x117, 0x2, 0x22, "6172bf43ba51e0a9b89e1486f3f907da587ec7c92f799796ccb1d932a5900c715e91"}], 0x68, 0x8084}, {0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000003880)="07b17296499329a011f084e2e3f8c5f83e3b7c148b87bc0fe9a59a90d8c4b23ce8c2fefa6c4ba164db194bea93b3e8dce60c579288a72faf3145d71d4f1cc18365010a8a5c9bd7f8a8a3df049b4150ffd392662ff4692b0d919965de54f5a91224b04f92afb8b1c36b571042d21f2d2c35aa75821217ba09a743ae488f312abe13a8fff94f0ae8c0b995ad194b0ef238ea801079fb5e3e265594fb8c00d8d29a6aab3bc0533dfe03e593d166ef56c649cfacb62edb9614d94e01727cf1abd4805a1ceda0c4cb29c4861c097471bd2848493fe37d55b54aed5f", 0xd9}], 0x1, &(0x7f0000003980)=[@iv={0x20, 0x117, 0x2, 0x5, "5bb87c05dc"}, @iv={0xf8, 0x117, 0x2, 0xe0, "f791de7739313412398a14cc4c84d6766624b5d0e390ae140797e6a381a2afa5188328a695722bca951a0470d94175d47de9364bb19e7769792de64dfd7f576fbd6577bd75e9a13371e294985a38f165d201106c54835b116028dd2a6ae6b45085a5dc7e7c7d7333918b26926c74d5c56a46d54f3352a86eac1c6c1cc53446c2140747ae0b782516d38f8a5da5d9483e04d8d3f657d9e319434c63a7aa006360a1aeda71619251694defc775d77b508b31466c2b326e91d070d30e1c3c5ea559f65865a60ed784cf72b72453b370a887eb72107a9a9e80d137b7d6f74553c89a"}, @iv={0xb8, 0x117, 0x2, 0x9e, "790648f63efc780ebc6847f286a21c331fb954b89a45030fa299f3b06c24b73e33f7126017bdbd2d70427e2a79a3799c0cc508aa26865ab32c6876c731c2999acfc8f06423226e7515337ed94cdb7b5270c831597675865436822cf7479364ed2e154b049acaebec29074f6000285b7afdb06ff07c8befaa5ec8d3cf883284db4211e590cc6ff22cbad496470532909524c994fc4d3b43febddcff9d75d7"}, @iv={0xd0, 0x117, 0x2, 0xb8, "332c18a1ade79980a74cf056abbaa2d887cf2a61ff958d84c9f17bac191e23be8a0ac1c0004fa3f63052301291e785f7c07d53d5ce4ff952d173534934d42570c774bf90a4023a3e10a689b2ea90be43fb038196f32207b6026b226cf24282524dbaccad06e12d580a5d0dd141cb54e6083773b451a477080c732fb34038ca4d6bc846f085c613889ef732d7c1b8b2cb34cfe5fb8269f8eec47f7c2e5e374a03fb1bcff3f63310e207fe8ba180c40c16c074c4e47e3e5b15"}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0xfffffffffffffffb}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x40, 0x117, 0x2, 0x27, "c150605347f1c85a832f579206d3b42ee4822906a0bcf6e39f4a36ace754bed3c0f998635695ae"}], 0x340, 0x48010}, {0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000003cc0)="683fb4d7fe51d41a5e0ea67c57ab9691ce93359600ffbcadbb237817c128039b43942ee8bdbb564dae298b7842e51b22e9dd7a0ddce4a2b5b76e65027534b1e561f4e266c6a739bd8f0a2459c370e26cad101e007257689eb9323ec9bb201954267d7fad904aa92645c639da2c31d410f96a89d8596dbdaf801b3db57859a0c0a319194f835cfe61f9ac63fcbbfc99b6c494", 0x92}, {&(0x7f0000003d80)="4350282f265fc0a3b89e57b3a6bcab5f6d0667a06eb2e5a27ced06aacd2a5636cf9913471e3d125fb7b2c15d8dfac45ccb8549ba05173e1b9920a0a5cf5703c63ca59b9ce60f206988d80e1d80b8334685fcd3d02f1298bcd80b0883bacc246caad00cd047b61cae38e41b06d86bc82c36cf17dcdbcafe5cf06cd418bc753604f599677f4c3cbbc75c46607dbabd3de56000e40935202887b1a48f8bedf2f6bb8d4488d1896c9c5ed3b18b1415984ea424e9d4464d922f967281ec295fb2be66641d10195ac25785db1290544691c64c63ad14595b0ac599e58119e9b401499e0bf7c2446984", 0xe6}], 0x2, &(0x7f0000003e80)=[@iv={0x78, 0x117, 0x2, 0x60, "9d60b92a897f4f960613fd33cc2f6f109d6bebc2d7a533351f1d2b717b8d3db9fed2f2f670f53bb9ed6a5bc4244f9279ba5dbf1781daf9aa23c1ff9f6f29f4e8d82535b343a1dadf9c04454ad26b0465d49506378c7fc58184528207618aa666"}], 0x78, 0x4000001}], 0x6, 0x80) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:03:07 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r4 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff, 0xe}], 0x1) tkill(r4, 0x1000000000016) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000280)=0x1) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x57}], 0x1) 17:03:07 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c833b1e68be0e1cab90b51b1623963298038b867090ab88effd05eb9ae2930cf7dd2"], 0x30) poll(&(0x7f0000000180)=[{r0}], 0x200000000000004f, 0x2) 17:03:07 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b51010070000000}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:03:07 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r1 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff, 0x100000000000000}], 0x1) tkill(r1, 0x1000000000016) 17:03:07 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r4 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff, 0xe00000000000000}], 0x1) tkill(r4, 0x1000000000016) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000280)=0x1) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x57}], 0x1) 17:03:07 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c833b1e68be0e1cab90b51b1623963298038b867090ab88effd05eb9ae2930cf7dd2"], 0x30) poll(&(0x7f0000000180)=[{r0}], 0x200000000000004f, 0x3b9ac9ff) 17:03:07 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r4 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff, 0x3f00}], 0x1) tkill(r4, 0x1000000000016) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000280)=0x1) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x57}], 0x1) 17:03:07 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x6800) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000200)={0x5817, 0x7}) fanotify_mark(r1, 0x8, 0x10000, r1, &(0x7f00000000c0)='./file0\x00') ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000280)=0x1) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$TCXONC(r1, 0x540a, 0x80) ioctl(r2, 0x1ff, &(0x7f0000000280)="153f6234488dd25d766070") readv(r0, &(0x7f0000001580)=[{&(0x7f00000002c0)=""/243, 0xf3}, {&(0x7f00000003c0)=""/49, 0x31}, {&(0x7f0000000400)=""/110, 0x6e}, {&(0x7f0000000480)=""/250, 0xfa}, {&(0x7f0000001600)=""/4096, 0x1000}], 0x5) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000100)={0xfc0000000, 0x0, 0x2, 0x7}) ioctl$DRM_IOCTL_SG_ALLOC(r3, 0xc0106438, &(0x7f0000000180)={0x5, r4}) 17:03:07 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b51010000009300}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:03:07 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r1 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff, 0x6000000}], 0x1) tkill(r1, 0x1000000000016) 17:03:07 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r4 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff, 0x4000}], 0x1) tkill(r4, 0x1000000000016) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000280)=0x1) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x57}], 0x1) 17:03:08 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x101200, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/checkreqprot\x00', 0x252002, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffff9c, 0x84, 0x66, &(0x7f00000000c0)={0x0, 0xfffffffffffffffb}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f00000001c0)={r2, @in={{0x2, 0x4e22, @multicast2}}}, 0x84) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="cdae"]) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000000), 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)={&(0x7f0000000080)='./file0\x00', 0x0, 0x10}, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_DEASSIGN_DEV_IRQ(r1, 0x4040ae75, &(0x7f0000000300)={0x9, 0x8, 0x1, 0x704}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 17:03:08 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c833b1e68be0e1cab90b51b1623963298038b867090ab88effd05eb9ae2930cf7dd2"], 0x30) poll(&(0x7f0000000180)=[{r0}], 0x200000000000004f, 0x1000000000000) 17:03:08 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b5101000000c600}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:03:08 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r4 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff, 0x5}], 0x1) tkill(r4, 0x1000000000016) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000280)=0x1) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x57}], 0x1) 17:03:08 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r1 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff, 0x40000000}], 0x1) tkill(r1, 0x1000000000016) 17:03:08 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c833b1e68be0e1cab90b51b1623963298038b867090ab88effd05eb9ae2930cf7dd2"], 0x30) poll(&(0x7f0000000180)=[{r0}], 0x200000000000004f, 0x1000000000000000) 17:03:08 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b51010000008500}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:03:08 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r4 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff, 0x100000000000000}], 0x1) tkill(r4, 0x1000000000016) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000280)=0x1) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x57}], 0x1) [ 501.011903] sg_write: 7 callbacks suppressed [ 501.011917] sg_write: data in/out 65499/33 bytes for SCSI command 0x0-- guessing data in; [ 501.011917] program syz-executor5 not setting count and/or reply_len properly 17:03:08 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000280)=0x1) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") readv(r0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/33, 0xae}], 0x1) 17:03:08 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r1 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff, 0x1000000}], 0x1) tkill(r1, 0x1000000000016) 17:03:08 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x2, 0x94080) r2 = syz_open_dev$usbmon(&(0x7f0000000280)='/dev/usbmon#\x00', 0x1, 0x2) ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, &(0x7f0000001000)=ANY=[]) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x400000, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000180)={@in6={{0xa, 0x4e21, 0x1000, @local, 0x5}}, 0xcddd, 0x8, 0xffff, "a7279fbe46a55738fce086553e1417772753ca0ced5526da1961a2ca9dbce889c3fd74a62818125f65fc6c5080661293382742f677417372ee4d72f02ba1f7614efa7bd41890ca1da6a1143ba6a9a1fe"}, 0xd8) ioctl$KVM_RUN(r3, 0xae80, 0x0) 17:03:08 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b51010000000114}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:03:08 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c833b1e68be0e1cab90b51b1623963298038b867090ab88effd05eb9ae2930cf7dd2"], 0x30) poll(&(0x7f0000000180)=[{r0}], 0x200000000000004f, 0x100000000000000) 17:03:08 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r4 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff, 0x4000000000000000}], 0x1) tkill(r4, 0x1000000000016) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000280)=0x1) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x57}], 0x1) 17:03:08 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c833b1e68be0e1cab90b51b1623963298038b867090ab88effd05eb9ae2930cf7dd2"], 0x30) poll(&(0x7f0000000180)=[{r0}], 0x200000000000004f, 0x200000000000000) 17:03:08 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r4 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff, 0x5000000}], 0x1) tkill(r4, 0x1000000000016) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000280)=0x1) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x57}], 0x1) 17:03:08 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b510100000000a4}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:03:08 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r1 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff, 0x6}], 0x1) tkill(r1, 0x1000000000016) 17:03:08 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="cdae"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) r3 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x9, 0x280002) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f00000000c0)={0x0, 0x10000}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f00000001c0)={r4, 0x2b, "da0922c089280a1a854ace5aa3ad896ae6f0096923988f10f2890cded04e0c3b00af2f87da31f70fd47a4c"}, &(0x7f0000000200)=0x33) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:03:08 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r4 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff, 0xe000000}], 0x1) tkill(r4, 0x1000000000016) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000280)=0x1) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x57}], 0x1) [ 501.438696] sg_write: data in/out 65499/33 bytes for SCSI command 0x0-- guessing data in; [ 501.438696] program syz-executor5 not setting count and/or reply_len properly [ 501.476996] sg_write: data in/out 65499/33 bytes for SCSI command 0x0-- guessing data in; [ 501.476996] program syz-executor5 not setting count and/or reply_len properly 17:03:09 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x2) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/member\x00', 0x2, 0x0) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000280)=0x1) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x200000a1}], 0x1) 17:03:09 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c833b1e68be0e1cab90b51b1623963298038b867090ab88effd05eb9ae2930cf7dd2"], 0x30) poll(&(0x7f0000000180)=[{r0}], 0x200000000000004f, 0xffc99a3b00000000) 17:03:09 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b5101002e000000}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:03:09 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r1 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff, 0xe00000000000000}], 0x1) tkill(r1, 0x1000000000016) 17:03:09 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000180)=ANY=[@ANYBLOB="fba86bc007b832e2355a1ff8c7c0a4152b2b6d6619b586d6aa5ad7f59ba70705583e5b549675a47bc6d047fa52a86ebc6b0c51e3ebfdfbba6bfdcaa7495a7e8530924d6afd5fbf96b1bcfde2853ea67e1170ac4670462ca84c51855fbfdef5d2e81c8bb2f3c2"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0xd7d, 0x7fff, 0x20, 0x0, 0x8, 0x401, 0x0, 0x4, 0x6d9c, 0x36a, 0xebdb, 0x7fff, 0x0, 0x1, 0x6, 0x2, 0x100, 0x1, 0xffff}) 17:03:09 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r4 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff, 0x40000000}], 0x1) tkill(r4, 0x1000000000016) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000280)=0x1) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x57}], 0x1) 17:03:09 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c833b1e68be0e1cab90b51b1623963298038b867090ab88effd05eb9ae2930cf7dd2"], 0x30) poll(&(0x7f0000000180)=[{r0}], 0x200000000000004f, 0x10) 17:03:09 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b510100000000fc}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) [ 501.673479] sg_write: data in/out 65499/33 bytes for SCSI command 0x0-- guessing data in; [ 501.673479] program syz-executor5 not setting count and/or reply_len properly 17:03:09 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r4 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1f4) tkill(r4, 0x1000000000016) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000280)=0x1) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x57}], 0x1) 17:03:09 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r1 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff, 0xe00}], 0x1) tkill(r1, 0x1000000000016) 17:03:09 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000180)=ANY=[@ANYBLOB="7daad066f2ca918abe94c50986849407284837208606fb930fcd6f950820d72e94a8b3d2b3189e0f9422fb57c90eb9a4e2b0a4cd96c9c40000eda5e1e3b933268ae197cef812397278ad4ddd0dfc87fcea9543be341dd46a2dcf2017b8a357"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:03:09 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c833b1e68be0e1cab90b51b1623963298038b867090ab88effd05eb9ae2930cf7dd2"], 0x30) poll(&(0x7f0000000180)=[{r0}], 0x200000000000004f, 0xffc99a3b) [ 501.910770] sg_write: data in/out 65499/33 bytes for SCSI command 0x0-- guessing data in; [ 501.910770] program syz-executor5 not setting count and/or reply_len properly 17:03:09 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x18b000) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[@ANYRES16, @ANYBLOB="5579a857bc702a86f85b07ed6c7eeeb471b671db9c7e6e9807f2e50b780d8ad45c531979833f32c54ef035b6c1bbedadfe7fc2394fccb453e72fcfbf48ab8c8f59ae1394df57ce08e4c11736aa07d4e46e13be75a606a07bde8bb0f4b88e5bf1e2403da0b4351b7f6d9cd70f9876c1"], 0x71) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000280)=0x1) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r2 = getpgrp(0x0) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r1, &(0x7f0000000640)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f00000003c0)=[{&(0x7f00000002c0)="87774ea0f602984b6a5ceb0f0264d9e2a5cbc01a984a179a074c821fbf98cbaf352f7f75f8ee6ad926c48d1f525ff6321cd3cd7a62559c06ab6dd951adc298712bf9dcb71521ca792d04f9ed9c4a82137fd4626d5090c55ead38db8ea1cea567abaaa720948513c3", 0x68}, {&(0x7f0000000340)="49e3040b2a9fa4a91e628103816840c66bd1f944d66bb398384c53916a51bc8a21ba4d1895bb72820d49f0766e9d1a5362de", 0x32}, {&(0x7f0000000380)="8433d95075cf47235508432f", 0xc}], 0x3, &(0x7f0000000580)=[@rights={0x30, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0]}, @rights={0x18, 0x1, 0x1, [r0]}, @rights={0x30, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r2, r3, r4}], 0x98, 0x20000001}, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8916, &(0x7f0000000040)="153f6234488dd25d766070") readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x200000a1}], 0x1) 17:03:09 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b51010054000000}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:03:09 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r4 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x2) tkill(r4, 0x1000000000016) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000280)=0x1) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x57}], 0x1) 17:03:09 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c833b1e68be0e1cab90b51b1623963298038b867090ab88effd05eb9ae2930cf7dd2"], 0x30) poll(&(0x7f0000000180)=[{r0}], 0x200000000000004f, 0x2000000) 17:03:09 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r1 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff, 0x3f000000}], 0x1) tkill(r1, 0x1000000000016) 17:03:09 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="cdae"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r0, &(0x7f00000000c0)={0x20000000}) 17:03:09 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73927a31ee443166669788ad1c83c833b1e68be0e1cab90b515e043963298038b867090ab88effd05eb9ae2930cf7dd2"], 0x30) poll(&(0x7f0000000180)=[{r0}], 0x200000000000004f, 0x0) 17:03:09 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b51010000001600}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:03:09 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r4 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) tkill(r4, 0x1000000000016) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000280)=0x1) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x57}], 0x1) getpeername$packet(r0, &(0x7f0000001cc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001d00)=0x14) sendmsg$nl_route(r0, &(0x7f0000001dc0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40400000}, 0xc, &(0x7f0000001d80)={&(0x7f0000001d40)=@mpls_getnetconf={0x1c, 0x52, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@NETCONFA_IFINDEX={0x8, 0x1, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x4000) 17:03:09 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r1 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff, 0x600}], 0x1) tkill(r1, 0x1000000000016) 17:03:09 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c833b1e68be0e1cab90b51b1623963298038b867090ab88effd05eb9ae2930cf7dd2"], 0x30) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000000)=0x5) poll(&(0x7f0000000180)=[{r0}], 0x200000000000004f, 0x0) [ 502.147343] *** Guest State *** [ 502.158027] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 502.179480] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 502.189746] CR3 = 0x0000000000000000 [ 502.198412] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 [ 502.220512] RFLAGS=0x00000002 DR7 = 0x0000000000000400 17:03:09 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b51010000000c01}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) [ 502.248601] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 502.257599] CS: sel=0x0000, attr=0x0009b, limit=0x0000ffff, base=0x0000000000000000 [ 502.294352] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 502.313432] SS: sel=0x0000, attr=0x00081, limit=0x0000ffff, base=0x0000000000000000 [ 502.322774] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 502.331226] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 502.363907] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 502.372444] GDTR: limit=0x000007ff, base=0x0000000000001000 [ 502.405232] LDTR: sel=0x0008, attr=0x04082, limit=0x000007ff, base=0x0000000000001800 [ 502.420532] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 502.428823] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 502.437236] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 502.444193] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 502.452774] Interruptibility = 00000000 ActivityState = 00000000 [ 502.459325] *** Host State *** [ 502.462637] RIP = 0xffffffff81210ce6 RSP = 0xffff88016a32f350 [ 502.468629] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 502.476120] FSBase=00007fcdef781700 GSBase=ffff8801dae00000 TRBase=fffffe0000034000 [ 502.484017] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 502.489911] CR0=0000000080050033 CR3=00000001ce8f7000 CR4=00000000001426f0 [ 502.497022] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff87c013a0 [ 502.503765] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 502.509852] *** Control State *** [ 502.513378] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ca [ 502.520066] EntryControls=0000d1ff ExitControls=002fefff [ 502.525633] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 502.532643] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 502.539308] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 502.545957] reason=80000021 qualification=0000000000000000 [ 502.552330] IDTVectoring: info=00000000 errcode=00000000 [ 502.557788] TSC Offset = 0xfffffef073a62379 [ 502.562196] EPT pointer = 0x00000001c8d3301e [ 502.601831] *** Guest State *** [ 502.605191] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 502.614160] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 502.623219] CR3 = 0x0000000000000000 [ 502.626946] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 [ 502.626959] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 502.626975] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 502.626992] CS: sel=0x0000, attr=0x0009b, limit=0x0000ffff, base=0x0000000000000000 [ 502.639048] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 502.639070] SS: sel=0x0000, attr=0x00081, limit=0x0000ffff, base=0x0000000000000000 [ 502.639088] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 502.639120] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 502.685974] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 502.694051] GDTR: limit=0x000007ff, base=0x0000000000001000 [ 502.702084] LDTR: sel=0x0008, attr=0x04082, limit=0x000007ff, base=0x0000000000001800 [ 502.710069] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 502.718251] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 502.726299] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 502.732789] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 502.740253] Interruptibility = 00000000 ActivityState = 00000000 [ 502.746654] *** Host State *** [ 502.749858] RIP = 0xffffffff81210ce6 RSP = 0xffff8801b3e7f350 [ 502.756007] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 502.762462] FSBase=00007fcdef73f700 GSBase=ffff8801dae00000 TRBase=fffffe0000003000 [ 502.770266] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 502.776224] CR0=0000000080050033 CR3=00000001ce8f7000 CR4=00000000001426f0 [ 502.783310] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87c013a0 [ 502.789974] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 502.796163] *** Control State *** [ 502.799618] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ca [ 502.806334] EntryControls=0000d1ff ExitControls=002fefff [ 502.811826] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 502.818744] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 502.825462] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 502.832080] reason=80000021 qualification=0000000000000000 [ 502.838428] IDTVectoring: info=00000000 errcode=00000000 [ 502.844012] TSC Offset = 0xfffffef073a62379 [ 502.848338] EPT pointer = 0x00000001c8d3301e 17:03:10 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30f) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000300)={0x10, 0x30, 0xfa00, {&(0x7f00000001c0), 0x4, {0xa, 0x4e24, 0x10000, @loopback, 0x3f}, r4}}, 0x38) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r5 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) tkill(r5, 0x1000000000016) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000280)=0x1) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x57}], 0x1) 17:03:10 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c833b1e68be0e1cab90b51b162398038b867090ab88effd05eb9ae2930cf7dd2326f7e31724dafc4c1f483f2e0ecae6a057af90531e06dd3bca40931e4d0e16381763258ce39c87b8cc0000eb9fe0f82f26687a83d7854dbb9cb04d8cf44abe7845a56542bcba35707d6478d06e08a0b5c2e64ce60"], 0x30) poll(&(0x7f0000000180)=[{r0}], 0x200000000000004f, 0x0) 17:03:10 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r1 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1f4) tkill(r1, 0x1000000000016) 17:03:10 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b5101000000000e}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:03:10 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000280)=0x1) r1 = socket$inet6(0xa, 0x5, 0x2) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r0, 0x5386, &(0x7f0000000100)) ioctl(r1, 0x8912, &(0x7f0000000180)="153f6234488dd25d766070") readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x200000a1}], 0x1) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x3f, 0x20000) r2 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x10000) write$uinput_user_dev(r2, &(0x7f00000002c0)={'syz1\x00', {0x72, 0x5, 0x5, 0x2}, 0x7, [0x7f, 0x1, 0x81, 0x12b, 0x2, 0x1, 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x10000, 0x7, 0xfffffffffffffbff, 0x5, 0x4, 0x9, 0x9, 0x4, 0x5, 0x8001, 0x1, 0x3ff, 0x9, 0x2, 0x3, 0x7, 0xed, 0x81, 0x2, 0x8, 0xf64, 0x7f, 0x1, 0x0, 0x9, 0x1ff, 0x0, 0x0, 0x35ee, 0x7, 0xbe, 0x10001, 0x1000, 0x6, 0x2, 0x0, 0xffffffff, 0x1000, 0x80000001, 0x3, 0x2, 0x7, 0x0, 0x5, 0xfffffffffffffffa, 0x0, 0x599, 0x6, 0x1, 0xd8, 0x80000000, 0x1, 0xb16e], [0x6, 0x95e, 0x693188a5, 0x80000000, 0x0, 0x8001, 0x3, 0x6, 0x9, 0x8000, 0x4, 0x7, 0x100000001, 0x5c1, 0x9, 0x7, 0x9, 0x8, 0x2, 0x1e, 0x2, 0x1, 0x2, 0x10000, 0x6, 0x0, 0x1, 0x9, 0x5, 0xbf1, 0x80000001, 0x200, 0x9b, 0x5, 0x7, 0x3ad6, 0x4, 0x3, 0xb88, 0x6, 0x200, 0x1ff, 0x4, 0x7fff, 0x7, 0x3, 0xfffffffffffffff7, 0x4, 0x3, 0x8, 0xfffffffffffffffe, 0x6, 0x1d4, 0x7, 0xfffffffffffff09d, 0x3, 0x4, 0x5, 0x4192, 0x2, 0xfffffffffffffffa, 0x5, 0x9, 0x3], [0x7, 0x900000000, 0x20, 0xfffffffffffffff9, 0x20, 0x2e49, 0x0, 0x7, 0x10001, 0x7, 0x5ca, 0x2, 0x0, 0xa1, 0x5df, 0x8, 0x7, 0x80000001, 0x1ff, 0x80000000, 0x10001, 0x2, 0x2, 0x7, 0x3, 0x5, 0xffffffffffffffc0, 0x7, 0xfffffffffffffff9, 0x6, 0x1, 0x10000, 0x4, 0x6fa, 0x4, 0x2, 0x4, 0x944, 0x80000000000, 0x3, 0x7, 0x4, 0x3, 0x244, 0x3, 0x6, 0x3, 0x0, 0x0, 0x6, 0x3ff, 0xffffffffffff8000, 0x4, 0x8001, 0x3, 0x7, 0xfffffffffffffe00, 0x4, 0x20, 0x3f2, 0xff, 0x8, 0x7, 0x10001], [0x3f, 0x0, 0x5, 0x6, 0xffffffffffff0001, 0x7f, 0x11a3, 0x40, 0xfffffffffffffffb, 0x7, 0xfffffffffffffbff, 0xfffffffeffffffff, 0x7ff, 0x6, 0x5, 0x8, 0x6, 0x7ff, 0x6, 0x7ff, 0x3561, 0x8, 0x4, 0x5, 0x0, 0x990, 0x3, 0xc9c4, 0x2, 0x0, 0x1ff, 0x40, 0xd39e, 0x20, 0x6, 0x9, 0x5, 0x1000, 0xfffffffffffffff8, 0x4, 0xffffffffffffcd69, 0x7031fb46, 0x80, 0x43446d2b, 0x80000001, 0x0, 0x6, 0x3f, 0x8, 0x2d, 0x2, 0x9, 0x2, 0x8, 0x401, 0x3f, 0x100000001, 0x9, 0x1000, 0x0, 0x2, 0xffffffffffffff00, 0x7ff]}, 0x45c) 17:03:10 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r0) ioctl$KVM_GET_DEBUGREGS(r2, 0x8080aea1, &(0x7f0000000180)) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xfffffffffffffffe) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) 17:03:10 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x400) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r3, 0xc1205531, &(0x7f0000000200)={0xd3a, 0x40000000000000, 0x5, 0x4, [], [], [], 0x2, 0x101, 0x4, 0x5, "11114d0fc7add50171c85c6a73d00d72"}) write$binfmt_misc(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c833b1e68be0e1cab90b51b1623963298038b867090ab88effd05eb9ae2930cf7dd212a4aa234be063ba15b74051aba61ba9dee3f3ce8742b48c8a36967aaf1f080000000000000056e776b75e9d61af2ad97699597a051568367d75639653a0761050ef24da9bf3a23ef070646fa79707241a440f531af2fc287c48738d7451"], 0x30) poll(&(0x7f0000000180)=[{r0}], 0x200000000000004f, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) 17:03:10 executing program 0: r0 = accept$packet(0xffffffffffffff9c, &(0x7f0000001200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001240)=0x14) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000001280)='yam0\x00', 0x10) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair(0x12, 0x80800, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000080)={0x6, @multicast2, 0x0, 0x4, 'wrr\x00', 0x6, 0x20000000000b7, 0x5f}, 0x2c) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='lp\x00', 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mlockall(0x1000000) write$P9_RREADDIR(r6, &(0x7f00000012c0)={0x141, 0x29, 0x2, {0x87e, [{{0x13, 0x3, 0x5}, 0x20, 0x1000, 0x7, './file0'}, {{0xc4, 0x4, 0x8}, 0xfffffffffffffc01, 0x5059, 0x7, './file0'}, {{0x1, 0x3, 0x5}, 0x2, 0x0, 0x7, './file0'}, {{0x17, 0x3, 0x1}, 0x2, 0xeb0, 0x7, './file0'}, {{0x0, 0x0, 0x4}, 0x1, 0xa9c, 0x7, './file0'}, {{0xe, 0x0, 0x1}, 0x1, 0x4c88000, 0x7, './file0'}, {{0x0, 0x18210be7, 0x8}, 0x7ca2a910, 0x8, 0x7, './file0'}, {{0xe8, 0xb3fb, 0x4}, 0x2, 0x14a1, 0x7, './file0'}, {{0xc, 0x3, 0x3}, 0xffffffffffffff81, 0x7, 0x7, './file0'}, {{0x8, 0x0, 0x2}, 0x1ff, 0x400, 0x7, './file0'}]}}, 0x141) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000001440)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c833b1e68be0e1cab90b51b1623963298038b867090ab88effd05eb9ae2930cf7dd2"], 0x30) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000140)='bond_slave_1\x00', 0x10) poll(&(0x7f0000000180)=[{r1}], 0x200000000000004f, 0x0) r8 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x20000, 0x0) ioctl$EVIOCGSND(r8, 0x8040451a, &(0x7f0000000200)=""/4096) 17:03:11 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r4 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) tkill(r4, 0x1000000000016) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000280)=0x1) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x57}], 0x1) 17:03:11 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x0, 0x100) sendto$inet6(r1, &(0x7f0000001040)="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", 0x1000, 0x4011, &(0x7f00000000c0)={0xa, 0x4e21, 0x20, @mcast1, 0x9}, 0x1c) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000200)=ANY=[@ANYBLOB="cdae3c32246b834faf3c2f615f008ca2069866b610b8d3f37c5d35b9b8ca6d391440eded1efde1838175b9578007539ab04edc04d9c0bdf7e624ce56b01bb7dbb55df9f334c981ad16f0c3f72015af64667ffc74"]) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000180)={0x3, 0x0, [{0xc0000000, 0x200, 0x3, 0x3, 0xffff, 0x7fffffff, 0x489}, {0x80000019, 0x0, 0x0, 0xff, 0x3ff, 0x7c14, 0x5}, {0xc000001b, 0x4, 0x1, 0x5, 0x1000, 0x1000000000000000}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 17:03:11 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r1 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x2) tkill(r1, 0x1000000000016) 17:03:11 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b5101008b000000}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) [ 503.517632] IPVS: ip_vs_svc_hash(): request for already hashed, called from do_ip_vs_set_ctl+0x1b25/0x1d70 17:03:11 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x40000, 0x0) ioctl$PPPIOCSMRU(r1, 0x40047452, &(0x7f00000000c0)=0x1c26) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c833b1e68be0e1cab90b51b1623963298038b867090ab88effd05eb9ae2930cf7dd2"], 0x30) poll(&(0x7f0000000180)=[{r0}], 0x200000000000004f, 0x0) 17:03:11 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b51010024000000}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:03:11 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x7fff, 0x40) ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, &(0x7f00000001c0)=ANY=[@ANYBLOB="0a77e56f94e5d2b7835c0800b2a5196a11a4cdf7be1ad191232d7fc9aca1500367b9b823d8d829"]) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(r1, 0x4040ae72, &(0x7f0000000180)={0xffff, 0xfffffffffffffff7, 0x6, 0x1, 0x4}) ioctl$KVM_ASSIGN_SET_INTX_MASK(r1, 0x4040aea4, &(0x7f0000000080)={0x2, 0x7, 0x9, 0x0, 0x2}) remap_file_pages(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x1000004, 0x12d, 0x0) 17:03:11 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r1 = gettid() close(r0) semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) tkill(r1, 0x2e) [ 503.806759] sg_write: data in/out 65499/33 bytes for SCSI command 0x0-- guessing data in; [ 503.806759] program syz-executor5 not setting count and/or reply_len properly 17:03:11 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000280)=0x1) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockname(r1, &(0x7f0000000180)=@pppol2tpv3in6, &(0x7f0000000040)=0x80) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") readv(r0, &(0x7f0000000680)=[{&(0x7f00000002c0)=""/80}, {&(0x7f0000000340)=""/67}, {&(0x7f0000000100)=""/22, 0x382}, {&(0x7f00000003c0)=""/168}, {&(0x7f0000000480)=""/114}, {&(0x7f0000000500)=""/241}, {&(0x7f0000000600)=""/92}], 0x0) 17:03:11 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) getsockopt$sock_int(r1, 0x1, 0x2d, &(0x7f0000000200), &(0x7f0000000340)=0x4) r4 = gettid() socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCOUTQNSD(r3, 0x894b, &(0x7f00000001c0)) semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f00000002c0)={0x80, 0x8, 0x7, {0x77359400}, 0xfbd6, 0x7f}) tkill(r4, 0x1000000000016) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000280)=0x1) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x57}], 0x1) 17:03:11 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b5101002c000000}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:03:11 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x40, 0x0) dup2(r1, r0) openat$null(0xffffffffffffff9c, &(0x7f0000000300)='/dev/null\x00', 0x4000, 0x0) r2 = memfd_create(&(0x7f0000000340)='/dev/zero\x00', 0x3) r3 = openat$cgroup_ro(r2, &(0x7f00000002c0)='cgroup.controllers\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x0, 0x0) write$selinux_context(r3, &(0x7f00000001c0)='system_u:object_r:syslog_conf_t:s0\x00', 0x23) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) getegid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r4 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) ptrace$setregset(0x4205, r4, 0x203, &(0x7f0000000100)={&(0x7f0000000080)="6739cf50462c182ed332882d69fb7cee39db62556c00bfb8a62f0c00ae7328f6c97242742012eecfa8b44346fd443ce6809962fd2869a7c4970cf95d63e33d97e6a7c3d83bb5e6ad5d8e", 0x4a}) tkill(r4, 0x1000000000016) 17:03:11 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup3(r1, r0, 0x80000) ioctl$FIONREAD(r3, 0x541b, &(0x7f0000000000)) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c833b1e68be0e1cab90b51b1623963298038b867090ab88effd05eb9ae2930cf7dd2"], 0x30) getsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f0000000080)={@mcast1, 0x0}, &(0x7f00000000c0)=0x14) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x32, &(0x7f0000000140)={@remote, r4}, 0x14) poll(&(0x7f0000000180)=[{r0}], 0x200000000000004f, 0x0) 17:03:11 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="cdae"]) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x10882, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000000180)={'NETMAP\x00'}, &(0x7f00000001c0)=0x1e) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(r1, 0x8040ae69, &(0x7f0000000080)={0x5, 0x1561, 0x7ff, 0x3, 0x1}) [ 503.868409] sg_write: data in/out 65499/33 bytes for SCSI command 0x0-- guessing data in; [ 503.868409] program syz-executor5 not setting count and/or reply_len properly 17:03:11 executing program 0: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x42c, 0x5, &(0x7f0000001400)=[{&(0x7f0000000200)="60fcff22e26316881a36635a91748e98ca7294ddb119f988a6029a5c1d5be3fd566366aa0c3c5aaf9874de4c88f86a05ca5dac093951d4c2fc5f09c6825abbe1a20e15a4ef8ee8d1db29fcd0cfad51d96f1b09a9bbdc49ddcfb33885ebeb35b1674ec96373bcdc58a49354a62b6bd3ef3bf2a648bfcaa9", 0x77, 0x4}, {&(0x7f0000000280)="a5caef3c8fcf9a663fce36b99078e1272085e40cb776dc1745555ece4bbba3c3028f6f9b0321ee420dd83ca4b7c65401961bb49e4b1478a84b82436a1e26772971d1f583e93fd82f10a6e4ad407dd1eebdd8b4ea40bdf105904a7d6c08a3ba770988d0e41a1fdc9339f638628e592ca6dac4ce0b4036cd6e12c763938a3685094f4131de1556a9cd1f384cd663e2911c5bcdf210fba137f3e0785edf97937c6a18365497e78a939618c437bbf2178239f55d01e2a389a35c8ed7d3f0f4426d4a2b3ebb", 0xc3, 0x2}, {&(0x7f00000000c0)="92c5f97bd4f905bf728f4cce1545ecefe9e5c2303a22dea746d1afa065566d69b304c27be14b3d0033925f90f9ca02a9a3150601c0d4587fc301", 0x3a, 0x1}, {&(0x7f0000000380)="e7f880b80ddc43874547f100285c929666e6ba734e8f892b77b3c0eba7a65d034920c2bb09faef8cf2058dc03c6e1596acefae3b891cc28cd7777113c9c0b7c885f5334d088a40c49acac931afa7f825ce168c07de343598030c90976d7a7ee5951308885ad60528cafaa5c4e19bb36602cf56a1f47b6c393179f98722622f4e741efcfcb03af00693960dd07b6d7ed61e7efff630c3d84a60bd22be9579eb4f8511ac93c0953dad4627d2e77bb43a64bfb81cdad9bcfb1c65d08215384e0d00953af1cb850bf49a8945f6e059179d257afb7cac3e7166bc72b22e312bcd06264c4053a5c8baa919daaf60b95fde136b4e61e0d6c44893639a3d6ccd53799b1e82628efa2ad922dd6f0b3e89934c415d82ae7adb74ef7e529cea367fe8f938bc9237b667c427ffa435216f9c348476103cce0baef1bb613e5556794a9c9513a9eb531b190f7957b53320363bbda30d198d2983f6f2d3797d536a642f717eddb2b646f7b4276319415079e9a8dcc2d94c3051b6cc8bea46a12bebe8e7d1b9d8571ec9235738102f0a8445f1a1d3a5a59a6c9b96256d822f74f0d36e3ce022522b179c50edb40877c38b1dae284fdff7575728cb249c486522c86604662071ec9cf318e4c2b49e8b065c9c9ef12700b2a18accc0fb1bc73cd3afdfefc300926374885d8d98070b6476b713e92212a42ce6bedfbdbebeff0e40016542f6d22315cf5e65e31acc224a760723e1c95b2b4c8b12c4d0d92568952041212243f2cdde0756fd8274e134610e9e6aff7c6cd8e31d7ec371d8466b6dd054d586c50a9e387bd3b8b057ebf2eef49ee64f434c463828afec13ef718f3c59b96bdebf81ba1cf5110ee291d3365abfc4456a8c8c0314439871b94643b18f90f51064904f3ac6226df30dc0c67a7639a6b8ac2556e6508547cc05ad74fb9c0781f558ba628a6e2a8fa0e99fb0ae46c93eb9051ee3d8472041a3a32e22e9a17bd01bb51ba3cec58c6b60b126fba1702f1c6d2ae502d4d8ee6c49bad93e20d7bc7f5523c053574e26c087c871360ccdd069bcaf6b317e6982f38754bd5ce055c434dad27f9bfdf3b2f76b727d53fbac5567d34dbdaa0c88d4877a40bcd7c73eb0468a381917692be2c6049056e41a031e6637027c5b8ff25903d3a9c0e547f0d4c0cd9b2b4a72ff2f5dd2693a93ef85487fb48fe6a31d0a86dcb38e749f7f5689310ab4a3bce765ba8b3ee73dc8936cac65f7f5720bc2189ea48ce957805188f6a9fac45386c4c0a67b4fd87e6d4256c4b164ad9915c54b02f179a2fe7b27b8cb8f200248ba69903bd862e51426ccb0d027b831165e6fa3fb531296dc73292b9a34a3e9769cc08bfe663957cb923b2bf1f4b9c492dd7c1af6de222c3d1041429b1b0555fb9fda2bf6b88fa1f2e96d2b5b0270f7f766f9f2bbc257ad36f46580bea4d8f8908d83aa801e437508c6d4a3e0e2e202215e92554bdac38f0fc5b81e75bb6b3a6e2f97a97bed6b3df45a62cd9a4de47c601ac90bb6af8700ac1d21edb2fd55fb020fbe047bb6906cb1cc4abda8e7aaefadcf7658bd0e1a902739a22f86aec1ab6209b9ed68ecbfce5b97eaf55dad12d410ce0973787f5b170da65db3aecd873ae73feaca6f9b2700ca8be2602761a977312c69e13f6aed281ee9db12aa993829b8374e411ebaa1d08ef06a1c56b2df644f8ff3913f28eb5156a46326693b0678b2d17a65b50936a36a12cee9efdf9f2f757ab004236f207f9b7c21cc2002594a13cca49f87e9ebe2f2b7877be953c72aabe2ef5f72c2bd3d15ed8674ad515b2b5981d423815babf75de43b2fbf78a9f6dc69d4a4ec23c17297f1674f74fc98fea5ef241fc0ab8cea8bb036e73ae2e6513c42078615c4a7447b15321f4df071a5d0b868f0cb3e78f836b8ebf2576fadc02c807840f7030a4dc991210ff282b9298babc22850288198e322e6f8975afc7f566f928e74e32c7ca523d69b3ce8e62ceb79faec3a7d0fb1fc27a97c19e5cf0495773243cd4245e7e6127cb621f4fcd4c1a32b993f11d327bb0e6f24925e291ecdd641d51dd24916700d46f34d6166822137f4ad1d7d0f291aea110f8b6031788375e9180941f38d24bc9bc593eaa4f2b63a3a578073479eedddd3e57d84b0f260d917a690018cea5e1a70530a0a5610e514722b38d5a8d163e29d569c65827189c925d07794f2876a8710d56362621f939cf4d30a257b8d04d31c58432ec02adc220a1afee3d7c9fbccf3d2023f38e2f0176efe3ea5659a2ee9418d21bde7680cc9aa24b323ebaeed9c39a9962f683e4db02af85f3b7912139d3502f1d484db881e000e0313b8905e9c415bb403946aaeee180e7be02021d707f171e821644646b585b19bc17dbbcf1d145c7a6fe0d113547baefa5daff6b430cf249ecbe4aaa438fce9a85aa2fa615e3ef5d3530a8b2886c3a9c1dda0a4ad5a03a4a0603576512aaa6d2d78951dd0789ebfdd139b18b76e3f58b43042be18071cc2263c61d51f201c79c16d9b6688c8f07d7fb5ae6829af1a366132d11adac936c605e96ea59fd8a6b2542326ff75c7080692a2dd3442032edbdaad385c9a3870ffb50292d79a44a018422aa5160a269f3d5b9c78d3f780c19204e9c6ca818247dd26ca6ae3c4df77e1c0fbe37b87b55eeedf7de840e9e1ec2c7f5e1a499328cbf8223f2644a72254161b21ad10047becaafe89d32acbad3dc1b990fd434194847b3e9a54d1adb5742ed322259c3609273e6159c634ffafa650ef14bab474ba0f6ccc272f0d528b9572b105ab7888d53fc2a757f56f5566604c112af2851d4856d64fcfd260faba14388ded5945c883f53f8d868d21f04c17e5ea3c2a914479f4b8a5ac17318fe9b10c9bf91828d095bd3db7231123794aba5b8b94945675f7ed82dca8d47b3e6a843708aa48412821bc84286c6c8fdc9486c32f644d41e986d69467c31a61a92b1c381ccd3a5d1835fd04ea5af54912d59b208b8ac992f4dd0b1dc10b8ed9ac0f27529390d324e4f1d552e87cda4ff8370bafb669cd465d250bfa5461ee71090eb164c072e685d1a3fe2f5b845fb9e09bf55f3c96aeb2e421d430d8bfb4af4cd6c73ba4905af80f356687bb767c45e91bb4b3d439bc5485789749fb49c1d3fea9d45a74dbc2a850ad64a59b34657dbe7d83f4ad2b17bf15bed830962c337e8d56746460c9ba50225ea40ad9e43a814e13c99018ad0f314db9f4de60f2cdd3d775fdb3a768f8f9af59d66e27857e2a850b98ac694aefcc58a0ba5c099bceb55b753362b52d8ef6b5b3ecc0d6e634fc0101144615a94ff69b2bc65de55ee3beba8702b33cc5811dba8846b4a702dcd2cfe884d0695f8c536435f824414b3014692e4e5c8e26f1515be45a8bd37074b888c746888465abaeed1bb8db3c56217a279ee95fd3dc68430e662c9e9c3195307538e98b12f9ce80bd42a3b432ed5cfafe81b4388ae1adb8d9835e2fcd5193ac300e69cb256a5adb7b57138c51255a412560fc74afb7b44409e36676c6e48aaab4ebd553b88e2556d01ca686e5c2780da012939f155b3c1c3a0268d7ba6956ff2bcb182ef45d0cfce4a6d9e3a52eb6e737c3429cb33e4a463a74f756372727cc837ec6ecc7621c6db4bec5a2965793d0b51b7d49b114c278a2976261b4fe0b241cbbc2458ca8b3ab3e0b893c90a9462eb71639a1346fee187a916b53e47280d40ad16cecef6656c597ae40eb61be346cbc81f41fc981875de92272b047526ea95f238adaf0237d664949673634a7ebb2230dff4e33cda6d3d0aaa0e147a9e6fe0fae6219c3211e52cae4fa9361b7933f5c917006594d56e7b6bb468d0e27366ecf99a23fc25374a195e5a0203b5c2a40bb5760fc5bf88f3fcd50aafb092c7552783010b2dd7cfe126915debad7b45693b9664f96c59e13f6f9cf4c010a457c59a89672d035c30e203d0e3240966f19a3d5f207bcbe4f561c324b2e955a22739f02eb7716d56f92cfbed1bef39ff8fa257657d83ac88a0a6d1a186460d7fcd5514d390f2b75c9d3d8367bc8f98de77c997a9120220f47f8d50ae3166321ca2a954280a6524f43a03cd16f6fcb46b246574907851454e860061e6e1d6771dfe8ba77542d5e69b94edffda37e7c4b1508ca1f93863f077f193219360a3e1c68a3edb4375314f883c342ff9608853f2b67a08511619ede443ed8da1099a1963d896327e062d965e5a0ba1caee087d93e3ca09c1ef53066b3a5d086ef707390af14b30701e0e46107a77d5b852be7512ba69df16290e48f46c00c7895b37aec6de5cbcca3f1618f941fd1389d837eef663f7adb5ccefcb2e27be7a39b3d00912a1b49b13ebe2c27192bd17445d87fbbb4639800fe5f26ce89b49cb3244784d729a3af104bab91c9ede0db89c19e4a234f097564e1d82587b1e50eda9f528363e4e6a76492bf15801b43dd7ce4c6bb91d8b16159841c59909989dab1c8c5a7f36d7fc9d610f44c76715515c5e310b4bf04b09ed5f59edf722c31f1776004327a57392586e1d912e7ba2b583ea2739ae763975a03eed98783e69b3ed36beaedf8bfff7272f2fd5105350ad6871afcfa5fcaaa46e41c002b5bed428adc8f5f27da48e89cc426f8e654e319ee19ee25a41a7b6237c0065014b108db7728fb6773903829b54b547b5305ad988af1732915327fac425d3caa4baee57bd58d7e2a92a626d40f137e9c9050268411cc43bc795cbc6ad7a1113b1a25b759f8221f40e1ab3107dcc911b13da3cd9c1eb191df1f392dbd5d155fe27130dde3daaad5c2a9909fa9b20bd7b20de895d1221c0ddfe9f27d87bc9a6b4f7e64d6387529aa7920dd0578b44cd09bf2c9236947ac6fbb659fed92f521ae4bbcd680de702d2944e7b09456fed7e42013a84604686d3f5a911af7f0b4b7a603e859e090353b5505946412f9d9dbaa4129ca23226dae4336309f3e17487af7065239663b2844a5826dd94884219a127a69e5aacd402d5a0baa3de21207304a66ff666d163324232c420dbe68176f141b4898754ada0e3081a69ef8d8aec7acf259984486729b8a14bf53bce3d323bf160f304f9f98846d0603d1e3c6712d09af0244f5f70a003db74d28717072d881f69d21cc35b47e4d06920c52cef93e59f5408463d915b3650ccc8c1ff8890007c171054faf1c772e54b20fd019850fd9d364f0647d74be5a0d71130dc639fa589777988fa8adbb012935d4419e79b2acf7697c7ebf1c6cf3f4938f439da341cc3f14aab75c6831cc746837ba09bbe0af09a7c48d54df07bfc2bd76019f544677bb83049dbe0c1a0111976d1674525df804d1c354fdd33574ea299e1e08ed596e447dc48f7b000c555941718ae65a1638f1ec95179c44a1318d8601760898e8095d4eba91c655d597be14a5a4196c05489c9e2f34b41e45f81d79669d6a4ba1c5fef88fa21b0d8c9785748afd02c8ef23eb72fd73d97c27e395e04cb97f8b9825ef03e55de311f926e2d1c88ba831792996a7a5fc445dafe5c196ca36071a4db9acfbee1ceecb88dd7a3e4c396156c6aa52705681253d9ba2c0fad8e4df2c03ab6a248b757649b87bd46a2d7ee4684b3672bd2ff188caccfbe3d566dc1e678a63ea9a36189c70ad4b132ec04ca0b303233d70f28e92063ef4750407e16d159292bdf23d95b071ece7a9b53afdbd39bf96f6205a3c13e7b79322ef9de5cac023f8eacdf52c9baa43f1d98a173014299ca42b1bfea2ffa82a513d0ad5c888be3e364c9a339a7f0984fbc3a77df12bbf3eecf1b72f4bc701abdb2c23279f7ef416477267c1", 0x1000, 0x7fff}, {&(0x7f0000001380)="e6e543a717375ecbcb5fb30f045fbd0f1e9dda6a8cd01ccab407d6338ed2c35ec1afd6ff255570fc9008352568ef8f31a2184594722e1defd7538e308c608ea3e4cfc73f13453f748e8a569d9dcdfb2f0c8515ddba83c0f619aaaaa1a692dd9f550c36b2aeae19827f76866fc8fcdb9df1bdea41d3938a64a60718d38ef0", 0x7e, 0xbb}], 0x1000000, &(0x7f0000000140)={[{@nodiscard='nodiscard'}, {@nodiscard='nodiscard'}]}) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c833b1e68be0e1cab90b51b1623963298038b867090ab88effd05eb9ae2930cf7dd2"], 0x30) poll(&(0x7f0000000180)=[{r0}], 0x200000000000004f, 0x0) 17:03:11 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b51010000001201}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:03:11 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0xfffffffffffffffd, 0xc801) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="cdae"]) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x3, 0x2000, &(0x7f0000001000/0x2000)=nil}) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x1, 0x0) read$eventfd(r4, &(0x7f00000000c0), 0x8) ioctl$KVM_RUN(r3, 0xae80, 0x0) 17:03:11 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r1 = getpid() r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x10000, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='-nodev\x00', 0x0}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={r1, r2, 0x0, 0x7, &(0x7f0000000200)='-nodev\x00', r3}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000080)='-nodev\x00', 0xffffffffffffffff}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)=r4, 0x4) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10000, 0x0) r5 = gettid() r6 = semget$private(0x0, 0x7, 0x200) semop(r6, &(0x7f0000000140)=[{0x5, 0x126df0db, 0x1800}, {0x2, 0x3, 0x1000}], 0x2aaaaaaaaaaaac86) tkill(r5, 0x1000000000016) 17:03:11 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r4 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) tkill(r4, 0x1000000000016) openat$cgroup_type(r0, &(0x7f0000000440)='cgroup.type\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200)={0xffffffffffffffff}, 0x113, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x4, {0xf1, 0x0, "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", 0x61, 0xffffffff, 0x4, 0x7fffffff, 0x0, 0x4, 0x200}, r5}}, 0x128) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000280)=0x1) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x57}], 0x1) bind$bt_rfcomm(r0, &(0x7f00000001c0)={0x1f, {0x100000001, 0x20, 0x8001, 0x80, 0x9, 0x1f}, 0x9}, 0xa) 17:03:11 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73927a31fe44316666e1cab90b51b1623963298038b867090ab88effd05eb9ae2930cf7dd2"], 0x30) poll(&(0x7f0000000180)=[{r0}], 0x200000000000004f, 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000200)={{{@in=@rand_addr, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in=@multicast1}}, &(0x7f0000000080)=0xe8) [ 504.275409] sg_write: data in/out 65499/33 bytes for SCSI command 0x0-- guessing data in; [ 504.275409] program syz-executor5 not setting count and/or reply_len properly 17:03:11 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x2) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000180)={0x6, 0x200000000000, 0x5}) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000280)=0x1) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x200000a1}], 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000100)=0xd9, 0x8) 17:03:11 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b5101007b000000}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:03:11 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000080)=0xc) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)=0x0) tgkill(r1, r2, 0x13) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c833b1e68be0e1cab90b51b1623963298038b867090ab88effd05eb9ae2930cf7dd2"], 0x30) r4 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x401, 0x10000) openat$cgroup_procs(r4, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) poll(&(0x7f0000000180)=[{r0}], 0x200000000000004f, 0x0) 17:03:11 executing program 4: socketpair$unix(0x1, 0x8, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x4000, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f0000000100)={0x1, 0x6, 0x80000000, 0x9, 0x0, 0x2}) r2 = dup(r0) ioctl$DRM_IOCTL_MARK_BUFS(r2, 0x40206417, &(0x7f0000000080)={0x7, 0x2, 0x5, 0x7fff, 0x8, 0xfffffffffffffe01}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000140)=0x1) r3 = gettid() tkill(r3, 0x18) semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) tkill(r3, 0x1000000000016) 17:03:11 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000040)=0x9) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000200)) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BLKRESETZONE(r0, 0x40101283, &(0x7f00000001c0)={0x5, 0x80}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_MAP_BUFS(r3, 0xc0186419, &(0x7f0000000340)={0x3, &(0x7f00000003c0)=""/246, &(0x7f00000015c0)=[{0x7, 0xda, 0x336f, &(0x7f00000004c0)=""/218}, {0x9, 0x6b, 0x3, &(0x7f00000002c0)=""/107}, {0x66c, 0x1000, 0x48, &(0x7f00000005c0)=""/4096}]}) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r5 = gettid() r6 = semget(0x1, 0x1, 0x488) semop(r6, &(0x7f0000000380)=[{0x1, 0xfffffffffffff800, 0x1800}, {0x1, 0x100000000, 0x1000}, {0x7, 0x1, 0x800}, {0x1003, 0x9}, {0x1, 0x100, 0x1800}, {0x7, 0x8, 0x1000}, {0x3, 0x8}], 0x2aaaaaaaaaaaaa95) tkill(r5, 0x1000000000016) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000280)=0x1) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x57}], 0x1) 17:03:11 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0xfffffffffffffffd, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="cdae"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) getresgid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000140)) r3 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r3, &(0x7f0000000200)=""/28, 0x1c) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/enforce\x00', 0x80000, 0x0) setsockopt$IP_VS_SO_SET_DEL(r4, 0x0, 0x484, &(0x7f0000000240)={0x33, @rand_addr=0x3, 0x4e20, 0x3, 'lc\x00', 0x6, 0xffffffffffffffff, 0x4e}, 0x2c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}, 0x200000000, {0x0, 0x4}, 0x0, 0x3}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r3, 0xc0105303, &(0x7f00000002c0)) r5 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f00000001c0)) tkill(r5, 0x1000000000013) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 504.333334] sg_write: data in/out 65499/33 bytes for SCSI command 0x0-- guessing data in; [ 504.333334] program syz-executor5 not setting count and/or reply_len properly 17:03:12 executing program 4: socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') write$cgroup_subtree(r1, &(0x7f00000000c0)={[{0x2f, 'pids'}, {0x2d, 'pids'}, {0x2b, 'rdma'}, {0x2b, 'cpu'}]}, 0x17) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r2 = gettid() r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$xdp(0x2c, 0x3, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000100)={0x1, 0x1f, 0x33}) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x1, @mcast1, 0x8}, 0x1c) semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) tkill(r2, 0x1000000000016) 17:03:12 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c833b1e68be0e1cab90b51b1623963298038b867090ab88effd05eb9ae2930cf7dd2"], 0x30) poll(&(0x7f0000000180)=[{r0}], 0x200000000000004f, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x800, 0x0) 17:03:12 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r4 = gettid() r5 = semget(0x1, 0x0, 0x400) semop(r5, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) tkill(r4, 0x1000000000016) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000280)=0x1) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x57}], 0x1) fcntl$lock(r2, 0x5, &(0x7f00000001c0)={0x1, 0x1, 0x2, 0xf11, r4}) 17:03:12 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b51010051000000}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) [ 504.480963] sg_write: data in/out 65499/33 bytes for SCSI command 0x0-- guessing data in; [ 504.480963] program syz-executor5 not setting count and/or reply_len properly 17:03:12 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) fallocate(0xffffffffffffffff, 0x38, 0x100000000, 0x70) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c833b1e68be0e1cab90b51b1623963298038b867090ab88effd05eb9ae2930cf7dd2"], 0x30) poll(&(0x7f0000000180)=[{r0}], 0x200000000000004f, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000080)={0xffffffffffffff3a, 0x0, 0x10001, 0xfffffffffffffa1b}) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f00000000c0)={r2, 0xffffffff00000000}) 17:03:12 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) bind$bt_rfcomm(r0, &(0x7f00000001c0)={0x1f, {0x7, 0x8, 0x2, 0x8, 0xb1, 0xfffffffffffffffc}, 0x8}, 0xa) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r4 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) tkill(r4, 0x1000000000016) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000280)=0x1) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x57}], 0x1) 17:03:12 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000280)=0x1) r1 = socket$inet6(0xa, 0x1000000000002, 0xfffffffffffffffe) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r2 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x80000, 0x20) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0505350, &(0x7f0000000180)={{0xf833, 0x7c35}, {0x81, 0x4ef873aa}, 0xffffffffffffff80, 0x3, 0x6}) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x200000a1}], 0x1) 17:03:12 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c80800e68be0e103666e72fcf3376657b90b51b16239630880380367090ab88effd05eb9ae2930b16545b56e68d77acf7dd24d692859898123cd03c2e9a064863ca769823368d40f7525ac117e045cee"], 0x30) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0xb, &(0x7f0000000300), &(0x7f0000000340)=0x4) r3 = openat(r2, &(0x7f00000002c0)='./file0\x00', 0x0, 0x1) sigaltstack(&(0x7f0000fff000/0x1000)=nil, &(0x7f0000000380)) write$FUSE_BMAP(r3, &(0x7f0000000080)={0x18, 0x0, 0x2, {0xe8}}, 0x18) poll(&(0x7f0000000180)=[{r0}], 0x200000000000004f, 0x0) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f00000001c0)={'raw\x00'}, &(0x7f0000000140)=0x54) 17:03:12 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b51010000005700}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:03:12 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b5101000000006f}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:03:12 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000140)) r1 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f0000000280)=0x1) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") readv(r1, &(0x7f0000000040)=[{&(0x7f0000000080)=""/33, 0x21}], 0x1) 17:03:12 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="cdae"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4000000000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:03:15 executing program 4: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r0 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) ptrace$getenv(0x4201, r0, 0xff, &(0x7f0000000080)) tkill(r0, 0x1000000000016) 17:03:15 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x5, 0x7, 0xfffffffffffffffc) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f0000000000)={0x0, 0x5}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000000c0)={r3, 0x1, 0x30}, 0xc) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c833b1e68be0e1cab90b51b1623963298038b867090ab88effd05eb9ae2930cf7dd2"], 0x30) poll(&(0x7f0000000180)=[{r0}], 0x200000000000004f, 0x0) 17:03:15 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x4001ff) timer_create(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x12, 0x0, @thr={&(0x7f00000002c0)="e27e246ebee8e9105c516e14c42db66a92098bcbb9793e549c6f4d50f295a73a4e7a8c028b093071e83a0cbfa1dcb8bfa3d540c720d7974144f49c7009d743071f7947aba7178fe69fe1fdf87d23450f1ea2a01e92ba00f50f84418f9358289da50c24e3bdfd614cb92be6c957e2dd419003496b16987cf0b8b18bb4db93f3e3925d894d4b077311a0028ca5e7621135efcabebe6eb1136b71bae46b383770355f88d781", &(0x7f0000000380)="3b4e56a28e4a86b936470a8302c019407d7bf83a9f3f7a457d4cf50a5807ff35cac06ac18ee534ef59086ac17cffe694b4e260e11c79e2fb9f0b07b0b3d37b6177870528b8d56f2a"}}, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r4 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) tkill(r4, 0x1000000000016) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000280)=0x1) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x57}], 0x1) 17:03:15 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b510100fffff000}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:03:15 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000280)=0x1) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$KVM_GET_TSC_KHZ(r1, 0xaea3) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x200000a1}], 0x1) 17:03:15 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x56f447, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="a1a7d538f1a94daf3856f815c35d939be17b47b59ef1fd673da4c4209e3a8bf5b86f4601d1921c0f6c11560263b18fcbcb21f3f2b6d8210e6c433e30a6c32158600d030d7cfffb9a4a823bb6454eaaeeec8734fa25a11bbbd24ab3eaaf142652dedcb2618af2503e61d3"], @ANYRES32=r0]) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)=0x7f) ioctl$KVM_RUN(r3, 0xae80, 0x0) 17:03:15 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="73f40131fe443166669788ad1c83c833b1e68be0e1cab90b51b1623963298038b867090ab88effd05eb9ae2930cf7dd2cc7078e2bdaee37bf2d992d6b046c760c72fbff46e1ee95d16bbcacd1d36bdf03e1cdd4ddd82c92f373c34c3ab5e07a14d18a573cc47dfe59e55767d8af7f795e468dd06c1dbcff14a338e1237ee8bdb0936b454c8e6c230f8ff3f6a83903cb9b66550fd9fee89cf080904b419db0abd403d4623de2532b95288c46f3a8c70427b9d2373a11f719fbe57b8249200daad2dac5b1247b7"], 0x30) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x10000, 0x0) r3 = socket(0x1e, 0x1000000000005, 0x0) listen(r3, 0x0) poll(&(0x7f0000000000)=[{r3}], 0x1, 0x0) ioctl$KDADDIO(r2, 0x4b34, 0x101) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f0000000080)={0x3, 'yam0\x00', 0x2}, 0x18) poll(&(0x7f0000000180)=[{r0, 0x2100}], 0x1d91, 0x7) syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0xfffffffffffffffb, 0x34000) ioctl$BLKROTATIONAL(r2, 0x127e, &(0x7f00000000c0)) [ 507.549463] sg_write: 5 callbacks suppressed [ 507.549479] sg_write: data in/out 65499/33 bytes for SCSI command 0x0-- guessing data in; [ 507.549479] program syz-executor5 not setting count and/or reply_len properly [ 507.585669] sg_write: data in/out 65499/33 bytes for SCSI command 0x0-- guessing data in; 17:03:15 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b51010000000011}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) [ 507.585669] program syz-executor5 not setting count and/or reply_len properly 17:03:15 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x583800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000300)=ANY=[@ANYBLOB="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"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mixer\x00', 0x10000, 0x0) setsockopt$inet6_dccp_buf(r3, 0x21, 0xd, &(0x7f0000000280)="e0585844f243c9", 0x7) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000080)="2640daca67650f23630f21c90f0966b83c000f00d00fc72d79937b5766baf80cb8fc403a8fef66bafc0c66b86ad366ef48b870ec0000000000000f23d80f21f835c00000f00f23f8660f38800f0f01c9", 0x50}], 0x1, 0x40, &(0x7f00000001c0), 0x0) ioctl$KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f00000001c0)={0x4, 0x0, [{}, {}, {}, {}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:03:15 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x9}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000140)={0x7, 0x8, 0x8, 0x6, r3}, 0x10) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r4 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) tkill(r4, 0x1000000000016) 17:03:15 executing program 0: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x5, 0x4000) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c833b1e68be0e1cab90b51b1623963298038b867090ab88effd05eb9ae2930cf7dd2"], 0x30) poll(&(0x7f0000000180)=[{r0}], 0x200000000000004f, 0x0) 17:03:15 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x2) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r1, 0x80dc5521, &(0x7f0000000180)=""/146) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000280)=0x1) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0xeeb, 0x5, 0x8000}, 0x4) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x200000a1}], 0x1) 17:03:15 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000140)) r1 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f0000000280)=0x1) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") readv(r1, &(0x7f0000000040)=[{&(0x7f0000000080)=""/33, 0x21}], 0x1) 17:03:15 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b510100f3060000}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) [ 507.881044] sg_write: data in/out 65499/33 bytes for SCSI command 0x0-- guessing data in; [ 507.881044] program syz-executor2 not setting count and/or reply_len properly [ 507.993215] sg_write: data in/out 65499/33 bytes for SCSI command 0x0-- guessing data in; [ 507.993215] program syz-executor5 not setting count and/or reply_len properly [ 508.013209] sg_write: data in/out 65499/33 bytes for SCSI command 0x0-- guessing data in; [ 508.013209] program syz-executor5 not setting count and/or reply_len properly 17:03:18 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) syz_open_dev$midi(&(0x7f0000000300)='/dev/midi#\x00', 0x100000001, 0x2) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) getsockopt$inet_dccp_buf(r0, 0x21, 0xc, &(0x7f00000001c0)=""/21, &(0x7f0000000200)=0x15) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)=0x0) clock_gettime(0x0, &(0x7f00000002c0)) clock_gettime(0x0, &(0x7f0000000380)) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) timer_settime(r3, 0x1, &(0x7f0000000340)={{}, {r4, r5+30000000}}, &(0x7f0000040000)) r6 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) tkill(r6, 0x1000000000016) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000280)=0x1) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x57}], 0x1) 17:03:18 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="73007a31fe443166669788ad1c83c833b1e68be0e1cab90b51b1623963298038b867090ab88effd05eb9ae2930cf7dd2fb3bf12c541c8c694ad92c3027d63c0573fc60d9723067c54d6b675ef00dee72523c039ad40189a66df02cf1c66421e3d0bb1de8a3b2b80792cd14dba3c112324ab9dcded41de239a6bf0ffbd7d7fa2c66d9660d9d5dfdd8fc6d1aabceeeef4bd1d4a83f93056165c7e45459b4c360b8176b5b1d83a4ba94fe35370ce709b25d76068bf131b6635aa2db96d6498b940648141fe62651d6b8642ed09d7d4e6312"], 0x30) poll(&(0x7f0000000180)=[{r0}], 0x200000000000004f, 0x0) 17:03:18 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)=0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r1, 0x0, &(0x7f00000000c0)={{r2, r3+10000000}, {0x0, 0x989680}}, &(0x7f0000000100)) r4 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) tkill(r4, 0x1000000000016) 17:03:18 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b510100d4000000}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:03:18 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r4 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x2) tkill(r4, 0x1000000000016) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000280)=0x1) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x57}], 0x1) 17:03:18 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000280)=0x1) r1 = dup(r0) ioctl$DRM_IOCTL_SET_UNIQUE(r1, 0x40106410, &(0x7f0000000040)={0x5a, &(0x7f0000000180)="16220042fef8e37bd48c4a06285bd713f48c36911aefe128ca81358b9da455c2368b3608cbff4b446b34b0fe5cd71925df2b33f5dd2a88a362eea0bcb2031a41f80ce6a0590c460c3e4f802b90305343e655d6a54757496e5cd8"}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x200000a1}], 0x1) 17:03:18 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$dspn(&(0x7f0000000200)='/dev/dsp#\x00', 0x3, 0x90001) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c833b1e68be0e1cab90b51b1623963298038b867090ab88effd05eb9ae2930cf7dd2ff1616c2d13f25ee160de61de36894de1cd11cbf3fd9303c"], 0x30) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x400, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, &(0x7f0000000140)={0x7, 0x2, 0x8, 0x18}) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f00000001c0)=0x1) poll(&(0x7f0000000180)=[{r0}], 0x200000000000004f, 0x0) 17:03:18 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r4 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x2) tkill(r4, 0x1000000000016) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000280)=0x1) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x57}], 0x1) 17:03:18 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b5101000000b800}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) [ 510.572014] sg_write: data in/out 65499/33 bytes for SCSI command 0x0-- guessing data in; [ 510.572014] program syz-executor5 not setting count and/or reply_len properly [ 510.595353] sg_write: data in/out 65499/33 bytes for SCSI command 0x0-- guessing data in; [ 510.595353] program syz-executor5 not setting count and/or reply_len properly 17:03:18 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c833b1e68be0e1ca11f463427f5e5a4585d199d75630eab90b51b1623963298038b855e4541d09ba915823ff3ed0893e97c84c75b0e953b1887dbede52c9d3bf3c8aacd4fe252d98f1dc39942c05aa169ff1dffc83447e4215c1d722e3fa9dedda17ba2524f2d33a72017eeccca708d3f39183e9c79bcb38a99d71a53bd5c7945b4c0e71015a0d6cb9f7b65fae55125f23e7a2d198fdd8223960eda0e6cbdb44d908f117a35e20aeb7bc4103d612c79ea077db"], 0x30) poll(&(0x7f0000000180)=[{r0}], 0x200000000000004f, 0x0) r3 = accept(r1, &(0x7f0000000080)=@l2, &(0x7f0000000000)=0x80) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000140)=0x200000, 0x4) 17:03:18 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000280)=0x1) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x20000, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x200000a1}], 0x1) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f00000002c0)={0x275, 0x3, 0x0, [{0x9, 0xd1, 0x2, 0x2, 0x8e0, 0x10001, 0x1}, {0x9, 0xefeb, 0x20, 0x475c, 0x80000000, 0x7, 0x89}, {0x3, 0xffffffff, 0x0, 0x2, 0x0, 0xfffffffffffffffa, 0x8}]}) 17:03:18 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c833b1e68be0e1cab90b51b1623963298038b867090ab88effd05eb9ae2930cf7dd27ea0a6c8b921b8a8a1b1c41e235390ecf374596b1f4a56323a9d80a6b6ea9cb147df5e1516574910bc855716262bc865301a876008af7f58e06f3e520c28938564992915"], 0x30) r2 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000140)={0x2, 0x0, @dev}, &(0x7f0000000200)=0x10, 0x80800) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000240)={0x7fffffff}, 0x4) poll(&(0x7f0000000180)=[{r0}], 0x200000000000004f, 0x0) [ 510.830184] sg_write: data in/out 65499/33 bytes for SCSI command 0x0-- guessing data in; [ 510.830184] program syz-executor5 not setting count and/or reply_len properly [ 510.849761] sg_write: data in/out 65499/33 bytes for SCSI command 0x0-- guessing data in; [ 510.849761] program syz-executor5 not setting count and/or reply_len properly 17:03:21 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r4 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) tkill(r4, 0x1000000000016) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000280)=0x1) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x57}], 0x1) fadvise64(r2, 0x0, 0x3, 0x7) 17:03:21 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b51010000000a01}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:03:21 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r4 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x2) tkill(r4, 0x1000000000016) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000280)=0x1) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x57}], 0x1) 17:03:21 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) pread64(r0, &(0x7f0000000200)=""/4096, 0x1000, 0x21) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x4}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000001200)={r2, 0x48, "a47448a0683ca1fb68e96c6eda567b8764c6a54ff927e608627aa833fec5bc779214b1009ee2469ff78b96d2375d55e6c3a34bb63488ce2991a892a55b7f390180147e9402507ece"}, &(0x7f0000000140)=0x50) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73927a31fe443166669788c530c41c69021a342dddb9a4951b573dad1c83c833b1e68be0e1cab90b51b1623963298038"], 0x30) poll(&(0x7f0000000180)=[{r0}], 0x200000000000004f, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) 17:03:21 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) r1 = fcntl$dupfd(r0, 0x406, r0) write$P9_RREAD(r1, &(0x7f00000002c0)={0x100b, 0x75, 0x1, {0x1000, "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"}}, 0x100b) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000280)=0x1) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x200000a1}], 0x1) 17:03:21 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$setperm(0x5, r1, 0x0) r2 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) tkill(r2, 0x1000000000016) syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x20000) [ 513.609887] sg_write: data in/out 1714504922/2 bytes for SCSI command 0xe1-- guessing data in; [ 513.609887] program syz-executor0 not setting count and/or reply_len properly 17:03:21 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x480002, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timerfd_settime(r0, 0x1, &(0x7f00000000c0)={{r1, r2+10000000}}, &(0x7f0000000140)) r3 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_misc(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c833b1e68be0e1cab90b51b1623963298038b867090ab88effd05eb9ae2930cf7dd2"], 0x30) poll(&(0x7f0000000180)=[{r3}], 0x200000000000004f, 0x0) 17:03:21 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b510100000000ee}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:03:21 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r4 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x2) tkill(r4, 0x1000000000016) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000280)=0x1) 17:03:21 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) r4 = dup(r0) ioctl$KVM_GET_PIT2(r4, 0x8070ae9f, &(0x7f0000000280)) socket$can_bcm(0x1d, 0x2, 0x2) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {r2, r3+30000000}}, &(0x7f00000000c0)) r5 = gettid() bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)={&(0x7f0000000140)='./file0\x00'}, 0x10) semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) tkill(r5, 0x1000000000016) r6 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x800, 0x0) ioctl$EVIOCGPHYS(r6, 0x80404507, &(0x7f00000001c0)=""/77) 17:03:21 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) r3 = geteuid() fstat(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f00000001c0)='./file0\x00', r3, r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r6 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) tkill(r6, 0x1000000000016) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000280)=0x1) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x57}], 0x1) [ 513.722512] sg_write: data in/out 65499/33 bytes for SCSI command 0x0-- guessing data in; [ 513.722512] program syz-executor5 not setting count and/or reply_len properly 17:03:21 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c833b1e68be0e1cab90b51b1623963298038b867090ab88effd05eb9ae2930cf7dd2"], 0x30) poll(&(0x7f0000000180)=[{r0}], 0x200000000000004f, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='attr/exec\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000200)={@loopback, @ipv4={[], [], @broadcast}, @ipv4={[], [], @broadcast}, 0x7, 0x8, 0x80000001, 0x400, 0x1000200000000000, 0x80000, r3}) 17:03:21 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b5101000001b9fe}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:03:21 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c833b1e68be0e1cab90b51b1623963298038b867090ab88effd05eb9ae2930cf7dd2"], 0x30) r3 = accept(r2, 0x0, &(0x7f0000000000)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f0000000080), &(0x7f00000000c0)=0x4) poll(&(0x7f0000000180)=[{r0}], 0x200000000000004f, 0x0) setsockopt(r1, 0x3, 0x2, &(0x7f0000000200)="c8e531cd0281150ab14c4a5cb9253acbaf8308465cb8262c5e44c060a7108ae8e616f9714de310893d898afc47158a1fb1ca080682c6127427792ba73ce8919c73", 0x41) 17:03:21 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r4 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x2) tkill(r4, 0x1000000000016) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) 17:03:21 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r4 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) tkill(r4, 0x29) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000280)=0x1) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x57}], 0x1) [ 513.893111] sg_write: data in/out 65499/33 bytes for SCSI command 0x0-- guessing data in; [ 513.893111] program syz-executor5 not setting count and/or reply_len properly [ 513.908600] sg_write: data in/out 337/4061 bytes for SCSI command 0x37-- guessing data in; [ 513.908600] program syz-executor5 not setting count and/or reply_len properly 17:03:21 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b51010013010000}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:03:21 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0xa, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0], 0x2ad) poll(&(0x7f0000000180)=[{r0}], 0x200000000000004f, 0x0) 17:03:21 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000280)=0x1) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000100)) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x200000a1}], 0x1) 17:03:21 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r4 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x2) tkill(r4, 0x1000000000016) 17:03:21 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r1, 0x40049409, r0) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r4 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) tkill(r4, 0x1000000000016) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) renameat(r0, &(0x7f00000001c0)='./file0\x00', r0, &(0x7f0000000200)='./file0\x00') ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000280)=0x1) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x57}], 0x1) [ 514.176218] sg_write: data in/out 65499/33 bytes for SCSI command 0x0-- guessing data in; [ 514.176218] program syz-executor5 not setting count and/or reply_len properly [ 514.267943] sg_write: data in/out 65499/33 bytes for SCSI command 0x0-- guessing data in; [ 514.267943] program syz-executor5 not setting count and/or reply_len properly 17:03:24 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r1 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) tkill(r1, 0x1000000000016) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x80, 0x0) 17:03:24 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0xfffffffffffffffe) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x1, 0x5, &(0x7f00000013c0)=[{&(0x7f0000000140)="9202e129009ec7e5289e21b0e0068af9bf76f6968019c7fbdb0d46bf1efca4af6fe480b84dc44c47706ffddbcc4bbcc7b890fd9114b44a20d5366af843d3640f046604071649e6f053bc53899c32d67503925221bb233483d8ed57af4453da6ac0d875472b15df72c45d07797f2d98b246966ece392b37751fb5d29c", 0x7c}, {&(0x7f0000000200)="a84ea9b6fd7dde2512ea1382b6a877f14e3ac084eedbe21bb6cf08d22177543442f932497287f65f164d8274b07b2e5fbab4abe8265856dcd0fe4af1d4510d6abf3a36a6b6751213e7b9b727a895f6c8f840b10ee130b70009e459006535854c0de5f90f0972adc35fb9889dd170ca862e1eca003e621f5c1259f296defd1e04b60b0ac945ba75ea664099a61b86434f2b85ba", 0x93, 0x66}, {&(0x7f00000002c0)="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", 0x1000, 0x3}, {&(0x7f00000012c0)="2ce6bd662bf646b74a7df0b51e5497444ca52e2d3bbe678327b33f58e007626772710fe2e78271b72af2ce27f967293a98119c9accc0b2bbce7cb5c411a111ced16629214a12e2ff3a4f12f0dd849061f486fd4d99bd42e7cdd2f67e4b15ab56c793245fc990dc944abc298a2511baaac9f825aedc62145767f19b2574d5cbc22caa730ade86d7f01cb58cb82353354604a058bf4da34f835468cacb10eb444a64ee37f7855006225a0b1b9add0efc45f7e42ac56714f4ed923c5fb75f97295227053bb51661cfc375e617b21a327744ff26c86a577577c7b373a72f981d2f19a1b4aa890c43601d4352e24c8a503f6eac032ee08bc6b15182", 0xf9, 0x3}, {&(0x7f00000000c0)="db6e50905e8aee01f1f22f8f5972e8a7e5b1cdecd944a20772c11bed9c5a16c6cb64dda23eee83a6d400c12f", 0x2c, 0x20}], 0x80014, &(0x7f0000001440)={[{@balloc_notest4='block-allocator=notest4'}, {@usrquota='usrquota'}, {@nolargeio='nolargeio'}, {@acl='acl'}, {@hash_rupasov='hash=rupasov'}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c833b1e68be0e1cab90b51b1623963298038b867090ab88effd05eb9ae2930cf7dd2"], 0xffffff69) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000001480)="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") 17:03:24 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b51010071000000}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:03:24 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x2) 17:03:24 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000440), 0x4) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x3f) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r3 = gettid() tkill(r3, 0x1000000000016) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) sendto$unix(r1, &(0x7f00000002c0)="8aad99c21ff6aeb580d40e991bee3aaac67cf7c4aa24ce90aa32255c1389cdc189947caf6a5d5960107f5173e6939f02530bcf777a98ef5d2cef29bc91506cb89a4f158e574ad50910e2a3867f8cc719684407189a5c3f5239e5513af1d2474b757539862953987ba91af76a34028a62c83868502a3c6a0b3d6f1c6e68992b45cd8bb914a8aff60caa3de4d8f125a6b1488cae4a0323d0663c003adb1f44a28a9d4b07edb25f57eb9ea9ea138410b7f52d8a7c31015f075cd32e92a20b4ddaa820d10cbb30e340b9b8229d0f24f627", 0xcf, 0x4, &(0x7f00000003c0)=@file={0x1, './file0\x00'}, 0x6e) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000040)) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000280)=0x1) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x5cb401, 0x0) getpeername$llc(r0, &(0x7f0000000480)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f00000004c0)=0x10) ioctl$KVM_ASSIGN_PCI_DEVICE(r0, 0x8040ae69, &(0x7f00000001c0)={0x9, 0x7, 0x5abe, 0x3, 0x7f}) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x57}], 0x1) 17:03:24 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000000c0)=[{0x0, 0x0, &(0x7f0000002a80), 0x0, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x80, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x11, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400}) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f00000002c0)={&(0x7f00000001c0)=[0x6, 0xfffffffffffffffb, 0x5, 0x401, 0xfffffffffffffff8, 0x2, 0x3], 0x2, 0x3, 0x800, 0x8, 0x6, 0x7, {0x2, 0xb1, 0x96d, 0x3, 0x81, 0x3, 0xc9d, 0x9, 0x9, 0x508, 0x0, 0x0, 0x5, 0x800, "b05b3dafe07c414191fdf16d28549fa3428ad4c1f16b7ef0ff4ba675598b7195"}}) r3 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) syz_open_dev$sndmidi(&(0x7f0000000200)='/dev/snd/midiC#D#\x00', 0x1, 0x82) ioctl$TIOCMGET(r2, 0x5415, &(0x7f00000003c0)) ioctl$SG_SET_FORCE_PACK_ID(r3, 0x227b, &(0x7f0000000280)=0x1) ioctl$TIOCLINUX3(r0, 0x541c, &(0x7f0000000340)) socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0xffffffffffffff31, &(0x7f0000000380)="153f6234488dd25d763ad2e1042b926070") readv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x200000a1}], 0x1) 17:03:24 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c833b1e68be0e1cab90b51b1623963298038b867090ab88effd05eb9ae2930cf7dd2"], 0x30) poll(&(0x7f0000000180)=[{r0, 0xfffffffffffffffc}], 0x1, 0x10000000) r2 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xff, 0x400) ioctl$PPPIOCGFLAGS(r2, 0x8004745a, &(0x7f0000000080)) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, &(0x7f0000000200)={{0xffffffffffffffff, 0x1, 0xfffffffeffffffff, 0x0, 0x5}, 0xbed8, 0x1000, 0x7fffffff}) 17:03:24 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b51010000002201}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:03:24 executing program 3: ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x4) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r0) r1 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sysfs$2(0x2, 0x5, &(0x7f00000001c0)=""/124) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r3 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000500)={{{@in=@dev, @in6=@ipv4={[], [], @loopback}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@multicast2}}, &(0x7f0000000280)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000600)={'vcan0\x00', r5}) r6 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$unlink(0x9, r6, 0x0) tkill(r3, 0x1000000000016) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$KVM_PPC_GET_SMMU_INFO(0xffffffffffffffff, 0x8250aea6, &(0x7f0000000440)=""/110) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000340)=""/238) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f00000004c0)=0x1) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x57}], 0x1) 17:03:24 executing program 4: socketpair$unix(0x1, 0x100000005, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r1 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) tkill(r1, 0x1000000000016) 17:03:24 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b510100c2000000}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:03:24 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x4000000000, 0xfffffffffffffffd) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c833b1e68be0e1cab90b51b1623963298038b867090ab88effd05eb9ae2930cf7dd2"], 0x30) poll(&(0x7f0000000180)=[{r0}], 0x200000000000004f, 0x0) 17:03:24 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_SET_SIGNAL_MASK(r0, 0x4004ae8b, &(0x7f00000002c0)={0xdb, "9b9a1a194124d05eab19c8d30f6282603e1690df153646ab29d3283e44e18e5eb180e6ea9b94260d8b73471bae46cd3d0186d3523dc9897adbf16f1e30d54eaf23ddc4973aa41b90052eb7479b2dfcc368f6e7c85a6c72115dbe4a06c379b0582facceb5b80c72232d5e617fd586fc88fd5f47e7b1a4cedb6cbc91634e35e3824f81ac34a91741689202f509af1506d140bd5d2192be24e4f11f70244de1efc205f31fa74f3b0de244bbfb91e7656e60500be0cefd1867e075f66c440d3172e3f46a07dbf8348e850e14596cd03154369a7fca01dacd6f9f709c27"}) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r4 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) tkill(r4, 0x1000000000016) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000280)=0x1) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x57}], 0x1) 17:03:24 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c833b1e68be0e1cab90b51b1623963298038b867090ab88effd05eb9ae2930cd7dd2"], 0x30) poll(&(0x7f0000000180)=[{r0}], 0x200000000000004f, 0x0) 17:03:24 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b5101000000000a}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) [ 517.116963] sg_write: data in/out 65499/33 bytes for SCSI command 0x0-- guessing data in; [ 517.116963] program syz-executor5 not setting count and/or reply_len properly [ 517.291804] sg_write: data in/out 65499/33 bytes for SCSI command 0x0-- guessing data in; [ 517.291804] program syz-executor5 not setting count and/or reply_len properly 17:03:25 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0xd8, &(0x7f00000002c0)=[@in={0x2, 0x4e21, @multicast2}, @in={0x2, 0x4e21, @rand_addr=0xe0d0}, @in6={0xa, 0x4e21, 0x8000, @mcast1, 0x81}, @in={0x2, 0x4e23, @local}, @in6={0xa, 0x4e20, 0x4, @remote, 0xff}, @in6={0xa, 0x4e22, 0xd17, @remote, 0x7}, @in6={0xa, 0x4e21, 0x1, @mcast1, 0xfffffffffffffffc}, @in6={0xa, 0x4e23, 0x3f, @mcast2, 0x9c}, @in6={0xa, 0x4e21, 0xfffffffffffffe01, @mcast1, 0x1}]}, &(0x7f0000000200)=0x10) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f00000003c0)={r2, 0x4}, 0x8) ioctl$FICLONE(r0, 0x40049409, r1) r3 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r5 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) tkill(r5, 0x1000000000016) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r3, 0x227b, &(0x7f0000000280)=0x1) readv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x57}], 0x1) 17:03:25 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, &(0x7f00000000c0)={0x5, 0x5, 0x6, 0x5, 0x10001, 0x1}) r2 = gettid() semop(0x0, &(0x7f0000000040)=[{0x1, 0xffff}], 0x1) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000140), &(0x7f00000001c0)=0x4) tkill(r2, 0x1000000000016) 17:03:25 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x2) 17:03:25 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="73927a31fe44316666978808009431000000a38dd068b32792e7ac7100e0e1cab90b51b1623963298038b867090ab88effd05eb9ae2930c77dd2"], 0x30) poll(&(0x7f0000000180)=[{r0}], 0x200000000000004f, 0x0) 17:03:25 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000280)=0x1) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x900, 0x0) write$UHID_SET_REPORT_REPLY(r2, &(0x7f0000000180)={0xe, 0x5, 0x21, 0x0, 0x64, "1e0bda16151be6d53c0f7331756e2fd67d6b69f3ab40aa17a849967aaca54af123573709b1599e6271ba76f4628967190c1a030743b765922147d1c419a93fc1b9abfa577e4311535169a073ccb8487351429e7b1a52694730c81ec7cf7c2222bda20c70"}, 0x70) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x200000a1}], 0x1) 17:03:25 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b51010000009400}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:03:25 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="73927a310c000000669788ad1c83c833b1e68be0e1b90b51b1623963298038b867090ab88effd030cf7dd200000000"], 0x30) poll(&(0x7f0000000180)=[{r0}], 0x200000000000004f, 0x0) 17:03:25 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b5101000000cd00}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) [ 517.682058] sg_write: data in/out 65499/33 bytes for SCSI command 0x0-- guessing data in; [ 517.682058] program syz-executor5 not setting count and/or reply_len properly 17:03:25 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4003fe) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r1 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) tkill(r1, 0x1000000000016) 17:03:25 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0), 0x10) r4 = gettid() ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f00000002c0)=""/80) semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) tkill(r4, 0x1000000000016) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000280)=0x1) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x57}], 0x1) 17:03:25 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x480000, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000200)={{0x0, 0x3, 0x6, 0x1, 0x100000001}, 0x9, 0x9, 'id0\x00', 'timer1\x00', 0x0, 0x0, 0x4, 0x3, 0x6}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c833b1e68be0e1cab90b51b1623963298038b867090ab88effd05eb9ae2930cf7dd2"], 0x30) poll(&(0x7f0000000180)=[{r0}], 0x200000000000004f, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x200, 0x0) 17:03:25 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b510100000000b6}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) [ 517.831181] sg_write: data in/out 65499/33 bytes for SCSI command 0x0-- guessing data in; [ 517.831181] program syz-executor5 not setting count and/or reply_len properly 17:03:25 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c833b1e68be0e1cab90b51b1623963298038b867090ab88effd05eb9ae2930cf7cd2"], 0x30) poll(&(0x7f0000000180)=[{r1}], 0x1, 0x0) 17:03:25 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r1 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) tkill(r1, 0x1000000000016) listxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/48, 0x30) 17:03:26 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x2) 17:03:26 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b51010000007e00}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:03:26 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x40000000000, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) poll(&(0x7f0000000180)=[{r0}], 0x200000000000004f, 0x0) 17:03:26 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f00000002c0)={0x0, 0x0, @ioapic}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r4 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) tkill(r4, 0x1000000000016) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000280)=0x1) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x57}], 0x1) 17:03:26 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000280)=0x1) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'lo\x00', 0x800}) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x200000a1}], 0x1) fcntl$getownex(r0, 0x10, &(0x7f0000000180)={0x0, 0x0}) r3 = geteuid() r4 = getgid() setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={r2, r3, r4}, 0xc) 17:03:26 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r1 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) tkill(r1, 0x1000000000016) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x105002, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, &(0x7f0000000280)={0x7, {{0xa, 0x4e20, 0xbbe, @dev={0xfe, 0x80, [], 0x21}, 0x7fef}}}, 0x88) rt_sigqueueinfo(r1, 0x1, &(0x7f0000000080)={0x3c, 0x6d5, 0x80000001, 0x33e}) 17:03:26 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x9, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) set_mempolicy(0x2, &(0x7f0000000080)=0x80000000, 0xa0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c833b1e68be0e1cab90b51b1623963298038b867090ab88effd05eb9ae2930cf7dd2"], 0x30) poll(&(0x7f0000000180)=[{r0}], 0x200000000000004f, 0x0) 17:03:26 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b5101000001b9ff}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:03:26 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$KVM_REINJECT_CONTROL(r0, 0xae71, &(0x7f0000000100)={0xff}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0xcb) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x10}}}, 0xe329, 0x0, 0x7f, 0x4, 0x8}, &(0x7f0000000140)=0x98) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f00000001c0)={r2, 0xd7a}, 0x8) r3 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) tkill(r3, 0x1000000000016) 17:03:26 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f00000001c0)='/dev/vcs#\x00', 0xc1a, 0x40000) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) r1 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x4) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r1, 0x40049409, r2) r3 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000200)=0x40, 0x4) r5 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) tkill(r5, 0x1000000000016) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r3, 0x227b, &(0x7f0000000280)=0x1) readv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x57}], 0x1) 17:03:26 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b5101002a000000}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) [ 518.670263] Unknown ioctl 35090 17:03:26 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c833b1e68be0e1ca0ab88effd05eb9ae2930cf7dd200000000000000000000000000"], 0x30) poll(&(0x7f0000000180)=[{r0}], 0x200000000000004f, 0x0) [ 518.745164] Unknown ioctl 35090 [ 518.812790] sg_write: 1 callbacks suppressed [ 518.812808] sg_write: data in/out 1714504922/6 bytes for SCSI command 0x0-- guessing data in; [ 518.812808] program syz-executor0 not setting count and/or reply_len properly [ 519.055530] sg_write: data in/out 65499/33 bytes for SCSI command 0x0-- guessing data in; [ 519.055530] program syz-executor5 not setting count and/or reply_len properly 17:03:26 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r1 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) tkill(r1, 0x1000000000016) r2 = syz_open_dev$usb(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0x100000001, 0x40800) getsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 17:03:26 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x5, 0x80) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x200000a1}], 0x1) 17:03:26 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000001c0)={0x1, 0x5}, 0x2) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r4 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) tkill(r4, 0x1000000000016) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000280)=0x1) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x57}], 0x1) 17:03:26 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c833b1e68be0e1cab90b51b1623963298038b867090ab88effd05eb9ae2930cf7dd2"], 0x30) socketpair$inet6(0xa, 0xa, 0x10001, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000200)=0x1, 0x4) poll(&(0x7f0000000180)=[{r0}], 0x200000000000004f, 0x0) 17:03:26 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b51010011010000}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:03:26 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x2) tkill(0x0, 0x1000000000016) 17:03:26 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x100000000, 0x30800) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f00000000c0)={0x3, 0x2, 0x8, 0x3, 0x2}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000000)={0x6, 0x7, 0x12000000000, 0xffffffffffffdc46, 0x4, 0x100}) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="927a31fe443166669788ad1c83c833b1e68be0e1cab90b51b1623963298038b867090ab88effd05eb9ae2930cf7dd218c42cf8e09144b86122a3a5445cc9839416200400d20448d891730087fc08b729d16e115233ce8963e88e01277779c956dfeebe105350883409dc7d28fb523042d61d9741508f5900244d80278b84447b"], 0x30) ioctl$DRM_IOCTL_ADD_CTX(r3, 0xc0086420, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(r3, 0x40086424, &(0x7f00000001c0)={r4}) poll(&(0x7f0000000180)=[{r0}], 0x200000000000004f, 0x0) [ 519.388010] sg_write: data in/out 65499/33 bytes for SCSI command 0x0-- guessing data in; [ 519.388010] program syz-executor5 not setting count and/or reply_len properly 17:03:27 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r4 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) tkill(r4, 0x1000000000016) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000280)=0x1) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x57}], 0x1) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/qat_adf_ctl\x00', 0x40080, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x2}, &(0x7f0000000200)=0x8) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00') write$eventfd(r0, &(0x7f0000001680)=0x4d, 0x8) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001580)={r0, 0x10, &(0x7f0000001540)={&(0x7f0000000540)=""/4096, 0x1000, 0xffffffffffffffff}}, 0x10) timer_create(0x5, &(0x7f0000001600)={0x0, 0x6, 0x3, @tid=r4}, &(0x7f0000001640)) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000015c0)=r8, 0x4) sendmsg$IPVS_CMD_DEL_SERVICE(r5, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="b90000d8", @ANYRES16=r7, @ANYBLOB="1d072bbd7000fddbdf2503000000480002000800030005000000080006000000000008000900060000001400010000000000000000000000000000000000080007000100000008000500040000000800090002000000080004000000000008000400e900000008000500050000004400010008000500020000000800080000000000080009004300000008000100020000000c000700100000000200000008000b00736970000c0006006c626c6372000000"], 0xb8}}, 0x4004000) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000002c0)=@assoc_id=r6, &(0x7f0000000300)=0x4) 17:03:27 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vsock\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f0000000380)={0x0, 0x0, {0x2c, 0xc, 0xd, 0x6, 0x4, 0x1, 0x6, 0x6f, 0x1}}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x40000, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f00000003c0)={0x0, 0x5}, &(0x7f0000000400)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000140)={r4, 0x1000}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000200)={r5, 0x8}, 0x8) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) ioctl$KVM_S390_UCAS_UNMAP(r3, 0x4018ae51, &(0x7f0000000280)={0x4, 0x8, 0xe000}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r6 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x1, 0x0) poll(&(0x7f0000000300)=[{r1, 0x200}, {r1, 0x1000}, {r0}, {r3, 0x8000}, {r3}, {r1, 0x86}, {r0, 0x8}, {r3, 0x1000}], 0x8, 0x7fffffff) ioctl$TIOCSTI(r6, 0x5412, 0x1) ioctl$PERF_EVENT_IOC_ID(r6, 0x80082407, &(0x7f00000000c0)) r7 = gettid() epoll_create(0x3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'vlan0\x00', 0x0}) setsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f0000000480)={@mcast1, r8}, 0x14) semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f00000002c0)=@assoc_value={r5, 0x7}, 0x8) tkill(r7, 0x1) 17:03:27 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b51010007000000}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:03:27 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0xffffffff, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) write$binfmt_misc(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="73928e31f0443166669f88ad4cb5637410eb4cc61c831db0b1e68bcce1cab90b6eb1623963af1746dc67090ab88effd05eb9ae2930cf7dd2"], 0x30) poll(&(0x7f0000000180)=[{r0}], 0x200000000000004f, 0x0) syslog(0x9, &(0x7f0000000080)=""/71, 0x47) [ 519.449198] sg_write: data in/out 65499/33 bytes for SCSI command 0x0-- guessing data in; [ 519.449198] program syz-executor5 not setting count and/or reply_len properly 17:03:27 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x6) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) r2 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) r3 = semget(0x1, 0x4, 0x380) r4 = syz_open_dev$sndpcmc(&(0x7f0000000200)='/dev/snd/pcmC#D#c\x00', 0x8, 0x200200) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000280)={0x6, 0x0, 0x1, 0x800}) ioctl$DRM_IOCTL_AGP_UNBIND(r4, 0x40106437, &(0x7f00000002c0)={r5, 0x1}) r6 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x3f, 0x284000) ioctl$KVM_GET_DIRTY_LOG(r6, 0x4010ae42, &(0x7f0000000140)={0x101ff, 0x0, &(0x7f0000ffc000/0x3000)=nil}) semop(r3, &(0x7f0000000080)=[{0x0, 0x6, 0x1800}], 0x1) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r6, 0x80045400, &(0x7f00000001c0)) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f00000000c0)) tkill(r2, 0x1000000000016) [ 519.530297] Unknown ioctl 1076391951 [ 519.549914] audit: type=1400 audit(1537549407.139:645): avc: denied { syslog } for pid=21468 comm="syz-executor0" capability=34 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=capability2 permissive=1 17:03:27 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) timer_create(0x7, &(0x7f0000000300)={0x0, 0x35, 0x3, @thr={&(0x7f00000001c0)="1c24ee8a93f4076762775c9bb209430cb1204c0ba14d45ddeeecc80fa550eb975aed3348b0666b348d9050385aa69bbf26848f4f944b992a6d42cd332a71c74ebb1f350b15b807cc52d2bfa538de4635987df0bf5f3d475d63d301ccbe9720b88706c90e971c0bc389", &(0x7f00000002c0)="3b7f3d"}}, &(0x7f0000000340)=0x0) timer_settime(r4, 0x1, &(0x7f0000000380)={{0x77359400}, {0x0, 0x1c9c380}}, &(0x7f00000003c0)) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r5 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) tkill(r5, 0x1000000000016) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000280)=0x1) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x57}], 0x1) 17:03:27 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x2) tkill(0x0, 0x1000000000016) 17:03:27 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x200100, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c833b1e68be0e1cab90b51b1623963298038b867090ab88effd05eb9ae2930cf7dd2"], 0x30) poll(&(0x7f0000000180)=[{r0}], 0x200000000000004f, 0x0) 17:03:27 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b51010055000000}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:03:27 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[@ANYRES16, @ANYRESHEX=r0], 0x14) r1 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x6998, 0x80) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000280)=0x1) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x200000a1}], 0x1) 17:03:27 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c833b1e68be0e1cab90b51b1623963298038b867090ab88effd05eb9ae2930cf7dd276676136c26e3f99f437d013266ea0dfc2bf093787a0a3c52afc59893ab77509ffa12f6796913d7a379d1e289f04aef396993d52a7d0b4040ce4885a304dc96f3fcfdaeb65d26ddd1a15e5bbff33f7944e1cbceda4f8bcd240698dd04594fd6ce9059ff0f566b41f5a03e65670eb243be80a329472125c019173ba0a6a4ce80b370321a3c1336a0893daba6bba1256506f148eba155018278804b61298039e"], 0x30) poll(&(0x7f0000000180)=[{r0}], 0x200000000000004f, 0x0) 17:03:27 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b51010014010000}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:03:27 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b5101000000011a}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:03:27 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x5, 0x200) mkdirat(r2, &(0x7f0000000140)='./file0\x00', 0x5) fstat(r0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c833b1e68be0e1cab90b51b1623963298038b867090ab88effd05eb9ae2930cf7dd2"], 0x30) poll(&(0x7f0000000180)=[{r0}], 0x200000000000004f, 0x0) 17:03:27 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x30) poll(&(0x7f0000000180)=[{r0}], 0x200000000000004f, 0x0) 17:03:27 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b510100000000ac}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:03:30 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r1 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0xfffffffffffffc01, 0x313240) r3 = getuid() stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_ATTR(r2, &(0x7f00000001c0)={0x78, 0x0, 0x8, {0x5, 0x80000000, 0x0, {0x0, 0x6, 0x1000, 0xcf3, 0x4, 0x7ff, 0x94, 0x8, 0x6, 0x52d, 0x0, r3, r4, 0x3, 0x101}}}, 0x78) openat$cgroup_ro(r2, &(0x7f0000000280)='cpu.stat\x00', 0x0, 0x0) tkill(r1, 0x1000000000016) 17:03:30 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r4 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) tkill(r4, 0x1000000000016) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f00000001c0)={0x19, 0x12, 0x16, 0x4, 0x6, 0x9, 0x0, 0x8}) ioctl$RTC_VL_CLR(r0, 0x7014) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000280)=0x1) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x57}], 0x1) getpriority(0x2, r4) 17:03:30 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x3, 0x400000) getsockopt$inet6_dccp_buf(r2, 0x21, 0xe, &(0x7f00000001c0)=""/164, &(0x7f0000000080)=0xa4) write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c837c7b3bb96ad9632901000000090ab88e5eb9ae2930cf7dd2f98e8f3b9418b2c70e233ae18f5412884d0bffc2662bff1597bcc7f83c0d287cc71602ec92ec20798b8bc48aeb18d29977ef26dec416dcdc60972e6fc094ec27f880ba8e75df3866b261c935468b2e07a2c5b7f748a617af441f3d29ff6fb8c8203d3819a56223d34ee5426ffad1f0f59c25d7944d01bef44075893922e653a320e0d768cb950aaeb18a457ed66a5b59"], 0x30) poll(&(0x7f0000000180)=[{r0}], 0x200000000000004f, 0x0) 17:03:30 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b510100efb90100}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:03:30 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{0x1}, 0xe57846e811528b2, 0x4, 0xffffffffffffffff, {}, 0x40000000007571}) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000280)=0x1) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x200000a1}], 0x1) 17:03:30 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x2) tkill(0x0, 0x1000000000016) 17:03:30 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r2 = gettid() r3 = dup(r0) fremovexattr(r0, &(0x7f0000000480)=@known='trusted.overlay.redirect\x00') mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x820, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@loose='loose'}, {@version_L='version=9p2000.L'}, {@aname={'aname', 0x3d, '\\'}}, {@access_user='access=user'}, {@access_client='access=client'}, {@cache_mmap='cache=mmap'}]}}) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getegid() r6 = geteuid() write$P9_RSTATu(r3, &(0x7f00000001c0)={0x6a, 0x7d, 0x2, {{0x0, 0x53, 0x80, 0x20, {0x0, 0x1, 0x7}, 0x8010000, 0xfffffffffffff001, 0x8, 0x101, 0x2, 'lo', 0xb, 'GPL\\keyring', 0xc, 'vmnet0wlan1!', 0x7, 'selinux'}, 0x2, 'l-', r4, r5, r6}}, 0x6a) semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) tkill(r2, 0x1000000000016) r7 = creat(&(0x7f0000000080)='./file0\x00', 0x6) ioctl$KVM_SET_CPUID(r7, 0x4008ae8a, &(0x7f0000000280)={0x8, 0x0, [{0xc0000001, 0x0, 0xfffffffffffff801, 0xff, 0x2}, {0xb, 0xa886, 0x6, 0x3, 0x2}, {0x40000000, 0x7fff, 0xfffffffffffffe00, 0x5b4, 0x81}, {0x80000009, 0x9, 0xfffffffffffffffe, 0x5c13}, {0x2, 0x2, 0x3, 0x5, 0x8000}, {0x80000008, 0x1, 0x6, 0x81, 0x4}, {0x40000001, 0x4, 0x1, 0x6, 0x10}, {0xc000000f, 0xfffffffffffffffe, 0x25, 0x1, 0xe87}]}) 17:03:30 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f0000000000)={'ip6gretap0\x00', 0xfff}) write$binfmt_misc(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c833b1e68be0e1cab90b51b1623963298038b867090ab88effd05edbae2930cf7dd25c0bbfbd7168334b58f35b5ebd476a22b27ec9a26e6c718bf27cf75855549494442ab8beb58d3be08d066c9ce5590bb1bada580ebdb9698f0901a6d6630930b218a3c85f"], 0x30) poll(&(0x7f0000000180)=[{r0}], 0x200000000000004f, 0x0) 17:03:30 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) fstat(r0, &(0x7f00000001c0)) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r4 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) tkill(r4, 0x1000000000016) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000280)=0x1) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x57}], 0x1) [ 522.779637] sg_write: data in/out 65499/33 bytes for SCSI command 0x0-- guessing data in; [ 522.779637] program syz-executor5 not setting count and/or reply_len properly [ 522.799621] sg_write: data in/out 65499/33 bytes for SCSI command 0x0-- guessing data in; [ 522.799621] program syz-executor5 not setting count and/or reply_len properly 17:03:30 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b5101009f000000}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:03:30 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c833b1e68be0e1cab90b51b1623963298038b867090ab88effd05eb9ae2930cf7dd2"], 0x30) poll(&(0x7f0000000180)=[{r0}], 0x200000000000004f, 0x0) 17:03:30 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) timer_create(0x2, &(0x7f0000000200)={0x0, 0x12}, &(0x7f0000000240)) r2 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffffa) r3 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0x0) keyctl$instantiate(0xc, r2, &(0x7f0000000280)="1bb279d9a7698333530f05f7033f21a267d854decd16902f04abf64e14fb4da175366d6d33b3ccef14f322ec416b1d8caaf9a6472b9eb78d4e353a3cd83f0862e6e2898cf0e37a8638038b21be90634bf99fec533f9a9ec5b3130a585051db8b0e811e31cb1111e87a0374f1eb04c40a224909e8ccf2d922d2d1d1ffc982841bcb8e32bd1dabe50c5cff5b18de847873d1533dfd0a", 0x95, r3) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r4 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) tkill(r4, 0x1000000000016) r5 = dup2(r0, 0xffffffffffffff9c) ioctl$TCSETAW(r5, 0x5407, &(0x7f0000000080)={0x3ff, 0x1000, 0x9, 0x5, 0x1ff, 0xf18b, 0x1, 0x9, 0x1ff, 0x9}) ptrace$poke(0x5, r4, &(0x7f0000000380), 0xfffffffffffffffd) 17:03:30 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r5 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) tkill(r5, 0x1000000000016) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000280)=0x1) fcntl$getown(r3, 0x9) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x57}], 0x1) 17:03:30 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b510100000000a7}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:03:30 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73927a31fe4431666697880b51b1623963298038b867090ab88effd05eb9ae2930cf7dd2000000000000000000000000"], 0x30) poll(&(0x7f0000000180)=[{r0}], 0x200000000000004f, 0x0) 17:03:30 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x1, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000280)=0x1) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x200000a1}], 0xfd74cb01241e9ca) 17:03:30 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r5 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) tkill(r5, 0x1000000000016) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000280)=0x1) readv(r3, &(0x7f0000000140), 0x0) [ 523.153116] sg_write: data in/out 1714504922/6 bytes for SCSI command 0x0-- guessing data in; [ 523.153116] program syz-executor0 not setting count and/or reply_len properly 17:03:31 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) r4 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x2) tkill(r4, 0x1000000000016) 17:03:31 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b510100ff000000}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:03:31 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x101001, 0x0) write$P9_RLINK(r2, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x0) poll(&(0x7f0000000180)=[{r0}], 0x200000000000004f, 0x0) ioctl$VT_OPENQRY(r2, 0x5600, &(0x7f0000000100)) 17:03:31 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000280)=0x1) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x400000, 0x0) write$binfmt_aout(r2, &(0x7f00000002c0)={{0x1cc, 0x1, 0x1ff, 0x11b, 0x295, 0x9ea, 0x3d6, 0xfffffffffffffffc}, "e9b6d3e4c4b6683fe46ee9740cacb69ffc0a1b006afa9c6686d2c0bfc73a79cc25", [[]]}, 0x141) ioctl$KDENABIO(r2, 0x4b36) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x200000a1}], 0x1) 17:03:31 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) r2 = getuid() r3 = request_key(&(0x7f0000000280)='big_key\x00', &(0x7f0000000300)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000340)='/dev/input/mouse#\x00', 0xfffffffffffffffd) keyctl$get_persistent(0x16, r2, r3) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000140), &(0x7f0000000200)=0x18) ioctl$FICLONE(r0, 0x40049409, r1) r4 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r6 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) tkill(r6, 0x1000000000016) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r4, 0x227b, &(0x7f00000001c0)=0x1) readv(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/33, 0x57}], 0x13a) 17:03:31 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000000)={'team_slave_1\x00', {0x2, 0x4e22, @loopback}}) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c833b1e68be0e1cab90b51b1623963298038b867090ab88effd05eb9ae2930cf7dd2"], 0x30) poll(&(0x7f0000000180)=[{r0}], 0x200000000000004f, 0x0) [ 523.657207] sg_write: data in/out 65499/33 bytes for SCSI command 0x0-- guessing data in; [ 523.657207] program syz-executor5 not setting count and/or reply_len properly [ 523.678972] sg_write: data in/out 65499/33 bytes for SCSI command 0x0-- guessing data in; [ 523.678972] program syz-executor5 not setting count and/or reply_len properly 17:03:33 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000000)='/dev/sg#\x00', 0x1000003) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KVM_GET_EMULATED_CPUID(r2, 0xc008ae09, &(0x7f0000000380)=""/178) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x30) fallocate(r2, 0x4000000002, 0x0, 0x1) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) poll(&(0x7f0000000180)=[{r0}], 0x200000000000004f, 0x0) 17:03:33 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b510100feb90100}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:03:33 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x7ff) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000080)={{r1, r2+30000000}, {0x0, 0x989680}}, &(0x7f0000040000)) r3 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x1, 0x0) tkill(r3, 0x1000000000016) ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f0000000140)) 17:03:33 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x855, 0x8000) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'team_slave_0\x00', 0x2000}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000280)=0x1) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$inet6_int(r2, 0x29, 0x33, &(0x7f0000000180)=0x2, 0x4) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x200000a1}], 0x1) 17:03:33 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) ioctl$FICLONE(r0, 0x40049409, 0xffffffffffffffff) r1 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000b40)={'filter\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(r2, 0x4, 0x4000) io_setup(0x6, &(0x7f0000000000)=0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x8, 0x1, 0x0, r2, &(0x7f0000000040)='a', 0x1}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000c00)={0x0, r2, 0x0, 0x8, &(0x7f0000000bc0)='cpuset/\x00'}, 0x30) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000c80)={{0x4, 0x7, 0xc63, 0x9, 'syz0\x00', 0x1}, 0x3, 0x100, 0x81, r5, 0x1, 0x4, 'syz1\x00', &(0x7f0000000c40)=['\x00'], 0x1, [], [0x3, 0x9, 0x1000, 0x4]}) statfs(&(0x7f00000001c0)='./bus\x00', &(0x7f00000002c0)=""/66) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r6 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) tkill(r6, 0x1000000000016) readv(r4, &(0x7f0000000a80)=[{&(0x7f0000000340)=""/199, 0xc7}, {&(0x7f0000000440)=""/231, 0xe7}, {&(0x7f0000000540)=""/208, 0xd0}, {&(0x7f0000000640)=""/144, 0x90}, {&(0x7f0000000700)=""/90, 0x5a}, {&(0x7f0000000780)=""/108, 0x6c}, {&(0x7f0000000800)=""/71, 0x47}, {&(0x7f0000000880)=""/219, 0xdb}, {&(0x7f0000000980)=""/252, 0xfc}], 0x9) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f0000000280)=0x1) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x57}], 0x1) sched_getparam(r6, &(0x7f0000000200)) [ 526.016634] sg_write: data in/out 1714504922/2 bytes for SCSI command 0x25-- guessing data in; [ 526.016634] program syz-executor0 not setting count and/or reply_len properly [ 526.031397] sg_write: data in/out 65499/33 bytes for SCSI command 0x0-- guessing data in; [ 526.031397] program syz-executor5 not setting count and/or reply_len properly [ 526.055231] sg_write: data in/out 65499/33 bytes for SCSI command 0x0-- guessing data in; 17:03:33 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) pipe(&(0x7f0000000000)) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x40, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-aesni\x00'}, 0x58) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) r2 = memfd_create(&(0x7f0000000300)='em1,*\x00', 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x1400000000000000) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYRES16=r0], 0x2) poll(&(0x7f0000000180)=[{r0}], 0x200000000000004f, 0x0) [ 526.055231] program syz-executor5 not setting count and/or reply_len properly 17:03:34 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) r4 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x2) tkill(r4, 0x1000000000016) 17:03:34 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b510100d7000000}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:03:34 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYRES64=r0, @ANYRES64=r0], 0xffffffffffffffec) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000280)=0x1) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x200000a1}], 0x1) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000100)=0xc) fcntl$lock(r1, 0x5, &(0x7f0000000180)={0x1, 0x0, 0x3, 0x100000000, r2}) 17:03:34 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c833b1e68be0e1cab90b51b1623963298038b867090ab88effd05eb9ae2930cf7dd2"], 0x30) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000000)={'dummy0\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1f}}}) poll(&(0x7f0000000180)=[{r0}], 0x1, 0x5) 17:03:34 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x4800) ioctl$ASHMEM_SET_PROT_MASK(r1, 0x40087705, &(0x7f0000000080)={0x6, 0x400}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c833b1e68be0e1cab90b51b1623963298038b867090ab88effd05eb9ae2930cf7dd2"], 0x30) poll(&(0x7f0000000180)=[{r0}], 0x200000000000004f, 0x0) 17:03:34 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b5101000000a900}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:03:34 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x6) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c833b1e68be0e1cab90b51b1623963298038b867090ab88effd05eb9ae2930cf7dd2"], 0x30) poll(&(0x7f0000000180)=[{r0}], 0x200000000000004f, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xff, 0x604801) ioctl$TIOCGSOFTCAR(r2, 0x5419, &(0x7f0000000080)) 17:03:34 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x100, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{}]}) write$binfmt_misc(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c833b1e68be0e1cab90b51b1623963298038b867090ab88effd05eb9e587de66ae290762feb5352577165d0c8b90beab2109761a10"], 0x30) poll(&(0x7f0000000180)=[{r0}], 0x200000000000004f, 0x0) 17:03:34 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r4 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) tkill(r4, 0x1000000000016) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200)={0xffffffffffffffff}, 0x13f, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000300)={0x12, 0x10, 0xfa00, {&(0x7f00000001c0), r5, r0}}, 0x18) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000280)=0x1) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x57}], 0x1) 17:03:36 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c833b1e68be0e1cab90b51b1623963298038b867090ab88effd05eb9ae2930cf7dd231ea89581e65ad53bf78a4557dbefbec04d2b8e8ea595440bf2dff7ee869ec7db28b63f9fb7c1a88edf7e048a2c573f7886c3eab185423ac81"], 0x30) poll(&(0x7f0000000180)=[{r0}], 0x200000000000004f, 0x0) 17:03:36 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b5101000000011f}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:03:36 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000080)='trusted.overlay.upper\x00', &(0x7f00000000c0)={0x0, 0xfb, 0x53, 0x3, 0x2, "9fdb9f0b9f8aa2c0f1ce990251e784ac", "5c32e1225d742fda8355d015b9d7ca1f873de8732c805ca58e4693741b5712db9374bf94398894ac908e6358f93b5b839f155035b12ea9f6e7ad4f8b06ec"}, 0x53, 0x1) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r1 = gettid() r2 = semget$private(0x0, 0x1, 0x4) semop(r2, &(0x7f0000000040)=[{0x0, 0xffff}], 0x2aaaaaaaaaaaab8a) tkill(r1, 0x1000000000016) 17:03:37 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000280)=0x1) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(r2, 0xc0186419, &(0x7f0000000200)={0x2, &(0x7f0000000100)=""/13, &(0x7f00000001c0)=[{0x40, 0x25, 0x7, &(0x7f0000000180)=""/37}, {0x0, 0xfd, 0x858d, &(0x7f00000002c0)=""/253}]}) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x200000a1}], 0x1) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000003c0)={0x0, 0x4}, &(0x7f0000000400)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000440)=@sack_info={r3, 0x89, 0x3}, 0xc) 17:03:37 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r4 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) tkill(r4, 0x1000000000016) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000280)=0x1) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x57}], 0x1) 17:03:37 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) r4 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x2) tkill(r4, 0x1000000000016) 17:03:37 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c833b1e68be0e1cab90100b1623963298038b8d2"], 0x30) poll(&(0x7f0000000180)=[{}], 0x200000000000004f, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x100, 0x0) 17:03:37 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x1000, 0x280000) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f00000000c0)={0x8, 0x4, 0x8, 0x1}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$sock_bt_hci(r0, 0x400448ff, &(0x7f0000000100)="5c874cef163449a32c85e533900b660601c4b984b5860bc8d5299412145ac3427da59262d64d4d717d16a86891afa827ee2c03cbcadd496f2e973316e7f725") timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f00000002c0)={{0x29, @broadcast, 0x4e21, 0x2, 'lblcr\x00', 0x5, 0x3, 0x6b}, {@local, 0x4e20, 0x0, 0xffffffffffffffc9, 0xdd5, 0x7}}, 0x44) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000140), &(0x7f00000001c0)=0x8) r2 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) mq_open(&(0x7f0000000200)='/dev/vcsa#\x00', 0x40, 0x1, &(0x7f0000000280)={0x81, 0x2, 0x400, 0x20, 0x800, 0x34c, 0x8, 0x81}) tkill(r2, 0x1000000000016) tkill(r2, 0x2f) 17:03:37 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b510100f0ffffff}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:03:37 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000380)=0x0) r4 = geteuid() getgroups(0x5, &(0x7f00000003c0)=[0xee00, 0xee00, 0xee00, 0x0, 0xee00]) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000400)={r3, r4, r5}, 0xc) r6 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r6, 0xc1105518, &(0x7f0000000240)={{0x8, 0x6, 0x1, 0xa1, 'syz1\x00', 0x5}, 0x4, 0x200, 0xff, r7, 0x8, 0x400, 'syz0\x00', &(0x7f00000001c0)=['/dev/sg#\x00', '\x00', '\x00', '/dev/sg#\x00', '.^ppp0#$/-mime_type.eth0GPLppp0.-{cgroup\x00', '+\x00', '/dev/sg#\x00', '/dev/sg#\x00'], 0x51, [], [0x3f, 0x1, 0x8001, 0x10001]}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="73624931fe443166669788ad1c83c833b1e68be0e75eb9ae2930cf7dd2"], 0x1d) poll(&(0x7f0000000180)=[{r0}], 0x200000000000004f, 0x0) 17:03:37 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b5101000000ac00}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:03:37 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r0 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) tkill(r0, 0x1000000000016) [ 529.740870] sg_write: data in/out 65499/33 bytes for SCSI command 0x0-- guessing data in; [ 529.740870] program syz-executor5 not setting count and/or reply_len properly 17:03:37 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r5 = gettid() fchdir(r3) semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) tkill(r5, 0x1000000000016) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000280)=0x1) socket$inet6(0xa, 0x800, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000300)={0x15, 0x110, 0xfa00, {r6, 0x4c3, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @rand_addr=0x3f}, @in={0x2, 0x4e20}}}, 0x118) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x57}], 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f00000001c0)={0xb483, 0x6, 0xe7}) 17:03:37 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0xffffffff823d6758) ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0x3) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c833b1e68be0e1cab90b51b1623963298038b867090ab88effd05eb9ae2930cf7dd2"], 0x30) poll(&(0x7f0000000180)=[{r0}], 0x200000000000004f, 0x0) 17:03:37 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b51010000000095}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) [ 529.876240] sg_write: data in/out 65499/33 bytes for SCSI command 0x0-- guessing data in; [ 529.876240] program syz-executor5 not setting count and/or reply_len properly 17:03:37 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000280)=0x1) fstat(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vga_arbiter\x00', 0xa000, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000540)={0x9, {{0xa, 0x4e20, 0x1, @loopback, 0xb84}}, 0x0, 0x2, [{{0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [], 0x1a}, 0xaf}}, {{0xa, 0x4e21, 0x23, @dev={0xfe, 0x80, [], 0x20}, 0x1f}}]}, 0x190) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in6=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8) r4 = getegid() mount$9p_xen(&(0x7f0000000100)='/dev/sg#\x00', &(0x7f0000000180)='.\x00', &(0x7f00000001c0)='9p\x00', 0x1000, &(0x7f0000000440)={'trans=xen,', {[{@aname={'aname', 0x3d, '/dev/sg#\x00'}}, {@fscache='fscache'}, {@msize={'msize', 0x3d, 0x8001}}, {@mmap='mmap'}, {@dfltgid={'dfltgid', 0x3d, r1}}, {@noextend='noextend'}, {@access_client='access=client'}, {@access_uid={'access', 0x3d, r3}}, {@cache_fscache='cache=fscache'}, {@dfltgid={'dfltgid', 0x3d, r4}}]}}) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r5, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x200000a1}], 0x1) r6 = dup2(r0, r5) ioctl$EVIOCGBITKEY(r6, 0x80404521, &(0x7f0000000040)=""/10) 17:03:37 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x400000) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000140)=0x100000000) r2 = socket(0xd, 0x4, 0x800) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@mcast1, @in=@remote}}, {{@in6=@dev}, 0x0, @in=@multicast1}}, &(0x7f00000000c0)=0xe8) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000300)=0xac, &(0x7f0000000340)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c833b1e68be0e1cab90b51b1623963298038b867090ab88effd05eb9ae2930cf7dd2"], 0x30) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000380)='/dev/hwrng\x00', 0x8002, 0x0) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f0000000080)) poll(&(0x7f0000000180)=[{r0}], 0x200000000000004f, 0x0) [ 530.087799] sg_write: data in/out 65499/33 bytes for SCSI command 0x0-- guessing data in; [ 530.087799] program syz-executor5 not setting count and/or reply_len properly [ 530.108918] sg_write: data in/out 65499/33 bytes for SCSI command 0x0-- guessing data in; [ 530.108918] program syz-executor5 not setting count and/or reply_len properly 17:03:40 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r4 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x2) tkill(r4, 0x1000000000016) 17:03:40 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x14}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x77359400}}, &(0x7f0000040000)) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x2000, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000140)={0x28, 0x2, 0x0, {0x1, 0x1, 0x10}}, 0x26) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000100)) r2 = gettid() socket$bt_bnep(0x1f, 0x3, 0x4) semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) tkill(r2, 0x1000000000016) 17:03:40 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f00000002c0)=""/156) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x40) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r3 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) tkill(r3, 0x1000000000016) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000280)=0x1) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x57}], 0x1) 17:03:40 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b51010000002300}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:03:40 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000280)=0x1) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x200000a1}], 0x1) 17:03:40 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0xc000, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(r2, 0x4040ae72, &(0x7f00000000c0)={0x1, 0x4, 0x100, 0x2, 0x8}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0xc1c) poll(&(0x7f0000000180)=[{r0}], 0x200000000000004f, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r2, 0xc10c5541, &(0x7f00000001c0)={0xa07, 0xf5b, 0x4, 0x0, 0x0, [], [], [], 0xa082, 0x8}) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000000)=0x4) 17:03:40 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c1cb0f1e5d5a1c7020000000000000063298038b867090ab88e0cffd05eb9ae00000080d2"], 0x30) poll(&(0x7f0000000180)=[{r0}], 0x200000000000004f, 0x0) 17:03:40 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b51010089000000}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) [ 532.768950] sg_write: data in/out 65499/33 bytes for SCSI command 0x0-- guessing data in; [ 532.768950] program syz-executor5 not setting count and/or reply_len properly [ 532.790503] sg_write: data in/out 65499/33 bytes for SCSI command 0x0-- guessing data in; [ 532.790503] program syz-executor5 not setting count and/or reply_len properly 17:03:40 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RTC_UIE_OFF(r1, 0x7004) r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x3, 0x80800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x10001) ioctl$KDGETKEYCODE(r2, 0x4b4c, &(0x7f0000000080)={0x8, 0x1}) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c833b1e68be0e1cab90b51b1623963298038b867090ab88effd05eb9ae2930cf7dd2"], 0x30) ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000200)={&(0x7f0000ffa000/0x2000)=nil, 0x6, 0x5, 0x93, &(0x7f0000ffb000/0x2000)=nil, 0xed89}) getsockopt$EBT_SO_GET_INFO(r2, 0x0, 0x80, &(0x7f0000000240)={'broute\x00'}, &(0x7f00000002c0)=0x78) poll(&(0x7f0000000180)=[{r0}], 0x200000000000004f, 0x0) 17:03:40 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0x9) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) ioctl$RTC_VL_CLR(r0, 0x7014) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) gettid() r4 = semget(0x0, 0x3, 0x400) semop(r4, &(0x7f0000000300)=[{0x7, 0xffff}], 0x2bb8) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000001c0)=0x1) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x57}], 0x1) 17:03:40 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x5) pread64(r1, &(0x7f0000000200)=""/221, 0xdd, 0x0) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73920631fe443166669788ad1c83c833b1e68be0e1cab90b51b1623963298038b867090ab88effd05eb9ae29309f0a71"], 0x30) poll(&(0x7f0000000180)=[{r0}], 0x200000000000004f, 0x0) 17:03:40 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b510100e4ffffff}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:03:43 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r4 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x2) tkill(r4, 0x1000000000016) 17:03:43 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000280)=0x1) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) r2 = dup(r0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x200000a1}], 0x1) 17:03:43 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0xc00) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r4 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) tkill(r4, 0x1000000000016) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000280)=0x1) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x57}], 0x1) 17:03:43 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b51010087000000}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:03:43 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c833b1e68be0e1cab90b51b1623963298038b867090ab88effd05eb9ae2930cf7dd2"], 0x30) 17:03:43 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r1 = gettid() semop(0x0, &(0x7f0000000040)=[{0x2, 0xffff}], 0x1) tkill(r1, 0x1000000000016) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000000c0)='selinux(wlan0\x00') 17:03:43 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c833b1e68be0e1cab90b51b1623963298038b867090ab88effd05eb9ae2930cf7dd2"], 0x30) poll(&(0x7f0000000180)=[{r0}], 0x200000000000004f, 0x0) r2 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x7fff, 0x100) ioctl$DRM_IOCTL_MODESET_CTL(r2, 0x40086408, &(0x7f0000000080)={0xa9f, 0x9}) [ 535.798865] sg_write: data in/out 65499/33 bytes for SCSI command 0x0-- guessing data in; [ 535.798865] program syz-executor5 not setting count and/or reply_len properly [ 535.823469] sg_write: data in/out 65499/33 bytes for SCSI command 0x0-- guessing data in; [ 535.823469] program syz-executor5 not setting count and/or reply_len properly 17:03:43 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400202) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r4 = gettid() getsockopt$sock_buf(r3, 0x1, 0x3f, &(0x7f00000001c0)=""/13, &(0x7f0000000200)=0xd) semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) tkill(r4, 0x1000000000016) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000280)=0x1) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x57}], 0x1) 17:03:43 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x3ffffffff, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x18c00, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000004c0)={0x0, 0xcc, &(0x7f00000003c0)=[@in={0x2, 0x4e22, @remote}, @in6={0xa, 0x468a80000000, 0x1f, @mcast2, 0x8}, @in6={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, [], 0x14}, 0x6}, @in6={0xa, 0x4e22, 0x5, @dev={0xfe, 0x80, [], 0x1e}, 0x2}, @in6={0xa, 0x4e22, 0xcee, @empty, 0x1f}, @in={0x2, 0x4e23, @multicast1}, @in6={0xa, 0x4e22, 0x86f3, @local}, @in={0x2, 0x4e23, @rand_addr=0xb6c}, @in={0x2, 0x4e22, @rand_addr=0x8000}]}, &(0x7f0000000500)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000540)={r3, @in6={{0xa, 0x4e24, 0x6, @mcast1, 0xffffffffffffa511}}, [0xfffffffffffffff7, 0x3, 0xe73, 0x5, 0xc678, 0x1, 0x0, 0x2, 0x4, 0x1800000000000000, 0x9, 0x1f, 0x402, 0xacce, 0x239]}, &(0x7f0000000640)=0x100) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c833b1e68be0e1cab90b51b1623963298038b867090ab88effd05eb9ae2930cf7dd2"], 0x30) poll(&(0x7f0000000180)=[{r0}], 0x200000000000004f, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x100, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x94, r5, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}, @IPVS_CMD_ATTR_SERVICE={0x60, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xc, 0x3d}}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x2e}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x7b}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x28}}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}]}]}, 0x94}}, 0x40000) 17:03:43 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r2 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) clock_gettime(0x7, &(0x7f0000000000)) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000080)={'vlan0\x00', {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xb}}}) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000300)={'team0\x00', {0x2, 0x4e21, @multicast2}}) r3 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0xef1, 0x2000) ioctl$SG_GET_SG_TABLESIZE(r3, 0x227f, &(0x7f00000002c0)) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f00000001c0)) tkill(r2, 0x1000000000016) 17:03:43 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x3, 0x8440) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000100), &(0x7f0000000180)=0x14) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000280)=0x1) ioctl$TCSETSF(r1, 0x5404, &(0x7f00000001c0)={0x2, 0x7fffffff, 0x9e2e, 0x5, 0xbb9, 0x7ff, 0x6e0f, 0x4, 0x5f50, 0x51, 0x3, 0x7}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x200000a1}], 0x1) 17:03:43 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b5101000000d700}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) [ 536.094443] sg_write: data in/out 65499/33 bytes for SCSI command 0x0-- guessing data in; [ 536.094443] program syz-executor5 not setting count and/or reply_len properly [ 536.123996] sg_write: data in/out 65499/33 bytes for SCSI command 0x0-- guessing data in; [ 536.123996] program syz-executor5 not setting count and/or reply_len properly 17:03:46 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r4 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x2) tkill(r4, 0x1000000000016) 17:03:46 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c833b1e68be0e1cab90b51b1623963298038b867090ab88effd05eb9ae2930cf7dd2"], 0x30) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000080)={0x3, 0x9, 0x7ff, 0x6}, 0x8) poll(&(0x7f0000000180)=[{r0}], 0x200000000000004f, 0x0) 17:03:46 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b51010000005100}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:03:46 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r1 = gettid() r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x3, 0x200000) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f00000000c0)={0x3, 0x2, 'client1\x00', 0x1, "609f8925718e48be", "dedb1eada0d019b610b9153b0ebd0250523ddd1d69345f1a936ace6cea3da86b", 0x9, 0x2}) semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) tkill(r1, 0x1000000000016) 17:03:46 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r4 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) tkill(r4, 0x1000000000016) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000280)=0x1) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x57}], 0x1) 17:03:46 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) recvmmsg(0xffffffffffffff9c, &(0x7f00000032c0)=[{{&(0x7f0000000180)=@sco, 0x80, &(0x7f0000000580)=[{&(0x7f0000000040)=""/8, 0x8}, {&(0x7f00000002c0)=""/139, 0x8b}, {&(0x7f0000000380)=""/91, 0x5b}, {&(0x7f0000000400)=""/247, 0xf7}, {&(0x7f0000000500)=""/117, 0x75}], 0x5, &(0x7f0000000600)=""/150, 0x96}, 0x3f}, {{&(0x7f00000006c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000740)=""/242, 0xf2}, {&(0x7f0000000100)=""/31, 0x1f}, {&(0x7f0000000840)=""/208, 0xd0}], 0x3}, 0x3da9}, {{&(0x7f0000000940)=@ipx, 0x80, &(0x7f0000001d40)=[{&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/247, 0xf7}, {&(0x7f0000001ac0)=""/225, 0xe1}, {&(0x7f0000001bc0)=""/47, 0x2f}, {&(0x7f0000001c00)=""/14, 0xe}, {&(0x7f0000001c40)=""/20, 0x14}, {&(0x7f0000001c80)=""/179, 0xb3}], 0x7, &(0x7f0000001dc0)=""/161, 0xa1}, 0xed1a}, {{&(0x7f0000001e80)=@ll, 0x80, &(0x7f0000002f80)=[{&(0x7f0000001f00)=""/4096, 0x1000}, {&(0x7f0000002f00)=""/126, 0x7e}], 0x2, &(0x7f0000002fc0)=""/236, 0xec, 0x1}, 0xfffffffffffffffe}, {{&(0x7f00000030c0)=@ax25, 0x80, &(0x7f0000003180)=[{&(0x7f0000003140)}], 0x1, &(0x7f00000031c0)=""/244, 0xf4, 0x3}, 0x6}], 0x5, 0x1, 0x0) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000003400)={{0x2, 0x4e24, @loopback}, {0x0, @broadcast}, 0x2, {0x2, 0x4e20}, 'veth1_to_bond\x00'}) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000280)=0x1) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x200000a1}], 0x1) r3 = syz_open_dev$adsp(&(0x7f0000003140)='/dev/adsp#\x00', 0x8, 0x400000) ioctl$TIOCLINUX7(r3, 0x541c, &(0x7f0000003480)={0x7, 0x3}) 17:03:46 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup(r1) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r0) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c833b1e68be0e1cab90b51b1623963298038b867090ab88effd05eb9ae2930cf7dd2"], 0x30) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e24, 0x1, @loopback, 0x80000001}}, 0x100000001, 0x434, 0x0, 0x3, 0x20}, &(0x7f0000000080)=0x98) socket$bt_hidp(0x1f, 0x3, 0x6) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000002c0)={r5, @in={{0x2, 0x4e23, @multicast2}}, 0xfffffffffffffffa, 0x4, 0x9, 0x0, 0x40}, &(0x7f00000000c0)=0x98) poll(&(0x7f0000000180)=[{r0, 0x40}], 0x2000000000000185, 0xffffffffffffffff) lseek(r0, 0x0, 0x0) 17:03:46 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) read(r0, &(0x7f00000000c0)=""/84, 0x54) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r2 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0xff, 0x80040) tkill(r2, 0x1000000000016) 17:03:46 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b51010000000005}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:03:46 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r3 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x5, 0x8002) tkill(r3, 0x1000000000016) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000280)=0x1) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x57}], 0x1) 17:03:46 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x82000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f0000000180)={0xf, 0x8, 0xfa00, {r2, 0x1e}}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x3ff, 0x402) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x30) poll(&(0x7f0000000180), 0x0, 0x0) 17:03:46 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b5101007a000000}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) [ 539.040183] sg_write: data in/out 65499/33 bytes for SCSI command 0x0-- guessing data in; [ 539.040183] program syz-executor5 not setting count and/or reply_len properly [ 539.101759] sg_write: data in/out 65499/33 bytes for SCSI command 0x0-- guessing data in; [ 539.101759] program syz-executor5 not setting count and/or reply_len properly 17:03:49 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r3 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x2) tkill(r3, 0x1000000000016) 17:03:49 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x12000, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000080)={'eql\x00', @random="0c9486b0f0bc"}) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000200)={r1, 0x7, 0x8, "d648b8d5445f27291e26bb5a5a726c9890d7d2f3a48d1876823863c5dbd00908e592e720677715cc0ad10e5a1f744f264cc35eabb3d0540c8951f1f317683471512099"}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c833b1e68be0e1cab90b51b1623963298038b867090ab88effd05eb9ae2930cf7dd2"], 0x30) poll(&(0x7f0000000180)=[{r0}], 0x200000000000004f, 0x0) 17:03:49 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r1 = gettid() truncate(&(0x7f00000000c0)='./file0\x00', 0x401) semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) tkill(r1, 0x1000000000016) r2 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x114, 0x101000) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) 17:03:49 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b51010000002000}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:03:49 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r4 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) tkill(r4, 0x1000000000016) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000280)=0x1) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000300)={0x1, 0x8000}, 0x8) fadvise64(r3, 0x0, 0x7fff, 0x7) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x57}], 0x1) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="dc010000", @ANYRES16=r5, @ANYBLOB="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"], 0x1dc}, 0x1, 0x0, 0x0, 0x4010}, 0x8054) 17:03:49 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000280)=0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x20, 0x80000) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x10000) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x200000a1}], 0x1) 17:03:49 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x4001fd) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="73927a31fe443166669788adb1623963290104b867090ab89effd05eb90133e3e26ef67101ae2930cf7dd2000000000000000000000000001043bc87f5f4909fde28fd697d1204cb96a4d96d5b6711e172e93beaf5dc687b31dc0cfd984fc946beb992b5299e11396d102f198bd096d1bcd78b62b51479d1b5efde20842a2424419d5e3a21e9771fa5e75ba29cb4df9f25ecd45bfdd06d530aa381bb9d4a6e13c2981f0fa4d5ae7699c49c1ba9f5989c1c381f53e2f9dd28f30c8553a5b19fd18821c5e074f19fad53"], 0x30) fcntl$notify(r0, 0x402, 0x1) ioctl$sock_inet_SIOCRTMSG(r2, 0x890d, &(0x7f00000001c0)={0x7fff, {0x2, 0x4e20, @multicast2}, {0x2, 0x4e21, @rand_addr=0x5aa}, {0x2, 0x4e23, @rand_addr=0x81}, 0x308, 0x1, 0x9, 0x1ffc000000000, 0x0, &(0x7f00000000c0)='rose0\x00', 0x3, 0x1000, 0xffff}) setxattr$trusted_overlay_nlink(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='trusted.overlay.nlink\x00', &(0x7f0000000140)={'U+', 0x1}, 0x28, 0x3) poll(&(0x7f0000000180)=[{r0}], 0x200000000000004f, 0x0) 17:03:49 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b5101000000b300}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:03:49 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x2, 0x400000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73927a31fe443166669788e7fd3fbe252c7dc2e3f07fe7e0fd1172ad1c83c833b1e68b09e1cab90b51b1623963298038b867090ab88effd05eb9ae7deecf7dd257417cb3768ad91e27296db3f6814283eb6fa04f7c203bc4722629678c7327d8a1e205318b83e0dbc003c0ad0bee5a8cc49938c99bec54b8bba2112e5503929a579767570abc61d6968c855ab6b687bca574f5f55cd99eb64fbeacca2c2a46dc87fe383ff97a4a7105fb09edf23e84a9f7d94eba04e850f14585"], 0x30) poll(&(0x7f0000000180)=[{r0}], 0x200000000000004f, 0x0) [ 541.910433] sg_write: data in/out 1714504922/6 bytes for SCSI command 0x1-- guessing data in; [ 541.910433] program syz-executor0 not setting count and/or reply_len properly [ 541.910466] sg_write: data in/out 65499/33 bytes for SCSI command 0x0-- guessing data in; [ 541.910466] program syz-executor5 not setting count and/or reply_len properly [ 541.940713] sg_write: data in/out 1714504922/6 bytes for SCSI command 0x1-- guessing data in; [ 541.940713] program syz-executor0 not setting count and/or reply_len properly 17:03:49 executing program 3: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x800, 0x0) r0 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x0, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f00000002c0)=""/210) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r4 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) tkill(r4, 0x1000000000016) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000280)=0x1) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x57}], 0x1) 17:03:49 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r2 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80386433, &(0x7f0000000080)=""/38) tkill(r2, 0x1000000000016) 17:03:49 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r3 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x2) tkill(r3, 0x1000000000016) 17:03:49 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x30) poll(&(0x7f0000000180)=[{r0}], 0x200000000000004f, 0x0) 17:03:49 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b510100000000b1}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) [ 542.044480] sg_write: data in/out 65499/33 bytes for SCSI command 0x0-- guessing data in; [ 542.044480] program syz-executor5 not setting count and/or reply_len properly 17:03:49 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r3 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x2) tkill(r3, 0x1000000000016) 17:03:49 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c833b1e68be0e1cab90b51b1623963298038b867090ab88effd05eb9ae2930cf7dd2"], 0x30) dup3(r1, r1, 0x80000) poll(&(0x7f0000000180)=[{r0}], 0x200000000000004f, 0x0) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) write$P9_RRENAME(r2, &(0x7f0000000080)={0x7, 0x15, 0x2}, 0x7) 17:03:49 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) ioctl$VHOST_GET_FEATURES(r0, 0x8008af00, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r4 = gettid() write$selinux_create(r0, &(0x7f00000002c0)=@objname={'system_u:object_r:crond_unit_file_t:s0', 0x20, '/usr/sbin/cupsd', 0x20, 0xe4, 0x20, './file0\x00'}, 0x54) semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) tkill(r4, 0x1000000000016) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000280)=0x1) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x57}], 0x1) 17:03:49 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000280)=0x1) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x4775, 0x800) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x200000a1}], 0x1) 17:03:49 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000380)='/dev/sequencer\x00', 0x40, 0x0) setsockopt$inet_dccp_int(r1, 0x21, 0x11, &(0x7f00000003c0)=0x6a2, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0xffffffff) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) r2 = semget(0x2, 0x1, 0x8) semtimedop(r2, &(0x7f0000000080)=[{0x2, 0x0, 0x1800}, {0x1, 0x2, 0x800}], 0x2, &(0x7f00000000c0)={0x77359400}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x200000, 0x0) r3 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000280)="babce33fe555b92620ae69a332cd31cfe90794785550dc127a007434cd51700be21296e6459da49f29573590d6e5a2b6134c165af07c4fe3e32571dfa8541db51fa28ae40b90ee7c8459500177cc2f90722e15316314c72a3643195d99aba9ff39c1dfb69b376feecd1f9fe152bd9f8b34fd72c77a5e38d4a8260a443aa65c3b7c1183dc5b5c12dbe10fa8859362fc2638aed74993d7ae0b7a883a999a849dad030a55f28c600790c6168acf0d0bd2d963661235d4112018f4e822695ca4ca1a1da651c2d28c3cea49f3fddf787ade", 0xcf, 0x0) keyctl$assume_authority(0x10, r3) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r4 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) tkill(r4, 0x1000000000016) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TCSETS(r5, 0x5402, &(0x7f0000000200)={0x5, 0x3000000000000, 0x1, 0xc07, 0x4e, 0x18400000, 0x78, 0xfb, 0x0, 0xd, 0x10000, 0x50}) 17:03:49 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) memfd_create(&(0x7f0000000000)='.vboxnet0}-/selinux\x00', 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c833b1e68be0e1cab90b51b1623963298038b867090ab88effd05eb9ae2930cf7dd2"], 0x30) poll(&(0x7f0000000180)=[{r0}], 0x200000000000004f, 0x0) 17:03:49 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b51010041000000}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:03:49 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000200)={{{@in=@rand_addr, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@remote}}, &(0x7f0000000080)=0xe8) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) sendmsg$can_bcm(r2, &(0x7f0000000400)={&(0x7f0000000140)={0x1d, r3}, 0x10, &(0x7f00000003c0)={&(0x7f0000000340)={0x5, 0x212, 0x7, {r4, r5/1000+10000}, {r6, r7/1000+10000}, {0x2, 0x6, 0x53f, 0x10000}, 0x1, @canfd={{0x4, 0x1e2, 0x3f, 0x3}, 0x2d, 0x3, 0x0, 0x0, "661b1f6569762a42b43f6b0531abffc1982a2c4e9727e6277c4d766dc17afb5b4abc1ea42127ee47b54aaad1af7c1c4b2c39063e203a675a1c00d5e5357ff63c"}}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x4008040) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c833b1e68be0e1cab90b51b1623963298038b867090ab88effd05eb9ae2930cf7dd2"], 0x30) poll(&(0x7f00000000c0)=[{r0, 0x4044}, {r0, 0x180}, {r1, 0x1000}], 0x36d, 0x3) 17:03:49 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r3 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x2) tkill(r3, 0x1000000000016) 17:03:49 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r4 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) tkill(r4, 0x1000000000016) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000280)) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x57}], 0x1) 17:03:49 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b5101000e010000}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:03:49 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x200, 0x40000) write$selinux_access(r2, &(0x7f0000000200)={'system_u:object_r:dhcpd_initrc_exec_t:s0', 0x20, 'unconfined_u:system_r:insmod_t:s0-s0:c0.c1023'}, 0x6c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c833b1e68be0e1cab90b51b1623963298038b867090ab88effd05eb9ae2930cf7dd2"], 0x30) poll(&(0x7f0000000180)=[{r0}], 0x200000000000004f, 0x0) r3 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x3, 0x20000) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000080)=0x2, 0x4) 17:03:49 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r1 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) tkill(r1, 0x1000000000016) getresuid(&(0x7f00000000c0)=0x0, &(0x7f0000000100), &(0x7f0000000140)) r3 = getegid() chown(&(0x7f0000000080)='./file0\x00', r2, r3) 17:03:50 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f0000000200)) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r3 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f00000002c0)={0x100, 0x2, 0x800, 'queue1\x00', 0xb73}) tkill(r3, 0x1000000000016) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f00000001c0)=0x1) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000280)=0x1) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x57}], 0x1) [ 542.337021] sg_write: data in/out 65499/33 bytes for SCSI command 0x0-- guessing data in; [ 542.337021] program syz-executor5 not setting count and/or reply_len properly [ 542.370913] sg_write: data in/out 65499/33 bytes for SCSI command 0x0-- guessing data in; [ 542.370913] program syz-executor5 not setting count and/or reply_len properly 17:03:50 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r3 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x2) tkill(r3, 0x1000000000016) 17:03:50 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000100)=0x1) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x200000a1}], 0x1) 17:03:50 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c833b1e68be0e1cab90b51b1623963298038b867090ab88effd05eb9ae2930cf7dd2"], 0x30) poll(&(0x7f0000000180)=[{r0}], 0x200000000000004f, 0x0) fcntl$addseals(r1, 0x409, 0x7) 17:03:50 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b51010000000e01}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:03:50 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r1 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f00000000c0)=&(0x7f0000000080)) tkill(r1, 0x1000000000016) 17:03:50 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r3 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x2) tkill(r3, 0x1000000000016) 17:03:50 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x42000, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x8, 0x801) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0xff, 0x0, 0x1, r1}) r2 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000200), &(0x7f0000000240)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_misc(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c833b1e68be0e1cab90b51b1623963298038b867090ab88effd05eb9ae2930cf7dd2"], 0x30) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, &(0x7f0000000140)=0xf004) poll(&(0x7f0000000180)=[{r2}], 0x200000000000004f, 0x0) 17:03:50 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b51010000008700}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:03:50 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vsock\x00', 0x410000, 0x0) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r4 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) tkill(r4, 0x1000000000016) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000280)=0x1) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x57}], 0x1) 17:03:50 executing program 0: socketpair$nbd(0x2, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFCONF(r1, 0x8910, &(0x7f00000000c0)=@req={0x28, &(0x7f0000000080)={'ip6gre0\x00', @ifru_addrs=@ipx={0x4, 0x949a, 0x7, "9f02302a8a84", 0x8}}}) r2 = dup(r0) ioctl$RNDADDENTROPY(r2, 0x40085203, &(0x7f0000000200)={0x2, 0x64, "75c605bb18690c5db7db57314b30235638cb150393659dafc3617329f3e6ed3058c639d283d6e2859c4fb5a5daa1065596d2aae837e3c355f2eaea806de103f9480fae6738a5a0526862f0e8b7308debafd4a3129596b77e0c77ad0c8cae8e6169d91774"}) r3 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) write$binfmt_misc(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c833b1e68be0e1cab90b51b1623963298038b867090ab88effd05eb9ae2930cf7dd2"], 0x30) poll(&(0x7f0000000180)=[{r3}], 0x19f, 0xd798) 17:03:50 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b5101000000002f}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:03:50 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r3 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x2) tkill(r3, 0x1000000000016) 17:03:50 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) timer_settime(0x0, 0x3, &(0x7f000006b000)={{r1, r2+10000000}, {0x0, 0x989680}}, &(0x7f0000040000)) r3 = gettid() exit_group(0x3) r4 = accept(r0, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @dev}}, &(0x7f0000000100)=0x80) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000140)={&(0x7f00000001c0)=""/112, 0x200000, 0x1000, 0x8}, 0x18) semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) tkill(r3, 0x1000000000016) [ 542.647897] sg_write: data in/out 65499/33 bytes for SCSI command 0x0-- guessing data in; [ 542.647897] program syz-executor5 not setting count and/or reply_len properly [ 542.750933] sg_write: data in/out 65499/33 bytes for SCSI command 0x0-- guessing data in; [ 542.750933] program syz-executor5 not setting count and/or reply_len properly 17:03:50 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) close(r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000280)=0x1) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") io_setup(0x9024, &(0x7f0000000100)) r2 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x8, 0x1) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x200000a1}], 0x1) 17:03:50 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffff9c}) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f0000000080)={0x1, 0x38d0f872, 0x1, 0x80000001, 0x4, 0x3}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c813b1e68be0e1cab90b51b1623963298038b867090ab88effd05eb9ae2930cf7dd2"], 0x30) poll(&(0x7f0000000180)=[{r0}], 0x200000000000004f, 0x0) 17:03:50 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ASHMEM_GET_SIZE(r0, 0x7704, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_subtree(r0, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r4 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) tkill(r4, 0x1000000000016) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000280)=0x1) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x57}], 0x1) 17:03:50 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r2 = gettid() r3 = dup(r0) ioctl$SG_GET_TIMEOUT(r3, 0x2202, 0x0) r4 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$TIOCOUTQ(r4, 0x5411, &(0x7f0000000200)) semop(0x0, &(0x7f00000001c0)=[{0x1, 0xffff, 0xfffffffffffffffd}], 0x2aaaaaaaaaaaaab6) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000080)=""/181, &(0x7f0000000140)=0xb5) setpgid(r2, r2) tkill(r2, 0x1000000000016) 17:03:50 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b5101001a000000}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:03:50 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r3 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x2) tkill(r3, 0x1000000000016) 17:03:50 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x1, 0x0) connect$bt_rfcomm(r2, &(0x7f0000000080)={0x1f, {0x9, 0x469b, 0x1, 0x3, 0x0, 0x7}, 0xfffffffffffffff9}, 0xa) write$binfmt_elf32(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="7f454c4604010168ff0700000000000003000300060000006003000038000000aa020000ffff00001163200001000000ffffffff0000000003000000060000006202000001000000ffffffff030000000000000005000000badea36ffbb5124797af75a0a40c3b6c6932f06bf4a29e96d5d36a9a364260001d395500dc70a0da7518fa0a6fb95cae836244a4d4a72f8dd1ec26953a48f4a4d46afd8f69b77896085a6c80fccfca7f80e72e27ea9f665ac988394703af10987280e138d70d1bde9ac51cb637a1570b44e615c785b990fddc0e8773daf475ad288f4fa011fe9f15cf4fd81244359b0a7598f4bfaa7b278c24beef670d6be9c6217cb1f28a48a663af417fec1bd651d5f9b488513ed33cedfdb7b032299d34ab2b5c1830a730dffcd61b677e1339e12e90d367cd44ccb96aa584992743426a9b7a4883a136fbfbda38000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c2800af5ba6ebdce0aef850000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x841) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c833b1e68be0e1cab90b51b1623963298038b867090ab88effd05eb9ae2930cf7dd2"], 0x30) poll(&(0x7f0000000180)=[{r0}], 0x200000000000004f, 0x0) 17:03:50 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x6, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x2a12, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000080)={0x0, 0x4, 0x0, 0x80000001, 0x2}, &(0x7f0000000200)=0x18) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000140)={0x7, 0xfff, 0x8000, 0x20, 0xffffffffffffff34, 0x7b, 0x8001, 0x10001, r3}, 0x20) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c833b1e68be0e1cab90b51b1623963298038b867090ab88effd05eb9ae2930cf7dd2"], 0x30) poll(&(0x7f0000000180)=[{r0}], 0x200000000000004f, 0x0) ioctl$sock_inet_SIOCRTMSG(r2, 0x890d, &(0x7f0000000240)={0x9, {0x2, 0x4e22, @loopback}, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1a}}, {0x2, 0x4e23, @local}, 0x14, 0x2, 0x8000, 0x3, 0x6, &(0x7f0000000100)='bridge0\x00', 0x5, 0x3, 0x9dda}) 17:03:50 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r4 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) tkill(r4, 0x1000000000016) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000280)=0x1) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x57}], 0x1) 17:03:50 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x2c, 0x4}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x2, &(0x7f000006b000)={{0x0, 0x989680}, {r1, r2+10000000}}, &(0x7f0000040000)) r3 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) tkill(r3, 0x1000000000016) 17:03:50 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b51010000005c00}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:03:50 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c833b1e68be0e1cab90b51b1623963298038b867090ab88effd05eb9ae2930cf7dd2"], 0x30) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x8000, 0x0) getsockname$llc(r2, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f00000000c0)=0x10) poll(&(0x7f0000000180)=[{r0}], 0x200000000000004f, 0x0) 17:03:51 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000280)=0x1) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f00000002c0)={'raw\x00', 0x1000, "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"}, &(0x7f0000000180)=0x1024) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x10000, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000100)={@host}) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x200000a1}], 0x1) 17:03:51 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) socket$unix(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r2 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x2) tkill(r2, 0x1000000000016) 17:03:51 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="73923a31fe443166669788ad1c83c833b1e68be0e1cab90b51b162390f75e8436663298038b867090ab88effd05fb9ae2930cf7dd2"], 0x30) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x200000, 0x0) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000080)={0x74, 0x0, [0x3, 0x4, 0x8, 0x5]}) poll(&(0x7f0000000180)=[{r0}], 0x200000000000004f, 0x0) 17:03:51 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f00000002c0), 0x4) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r4 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) tkill(r4, 0x1000000000016) getpeername$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000200)=0x14) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000280)=0x1) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x57}], 0x1) 17:03:51 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b51010000005e00}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:03:51 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000000), 0x4) socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$packet(0x11, 0x2, 0x300) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c833b1e68be0e1cab90b3cb1623963298038b867090ab88effd05eb9ae2930cf7dd2"], 0x30) 17:03:51 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b510100ed000000}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:03:51 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r2 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x2) tkill(r2, 0x1000000000016) 17:03:51 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000080)={{0x0, 0xf2a}, 0xfffffffffffffffb, 0x5, 0x0, {0x5, 0x2}}) ioctl$VHOST_GET_FEATURES(r1, 0x8008af00, &(0x7f00000002c0)) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000280)=0x1) r2 = socket$inet6(0xa, 0x1000000000003, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") readv(r0, &(0x7f0000000380)=[{&(0x7f0000000300)=""/33, 0x21}], 0x1) ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f00000003c0)=""/166) openat$cgroup_ro(r1, &(0x7f00000001c0)="706964732e6576656e7473001ad71bd8e89c8245da8e34bfa1eefe55c3da0eb475224c9fba15ce0857e61ecb646c46ed49baebe889d5a3580dab9635383b67ee", 0x0, 0x0) [ 544.225038] sg_write: 5 callbacks suppressed [ 544.225053] sg_write: data in/out 65499/33 bytes for SCSI command 0x0-- guessing data in; [ 544.225053] program syz-executor5 not setting count and/or reply_len properly [ 544.297694] sg_write: data in/out 65499/33 bytes for SCSI command 0x0-- guessing data in; [ 544.297694] program syz-executor5 not setting count and/or reply_len properly 17:03:53 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r1 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={0x0, 0x96e2f9f7c70a7599, 0xffffffffffffffff}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffff9c, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_DMA(r2, 0xc0406429, &(0x7f0000000280)={r3, 0x6, &(0x7f0000000100)=[0x4, 0xbab, 0x4801, 0x2, 0x2, 0x7], &(0x7f0000000140)=[0x8, 0x9, 0x3, 0xffffffffffff8000, 0x40, 0x8, 0xa7d, 0x7, 0x1], 0x62, 0x5, 0x4, &(0x7f00000001c0)=[0x5, 0x4, 0x7fffffff, 0x3, 0x48b7], &(0x7f0000000200)=[0x9, 0x4, 0x4, 0x2]}) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f00000002c0)={0x3, 0x2, 0x1, 0x0, 0x3, [{0x1, 0x101, 0x86a}, {0x10000, 0x4, 0x7fffffff, 0x0, 0x0, 0x1}, {0x1, 0x100, 0x3, 0x0, 0x0, 0x400}]}) tkill(r1, 0x1000000000016) 17:03:53 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = socket$unix(0x1, 0xf7e2a9c9724dada4, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r4 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) tkill(r4, 0x1000000000016) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000200)={0x6, &(0x7f00000001c0)=[{0x8000, 0x6, 0x3, 0x8000}, {0x7, 0x8, 0x4, 0xfffffffffffffc60}, {0x8000, 0x7fffffff, 0x9, 0x2}, {0x3ff, 0x3, 0xb90, 0x5}, {0x8, 0xffff, 0x100, 0x100000001}, {0x5, 0x5c, 0x6, 0x6}]}, 0x10) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000280)=0x1) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x57}], 0x1) 17:03:53 executing program 2: syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r1 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x2) tkill(r1, 0x1000000000016) 17:03:53 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.events\x00', 0x0, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000080)={0xb39, 0x5, 0x5, 0x101, 0x37d9, 0x3, 0x7, 0x5, 0xb1fb, 0x12f1}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c833b1e68be0e1cab90b51b1623963298038b867090ab88effd05eb9ae2930cf7dd2"], 0x30) poll(&(0x7f0000000180)=[{r0}], 0x200000000000004f, 0x0) 17:03:53 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b5101000000f100}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:03:53 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xcef, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000280)=0x1) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x200000a1}], 0x1) 17:03:53 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x3, 0x0) ioctl$EVIOCSABS20(r2, 0x401845e0, &(0x7f0000000080)={0x7, 0xfffffffffffffffc, 0x2, 0x5, 0x4}) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c833b1e68be0e1cab90b51b1623963298038b867090ab88effd05eb9ae2930cf7dd2"], 0x30) poll(&(0x7f0000000180)=[{r0}], 0x200000000000004f, 0x0) lremovexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@random={'security.', '/dev/sg#\x00'}) 17:03:53 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b51010000000077}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:03:53 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r1 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x2) tkill(r1, 0x1000000000016) 17:03:53 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x101801, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f00000002c0)={{0x88, @multicast2, 0x4e23, 0x2, 'lc\x00', 0x12, 0xffffffff, 0x61}, {@local, 0x4e24, 0x2004, 0x401, 0x80000000, 0x8765}}, 0x44) r1 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x4) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r1, 0x40049409, r2) r3 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r5 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) tkill(r5, 0x1000000000016) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000200)) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r3, 0x227b, &(0x7f0000000280)=0x1) readv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x57}], 0x1) 17:03:53 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0x10) poll(&(0x7f0000000180)=[{r0}], 0x200000000000004f, 0x0) 17:03:53 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400202) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r1 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x2000, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000280)={{0x5, 0x5, 0x1, 0x4, 'syz1\x00', 0x7}, 0x0, 0x100, 0xb71, r1, 0x3, 0x5, 'syz0\x00', &(0x7f00000000c0)=['\x00', 'selinuxproc,em0*,}&3-]%cgroupppp1\x00', ',\x00'], 0x25, [], [0x4, 0x4, 0x6, 0x10001]}) tkill(r1, 0x1000000000016) ptrace$peekuser(0x3, r1, 0x1) 17:03:53 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b51010000000092}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:03:53 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c833b1e68be0e1cab90b51b1623963298038b867090ab88effd05eb9ae2930cf7dd2"], 0x30) poll(&(0x7f0000000180)=[{r0}], 0x200000000000004f, 0x0) 17:03:53 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r1 = gettid() r2 = semget(0x1, 0x7, 0x0) semop(r2, &(0x7f0000000380), 0x2aaaaaaaaaaaaaf1) tkill(r1, 0x1000000000016) kexec_load(0xfffffffffffffffc, 0x2, &(0x7f0000000140)=[{&(0x7f0000000080)="c942b1716e6b18dee3cc937a7635a2b4e99c9535f502cf169ca4c38d2a466d6e3abbd530d00cf14d3137d2a43d12e385bdbcc994a82e52975ca64efce3e2331a77622df2e9f4b1a49091d646a258e10ef94c1d898c4c7d2bd1f46d17afc58c68a16e87b997f6cfd1b46d7cfa3d85b834799cf7feabecc6b8dcf4630a343b044bb1f3e7be612811aee8f82e8df5867730f06c547ffa413b3972f031117dcf504230289be14a4c7f9110584c757828dba8e65eac1a7b0555", 0xb7, 0x7fffffff, 0x1}, {&(0x7f0000000280)="7f6598c96c930f143eca2fd5b96a90d4b192560d2aba027dfdea0d6223457520caaf1aabe5d365929f7eb069cc7378229deb1f4704cf050ce9e539db658ccdb83b0e4211395f5de29a8d53eec4c2cfce492dc1d8e6316127922cf9dc8c7a194ff6a3ecc02605b71495c588723094390e70e2bc8ae53acd9ef0dc091684d269748d2b783c8f5149a45a6eaad0bab8af8c1adaba1cd49b470a2386f3cc35bb3ab0b9a2fdae8ea792a1e76986e01fecdec156770b255554c3e1d37313b7f540d72adec1b2e0a5269641606ce91405bd718f", 0xd0, 0xd7, 0x3fe0}], 0x320000) 17:03:53 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r1 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x2) tkill(r1, 0x1000000000016) 17:03:54 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r4 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) tkill(r4, 0x1000000000016) ioctl$SG_GET_COMMAND_Q(r2, 0x2270, &(0x7f00000001c0)) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000280)=0x1) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x57}], 0x1) 17:03:54 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x80000000000003, 0xbfe) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000280)=0x1) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x200000a1}], 0x1) 17:03:54 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c833b1e68be0e1cab90b51b1623963298038b867090ab88effd05eb96f2930cf7dd2"], 0x30) poll(&(0x7f0000000180)=[{r0, 0xfffffffffffffffe}], 0x1, 0x0) 17:03:54 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b51010000000042}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:03:54 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x420301) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x7) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c833b1e68be0e1cab90b51b1623963298038b867090ab88effd05eb9ae2930cf7dd2"], 0x30) poll(&(0x7f0000000180)=[{r0}], 0x200000000000004f, 0x0) ioctl$BLKGETSIZE64(r1, 0x80081272, &(0x7f0000000080)) 17:03:54 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r1 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) tkill(r1, 0x1000000000016) 17:03:54 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r4 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) getdents64(r0, &(0x7f00000001c0)=""/126, 0x7e) tkill(r4, 0x1000000000016) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000280)=0x1) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x57}], 0x1071) 17:03:54 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r1 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x2) tkill(r1, 0x1000000000016) 17:03:54 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c833b1e68be0b2acb49bf3d57bd863298038b867190ab88effd05eb9ae2930cf7dd2"], 0x30) syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x7, 0x20301) poll(&(0x7f0000000180)=[{r0}], 0x200000000000004f, 0x0) r2 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x40, 0x480000) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000000200)) 17:03:54 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b5101000001b9e3}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:03:54 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x100, 0x11) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) rt_sigprocmask(0x1, &(0x7f0000000100)={0xffffffffffffff4a}, &(0x7f0000000140), 0x8) r2 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000080)=0x1, 0x4) tkill(r2, 0x1000000000016) 17:03:54 executing program 0: socket$can_bcm(0x1d, 0x2, 0x2) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73927a33fe4431666697880000000033b1e68be0e1cab90b51b16239632980383867090ab88effd05ed1ae2930cf7dd2"], 0x30) poll(&(0x7f0000000180)=[{r0}], 0x200000000000004f, 0x0) 17:03:54 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r1 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x2) tkill(r1, 0x1000000000016) 17:03:54 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000040)=0xc4, 0x4) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000280)=0x1) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x200000a1}], 0x1) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000100)=0x0) setpriority(0x2, r2, 0x5) 17:03:54 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r0) r1 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r3 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) tkill(r3, 0x100000000001a) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f0000000280)=0x1) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x57}], 0x1) 17:03:54 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b5101000c010000}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:03:54 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x15, 0x80000, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c833b1e68be0e1cab90b51b1623963298038b867090ab88effd05eb9ae2930cf7dd2"], 0x30) poll(&(0x7f0000000180)=[{r0}], 0x200000000000004f, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000080)={0x2, [0x3, 0x1000]}, &(0x7f00000000c0)=0x8) 17:03:54 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x80000, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c833b1e68be0e1cab90b51b1623963298038b867090ab88effd05eb9ae2930cf7dd2"], 0x30) poll(&(0x7f0000000180)=[{r0}], 0x200000000000004f, 0x0) 17:03:54 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r0 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x2) tkill(r0, 0x1000000000016) 17:03:54 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) socket$unix(0x1, 0x2, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f00000005c0)=""/102, &(0x7f0000000640)=0x66) r1 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r3 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) tkill(r3, 0x40090000000013) recvfrom$unix(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x100, &(0x7f00000006c0)=@file={0x1, './file0\x00'}, 0x6e) r4 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0x0) keyctl$set_timeout(0xf, r4, 0x978) fcntl$getflags(r2, 0x401) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000300)=0xb, 0x4) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f0000000280)=0x1) readv(r1, &(0x7f0000000480)=[{&(0x7f00000004c0)=""/246}, {&(0x7f00000001c0)=""/122, 0x209}, {&(0x7f00000003c0)=""/136}], 0x1) ioctl$TIOCLINUX6(r0, 0x541c, &(0x7f0000000140)={0x6, 0x3f}) ioctl$TIOCLINUX6(r0, 0x541c, &(0x7f00000002c0)={0x6, 0xffff}) 17:03:54 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r1 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) tkill(r1, 0x1000000000016) r2 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x44a8, 0x80) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f00000000c0)=0xf7) 17:03:54 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b510100000000bd}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:03:54 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r0 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x2) tkill(r0, 0x1000000000016) 17:03:54 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c833b1e68be0e1cab90b51b1624063298038b867090ab88effd05eb9ae2930cf7dd2"], 0x30) poll(&(0x7f0000000180)=[{r0}], 0x200000000000004f, 0x0) connect(r1, &(0x7f0000000200)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x80) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/mixer\x00', 0x407, 0x0) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r2, 0x4008af21, &(0x7f00000000c0)={0x2, r3}) 17:03:54 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0xffffffffffff140c, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r5, 0x4188aea7, &(0x7f00000008c0)={0x0, 0xffffffffffffffff}) r6 = accept4(r1, &(0x7f0000000300)=@xdp, &(0x7f00000000c0)=0x80, 0x800) setsockopt$RDS_CANCEL_SENT_TO(r6, 0x114, 0x1, &(0x7f0000000140)={0x2, 0x4e21, @broadcast}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c833b1e68be0e1cab90b51b1623963298038b867090ab88effd05eb9ae2930cf7dd2"], 0x30) r7 = dup(r3) getsockopt$inet6_buf(r7, 0x29, 0xef, &(0x7f0000000200)=""/201, &(0x7f0000000040)=0xc9) poll(&(0x7f0000000180)=[{r0}], 0x200000000000004f, 0x0) 17:03:54 executing program 3: r0 = accept4(0xffffffffffffff9c, &(0x7f00000003c0)=@can, &(0x7f0000000440)=0x80, 0x80800) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6}}, &(0x7f00000005c0)=0xe8) sendmsg$nl_generic(r0, &(0x7f00000018c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20200000}, 0xc, &(0x7f0000001880)={&(0x7f0000000600)=ANY=[@ANYBLOB="60120000190000042dbd7000fbdbdf251e00000014006500fe80000000000000000000000000001c08008100", @ANYRES32=r1, @ANYBLOB="30122e006b67aeee45dc39c678686be8f1583b2ee63af0002500bf1500aa95576c90a9ec967444a4e2877d0458a48f240778ab87acb61aaa800cd98caa8cae2b168c2087c8a4c94bbf30604ceb03b5784433015494527ac6dfbff14a4e50263a5fd15cac61d43d73bcc74169c3f3da63b78d7afe11213aa4434f726f18443aff783b088676e7cd6a7c799ba8f352fe17b840a626365c1b33c5b1bd6cf4172a34c56818398809de0b5abe249930dbe9d099be5c2661cafc9298fbae9764dab71a4eaf44c9514ee862d22715b961021b0be7a76153c88eedf4ac79eb6b75a767405ae63eb0ab91c29c4ced9b9cbcb97959d00788173992238b1ce0c1511dde1453751e2ead00007fd6c297ec2d3479a887d26a873c6208f26eb2082d2450920e8c3ac1d03f54f0c5357f2a0c0f7927a06730da9ff2ccf26132535375429614702bbaf36d1fa9eb1354c0f0b5a1fe368834b3522114f200f1ea7abe31ba32ca6c6e6935fba177289efc901949b346a0473569123006c75b80c0f5962ec2f1d6b29571aaa81c70b6053c05c6eae61d551028d88c791e3c343422063ed0fa40de8628d95eddd333338a4f0dadea568ae244871ae114261036a4fcfc67e4cafdeabc38e8016a18cb6b7c11d76891e18f100083002f6465762f7367230000000060714adaf39258b46439f67f8f9501e1e40513c01aa48b08525e0847d6b82a4ae0ecd08d94761c4e274116fb4ee8171ea4a60cf0faa887e077e84d9f4717260d2e4a90bda09b88d93234dd371478f8e77f954ab1877682a1b5db7b306b2b43d20888e61f7c542b8c42d5093ef10907c5fcc846e5cdd5359d0b7d68a8c80c65e4777a908be88c5b6cd9dcd3f960a06dc3ab3a14900a1aedab89bba519f4489e0cd8df56a9a54a6c3d073df9efd25216dd2a40f9565f361a36121692717794496c9c4960551ee887f464825229d3b0b922b92a2df32f4ef9134a4057fc3b7dc54216e3c743e86483f26c3e652bd7a560a14ab3e6138c536fafcc844680d51b8fc89afe2869cf839f0325ec5bc33e5077298a8019c8b4cf98fea83dfc89190c18cb7cd8542c95e75db9c66c70e90534b1858eeabad7e64ab9d911aae54df2d5bef4bc34c4f9d6c8daba74b4017828283a32381ff46317c726e0562280ee9f4ebf8d5b0645f6434a13cf8f517738e9e58514da91a020b19fe0486c0426261c065d7ce42b76096194540c5fa36a95dc41b4ecb6e101cdedf07ec91ee109f74af2aff9fd6d0a53e5fae0222bb3c7b4931be8053cb27e497698ac9e915ab33c85e7c342981eae19004a4a6ff702cb3370ad1d7e20ee6a74471ed9726e22b30d5b9d1d288bee25cf6b58edf5a3638a0a42dbc4faac2814cd0b44e443e8026c281dad58f513f55b03834358acb5926e2d9e2a2cb7a1277847a604b8c10963bc56041cd6a003e95dedfbe75ae70b55275314fc50a0e65dec7a3dcc8b5ab62e503ae6eff1e96e8f55d3a252c7cbb1793bc6dc4235b597af1c7a2e5c752b6d44a053d89a721425ca77a9c850bea570eb2461d2a5627fa7ff924e48a2525ba6487bc218d6b513a850adee48f3b6db96551c44cbc3124d778cb2568149e1f45377ca77c427d2728d5269dbff22ceb5de97daf0767d68778f481e91ca689c96fda6e332e0d6eef18e23d2fa9da124ef749a99a5458dacbf0ade037bee35e856ec5faa9340d69294f9b07a5200a28ab34e411c13aec961c8629f7f30e9580476b0487d7e53e1e89dd903d2ba187781ec81e1f13f7a338b82360d4cba3a9e7a6ac24704e6c1e796c801017c962f2ef81c445c8d9006bd3f90ca30dd8d3cf4fba528635163d0d93e6683ada1d5dec0bef7981c5927e047913b9d54a3e2261202934ff8fa11e26c0ad0b3bf19ecfecd5f9a17c907dea350c4fc953f932c79604f66e36c743d6eeb70df58fb2c2735a65c18c7163180f7ca5b43fe6327933902ccc8867ca20e1a8ab8ce823c86881f5b0456a855eff39fff590a9182b681a3250224d85f85793f360ac47ed43e62dcdd372ce775decc1866ebc8822e44849a7eea90f39ac1b5aba20991eb80e7640f434147f956f587d4f5c24975fa7e68437f6ca995573966065dc35e356cf3642bca7b2f2978fd109a3ce7254f574c4852c4161347341d77263d7624a0e4264c05840d716d8d7b7494de66b6b76b76c4b509a0663ff869e92e23e6cb7fef0048e629ea9e09b26e943f95d3eb8f987bac19c304a6fa044476d5383ca431f85826257fbfb726be25983b0e24acf72c07bff0b68f69fed41f0cfb79f0c7e6f22d8e14d3485abb0bbf8939bf8b563d45766af3c00012461851176fe8b4cad35336cae600cd7e41c1427f514f3f4f7e9eb7b4e49486719a48a8c88d12137fd5092b7ed261cb7210fcc0581fa2b6b2c4112287052e39dd746238f7a2ce7994192f1d8d77515981e60fdf8c79bef0811e9dd769aef13795bfc3ceb9afa767509bdfd67d8a11344b406f48afe36fd552a654febdccc76178d60cabdee7882d75492252eaea76b38aade0da6304d3fd8002a3601582eddafad01821bb4b26725f6732be776640bcefa85b0c17b28fec486bfe1feaa0ea9f9be78630c1752732acee625293249baf8588ec43bfaa61bb73b17db392c49fe981ff2aa5e780d2d725ad74c236ede8d3d4c58b6426c93b0abaf8c3806a830f7970be0d6e8f6278250f04de1b542ab2b8992ea040325e0124511f76365cdde8931d763cd225ec5c1ff30f978bb582442f9d3ba2274b19520fa8bf6835a4df21c7afde853a2e448f810eaef039572d614701f4a5e32fc2fe1177f841c3578f4419e0fd891efa17318d72bea425f6c4b247e0ebaeb76db808b1f8d2516079a38c360daac6e987e6ee335426e5b7db9b04f348eeb5d9c344d351b0a38ea6ed68d407a7256e9685060e64e801ea086f59c435d351c59ff6b00d70e85ae59a02f6d3e95247e1c2137575ee22b55e634ab41b19c913e597cafe5c4d82043aaaa4583baef6baa6646afd20855c58d8c9b917d210570f7a9f39c6e6898e912439783f8e4f12cd2e749249b00689aaf90b66936ead82232ca1ad253563b5a87f8b35172e59b29e7216166b9ba5554a779d5bdb9c9fbadb9cd50e341008171f16577b6c12ad2d725aaf23c5091af59bedf74978277c83ba9e0e74edd0e6be54245a2d182e738e1945bd531776c8e5cb2e0ca9575cc25ba140096f4956800b1175580a8a4b24e2299377447fcc888701fed032da6fff460a6b1e08299ca0f765496cbc09d5e268ab27ad7c91bd676adfc11b1d3ec256edb605fb0f43f6908286d854b7619059f4971f7f4f9d185e0cc7306325142a1e2ac18f91a6824bc79476b31c30121594f0d6bec37e532cd197a45725951b0cc55cd7940a683dfaa08800b8ed4ba6f1cce16f3035ea603945f0c1509ba0b8fc7ef76ed946272236f87287cae3ac513309950953ee16d557e25117fa13afd0c7b4e19ee231c077260f57d2fe0a62fbc51e9ee4808456e10b35b68ce24d456440e673b9d680785ecfc412b81c577b58f1983a90282e70ec13dfeb9c6f7985dfd1c7a22e59771c543bc8e75c018be991eb7939977466f5cb69498fa39c2bdb4fb9e95f8550de90968f7547ef37a2af53a21eddcc449a6298aaab4ee89ea19a1d51d6d60e8f566f7ba3355faba318ab6258a25376d5ff1241d1684e27accf1869a87144a34e8d38584f11315e28aa06b24a37c9f0aa167794b59fee7a2e8eb834065e83a5b0820752a5dc75254b448e6a23b3ebca6e1a1077a2e3a2730828460fdbc51ea70f27e6f8d0219fd65c529173a24ec5d931ecbb9c1058add0eb1597c86afc1c7aa01eec7323d9e68cc29f6cea7fbe6f88024c2fe0fd82672f9bb721340c1d2d1984b94a3c6a9ac7dac55a8dd4b352b3a22e69ca2865586f0bc382eae90674bb6631d653a550c9886a28a491b438846514446fe2b7fa91125ffa5d678631a555d56d839a05d48169a6fb1897edfde75bba3473a49ab0841135e7801bd7cf25d87cdab987327e69ff7343cbbac891dfef1bcbe26ee64389008eb74c700824b344947f444969c1dc7ac380b659638e8b9ad81a930d04e0d6132f2e5b8575b19141340fb2401434ad0438e6ea988d166e0aab522c13c5b910bc3641698350c0106af0c67e5e0608246a7bc7bf89d769d05d3e275ec4fe56dce9d0398166bc92cc10546bd76e0664a5cf61ed1b27ad5d5bd3db3d1f721945ba7d3db258bb79b0db9504926b892a818682201de75d1201ee8c5e4f6e1a84825a5b177565138952abc18de8558b0021d7e039ef70d31ef29b7d0f5548abaa88a1e1837ed77558691a23474605e709c7516310695c582da4d08ad65ac364a53b8a0e4cf3407cd7d470a1313aadd2745ec33c2d8c62d80c6f0ab501ab4aa59b1269066eecc9ab8b90330d4993e736aaae2be5011aa1de5c825d4bb9fa7510b3b3518016ee5b06134cee10eab7aa2a9c7a28c64ad2deae27938f5d86ce714aebbf8396a3da8108ea63ed7c9902c1a7b7fb19bc5f4feccbdcf214873fefd8bf2f6f574c164ae0293248ae73accb5fb61310883a117b3f34b1f35cbcba6be36b24a6531ffdf0a5502d0ce100835d457117f6bae0c88240c2de2c9ba6031ea2e32c0e24fa8b4964f639d71f959b853567eaa52231b76906d9b5d81785f279a4f29b58cea8cc4e86393e1a0f151e2e42bccf846e2ea322ebc2f416d8a2269475e6e58c2e81ffc88a90654ad2e90e90a400ce400264d4a68014302a8712cf9b05d637cdcdcf00af774cde812b71e7d7fef0f5659ad42e137e7de310f64852b8769f313bc18adf5f81271002d733b83c947ae4341cf77b2f864803fba7a8445e5b44db208b5daecaedb57e4c6c0c383f56a4c954bff7d96f944a99c95208487c70a7eb40fba774acbff4ef9037a807843841800cea1acccda443b8bde3868e3fd96497ea23b7696c00b5e5433590cb6dacf7a0d2ab8b06e78932679c168c52af710b2b28b2f12231069083ee978b6c817da9ec50789fc14bd33b600a355dbdfa4a34bec78ff36a39d0c26b82e86cf0c9e8ab5641283095e875349699edea533ea05b018902ace0fcdd6473d0acdc34921d9f676b0f4f9fe6269c9153d730387daa2883299b19d939ba0a67dbec14fb242705f70ead07be7183953e7aff3ac63083a97897461e530588d7e6fe333e8e58a07f66839fd1f33cb7afcbe08cad8d7ca13ab56e4368ebbbab5e1c749cd9e2f230cfa39f5db8ea10a2fa2589026db782e5f2b7335b2ee4a21a20daccd79b9b2fb31b561626fdc1158b1b764cdbf0a27c94ebf4d28c000927d3b890a6cecd3d386a75dec0b16d89471b284975a1bc5f3db798b724684e6687ef73955418b08e1357280644e412400efce2839776d77b4541ac19439d8ee9a27505840e7ee1291cb15e444601a06eaa6d82b6c73fa3d8d3350d52aa6025203a38a3417799714799b0b851bc6aca2f21bebc910e76b0fbd77649ad8b659b9803dd6074b1e873b66ee594cea55a5383e01370e27e60df8ea016c35ec6b67a5545aac2b04e8f1d6908ec522ee7c6ea403ec87deebfa059d2043e850c95049e9a7dcc1cfa9eca9b3e327c6f7ab7d3170f6bd0db89a4876b75e8c8689c716e5d68615d817b50faea45b573db57520889416220fd30d1142a5411cfe45717a1065c433d9b1d4e80942d37f7792011ca072f9070d7b3374e122c997d45966a1d5f3777fd9a75b681d9fcb5e281ed761b42befad1883ce85d602cffbb426901eb59bf0003ec72ba407e5bb486c2b8035e695b8de52dc367950c210281484867fd6b0d6f5f53c6ec580a1084cad5dffd36660da96da0405704ec20b9a4dbe004ae8cfc35b141ab289ae3327880629a262b27e66c3e3d6aaa0fa56d01a3a45b5e99c58c54a27ff2cbeb50a9774b6d0486f64c62cb8e405b9e38e35c0964eedc3094a7e61ea23b4d9a9cd4ecf0a4a6f01ce5a485c01a5e70d1cf0319e85bff9916d1ac51ca7637b775b983909cedc0764a792dceebf69bfb7b8bc01ac95fec739e705b8fca3907fc640fa382f5913667f7e8944214f2097caafc0d10ce71ace8647ab5c3dbee8d4b4f1131055d6821e4f3220870da7222237723385ce1a89ab448a5ffe5d81bac551484f890df1b11598fffad6f4a1b7a394eabe2faf09f7b94440467902f4576d39135d2458b776009f9d587b22997a9c867a8b748c81c82f9484c9ceefc1c02f55808920078e1aa20c517ee9bf91735d92100152873259aa537b414c95b72c34ce88b38c21f5fe8ea5dfe086ffad65847316ec324de849d1764ab17879b6fbbb8f50f807c0cc2b5aa46fbc3c8a5da334ac44b98ac623a523156b77ea762208f1058448572fe7d29a5f46a548c643a58b618544723a75f4c862dc4ce7279ada6e98b98f4c9071c8dd33988b199574727c79cbee1a7c07a9ecc6c9583120f31eca747453a3f8c3eec64bb7b892193b77731d3bb8619cdc5059253518a69cd5cee731e6169eed0bd00ecbcd1e66205d64c7d693ed90a60c37228fa965cf0ace639c9b9e2d819f169c08d5e4c34f70000"], 0x1260}}, 0x40) r2 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x4) r3 = socket$unix(0x1, 0x2, 0x0) signalfd4(r0, &(0x7f0000001980)={0x9}, 0x8, 0x800) ioctl$FICLONE(r2, 0x40049409, r3) r4 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = gettid() r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r7, &(0x7f0000000040), 0xe) listen(r7, 0x0) accept4(r7, &(0x7f00000015c0)=@can, &(0x7f0000001640)=0x80, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r6, 0x1000000000015) msgget(0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x4001fd) ioctl$EVIOCGVERSION(r2, 0x80044501, &(0x7f00000001c0)=""/17) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) rseq(&(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x5, 0x7fffffff, 0x3, 0x8}, 0x1}, 0x20, 0x0, 0x0) gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) tkill(r6, 0x41) 17:03:54 executing program 4: socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, &(0x7f0000040000)) r1 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) r2 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x5, 0x2000) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r2, 0x80045700, &(0x7f00000000c0)) tkill(r1, 0x1000000000016) 17:03:54 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000280)=0x1) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") readv(r0, &(0x7f0000001440)=[{&(0x7f0000000180)=""/83}, {&(0x7f00000002c0)=""/224}, {&(0x7f0000000040)=""/52}, {&(0x7f00000003c0)=""/78}, {&(0x7f0000000440)=""/4096}], 0x1) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x4040, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000140)={0x1f, 0x4, 0xfffffffffffffbff}) 17:03:54 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b5101001b000000}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:03:54 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r0 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x2) tkill(r0, 0x1000000000016) 17:03:54 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x100) write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14, 0x13, 0x1, {0x2, 0x4, 0x1}}, 0x14) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73927a31fe443166669788ad1c83c833b1e68be0e1cab90b51b1623963298038b867090ab88effd05eb9ae2930cf7dd2"], 0x30) poll(&(0x7f0000000180)=[{r0}], 0x200000000000004f, 0x0) [ 547.326806] sg_write: data in/out 65499/33 bytes for SCSI command 0x0-- guessing data in; [ 547.326806] program syz-executor5 not setting count and/or reply_len properly [ 547.347502] sg_write: data in/out 65499/33 bytes for SCSI command 0x0-- guessing data in; [ 547.347502] program syz-executor5 not setting count and/or reply_len properly 17:03:55 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = socket$alg(0x26, 0x5, 0x0) bind(0xffffffffffffffff, &(0x7f0000000280)=@ethernet={0x307}, 0xfffffffffffffcbc) ioctl(r0, 0x8912, &(0x7f0000000240)="153f6234418dd25d766070") sendto(r1, &(0x7f0000000300)="df46936a96a16fc9d05d6b62d7f0a01a0ea002711b287e2a03b30e26152bda76067adc9a58572bfbf28ce250c4d6f9250564814239b017918671bd749dd512ae948a0cde6b6562e9889b0de3fd390c203ce7c761065420eaf5a890e5dbaacff4fb46", 0x62, 0x4001, &(0x7f0000000380)=@nfc_llcp={0x27, 0x0, 0x2, 0x5, 0x79, 0x800, "69d228b1f5b3f7f753d6878aa104b3fc92e2a107358d5f84b2c5ff392eec5dc79928755afb35203326b3897ac46d4cd1fc7e87d0daead8c8250b142d871b5e", 0x17}, 0x80) 17:03:55 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b5101000000004e}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:03:55 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r1 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x2) tkill(r1, 0x1000000000016) 17:03:55 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r1 = request_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000100)="65746830255dc2656d302a00", 0xfffffffffffffff8) r2 = add_key$user(&(0x7f00000008c0)='user\x00', &(0x7f0000000900)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000940)="4ff165fcca0eb675f3c3d6469907959055dda67a0466fc59c3256ecec1ee46509dfbc458b1e166cf1dc165b707cf17608e4c1cd661c2811bcb2e9a8de6f85f8f1b72575b", 0x44, 0xfffffffffffffffc) keyctl$instantiate_iov(0x14, r1, &(0x7f0000000800)=[{&(0x7f0000000280)="66dd5d71e6612ae78ca0f4ab4f6dfcfc7b870493d138f9498067ccc8510c44d4ca88b3f4cd1c07a6e6069628c6436c17b0c31a83392a577251d25ce1fba4bb8fe2cce6f4bf411ee921325ebd85cdbc6377c6be299d28dfd942f4de6551ff92322d892fe95bdbc206eb9181e85b0cc172ff235efc0feb36e23a734cb90b9fd04a8ea7ea3aa2c657821ae7d3a049e09f0a67cb8270c70856d5038d918ad2a9772bc6e8defdcd7da4dd3362acd16de85fd0987ee8ce63421a27c0ca343e04e518b748791d0e8f3d09507e", 0xc9}, {&(0x7f0000000380)="9e8afc99b2451e16d835f35e805a250c5c26cbf89ebd4ab26ba1133ba6306f2953b130c0f380e1f375b01255ae092f3951dc1099a475689e115765d5957f94860bb883c494d18bc2821eac41f0f3a0b773905c951578ff5e5a558cfcd42cbaf8fd9f2285a226e758e6053169cb47ccafd4794ae5db823aa57dd3b821340ead27b093f81b1d037017f70aeb75914defbb6135d4ca3f2fef10c53b8dcba0b560c2bfcba62edd95255e2e0ff149377b8e58c162a846c25487cfeaf26856adc561c5ba99049f477604081316c7be31bec1bc8948c4c64ae0ffdedc2828adc849978b4effcb17747769533306b1fa50d9ab7f33", 0xf1}, {&(0x7f0000000480)="a141a00f4276ae4445b9fdeddced4d2d74893f58ebf808fa8032b6588bf0dd31569a99f5d7742a0f0d4ea2ea49ba4ec3f992744484df60e8bcff61c837daa6543a18146955ece3c2b032f041b6c11a6631c03870ec2625d9d1886f90da11c9e07a24c9a1c901deb0eef02a722ea84d466cb32cac32bed1deab4c9fc602285043faac8691adca23042b18ba40b1795bde5525cae120e4c1c6e53806c3656f5d5ff87b74567921f1771586f93e295d31505144c2c148be850d336c7db2ce049f71b69189f37a35b6d74fcea4549c2d79590adcd7c0fa4265b92809a65c697528e76c2d6ac34931ffe9", 0xe8}, {&(0x7f00000001c0)="468a45ab3c8d08099c07bc016ba1a6afe88ae032f9a0a460c42ff60c9c8bd2c2068bf5f5040c003eb0fa7859e9b89173098dac38dcd55fc3e21f427b23e254d200382afa44fdd80b61fe2d492d9c9ed97494c1e515acd78f41c228bc944b68d1ceb197aa3ed223e777ab6f13a48ce571f527ce7862df4fcfc8aef5", 0x7b}, {&(0x7f0000000140)="70790d1bd6ab7c", 0x7}, {&(0x7f0000000580)="a2d6bc5f5f0b14fc8798f9a1eb03b765984e46fa770e1a75f27832e944c4dba0fc42c020d10d5b510c1cc2130054bec4dc3986ba574579be117b", 0x3a}, {&(0x7f00000005c0)="31833ef6742663e26bb63d6dce85f346c851a31d17d5bb593aee657b51f18941979ee96ff8ab9e811f1b7d79cee71355db45815594b3639ac8d63156f0629146eadc4561ce35a69037df4cdc7b5e0feb6c7d18ced79588a12002696eb3310f108ec5028ed3203f43181a2a8369333cb75894cf28a263cf06ae19572ea2914c7f52d967d6f8e600ade1a4105b49fdf14424fcb7e88926da1177332a27745fd85a8c152bc34773220d6df7e70551b67f4b7f733229ee5ab4595e89d24ee274fcedeb1ea7bac1b6f0f7d7bec804fef8080116bf8d121600cc6dadadff4542e7bd9b7e77fcea78af2fb67770e3adcc1e86235d", 0xf1}, {&(0x7f00000006c0)="e92582d103fe9c08ce362845c08c2fb0035f5f8bdfb50a982345c9ae15fa2407f852d652d295286b161bcb60faf5fdd6dbe9b366a5d9b567a4a23483ee1e30973a1bafca99d95c2ef32ac5687ba627a23a567948d2cf9996c64dc189c25f32bf83c0acbc16301e753aadae61302e3f618d5ca3bb0d9eb4377253a2c6a118b87cc489f88e11bc6ec7b1e38d46933055ca6a071df8105575c0a4cb78b9adbc9db008f7d0f13d5cea9aa0f4397e4d2d98bfa48a917cb8261cb508a65979feecda5ab9530faedf2ffe72fa46ba8c4bbd232da248436cebd1925ffb1a50d14caf00c6fd3dd9d34ca9be002ff83c05da22208b405f2e680c87", 0xf6}, {&(0x7f00000007c0)="28fc69730db9be", 0x7}], 0x9, r2) r3 = gettid() r4 = semget(0x0, 0x4, 0x6ea) semop(r4, &(0x7f0000000040)=[{0x0, 0xffff, 0x1000}], 0x1) tkill(r3, 0x1000000000016) 17:03:55 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r4 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) bind$bt_rfcomm(r0, &(0x7f00000001c0)={0x1f, {0x367, 0x4813, 0x7fff, 0x575, 0x3, 0xffff}, 0xed9e}, 0xa) tkill(r4, 0x1000000000016) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000280)=0x1) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x57}], 0x1) 17:03:55 executing program 0: r0 = socket$inet6(0xa, 0x401000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) r1 = getpid() r2 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) sched_setscheduler(r1, 0x5, &(0x7f0000000040)) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8008551d, &(0x7f0000000100)) 17:03:55 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b51010000002c00}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:03:55 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x800000000008031, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0) mbind(&(0x7f0000886000/0x2000)=nil, 0x2000, 0x0, &(0x7f00009ecff8), 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000000)=""/54, 0x36) 17:03:55 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r1 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x2) tkill(r1, 0x1000000000016) [ 547.818999] sg_write: data in/out 65499/33 bytes for SCSI command 0x0-- guessing data in; [ 547.818999] program syz-executor5 not setting count and/or reply_len properly 17:03:55 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000280)=0x1) r1 = socket$inet6(0xa, 0x1000000000002, 0xfffffffffffffffd) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/status\x00', 0x0, 0x0) open_by_handle_at(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x10000) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000100)=0x0) ptrace$setopts(0x4200, r3, 0x2, 0x100003) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20}, 0x10) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x200000a1}], 0x1) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/mls\x00', 0x0, 0x0) connect$pppoe(r4, &(0x7f00000001c0)={0x18, 0x0, {0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'bcsh0\x00'}}, 0x1e) 17:03:55 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = semget$private(0x0, 0x3, 0x31) semctl$SEM_STAT(r1, 0x5, 0x12, &(0x7f0000000140)=""/30) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@mcast2, 0x5, 0x1, 0xff, 0x2, 0x9, 0x2, 0x7}, &(0x7f0000000100)=0x20) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r2 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) tkill(r2, 0x1000000000016) 17:03:55 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000480)) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x12c, r5, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x81}, @IPVS_CMD_ATTR_DAEMON={0x74, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'teql0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x2a37}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7f}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x78, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller1\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @local}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team_slave_0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4000000000000000}]}, 0x12c}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r6 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) tkill(r6, 0x1000000000016) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000280)=0x1) readv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x21}], 0x1) 17:03:55 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b510100000000a0}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) [ 547.860639] sg_write: data in/out 65499/33 bytes for SCSI command 0x0-- guessing data in; [ 547.860639] program syz-executor5 not setting count and/or reply_len properly 17:03:55 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r1 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x2) tkill(r1, 0x1000000000016) 17:03:55 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b51010000000072}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:03:55 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x40000, 0x0) ioctl$KVM_GET_XCRS(r0, 0x8188aea6, &(0x7f0000000280)={0x5, 0x1, [{0x6, 0x0, 0xffffffff7fffffff}, {0x3, 0x0, 0x92}, {0x4, 0x0, 0x6}, {0x1f, 0x0, 0x9}, {0xffff, 0x0, 0x10000}]}) r1 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x8, 0x402000) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f00000001c0)={0x0, @speck128}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000180)=0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}}, &(0x7f0000040000)) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x101040, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f00000000c0)='\x00') r4 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) tkill(r4, 0x1000000000016) 17:03:55 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000), &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r1 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x2) tkill(r1, 0x1000000000016) 17:03:55 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b51010022000000}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:03:55 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b51010000007b00}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:03:56 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b51010000008d00}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:03:56 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f000000cd80), 0x0, 0x0, &(0x7f000000cec0)={0x0, 0x1c9c380}) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000440)={'veth0_to_bridge\x00', {0x2, 0x0, @dev}}) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000200), &(0x7f0000000240)=0x8) syslog(0x9, &(0x7f0000002a40)=""/191, 0xbf) [ 548.358426] sg_write: data in/out 65499/33 bytes for SCSI command 0x0-- guessing data in; [ 548.358426] program syz-executor5 not setting count and/or reply_len properly [ 548.379392] sg_write: data in/out 65499/33 bytes for SCSI command 0x0-- guessing data in; [ 548.379392] program syz-executor5 not setting count and/or reply_len properly 17:03:56 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000280)=0x1) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x480402, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x200000a1}], 0x1) 17:03:56 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000ac0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000b00)='./file0\x00', 0x9) [ 548.538779] sg_write: data in/out 65499/33 bytes for SCSI command 0x0-- guessing data in; [ 548.538779] program syz-executor5 not setting count and/or reply_len properly [ 548.560348] sg_write: data in/out 65499/33 bytes for SCSI command 0x0-- guessing data in; [ 548.560348] program syz-executor5 not setting count and/or reply_len properly 17:03:56 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r1, 0x40049409, r1) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r4 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) tkill(r4, 0x1000000000016) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x57}], 0x1) 17:03:56 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b51010000000047}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:03:56 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='syz_tun\x00', 0x10) clock_gettime(0x0, &(0x7f0000008e40)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000008d00)=[{{&(0x7f0000000140)=@in={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000001580)=[{&(0x7f00000001c0)=""/239, 0xef}, {&(0x7f0000000300)=""/197, 0xc5}, {&(0x7f0000000400)=""/132, 0x84}, {&(0x7f00000004c0)=""/156, 0x9c}, {&(0x7f0000000580)=""/4096, 0x1000}], 0x5, &(0x7f00000015c0)=""/109, 0x6d, 0x3}, 0x7fffffff}, {{&(0x7f0000001640)=@nfc_llcp, 0x80, &(0x7f0000002940)=[{&(0x7f00000016c0)=""/67, 0x43}, {&(0x7f0000001740)=""/110, 0x6e}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/241, 0xf1}, {&(0x7f00000028c0)=""/110, 0x6e}], 0x5, &(0x7f0000002980)=""/135, 0x87, 0x9}, 0x1}, {{&(0x7f0000002a40)=@hci, 0x80, &(0x7f0000002b80)=[{&(0x7f0000002ac0)=""/162, 0xa2}], 0x1, 0x0, 0x0, 0x100000000}, 0x5c}, {{&(0x7f0000002bc0)=@alg, 0x80, &(0x7f0000005000)=[{&(0x7f0000002c40)=""/112, 0x70}, {&(0x7f0000002cc0)=""/243, 0xf3}, {&(0x7f0000002dc0)=""/42, 0x2a}, {&(0x7f0000002e00)=""/4096, 0x1000}, {&(0x7f0000003e00)}, {&(0x7f0000003e40)=""/69, 0x45}, {&(0x7f0000003ec0)=""/13, 0xd}, {&(0x7f0000003f00)=""/194, 0xc2}, {&(0x7f0000004000)=""/4096, 0x1000}], 0x9, 0x0, 0x0, 0x98e1}, 0xca3c}, {{0x0, 0x0, &(0x7f0000005100)=[{&(0x7f0000005080)=""/71, 0x47}], 0x1, &(0x7f0000005140)=""/138, 0x8a, 0xffffffffffffff6f}, 0x58}, {{&(0x7f0000005200)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000005340)=[{&(0x7f0000005280)=""/173, 0xad}], 0x1, &(0x7f0000005380)=""/100, 0x64, 0x4}, 0x1ff}, {{&(0x7f0000005400)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f00000065c0)=[{&(0x7f0000005480)=""/4096, 0x1000}, {&(0x7f0000006480)=""/230, 0xe6}, {&(0x7f0000006580)=""/41, 0x29}], 0x3, &(0x7f0000006600)=""/4096, 0x1000, 0x6}, 0x8000}, {{&(0x7f0000007600)=@can, 0x80, &(0x7f00000078c0)=[{&(0x7f0000007680)=""/249, 0xf9}, {&(0x7f0000007780)=""/172, 0xac}, {&(0x7f0000007840)=""/112, 0x70}], 0x3, &(0x7f0000007900)=""/27, 0x1b, 0x10000}, 0x13c}, {{&(0x7f0000007940)=@alg, 0x80, &(0x7f0000007a80)=[{&(0x7f00000079c0)=""/41, 0x29}, {&(0x7f0000007a00)=""/76, 0x4c}], 0x2, &(0x7f0000007ac0)=""/255, 0xff, 0xe79}, 0x4}, {{&(0x7f0000007bc0)=@can, 0x80, &(0x7f0000007cc0)=[{&(0x7f0000007c40)=""/96, 0x60}], 0x1, &(0x7f0000007d00)=""/4096, 0x1000}, 0x6}], 0xa, 0x40000000, &(0x7f0000008e80)={r2, r3+30000000}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000008ec0)={{{@in=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@local}}, &(0x7f0000008fc0)=0xe8) sendmsg$nl_xfrm(r1, &(0x7f0000009200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2f4de21f40f1b64a}, 0xc, &(0x7f00000091c0)={&(0x7f0000009000)=@getsa={0x170, 0x12, 0x100, 0x70bd29, 0x25dfdbfd, {@in=@multicast2, 0x4d5, 0x2, 0x7f}, [@algo_comp={0x5c, 0x3, {{'lzjh\x00'}, 0x88, "bb6cff4bbaba783571b1c758b8e2038ee7"}}, @user_kmaddress={0x2c, 0x13, {@in=@rand_addr=0x4a7, @in6=@loopback, 0x0, 0xa}}, @srcaddr={0x14, 0xd, @in6=@ipv4={[], [], @multicast2}}, @policy={0xac, 0x7, {{@in=@loopback, @in=@multicast2, 0x4e20, 0x4, 0x4e24, 0x6, 0xa, 0x20, 0xa0, 0x3b, r4, r5}, {0xffff, 0xfffffffffffffffa, 0x2, 0x13a, 0xffc, 0x4, 0xfffffffffffff800, 0x3}, {0x7ff, 0x998, 0x923, 0x81a9}, 0x3, 0x6e6bbb, 0x0, 0x1, 0x0, 0x2}}]}, 0x170}, 0x1, 0x0, 0x0, 0x881}, 0x20000000) write$cgroup_type(r1, &(0x7f0000000100)='threaded\x00', 0xffea) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xbcda34450b800b7a, 0x40000000000a132, 0xffffffffffffffff, 0x0) ioctl$IOC_PR_REGISTER(r1, 0x401870c8, &(0x7f0000003e00)={0x100, 0x4, 0x1}) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='lo\x00', 0x10) 17:03:56 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000280)=0x1) r1 = socket$inet6(0xa, 0x8, 0x3fffffffffffffd) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x200000a1}], 0x1) 17:03:58 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x80000, 0x0) ioctl$TIOCEXCL(r1, 0x540c) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r2 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x1, 0x2000) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000280)={{{@in=@multicast1, @in=@dev}}, {{@in6=@ipv4}, 0x0, @in=@broadcast}}, &(0x7f00000000c0)=0xe8) r3 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) tkill(r3, 0x1000000000016) ioctl$TIOCCBRK(r2, 0x5428) 17:03:58 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000), &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r1 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x2) tkill(r1, 0x1000000000016) 17:03:58 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b51010000000003}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:03:58 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r1 = request_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000100)="65746830255dc2656d302a00", 0xfffffffffffffff8) r2 = add_key$user(&(0x7f00000008c0)='user\x00', &(0x7f0000000900)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000940)="4ff165fcca0eb675f3c3d6469907959055dda67a0466fc59c3256ecec1ee46509dfbc458b1e166cf1dc165b707cf17608e4c1cd661c2811bcb2e9a8de6f85f8f1b72575b", 0x44, 0xfffffffffffffffc) keyctl$instantiate_iov(0x14, r1, &(0x7f0000000800)=[{&(0x7f0000000280)="66dd5d71e6612ae78ca0f4ab4f6dfcfc7b870493d138f9498067ccc8510c44d4ca88b3f4cd1c07a6e6069628c6436c17b0c31a83392a577251d25ce1fba4bb8fe2cce6f4bf411ee921325ebd85cdbc6377c6be299d28dfd942f4de6551ff92322d892fe95bdbc206eb9181e85b0cc172ff235efc0feb36e23a734cb90b9fd04a8ea7ea3aa2c657821ae7d3a049e09f0a67cb8270c70856d5038d918ad2a9772bc6e8defdcd7da4dd3362acd16de85fd0987ee8ce63421a27c0ca343e04e518b748791d0e8f3d09507e", 0xc9}, {&(0x7f0000000380)="9e8afc99b2451e16d835f35e805a250c5c26cbf89ebd4ab26ba1133ba6306f2953b130c0f380e1f375b01255ae092f3951dc1099a475689e115765d5957f94860bb883c494d18bc2821eac41f0f3a0b773905c951578ff5e5a558cfcd42cbaf8fd9f2285a226e758e6053169cb47ccafd4794ae5db823aa57dd3b821340ead27b093f81b1d037017f70aeb75914defbb6135d4ca3f2fef10c53b8dcba0b560c2bfcba62edd95255e2e0ff149377b8e58c162a846c25487cfeaf26856adc561c5ba99049f477604081316c7be31bec1bc8948c4c64ae0ffdedc2828adc849978b4effcb17747769533306b1fa50d9ab7f33", 0xf1}, {&(0x7f0000000480)="a141a00f4276ae4445b9fdeddced4d2d74893f58ebf808fa8032b6588bf0dd31569a99f5d7742a0f0d4ea2ea49ba4ec3f992744484df60e8bcff61c837daa6543a18146955ece3c2b032f041b6c11a6631c03870ec2625d9d1886f90da11c9e07a24c9a1c901deb0eef02a722ea84d466cb32cac32bed1deab4c9fc602285043faac8691adca23042b18ba40b1795bde5525cae120e4c1c6e53806c3656f5d5ff87b74567921f1771586f93e295d31505144c2c148be850d336c7db2ce049f71b69189f37a35b6d74fcea4549c2d79590adcd7c0fa4265b92809a65c697528e76c2d6ac34931ffe9", 0xe8}, {&(0x7f00000001c0)="468a45ab3c8d08099c07bc016ba1a6afe88ae032f9a0a460c42ff60c9c8bd2c2068bf5f5040c003eb0fa7859e9b89173098dac38dcd55fc3e21f427b23e254d200382afa44fdd80b61fe2d492d9c9ed97494c1e515acd78f41c228bc944b68d1ceb197aa3ed223e777ab6f13a48ce571f527ce7862df4fcfc8aef5", 0x7b}, {&(0x7f0000000140)="70790d1bd6ab7c", 0x7}, {&(0x7f0000000580)="a2d6bc5f5f0b14fc8798f9a1eb03b765984e46fa770e1a75f27832e944c4dba0fc42c020d10d5b510c1cc2130054bec4dc3986ba574579be117b", 0x3a}, {&(0x7f00000005c0)="31833ef6742663e26bb63d6dce85f346c851a31d17d5bb593aee657b51f18941979ee96ff8ab9e811f1b7d79cee71355db45815594b3639ac8d63156f0629146eadc4561ce35a69037df4cdc7b5e0feb6c7d18ced79588a12002696eb3310f108ec5028ed3203f43181a2a8369333cb75894cf28a263cf06ae19572ea2914c7f52d967d6f8e600ade1a4105b49fdf14424fcb7e88926da1177332a27745fd85a8c152bc34773220d6df7e70551b67f4b7f733229ee5ab4595e89d24ee274fcedeb1ea7bac1b6f0f7d7bec804fef8080116bf8d121600cc6dadadff4542e7bd9b7e77fcea78af2fb67770e3adcc1e86235d", 0xf1}, {&(0x7f00000006c0)="e92582d103fe9c08ce362845c08c2fb0035f5f8bdfb50a982345c9ae15fa2407f852d652d295286b161bcb60faf5fdd6dbe9b366a5d9b567a4a23483ee1e30973a1bafca99d95c2ef32ac5687ba627a23a567948d2cf9996c64dc189c25f32bf83c0acbc16301e753aadae61302e3f618d5ca3bb0d9eb4377253a2c6a118b87cc489f88e11bc6ec7b1e38d46933055ca6a071df8105575c0a4cb78b9adbc9db008f7d0f13d5cea9aa0f4397e4d2d98bfa48a917cb8261cb508a65979feecda5ab9530faedf2ffe72fa46ba8c4bbd232da248436cebd1925ffb1a50d14caf00c6fd3dd9d34ca9be002ff83c05da22208b405f2e680c87", 0xf6}, {&(0x7f00000007c0)="28fc69730db9be", 0x7}], 0x9, r2) r3 = gettid() r4 = semget(0x0, 0x4, 0x6ea) semop(r4, &(0x7f0000000040)=[{0x0, 0xffff, 0x1000}], 0x1) tkill(r3, 0x1000000000016) 17:03:58 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) bind$llc(r0, &(0x7f00000001c0)={0x1a, 0x33f, 0x80000000, 0x3, 0x5, 0xffffffff, @dev={[], 0x10}}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x18, r4, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) timer_create(0x0, &(0x7f0000000000)={0x0, 0x18}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r5 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) tkill(r5, 0x1000000000016) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000280)=0x1) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x57}], 0x1) 17:03:58 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b510100ed000000}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:03:58 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r1 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) r2 = syz_open_dev$admmidi(&(0x7f0000000140)='/dev/admmidi#\x00', 0x6, 0x400000) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffff9c, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x3, 0x1}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000280)={r3, 0xc0d5, 0x2, 0x80000000}, &(0x7f00000002c0)=0x10) tkill(r1, 0x1000000000016) 17:03:58 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r4 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) tkill(r4, 0x1000000000016) setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f0000000400)={{&(0x7f00000002c0)=""/205, 0xcd}, &(0x7f00000003c0), 0x2}, 0x20) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) getsockopt$inet_tcp_int(r0, 0x6, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000280)=0x1) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x57}], 0x1) 17:03:58 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b51010000000056}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:03:58 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r1 = gettid() preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000000080)=""/89, 0x59}, {&(0x7f0000001280)=""/250, 0xfa}, {&(0x7f0000001380)=""/163, 0xa3}, {&(0x7f0000001440)=""/249, 0xf9}], 0x5, 0x0) semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) r2 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x7, 0x20040) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r2, 0x111, 0x5, 0x2, 0x4) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000100), 0x4) tkill(r1, 0x5) tkill(r1, 0x1000000000016) 17:03:58 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r1 = request_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000100)="65746830255dc2656d302a00", 0xfffffffffffffff8) r2 = add_key$user(&(0x7f00000008c0)='user\x00', &(0x7f0000000900)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000940)="4ff165fcca0eb675f3c3d6469907959055dda67a0466fc59c3256ecec1ee46509dfbc458b1e166cf1dc165b707cf17608e4c1cd661c2811bcb2e9a8de6f85f8f1b72575b", 0x44, 0xfffffffffffffffc) keyctl$instantiate_iov(0x14, r1, &(0x7f0000000800)=[{&(0x7f0000000280)="66dd5d71e6612ae78ca0f4ab4f6dfcfc7b870493d138f9498067ccc8510c44d4ca88b3f4cd1c07a6e6069628c6436c17b0c31a83392a577251d25ce1fba4bb8fe2cce6f4bf411ee921325ebd85cdbc6377c6be299d28dfd942f4de6551ff92322d892fe95bdbc206eb9181e85b0cc172ff235efc0feb36e23a734cb90b9fd04a8ea7ea3aa2c657821ae7d3a049e09f0a67cb8270c70856d5038d918ad2a9772bc6e8defdcd7da4dd3362acd16de85fd0987ee8ce63421a27c0ca343e04e518b748791d0e8f3d09507e", 0xc9}, {&(0x7f0000000380)="9e8afc99b2451e16d835f35e805a250c5c26cbf89ebd4ab26ba1133ba6306f2953b130c0f380e1f375b01255ae092f3951dc1099a475689e115765d5957f94860bb883c494d18bc2821eac41f0f3a0b773905c951578ff5e5a558cfcd42cbaf8fd9f2285a226e758e6053169cb47ccafd4794ae5db823aa57dd3b821340ead27b093f81b1d037017f70aeb75914defbb6135d4ca3f2fef10c53b8dcba0b560c2bfcba62edd95255e2e0ff149377b8e58c162a846c25487cfeaf26856adc561c5ba99049f477604081316c7be31bec1bc8948c4c64ae0ffdedc2828adc849978b4effcb17747769533306b1fa50d9ab7f33", 0xf1}, {&(0x7f0000000480)="a141a00f4276ae4445b9fdeddced4d2d74893f58ebf808fa8032b6588bf0dd31569a99f5d7742a0f0d4ea2ea49ba4ec3f992744484df60e8bcff61c837daa6543a18146955ece3c2b032f041b6c11a6631c03870ec2625d9d1886f90da11c9e07a24c9a1c901deb0eef02a722ea84d466cb32cac32bed1deab4c9fc602285043faac8691adca23042b18ba40b1795bde5525cae120e4c1c6e53806c3656f5d5ff87b74567921f1771586f93e295d31505144c2c148be850d336c7db2ce049f71b69189f37a35b6d74fcea4549c2d79590adcd7c0fa4265b92809a65c697528e76c2d6ac34931ffe9", 0xe8}, {&(0x7f00000001c0)="468a45ab3c8d08099c07bc016ba1a6afe88ae032f9a0a460c42ff60c9c8bd2c2068bf5f5040c003eb0fa7859e9b89173098dac38dcd55fc3e21f427b23e254d200382afa44fdd80b61fe2d492d9c9ed97494c1e515acd78f41c228bc944b68d1ceb197aa3ed223e777ab6f13a48ce571f527ce7862df4fcfc8aef5", 0x7b}, {&(0x7f0000000140)="70790d1bd6ab7c", 0x7}, {&(0x7f0000000580)="a2d6bc5f5f0b14fc8798f9a1eb03b765984e46fa770e1a75f27832e944c4dba0fc42c020d10d5b510c1cc2130054bec4dc3986ba574579be117b", 0x3a}, {&(0x7f00000005c0)="31833ef6742663e26bb63d6dce85f346c851a31d17d5bb593aee657b51f18941979ee96ff8ab9e811f1b7d79cee71355db45815594b3639ac8d63156f0629146eadc4561ce35a69037df4cdc7b5e0feb6c7d18ced79588a12002696eb3310f108ec5028ed3203f43181a2a8369333cb75894cf28a263cf06ae19572ea2914c7f52d967d6f8e600ade1a4105b49fdf14424fcb7e88926da1177332a27745fd85a8c152bc34773220d6df7e70551b67f4b7f733229ee5ab4595e89d24ee274fcedeb1ea7bac1b6f0f7d7bec804fef8080116bf8d121600cc6dadadff4542e7bd9b7e77fcea78af2fb67770e3adcc1e86235d", 0xf1}, {&(0x7f00000006c0)="e92582d103fe9c08ce362845c08c2fb0035f5f8bdfb50a982345c9ae15fa2407f852d652d295286b161bcb60faf5fdd6dbe9b366a5d9b567a4a23483ee1e30973a1bafca99d95c2ef32ac5687ba627a23a567948d2cf9996c64dc189c25f32bf83c0acbc16301e753aadae61302e3f618d5ca3bb0d9eb4377253a2c6a118b87cc489f88e11bc6ec7b1e38d46933055ca6a071df8105575c0a4cb78b9adbc9db008f7d0f13d5cea9aa0f4397e4d2d98bfa48a917cb8261cb508a65979feecda5ab9530faedf2ffe72fa46ba8c4bbd232da248436cebd1925ffb1a50d14caf00c6fd3dd9d34ca9be002ff83c05da22208b405f2e680c87", 0xf6}, {&(0x7f00000007c0)="28fc69730db9be", 0x7}], 0x9, r2) r3 = gettid() r4 = semget(0x0, 0x4, 0x6ea) semop(r4, &(0x7f0000000040)=[{0x0, 0xffff, 0x1000}], 0x1) tkill(r3, 0x1000000000016) 17:03:58 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000380)='/dev/sequencer\x00', 0x40, 0x0) setsockopt$inet_dccp_int(r1, 0x21, 0x11, &(0x7f00000003c0)=0x6a2, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0xffffffff) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) r2 = semget(0x2, 0x1, 0x8) semtimedop(r2, &(0x7f0000000080)=[{0x2, 0x0, 0x1800}, {0x1, 0x2, 0x800}], 0x2, &(0x7f00000000c0)={0x77359400}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x200000, 0x0) r3 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000280)="babce33fe555b92620ae69a332cd31cfe90794785550dc127a007434cd51700be21296e6459da49f29573590d6e5a2b6134c165af07c4fe3e32571dfa8541db51fa28ae40b90ee7c8459500177cc2f90722e15316314c72a3643195d99aba9ff39c1dfb69b376feecd1f9fe152bd9f8b34fd72c77a5e38d4a8260a443aa65c3b7c1183dc5b5c12dbe10fa8859362fc2638aed74993d7ae0b7a883a999a849dad030a55f28c600790c6168acf0d0bd2d963661235d4112018f4e822695ca4ca1a1da651c2d28c3cea49f3fddf787ade", 0xcf, 0x0) keyctl$assume_authority(0x10, r3) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r4 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) tkill(r4, 0x1000000000016) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TCSETS(r5, 0x5402, &(0x7f0000000200)={0x5, 0x3000000000000, 0x1, 0xc07, 0x4e, 0x18400000, 0x78, 0xfb, 0x0, 0xd, 0x10000, 0x50}) 17:03:59 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) fcntl$setpipe(r0, 0x407, 0x80000001) r1 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x80000, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="070007000002f894d8"], &(0x7f0000000100)=0x16) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000280)={0x1, &(0x7f0000000200)=[{0x14c98000000, 0xb4b6, 0x6, 0x80000000000000}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000140)={r3, 0xe9, 0xca3}, &(0x7f00000001c0)=0x8) tkill(r1, 0x1000000000016) 17:04:01 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000), &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r1 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x2) tkill(r1, 0x1000000000016) 17:04:01 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b510100a2000000}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:04:01 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x101000, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r4 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) tkill(r4, 0x1000000000016) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000280)=0x1) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x57}], 0x1) 17:04:01 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000380)='/dev/sequencer\x00', 0x40, 0x0) setsockopt$inet_dccp_int(r1, 0x21, 0x11, &(0x7f00000003c0)=0x6a2, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0xffffffff) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) r2 = semget(0x2, 0x1, 0x8) semtimedop(r2, &(0x7f0000000080)=[{0x2, 0x0, 0x1800}, {0x1, 0x2, 0x800}], 0x2, &(0x7f00000000c0)={0x77359400}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x200000, 0x0) r3 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000280)="babce33fe555b92620ae69a332cd31cfe90794785550dc127a007434cd51700be21296e6459da49f29573590d6e5a2b6134c165af07c4fe3e32571dfa8541db51fa28ae40b90ee7c8459500177cc2f90722e15316314c72a3643195d99aba9ff39c1dfb69b376feecd1f9fe152bd9f8b34fd72c77a5e38d4a8260a443aa65c3b7c1183dc5b5c12dbe10fa8859362fc2638aed74993d7ae0b7a883a999a849dad030a55f28c600790c6168acf0d0bd2d963661235d4112018f4e822695ca4ca1a1da651c2d28c3cea49f3fddf787ade", 0xcf, 0x0) keyctl$assume_authority(0x10, r3) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r4 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) tkill(r4, 0x1000000000016) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TCSETS(r5, 0x5402, &(0x7f0000000200)={0x5, 0x3000000000000, 0x1, 0xc07, 0x4e, 0x18400000, 0x78, 0xfb, 0x0, 0xd, 0x10000, 0x50}) 17:04:01 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r1 = request_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000100)="65746830255dc2656d302a00", 0xfffffffffffffff8) r2 = add_key$user(&(0x7f00000008c0)='user\x00', &(0x7f0000000900)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000940)="4ff165fcca0eb675f3c3d6469907959055dda67a0466fc59c3256ecec1ee46509dfbc458b1e166cf1dc165b707cf17608e4c1cd661c2811bcb2e9a8de6f85f8f1b72575b", 0x44, 0xfffffffffffffffc) keyctl$instantiate_iov(0x14, r1, &(0x7f0000000800)=[{&(0x7f0000000280)="66dd5d71e6612ae78ca0f4ab4f6dfcfc7b870493d138f9498067ccc8510c44d4ca88b3f4cd1c07a6e6069628c6436c17b0c31a83392a577251d25ce1fba4bb8fe2cce6f4bf411ee921325ebd85cdbc6377c6be299d28dfd942f4de6551ff92322d892fe95bdbc206eb9181e85b0cc172ff235efc0feb36e23a734cb90b9fd04a8ea7ea3aa2c657821ae7d3a049e09f0a67cb8270c70856d5038d918ad2a9772bc6e8defdcd7da4dd3362acd16de85fd0987ee8ce63421a27c0ca343e04e518b748791d0e8f3d09507e", 0xc9}, {&(0x7f0000000380)="9e8afc99b2451e16d835f35e805a250c5c26cbf89ebd4ab26ba1133ba6306f2953b130c0f380e1f375b01255ae092f3951dc1099a475689e115765d5957f94860bb883c494d18bc2821eac41f0f3a0b773905c951578ff5e5a558cfcd42cbaf8fd9f2285a226e758e6053169cb47ccafd4794ae5db823aa57dd3b821340ead27b093f81b1d037017f70aeb75914defbb6135d4ca3f2fef10c53b8dcba0b560c2bfcba62edd95255e2e0ff149377b8e58c162a846c25487cfeaf26856adc561c5ba99049f477604081316c7be31bec1bc8948c4c64ae0ffdedc2828adc849978b4effcb17747769533306b1fa50d9ab7f33", 0xf1}, {&(0x7f0000000480)="a141a00f4276ae4445b9fdeddced4d2d74893f58ebf808fa8032b6588bf0dd31569a99f5d7742a0f0d4ea2ea49ba4ec3f992744484df60e8bcff61c837daa6543a18146955ece3c2b032f041b6c11a6631c03870ec2625d9d1886f90da11c9e07a24c9a1c901deb0eef02a722ea84d466cb32cac32bed1deab4c9fc602285043faac8691adca23042b18ba40b1795bde5525cae120e4c1c6e53806c3656f5d5ff87b74567921f1771586f93e295d31505144c2c148be850d336c7db2ce049f71b69189f37a35b6d74fcea4549c2d79590adcd7c0fa4265b92809a65c697528e76c2d6ac34931ffe9", 0xe8}, {&(0x7f00000001c0)="468a45ab3c8d08099c07bc016ba1a6afe88ae032f9a0a460c42ff60c9c8bd2c2068bf5f5040c003eb0fa7859e9b89173098dac38dcd55fc3e21f427b23e254d200382afa44fdd80b61fe2d492d9c9ed97494c1e515acd78f41c228bc944b68d1ceb197aa3ed223e777ab6f13a48ce571f527ce7862df4fcfc8aef5", 0x7b}, {&(0x7f0000000140)="70790d1bd6ab7c", 0x7}, {&(0x7f0000000580)="a2d6bc5f5f0b14fc8798f9a1eb03b765984e46fa770e1a75f27832e944c4dba0fc42c020d10d5b510c1cc2130054bec4dc3986ba574579be117b", 0x3a}, {&(0x7f00000005c0)="31833ef6742663e26bb63d6dce85f346c851a31d17d5bb593aee657b51f18941979ee96ff8ab9e811f1b7d79cee71355db45815594b3639ac8d63156f0629146eadc4561ce35a69037df4cdc7b5e0feb6c7d18ced79588a12002696eb3310f108ec5028ed3203f43181a2a8369333cb75894cf28a263cf06ae19572ea2914c7f52d967d6f8e600ade1a4105b49fdf14424fcb7e88926da1177332a27745fd85a8c152bc34773220d6df7e70551b67f4b7f733229ee5ab4595e89d24ee274fcedeb1ea7bac1b6f0f7d7bec804fef8080116bf8d121600cc6dadadff4542e7bd9b7e77fcea78af2fb67770e3adcc1e86235d", 0xf1}, {&(0x7f00000006c0)="e92582d103fe9c08ce362845c08c2fb0035f5f8bdfb50a982345c9ae15fa2407f852d652d295286b161bcb60faf5fdd6dbe9b366a5d9b567a4a23483ee1e30973a1bafca99d95c2ef32ac5687ba627a23a567948d2cf9996c64dc189c25f32bf83c0acbc16301e753aadae61302e3f618d5ca3bb0d9eb4377253a2c6a118b87cc489f88e11bc6ec7b1e38d46933055ca6a071df8105575c0a4cb78b9adbc9db008f7d0f13d5cea9aa0f4397e4d2d98bfa48a917cb8261cb508a65979feecda5ab9530faedf2ffe72fa46ba8c4bbd232da248436cebd1925ffb1a50d14caf00c6fd3dd9d34ca9be002ff83c05da22208b405f2e680c87", 0xf6}, {&(0x7f00000007c0)="28fc69730db9be", 0x7}], 0x9, r2) r3 = gettid() r4 = semget(0x0, 0x4, 0x6ea) semop(r4, &(0x7f0000000040)=[{0x0, 0xffff, 0x1000}], 0x1) tkill(r3, 0x1000000000016) 17:04:01 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r2 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) tkill(r2, 0x1000000000016) r3 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x2, 0x8000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r2, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000100)='\x00', 0x0}, 0x30) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f0000001d40), &(0x7f0000001d80)=0x0, &(0x7f0000001dc0)) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000001e00)={{{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@mcast2}}, &(0x7f0000001f00)=0xe8) lstat(&(0x7f0000006200)='./file0\x00', &(0x7f0000006240)={0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getgid() getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000062c0)={{{@in6=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}}}, &(0x7f00000063c0)=0xe8) getresgid(&(0x7f0000006400), &(0x7f0000006440), &(0x7f0000006480)=0x0) lstat(&(0x7f00000064c0)='./file0\x00', &(0x7f0000006500)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000006580), &(0x7f00000065c0)=0x0, &(0x7f0000006600)) clock_gettime(0x0, &(0x7f0000006800)={0x0, 0x0}) futex(&(0x7f00000067c0)=0x1, 0x4, 0x2, &(0x7f0000006840)={r18, r19+10000000}, &(0x7f0000006880)=0x1, 0x0) sendmsg$netlink(r3, &(0x7f0000006780)={&(0x7f0000000200)=@proc={0x10, 0x0, 0x25dfdbff, 0x41018c20}, 0xc, &(0x7f0000006180)=[{&(0x7f0000000340)={0x2e8, 0x37, 0x0, 0x70bd25, 0x25dfdbfb, "", [@typed={0xc, 0x6e, @u64=0x81}, @nested={0xd8, 0x7f, [@typed={0x8, 0x10, @u32=0xe6}, @typed={0xc, 0x21, @u64=0x8}, @typed={0x4, 0x8e}, @typed={0x8, 0x5f, @u32=0x4}, @typed={0x14, 0x1f, @ipv6=@dev={0xfe, 0x80, [], 0xc}}, @typed={0x14, 0x7f, @ipv6=@local}, @generic="989b481030346640451230e8fb4c8248198db3ae5655ad9b4ff34e8339558ca4655fed544475a1d0a929b9d74a21df1f381807e6728a9985ac56e6744742b1036e230d6734992f24f607d2b26a8c4dedb526ac5153573df2defe76b2abd58529dc8bf63c37da369b50914d2a8311f45b481a857a023c2e0d009d4d857aea5ff931de7b179757b1606298c5"]}, @nested={0x1a4, 0x52, [@generic="618723dad9f6f756d447837356467395b6560f7ffb736f36635093de806b2d14247653baa7746f84ae2c3fd1403e8b110de8dd1cd3d707de64bba6cd82aaac898a0b968cab66e7b52ed4d269b7ea5b735547b081266e6620f12fbe39a7d182753cce6a588025a7ef060e264572eff37824d7bf68ab7774119c09094ce68689b7f418920e0286c5d9e873d325338f0f4c6bf9fdd9c61e766eee0f946dd57040ae22ce65814838ac6392089fee4f89bcf4961c800d30ecfe7292e7bd8ed553a55d7b4aafe1ca80aa240a89f22e386ad523ee468925eb72bcd9e1ea8ddd8e88ba2613e80c51d51efb09596651a8fd89d18dbd", @typed={0x8, 0x8b, @fd=r1}, @generic="5ba8d410e4bdcff68c550878201f66e14ee021b48d338de1836b6ad1ed744d972a599170425ee7ea0c7dd4b6d6663af9deeb70f2edb9591157a4a973053cb31677f273f04fa262990c36d56cefe207bf20726b95df3ea4641b3ca06e3b0047ced96106f2a33ec8360bae27a169f275c6ae35757edf9dc46eb0e4cd24d6bfc452277db40f5ba0faf42b2bc531a276a3ca57ec9aefb48bbf2ce9fdd152a992b49d678721ccc1"]}, @generic="c4adbf79d6fd05cd60a49b3612bf7917", @nested={0xc, 0x4, [@typed={0x8, 0x54, @uid=r7}]}, @nested={0x34, 0x75, [@typed={0x8, 0x1e, @ipv4=@broadcast}, @generic="2040da29917e598e6f146b136af11cf9a22d664ca0a2ceabda43b85c60fa780e12605ed272f5a3dd"]}]}, 0x2e8}, {&(0x7f00000068c0)=ANY=[@ANYBLOB="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"], 0xf8}, {&(0x7f0000000740)={0x10, 0x28, 0x20, 0x70bd28, 0x25dfdbff}, 0x10}, {&(0x7f0000000780)={0x1588, 0x42, 0x300, 0x70bd2b, 0x25dfdbfd, "", [@nested={0x244, 0x38, [@generic="5854c1bacbf7f6f709458325339dab722939215bbd149b3cdedd258b2db2a200da251bde1591b3871d333a5862761be6d514d399", @typed={0x8, 0x56, @fd=r5}, @generic="796584429445efbf1c97cbc7908086276f67df3899282b6b1593c3042b28018f96a358843b6c5e1ca68303a53f278acc32a12ebecb341fef87bcf955442b74cc2a471b88966de01a249f21c2e1393568d662e065487d25f7bde3f634e7444dfa39f103583d23482bb1e897fbc613e9d010cf7ea95dd5805feb0b8bc6e6a390fe6c7dbdce368d8c3674cc779205e21f6fbf1f795ed6c115025a3ed54429108d4949de6e0ec321397336e4d66080fc2d7375dbb97ab0d1ca1285090610549b7abfd75a8eab477fe499b0544db105ae060fe104266a3b2670500d8dfefd22b2423e4d64a59b139608d8228a813966", @generic="aaa1765887dcba31b0f8b7e5e9112665f36c49140f3f37a406440da3bedc50daa8db15ba672654b6896969081d84522ddde5441bfd7a6e5bd93938bd313804963e851437b6fa093f43a5079619576f524308797d7a7940506546914873cd899eb0fea0603087b016def98c6380d29cee216d92151bede58445432f8171082a0c849855b0f307a24e7a47cb1f8a9e1b60399df83c25820550be529b2b7b86e4da48a26a99fab34aa3366aec0b485ef4d48faa91fa7e001f545d591259180cd90c", @generic="d3b94bb4b2953fdcec1fce075ceb962cf13ab3dd0cd77ec23c7c3c611beee50d5cf9441c08eb7b11b1", @typed={0x10, 0x8d, @str='/dev/dsp#\x00'}, @typed={0x14, 0x5a, @ipv6=@remote}, @typed={0x8, 0x17, @u32=0x8}]}, @generic="cd9ee199ebc29fe9b42560ee80edb345a34a3ffeb5fb43988b65c1100499b5e5", @typed={0x8, 0x7b, @u32=0x4}, @typed={0x10, 0x76, @str='\\.cpuset\x00'}, @generic="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", @nested={0xa8, 0x28, [@generic="6f12e3791772478efc82d58def02b2d9f9519babe663d3e07f0c024b9e7e671927ffa9f2fe2cfe988723bba66211b0b8d4bbbb4603ceba22d60602eccb1b4612fdf5563be90e5a73f2407ecff2e0cd09f9156c90e5b95d7afd6cef048938dde347e39c8e20c84a0e9602da04994145354db4105830d2597cd4dc3b9914318b6cd660fd0cf674dfe9ae152eeb56599bf051728ed4426274eab5ad19c7d5b5c241f6"]}, @nested={0x170, 0x43, [@generic="ab3bf6d59fe9baab2a03c99fd0640e78ab19c5070cc2df474eaf1a906570eef35067bddec51e701f7c1d3750a18a23b77753c376063d9a2b4ca8bcdb526448f7bffb4ab4907bed3e334d75426ac3dece9bffba920024b1d2e9a1cd11a28f44babecdf3ab4c0033bda540c3088a8e3227ffa6642b2997cc4c6dfe5d02e2d4f7439c85f42fcdbaf415433e44ec1b2a4d1b581cefc73cd0dc86c85e090fb7da9d176e3f18f2b459ce9b0d857f1499445175e55d9b83d1d0f5daf8c301eaa8f6", @generic="4d32a5200e02723a5fe0d6425f8d2b30a470ff6ee0a233304a37a038fc48282dff14cea2d677391ba16f9af596945044f1a1119e48af498218c03fd113", @generic="d40783b683820cd1ca8e49b3ce0197ebfbf622ce5b76ed5b7e7180ceb8dd01078dcd64436d296a89ace0cd73387fee75aadc496f4a746ad40d1a1ead3bdc2881af79bacd0ede1a6f6263c377ef61cdfa03ecdf72f2489152d7c5cfcb3b8b7094bd6110df8bc3e3b29d79c22e634057fc"]}, @typed={0x4, 0x43}, @generic="46857761d244bb68d7216a816956b2e44d6055f681e145e33e98cddd1feb8953798c5ccef8d134df352276047e1e3ee1870597d2e50e54147c976ed14177973794d56c7cdc3ecba380f7ab429729a5665aa5ca01019f39f867f9fe06f03ce05c44ba2927a601eb6c0da63ae81344731111c4f8116047761461da7366863112fa9a270ad89402df93bdabc018c2254db74f665211a3d41cd8254c8ed29bd8313044d6deb4a6c0b4fa465c0952f13393faa4c4407920de68958ee2a123d648119b2dbbfe1eb6cd48f8cfcbc702b1de43f1706c7f560430e4de8e9bffae0d08f0d8"]}, 0x1588}, {&(0x7f0000006a80)=ANY=[@ANYBLOB="40420000310020072cbd7000fbdbdf2508005000", @ANYRES32=r8, @ANYBLOB="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", @ANYRES32=r10, @ANYBLOB="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"], 0x4240}], 0x5, &(0x7f0000006640)=[@rights={0x38, 0x1, 0x1, [r3, r5, r1, r1, r5, r1, r0, r0, r3]}, @rights={0x18, 0x1, 0x1, [r1]}, @cred={0x20, 0x1, 0x2, r4, r11, r12}, @rights={0x28, 0x1, 0x1, [r0, r1, r1, r5, r0, r0]}, @rights={0x28, 0x1, 0x1, [r0, r1, r1, r1, r5, r3]}, @rights={0x20, 0x1, 0x1, [r1, r3, r5]}, @cred={0x20, 0x1, 0x2, r2, r14, r15}, @cred={0x20, 0x1, 0x2, r2, r16, r17}], 0x120}, 0x40) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r2, r3, 0x0, 0x1, &(0x7f00000000c0)='\x00', r6}, 0x30) gettid() r20 = syz_genetlink_get_family_id$team(&(0x7f0000000680)='team\x00') sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000006c0)={&(0x7f0000001f40)={0x14c, r20, 0x401, 0x70bd27, 0x25dfdbff, {}, [{{0x8, 0x1, r13}, {0x130, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x80}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x40}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x989}}, {0x8, 0x6, r9}}}]}}]}, 0x14c}}, 0x48080) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r5) 17:04:01 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b51010000002e00}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:04:01 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r1 = gettid() listxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/84, 0x54) semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) tkill(r1, 0x1000000000016) 17:04:01 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000380)='/dev/sequencer\x00', 0x40, 0x0) setsockopt$inet_dccp_int(r1, 0x21, 0x11, &(0x7f00000003c0)=0x6a2, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0xffffffff) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) r2 = semget(0x2, 0x1, 0x8) semtimedop(r2, &(0x7f0000000080)=[{0x2, 0x0, 0x1800}, {0x1, 0x2, 0x800}], 0x2, &(0x7f00000000c0)={0x77359400}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x200000, 0x0) r3 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000280)="babce33fe555b92620ae69a332cd31cfe90794785550dc127a007434cd51700be21296e6459da49f29573590d6e5a2b6134c165af07c4fe3e32571dfa8541db51fa28ae40b90ee7c8459500177cc2f90722e15316314c72a3643195d99aba9ff39c1dfb69b376feecd1f9fe152bd9f8b34fd72c77a5e38d4a8260a443aa65c3b7c1183dc5b5c12dbe10fa8859362fc2638aed74993d7ae0b7a883a999a849dad030a55f28c600790c6168acf0d0bd2d963661235d4112018f4e822695ca4ca1a1da651c2d28c3cea49f3fddf787ade", 0xcf, 0x0) keyctl$assume_authority(0x10, r3) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r4 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) tkill(r4, 0x1000000000016) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TCSETS(r5, 0x5402, &(0x7f0000000200)={0x5, 0x3000000000000, 0x1, 0xc07, 0x4e, 0x18400000, 0x78, 0xfb, 0x0, 0xd, 0x10000, 0x50}) 17:04:02 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r3 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) tkill(r3, 0x1000000000016) write$P9_RLOCK(r2, &(0x7f0000000200)={0x8, 0x35, 0x1}, 0x8) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000280)=0x1) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x57}], 0x1) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f00000001c0)=""/35) 17:04:02 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b51010000000116}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:04:02 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r1 = request_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000100)="65746830255dc2656d302a00", 0xfffffffffffffff8) r2 = add_key$user(&(0x7f00000008c0)='user\x00', &(0x7f0000000900)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000940)="4ff165fcca0eb675f3c3d6469907959055dda67a0466fc59c3256ecec1ee46509dfbc458b1e166cf1dc165b707cf17608e4c1cd661c2811bcb2e9a8de6f85f8f1b72575b", 0x44, 0xfffffffffffffffc) keyctl$instantiate_iov(0x14, r1, &(0x7f0000000800)=[{&(0x7f0000000280)="66dd5d71e6612ae78ca0f4ab4f6dfcfc7b870493d138f9498067ccc8510c44d4ca88b3f4cd1c07a6e6069628c6436c17b0c31a83392a577251d25ce1fba4bb8fe2cce6f4bf411ee921325ebd85cdbc6377c6be299d28dfd942f4de6551ff92322d892fe95bdbc206eb9181e85b0cc172ff235efc0feb36e23a734cb90b9fd04a8ea7ea3aa2c657821ae7d3a049e09f0a67cb8270c70856d5038d918ad2a9772bc6e8defdcd7da4dd3362acd16de85fd0987ee8ce63421a27c0ca343e04e518b748791d0e8f3d09507e", 0xc9}, {&(0x7f0000000380)="9e8afc99b2451e16d835f35e805a250c5c26cbf89ebd4ab26ba1133ba6306f2953b130c0f380e1f375b01255ae092f3951dc1099a475689e115765d5957f94860bb883c494d18bc2821eac41f0f3a0b773905c951578ff5e5a558cfcd42cbaf8fd9f2285a226e758e6053169cb47ccafd4794ae5db823aa57dd3b821340ead27b093f81b1d037017f70aeb75914defbb6135d4ca3f2fef10c53b8dcba0b560c2bfcba62edd95255e2e0ff149377b8e58c162a846c25487cfeaf26856adc561c5ba99049f477604081316c7be31bec1bc8948c4c64ae0ffdedc2828adc849978b4effcb17747769533306b1fa50d9ab7f33", 0xf1}, {&(0x7f0000000480)="a141a00f4276ae4445b9fdeddced4d2d74893f58ebf808fa8032b6588bf0dd31569a99f5d7742a0f0d4ea2ea49ba4ec3f992744484df60e8bcff61c837daa6543a18146955ece3c2b032f041b6c11a6631c03870ec2625d9d1886f90da11c9e07a24c9a1c901deb0eef02a722ea84d466cb32cac32bed1deab4c9fc602285043faac8691adca23042b18ba40b1795bde5525cae120e4c1c6e53806c3656f5d5ff87b74567921f1771586f93e295d31505144c2c148be850d336c7db2ce049f71b69189f37a35b6d74fcea4549c2d79590adcd7c0fa4265b92809a65c697528e76c2d6ac34931ffe9", 0xe8}, {&(0x7f00000001c0)="468a45ab3c8d08099c07bc016ba1a6afe88ae032f9a0a460c42ff60c9c8bd2c2068bf5f5040c003eb0fa7859e9b89173098dac38dcd55fc3e21f427b23e254d200382afa44fdd80b61fe2d492d9c9ed97494c1e515acd78f41c228bc944b68d1ceb197aa3ed223e777ab6f13a48ce571f527ce7862df4fcfc8aef5", 0x7b}, {&(0x7f0000000140)="70790d1bd6ab7c", 0x7}, {&(0x7f0000000580)="a2d6bc5f5f0b14fc8798f9a1eb03b765984e46fa770e1a75f27832e944c4dba0fc42c020d10d5b510c1cc2130054bec4dc3986ba574579be117b", 0x3a}, {&(0x7f00000005c0)="31833ef6742663e26bb63d6dce85f346c851a31d17d5bb593aee657b51f18941979ee96ff8ab9e811f1b7d79cee71355db45815594b3639ac8d63156f0629146eadc4561ce35a69037df4cdc7b5e0feb6c7d18ced79588a12002696eb3310f108ec5028ed3203f43181a2a8369333cb75894cf28a263cf06ae19572ea2914c7f52d967d6f8e600ade1a4105b49fdf14424fcb7e88926da1177332a27745fd85a8c152bc34773220d6df7e70551b67f4b7f733229ee5ab4595e89d24ee274fcedeb1ea7bac1b6f0f7d7bec804fef8080116bf8d121600cc6dadadff4542e7bd9b7e77fcea78af2fb67770e3adcc1e86235d", 0xf1}, {&(0x7f00000006c0)="e92582d103fe9c08ce362845c08c2fb0035f5f8bdfb50a982345c9ae15fa2407f852d652d295286b161bcb60faf5fdd6dbe9b366a5d9b567a4a23483ee1e30973a1bafca99d95c2ef32ac5687ba627a23a567948d2cf9996c64dc189c25f32bf83c0acbc16301e753aadae61302e3f618d5ca3bb0d9eb4377253a2c6a118b87cc489f88e11bc6ec7b1e38d46933055ca6a071df8105575c0a4cb78b9adbc9db008f7d0f13d5cea9aa0f4397e4d2d98bfa48a917cb8261cb508a65979feecda5ab9530faedf2ffe72fa46ba8c4bbd232da248436cebd1925ffb1a50d14caf00c6fd3dd9d34ca9be002ff83c05da22208b405f2e680c87", 0xf6}, {&(0x7f00000007c0)="28fc69730db9be", 0x7}], 0x9, r2) gettid() r3 = semget(0x0, 0x4, 0x6ea) semop(r3, &(0x7f0000000040)=[{0x0, 0xffff, 0x1000}], 0x1) 17:04:04 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r1 = gettid() semop(0x0, &(0x7f0000000040), 0x0) tkill(r1, 0x1000000000016) 17:04:04 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x6800) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000200)={0x5817, 0x7}) fanotify_mark(r1, 0x8, 0x10000, r1, &(0x7f00000000c0)='./file0\x00') ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000280)=0x1) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$TCXONC(r1, 0x540a, 0x80) ioctl(r2, 0x1ff, &(0x7f0000000280)="153f6234488dd25d766070") readv(r0, &(0x7f0000001580)=[{&(0x7f00000002c0)=""/243, 0xf3}, {&(0x7f00000003c0)=""/49, 0x31}, {&(0x7f0000000400)=""/110, 0x6e}, {&(0x7f0000000480)=""/250, 0xfa}, {&(0x7f0000001600)=""/4096, 0x1000}], 0x5) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000100)={0xfc0000000, 0x0, 0x2, 0x7}) ioctl$DRM_IOCTL_SG_ALLOC(r3, 0xc0106438, &(0x7f0000000180)={0x5, r4}) 17:04:04 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r4 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) tkill(r4, 0x1000000000016) rt_sigprocmask(0x1, &(0x7f00000001c0)={0x80000000}, 0x0, 0x8) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000280)=0x1) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x57}], 0x1) 17:04:04 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ptype\x00') getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000000280)=""/197, &(0x7f00000000c0)=0xc5) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r2 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) tkill(r2, 0x1000000000016) 17:04:04 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b51010000000060}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:04:04 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r1 = request_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000100)="65746830255dc2656d302a00", 0xfffffffffffffff8) r2 = add_key$user(&(0x7f00000008c0)='user\x00', &(0x7f0000000900)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000940)="4ff165fcca0eb675f3c3d6469907959055dda67a0466fc59c3256ecec1ee46509dfbc458b1e166cf1dc165b707cf17608e4c1cd661c2811bcb2e9a8de6f85f8f1b72575b", 0x44, 0xfffffffffffffffc) keyctl$instantiate_iov(0x14, r1, &(0x7f0000000800)=[{&(0x7f0000000280)="66dd5d71e6612ae78ca0f4ab4f6dfcfc7b870493d138f9498067ccc8510c44d4ca88b3f4cd1c07a6e6069628c6436c17b0c31a83392a577251d25ce1fba4bb8fe2cce6f4bf411ee921325ebd85cdbc6377c6be299d28dfd942f4de6551ff92322d892fe95bdbc206eb9181e85b0cc172ff235efc0feb36e23a734cb90b9fd04a8ea7ea3aa2c657821ae7d3a049e09f0a67cb8270c70856d5038d918ad2a9772bc6e8defdcd7da4dd3362acd16de85fd0987ee8ce63421a27c0ca343e04e518b748791d0e8f3d09507e", 0xc9}, {&(0x7f0000000380)="9e8afc99b2451e16d835f35e805a250c5c26cbf89ebd4ab26ba1133ba6306f2953b130c0f380e1f375b01255ae092f3951dc1099a475689e115765d5957f94860bb883c494d18bc2821eac41f0f3a0b773905c951578ff5e5a558cfcd42cbaf8fd9f2285a226e758e6053169cb47ccafd4794ae5db823aa57dd3b821340ead27b093f81b1d037017f70aeb75914defbb6135d4ca3f2fef10c53b8dcba0b560c2bfcba62edd95255e2e0ff149377b8e58c162a846c25487cfeaf26856adc561c5ba99049f477604081316c7be31bec1bc8948c4c64ae0ffdedc2828adc849978b4effcb17747769533306b1fa50d9ab7f33", 0xf1}, {&(0x7f0000000480)="a141a00f4276ae4445b9fdeddced4d2d74893f58ebf808fa8032b6588bf0dd31569a99f5d7742a0f0d4ea2ea49ba4ec3f992744484df60e8bcff61c837daa6543a18146955ece3c2b032f041b6c11a6631c03870ec2625d9d1886f90da11c9e07a24c9a1c901deb0eef02a722ea84d466cb32cac32bed1deab4c9fc602285043faac8691adca23042b18ba40b1795bde5525cae120e4c1c6e53806c3656f5d5ff87b74567921f1771586f93e295d31505144c2c148be850d336c7db2ce049f71b69189f37a35b6d74fcea4549c2d79590adcd7c0fa4265b92809a65c697528e76c2d6ac34931ffe9", 0xe8}, {&(0x7f00000001c0)="468a45ab3c8d08099c07bc016ba1a6afe88ae032f9a0a460c42ff60c9c8bd2c2068bf5f5040c003eb0fa7859e9b89173098dac38dcd55fc3e21f427b23e254d200382afa44fdd80b61fe2d492d9c9ed97494c1e515acd78f41c228bc944b68d1ceb197aa3ed223e777ab6f13a48ce571f527ce7862df4fcfc8aef5", 0x7b}, {&(0x7f0000000140)="70790d1bd6ab7c", 0x7}, {&(0x7f0000000580)="a2d6bc5f5f0b14fc8798f9a1eb03b765984e46fa770e1a75f27832e944c4dba0fc42c020d10d5b510c1cc2130054bec4dc3986ba574579be117b", 0x3a}, {&(0x7f00000005c0)="31833ef6742663e26bb63d6dce85f346c851a31d17d5bb593aee657b51f18941979ee96ff8ab9e811f1b7d79cee71355db45815594b3639ac8d63156f0629146eadc4561ce35a69037df4cdc7b5e0feb6c7d18ced79588a12002696eb3310f108ec5028ed3203f43181a2a8369333cb75894cf28a263cf06ae19572ea2914c7f52d967d6f8e600ade1a4105b49fdf14424fcb7e88926da1177332a27745fd85a8c152bc34773220d6df7e70551b67f4b7f733229ee5ab4595e89d24ee274fcedeb1ea7bac1b6f0f7d7bec804fef8080116bf8d121600cc6dadadff4542e7bd9b7e77fcea78af2fb67770e3adcc1e86235d", 0xf1}, {&(0x7f00000006c0)="e92582d103fe9c08ce362845c08c2fb0035f5f8bdfb50a982345c9ae15fa2407f852d652d295286b161bcb60faf5fdd6dbe9b366a5d9b567a4a23483ee1e30973a1bafca99d95c2ef32ac5687ba627a23a567948d2cf9996c64dc189c25f32bf83c0acbc16301e753aadae61302e3f618d5ca3bb0d9eb4377253a2c6a118b87cc489f88e11bc6ec7b1e38d46933055ca6a071df8105575c0a4cb78b9adbc9db008f7d0f13d5cea9aa0f4397e4d2d98bfa48a917cb8261cb508a65979feecda5ab9530faedf2ffe72fa46ba8c4bbd232da248436cebd1925ffb1a50d14caf00c6fd3dd9d34ca9be002ff83c05da22208b405f2e680c87", 0xf6}, {&(0x7f00000007c0)="28fc69730db9be", 0x7}], 0x9, r2) gettid() r3 = semget(0x0, 0x4, 0x6ea) semop(r3, &(0x7f0000000040)=[{0x0, 0xffff, 0x1000}], 0x1) [ 557.257569] sg_write: 2 callbacks suppressed [ 557.257585] sg_write: data in/out 65499/33 bytes for SCSI command 0x0-- guessing data in; [ 557.257585] program syz-executor0 not setting count and/or reply_len properly 17:04:04 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc04c5349, &(0x7f00000000c0)={0x40, 0x1ff, 0x400}) r2 = getpgrp(0xffffffffffffffff) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @tid=r2}, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r3 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) tkill(r3, 0x1000000000016) 17:04:04 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r1 = gettid() semop(0x0, &(0x7f0000000040), 0x0) tkill(r1, 0x1000000000016) 17:04:04 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b510100c1000000}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:04:04 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) connect$netlink(r0, &(0x7f0000000200)=@proc={0x10, 0x0, 0x25dfdbfc, 0x200}, 0x59d9738b5d2a3a85) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r4 = gettid() openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/policy\x00', 0x0, 0x0) semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) tkill(r4, 0x2001000000000019) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000280)=0x1) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x57}], 0x1) 17:04:05 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r1 = gettid() semop(0x0, &(0x7f0000000040), 0x0) tkill(r1, 0x1000000000016) 17:04:05 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b5101005a000000}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:04:05 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r1 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$KVM_DIRTY_TLB(r2, 0x4010aeaa, &(0x7f00000000c0)={0x4, 0x1}) tkill(r1, 0x1000000000016) 17:04:05 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r1 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff, 0x3f00}], 0x1) tkill(r1, 0x1000000000016) 17:04:05 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r0, 0x8008ae9d, &(0x7f00000002c0)=""/224) open(&(0x7f00000001c0)='./file0\x00', 0x20000, 0x40) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r4 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) tkill(r4, 0x1000000000016) recvfrom(r1, &(0x7f00000003c0)=""/189, 0xbd, 0x41, &(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x3, 0x4, 0x2, 0x3, {0xa, 0x4e24, 0x4, @remote, 0xff}}}, 0x80) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000280)=0x1) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x57}], 0x1) setsockopt$sock_int(r0, 0x1, 0x3f, &(0x7f0000000200)=0x5, 0x4) 17:04:05 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r1 = gettid() semop(0x0, &(0x7f0000000040)=[{}], 0x2) tkill(r1, 0x1000000000016) 17:04:05 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b510100dc000000}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:04:05 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r1 = request_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000100)="65746830255dc2656d302a00", 0xfffffffffffffff8) r2 = add_key$user(&(0x7f00000008c0)='user\x00', &(0x7f0000000900)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000940)="4ff165fcca0eb675f3c3d6469907959055dda67a0466fc59c3256ecec1ee46509dfbc458b1e166cf1dc165b707cf17608e4c1cd661c2811bcb2e9a8de6f85f8f1b72575b", 0x44, 0xfffffffffffffffc) keyctl$instantiate_iov(0x14, r1, &(0x7f0000000800)=[{&(0x7f0000000280)="66dd5d71e6612ae78ca0f4ab4f6dfcfc7b870493d138f9498067ccc8510c44d4ca88b3f4cd1c07a6e6069628c6436c17b0c31a83392a577251d25ce1fba4bb8fe2cce6f4bf411ee921325ebd85cdbc6377c6be299d28dfd942f4de6551ff92322d892fe95bdbc206eb9181e85b0cc172ff235efc0feb36e23a734cb90b9fd04a8ea7ea3aa2c657821ae7d3a049e09f0a67cb8270c70856d5038d918ad2a9772bc6e8defdcd7da4dd3362acd16de85fd0987ee8ce63421a27c0ca343e04e518b748791d0e8f3d09507e", 0xc9}, {&(0x7f0000000380)="9e8afc99b2451e16d835f35e805a250c5c26cbf89ebd4ab26ba1133ba6306f2953b130c0f380e1f375b01255ae092f3951dc1099a475689e115765d5957f94860bb883c494d18bc2821eac41f0f3a0b773905c951578ff5e5a558cfcd42cbaf8fd9f2285a226e758e6053169cb47ccafd4794ae5db823aa57dd3b821340ead27b093f81b1d037017f70aeb75914defbb6135d4ca3f2fef10c53b8dcba0b560c2bfcba62edd95255e2e0ff149377b8e58c162a846c25487cfeaf26856adc561c5ba99049f477604081316c7be31bec1bc8948c4c64ae0ffdedc2828adc849978b4effcb17747769533306b1fa50d9ab7f33", 0xf1}, {&(0x7f0000000480)="a141a00f4276ae4445b9fdeddced4d2d74893f58ebf808fa8032b6588bf0dd31569a99f5d7742a0f0d4ea2ea49ba4ec3f992744484df60e8bcff61c837daa6543a18146955ece3c2b032f041b6c11a6631c03870ec2625d9d1886f90da11c9e07a24c9a1c901deb0eef02a722ea84d466cb32cac32bed1deab4c9fc602285043faac8691adca23042b18ba40b1795bde5525cae120e4c1c6e53806c3656f5d5ff87b74567921f1771586f93e295d31505144c2c148be850d336c7db2ce049f71b69189f37a35b6d74fcea4549c2d79590adcd7c0fa4265b92809a65c697528e76c2d6ac34931ffe9", 0xe8}, {&(0x7f00000001c0)="468a45ab3c8d08099c07bc016ba1a6afe88ae032f9a0a460c42ff60c9c8bd2c2068bf5f5040c003eb0fa7859e9b89173098dac38dcd55fc3e21f427b23e254d200382afa44fdd80b61fe2d492d9c9ed97494c1e515acd78f41c228bc944b68d1ceb197aa3ed223e777ab6f13a48ce571f527ce7862df4fcfc8aef5", 0x7b}, {&(0x7f0000000140)="70790d1bd6ab7c", 0x7}, {&(0x7f0000000580)="a2d6bc5f5f0b14fc8798f9a1eb03b765984e46fa770e1a75f27832e944c4dba0fc42c020d10d5b510c1cc2130054bec4dc3986ba574579be117b", 0x3a}, {&(0x7f00000005c0)="31833ef6742663e26bb63d6dce85f346c851a31d17d5bb593aee657b51f18941979ee96ff8ab9e811f1b7d79cee71355db45815594b3639ac8d63156f0629146eadc4561ce35a69037df4cdc7b5e0feb6c7d18ced79588a12002696eb3310f108ec5028ed3203f43181a2a8369333cb75894cf28a263cf06ae19572ea2914c7f52d967d6f8e600ade1a4105b49fdf14424fcb7e88926da1177332a27745fd85a8c152bc34773220d6df7e70551b67f4b7f733229ee5ab4595e89d24ee274fcedeb1ea7bac1b6f0f7d7bec804fef8080116bf8d121600cc6dadadff4542e7bd9b7e77fcea78af2fb67770e3adcc1e86235d", 0xf1}, {&(0x7f00000006c0)="e92582d103fe9c08ce362845c08c2fb0035f5f8bdfb50a982345c9ae15fa2407f852d652d295286b161bcb60faf5fdd6dbe9b366a5d9b567a4a23483ee1e30973a1bafca99d95c2ef32ac5687ba627a23a567948d2cf9996c64dc189c25f32bf83c0acbc16301e753aadae61302e3f618d5ca3bb0d9eb4377253a2c6a118b87cc489f88e11bc6ec7b1e38d46933055ca6a071df8105575c0a4cb78b9adbc9db008f7d0f13d5cea9aa0f4397e4d2d98bfa48a917cb8261cb508a65979feecda5ab9530faedf2ffe72fa46ba8c4bbd232da248436cebd1925ffb1a50d14caf00c6fd3dd9d34ca9be002ff83c05da22208b405f2e680c87", 0xf6}, {&(0x7f00000007c0)="28fc69730db9be", 0x7}], 0x9, r2) gettid() r3 = semget(0x0, 0x4, 0x6ea) semop(r3, &(0x7f0000000040)=[{0x0, 0xffff, 0x1000}], 0x1) 17:04:05 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r1 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x224200, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r2, 0xae78, &(0x7f00000000c0)) socket$inet_dccp(0x2, 0x6, 0x0) tkill(r1, 0x1000000000016) 17:04:05 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r1 = gettid() semop(0x0, &(0x7f0000000040)=[{}], 0x2) tkill(r1, 0x1000000000016) 17:04:05 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b51010000006200}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:04:05 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000180)=ANY=[@ANYBLOB="c0731506900111bdeaf9565da823f75c262db29f4eb796a27bc97e22936f4606a9a1cafc413a7cf42641ff95f322706df1a79015f0eb106b64bf78bdaf563755872c01f4ed9e9f32a9423f573db4020b67f1c452c7df6d950e5f0f03ffff322a1b21221321aa1a860dfd32cd295cd2dd791282d5a01a3bc43a5226b3e45567ab25702917acf9dab20a107b79ce03f90eab120c005fbc2114fe3a6b5905683bf941b0d08e121d4d8f41a77787e754ff391a7517cf4d8b0f01915d1f9ea2408afb4c16a5871e950e5688630b6117d389bec5428c22190767e6fbefd200"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000000e000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000400)=[@efer={0x2, 0x1000}, @efer={0x2, 0x4000}], 0x2) r3 = socket(0x40000000015, 0x805, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000200)='/dev/vcs#\x00', 0xffffffff80000000, 0x801) ioctl$VT_ACTIVATE(r4, 0x5606, 0x6) accept4$inet(r3, 0x0, &(0x7f0000000040), 0x800) getsockopt(r3, 0x114, 0x271c, &(0x7f0000000000)=""/13, &(0x7f000033bffc)=0xd) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) semget(0x0, 0x2, 0x100) socket$inet6(0xa, 0x807, 0x80000000) syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x9, 0x400000) sched_setaffinity(0x0, 0xfffffe75, &(0x7f00000000c0)=0x9) r6 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setflags(r6, 0x2, 0x1) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r5, 0x10, &(0x7f00000003c0)={0x2}) pipe(&(0x7f0000000100)) r7 = socket$inet6(0xa, 0x400000000001, 0x0) clock_settime(0x8, &(0x7f0000000240)={0x0, 0x1c9c380}) r8 = dup(r7) setsockopt$inet6_tcp_int(r8, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r7, &(0x7f0000000300)={0xa, 0x800004e20, 0x1, @loopback}, 0x1c) sendto$inet6(r7, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) get_robust_list(r5, &(0x7f0000000340)=&(0x7f00000002c0)={&(0x7f0000000280)={&(0x7f00000001c0)}}, &(0x7f0000000380)=0x18) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) r9 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r9, 0x2007fff) sendfile(r8, r9, &(0x7f0000d83ff8), 0x8000fffffffe) 17:04:05 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) timer_create(0x7, &(0x7f00000001c0)={0x0, 0x0, 0x2, @thr={&(0x7f00000002c0)="bce0dc1d863b2fd657fa1de307ed602da69b899c41311a5d4e1752a9a72eff192e14f0517221aca67fc02fd8408d04cf57c914d260585d4043e7864850545ff2264ae38d4e1e8d30cd5b4f9a24b73cae6286b02d7850d2860acf2dafec6fb9596319a6dd3b11c6def060c5f5a2a0b307184429a656a8c3eb49b3674ee7d2ea8057018e82e4c52869ceb382265f628e5e52075417778e79cd72", &(0x7f0000000380)="8153a25876a89c847b7f8c081dd8cc2d8ac0c1f71f05b16676a894ce7909b9ba35f9acde9ead44dc7bdafe3743f40f21f54be11655119a034619a6bb2bebec1e4047f72cb976b6756000b62c847336475487e93eb3ad0f4cf58eb331d012abcdcfdf4ad3eeab0d7bd25e5e3f49c6d0c12b605db732b42c72fc7586bf5c8fda372309d51422bc44a47511875dec230edbcd493abc9366895d363e8fe2f2293d7e42b592c4f9da5387bf5857f80988cce8670d80d4a7351d66c361a119df43aebbb216f940386a24f9a506413faeb36fdcca8d9bc1a8235625c383d260098333db76"}}, &(0x7f0000000200)=0x0) timer_delete(r1) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r2) r3 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r5 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) tkill(r5, 0x1000000000016) open$dir(&(0x7f0000000480)='./file0\x00', 0xa000, 0x80) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r3, 0x227b, &(0x7f0000000280)=0x1) readv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x57}], 0x1) 17:04:05 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r1 = gettid() semop(0x0, &(0x7f0000000040)=[{}], 0x2) tkill(r1, 0x1000000000016) 17:04:05 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b51010000002001}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:04:05 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x2) tkill(0x0, 0x1000000000016) 17:04:06 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x100, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000001c0)={0x0, 0x5499}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000280)={r2, 0x101}, 0x8) r3 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) tkill(r3, 0x1000000000016) 17:04:06 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b510100000000eb}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:04:06 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b5101000000008b}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:04:07 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r1 = request_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000100)="65746830255dc2656d302a00", 0xfffffffffffffff8) r2 = add_key$user(&(0x7f00000008c0)='user\x00', &(0x7f0000000900)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000940)="4ff165fcca0eb675f3c3d6469907959055dda67a0466fc59c3256ecec1ee46509dfbc458b1e166cf1dc165b707cf17608e4c1cd661c2811bcb2e9a8de6f85f8f1b72575b", 0x44, 0xfffffffffffffffc) keyctl$instantiate_iov(0x14, r1, &(0x7f0000000800)=[{&(0x7f0000000280)="66dd5d71e6612ae78ca0f4ab4f6dfcfc7b870493d138f9498067ccc8510c44d4ca88b3f4cd1c07a6e6069628c6436c17b0c31a83392a577251d25ce1fba4bb8fe2cce6f4bf411ee921325ebd85cdbc6377c6be299d28dfd942f4de6551ff92322d892fe95bdbc206eb9181e85b0cc172ff235efc0feb36e23a734cb90b9fd04a8ea7ea3aa2c657821ae7d3a049e09f0a67cb8270c70856d5038d918ad2a9772bc6e8defdcd7da4dd3362acd16de85fd0987ee8ce63421a27c0ca343e04e518b748791d0e8f3d09507e", 0xc9}, {&(0x7f0000000380)="9e8afc99b2451e16d835f35e805a250c5c26cbf89ebd4ab26ba1133ba6306f2953b130c0f380e1f375b01255ae092f3951dc1099a475689e115765d5957f94860bb883c494d18bc2821eac41f0f3a0b773905c951578ff5e5a558cfcd42cbaf8fd9f2285a226e758e6053169cb47ccafd4794ae5db823aa57dd3b821340ead27b093f81b1d037017f70aeb75914defbb6135d4ca3f2fef10c53b8dcba0b560c2bfcba62edd95255e2e0ff149377b8e58c162a846c25487cfeaf26856adc561c5ba99049f477604081316c7be31bec1bc8948c4c64ae0ffdedc2828adc849978b4effcb17747769533306b1fa50d9ab7f33", 0xf1}, {&(0x7f0000000480)="a141a00f4276ae4445b9fdeddced4d2d74893f58ebf808fa8032b6588bf0dd31569a99f5d7742a0f0d4ea2ea49ba4ec3f992744484df60e8bcff61c837daa6543a18146955ece3c2b032f041b6c11a6631c03870ec2625d9d1886f90da11c9e07a24c9a1c901deb0eef02a722ea84d466cb32cac32bed1deab4c9fc602285043faac8691adca23042b18ba40b1795bde5525cae120e4c1c6e53806c3656f5d5ff87b74567921f1771586f93e295d31505144c2c148be850d336c7db2ce049f71b69189f37a35b6d74fcea4549c2d79590adcd7c0fa4265b92809a65c697528e76c2d6ac34931ffe9", 0xe8}, {&(0x7f00000001c0)="468a45ab3c8d08099c07bc016ba1a6afe88ae032f9a0a460c42ff60c9c8bd2c2068bf5f5040c003eb0fa7859e9b89173098dac38dcd55fc3e21f427b23e254d200382afa44fdd80b61fe2d492d9c9ed97494c1e515acd78f41c228bc944b68d1ceb197aa3ed223e777ab6f13a48ce571f527ce7862df4fcfc8aef5", 0x7b}, {&(0x7f0000000140)="70790d1bd6ab7c", 0x7}, {&(0x7f0000000580)="a2d6bc5f5f0b14fc8798f9a1eb03b765984e46fa770e1a75f27832e944c4dba0fc42c020d10d5b510c1cc2130054bec4dc3986ba574579be117b", 0x3a}, {&(0x7f00000005c0)="31833ef6742663e26bb63d6dce85f346c851a31d17d5bb593aee657b51f18941979ee96ff8ab9e811f1b7d79cee71355db45815594b3639ac8d63156f0629146eadc4561ce35a69037df4cdc7b5e0feb6c7d18ced79588a12002696eb3310f108ec5028ed3203f43181a2a8369333cb75894cf28a263cf06ae19572ea2914c7f52d967d6f8e600ade1a4105b49fdf14424fcb7e88926da1177332a27745fd85a8c152bc34773220d6df7e70551b67f4b7f733229ee5ab4595e89d24ee274fcedeb1ea7bac1b6f0f7d7bec804fef8080116bf8d121600cc6dadadff4542e7bd9b7e77fcea78af2fb67770e3adcc1e86235d", 0xf1}, {&(0x7f00000006c0)="e92582d103fe9c08ce362845c08c2fb0035f5f8bdfb50a982345c9ae15fa2407f852d652d295286b161bcb60faf5fdd6dbe9b366a5d9b567a4a23483ee1e30973a1bafca99d95c2ef32ac5687ba627a23a567948d2cf9996c64dc189c25f32bf83c0acbc16301e753aadae61302e3f618d5ca3bb0d9eb4377253a2c6a118b87cc489f88e11bc6ec7b1e38d46933055ca6a071df8105575c0a4cb78b9adbc9db008f7d0f13d5cea9aa0f4397e4d2d98bfa48a917cb8261cb508a65979feecda5ab9530faedf2ffe72fa46ba8c4bbd232da248436cebd1925ffb1a50d14caf00c6fd3dd9d34ca9be002ff83c05da22208b405f2e680c87", 0xf6}, {&(0x7f00000007c0)="28fc69730db9be", 0x7}], 0x9, r2) r3 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff, 0x1000}], 0x1) tkill(r3, 0x1000000000016) 17:04:07 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)=0x0) timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000000100)) r2 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) tkill(r2, 0x1000000000016) r3 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x5, 0x10400) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000004c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000200)={0xffffffffffffffff}, 0x0, 0x6}}, 0x16) write$RDMA_USER_CM_CMD_DISCONNECT(r3, &(0x7f00000003c0)={0xa, 0x4, 0xfa00, {r4}}, 0x2f) r5 = accept4$bt_l2cap(0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80000) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r3, 0x28, 0x2, &(0x7f0000000180)=0x9d2, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000400)={r3, r3, 0x1, 0x3}, 0x3df) bind$inet(r3, &(0x7f0000000380)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$sock_bt(r5, 0x5411, &(0x7f0000000280)="3c19279cecd646f9ff57b9434eb77d7908bbf7cbee9be370fe8248378fcf7ec05729c716b6c1eeafaf9d2386bc640e1337d961b92c503aa998abf888c91af11ccb830c4083c36376ca19244f70c417d4a854e26d65cfa551d5b521b0dae8e1b1884400e0c4fa95fc6f41c4172c59656f25152db0884443afe8311f03858b888f1192efe2b73ecf47d4b0632243b1321a8cae1d57a0768e65dab668d4f510b9c6c08178297ad89351564580e906d8292291aed8aaff8127a94fefdfd9dc88dde17e193435de74eab47fb316b101ed81d481d7b528532da5833b029be66209443cd1e530ff22f0429bd9afd037") 17:04:07 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b510100f8b90100}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:04:07 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000180)=ANY=[@ANYBLOB="c0731506900111bdeaf9565da823f75c262db29f4eb796a27bc97e22936f4606a9a1cafc413a7cf42641ff95f322706df1a79015f0eb106b64bf78bdaf563755872c01f4ed9e9f32a9423f573db4020b67f1c452c7df6d950e5f0f03ffff322a1b21221321aa1a860dfd32cd295cd2dd791282d5a01a3bc43a5226b3e45567ab25702917acf9dab20a107b79ce03f90eab120c005fbc2114fe3a6b5905683bf941b0d08e121d4d8f41a77787e754ff391a7517cf4d8b0f01915d1f9ea2408afb4c16a5871e950e5688630b6117d389bec5428c22190767e6fbefd200"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000000e000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000400)=[@efer={0x2, 0x1000}, @efer={0x2, 0x4000}], 0x2) r3 = socket(0x40000000015, 0x805, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000200)='/dev/vcs#\x00', 0xffffffff80000000, 0x801) ioctl$VT_ACTIVATE(r4, 0x5606, 0x6) accept4$inet(r3, 0x0, &(0x7f0000000040), 0x800) getsockopt(r3, 0x114, 0x271c, &(0x7f0000000000)=""/13, &(0x7f000033bffc)=0xd) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) semget(0x0, 0x2, 0x100) socket$inet6(0xa, 0x807, 0x80000000) syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x9, 0x400000) sched_setaffinity(0x0, 0xfffffe75, &(0x7f00000000c0)=0x9) r6 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setflags(r6, 0x2, 0x1) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r5, 0x10, &(0x7f00000003c0)={0x2}) pipe(&(0x7f0000000100)) r7 = socket$inet6(0xa, 0x400000000001, 0x0) clock_settime(0x8, &(0x7f0000000240)={0x0, 0x1c9c380}) r8 = dup(r7) setsockopt$inet6_tcp_int(r8, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r7, &(0x7f0000000300)={0xa, 0x800004e20, 0x1, @loopback}, 0x1c) sendto$inet6(r7, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) get_robust_list(r5, &(0x7f0000000340)=&(0x7f00000002c0)={&(0x7f0000000280)={&(0x7f00000001c0)}}, &(0x7f0000000380)=0x18) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) r9 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r9, 0x2007fff) sendfile(r8, r9, &(0x7f0000d83ff8), 0x8000fffffffe) 17:04:07 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x2) tkill(0x0, 0x1000000000016) 17:04:08 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r4 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) tkill(r4, 0x1000000000016) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000280)=0x1) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x57}], 0x1) ptrace$getregset(0x4204, r4, 0x203, &(0x7f00000001c0)={&(0x7f00000002c0)=""/4096, 0x1000}) 17:04:08 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b5101001f000000}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:04:08 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000080)=""/190, &(0x7f0000000140)=0xbe) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r2 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) tkill(r2, 0x1000000000016) 17:04:08 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r1 = request_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000100)="65746830255dc2656d302a00", 0xfffffffffffffff8) r2 = add_key$user(&(0x7f00000008c0)='user\x00', &(0x7f0000000900)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000940)="4ff165fcca0eb675f3c3d6469907959055dda67a0466fc59c3256ecec1ee46509dfbc458b1e166cf1dc165b707cf17608e4c1cd661c2811bcb2e9a8de6f85f8f1b72575b", 0x44, 0xfffffffffffffffc) keyctl$instantiate_iov(0x14, r1, &(0x7f0000000800)=[{&(0x7f0000000280)="66dd5d71e6612ae78ca0f4ab4f6dfcfc7b870493d138f9498067ccc8510c44d4ca88b3f4cd1c07a6e6069628c6436c17b0c31a83392a577251d25ce1fba4bb8fe2cce6f4bf411ee921325ebd85cdbc6377c6be299d28dfd942f4de6551ff92322d892fe95bdbc206eb9181e85b0cc172ff235efc0feb36e23a734cb90b9fd04a8ea7ea3aa2c657821ae7d3a049e09f0a67cb8270c70856d5038d918ad2a9772bc6e8defdcd7da4dd3362acd16de85fd0987ee8ce63421a27c0ca343e04e518b748791d0e8f3d09507e", 0xc9}, {&(0x7f0000000380)="9e8afc99b2451e16d835f35e805a250c5c26cbf89ebd4ab26ba1133ba6306f2953b130c0f380e1f375b01255ae092f3951dc1099a475689e115765d5957f94860bb883c494d18bc2821eac41f0f3a0b773905c951578ff5e5a558cfcd42cbaf8fd9f2285a226e758e6053169cb47ccafd4794ae5db823aa57dd3b821340ead27b093f81b1d037017f70aeb75914defbb6135d4ca3f2fef10c53b8dcba0b560c2bfcba62edd95255e2e0ff149377b8e58c162a846c25487cfeaf26856adc561c5ba99049f477604081316c7be31bec1bc8948c4c64ae0ffdedc2828adc849978b4effcb17747769533306b1fa50d9ab7f33", 0xf1}, {&(0x7f0000000480)="a141a00f4276ae4445b9fdeddced4d2d74893f58ebf808fa8032b6588bf0dd31569a99f5d7742a0f0d4ea2ea49ba4ec3f992744484df60e8bcff61c837daa6543a18146955ece3c2b032f041b6c11a6631c03870ec2625d9d1886f90da11c9e07a24c9a1c901deb0eef02a722ea84d466cb32cac32bed1deab4c9fc602285043faac8691adca23042b18ba40b1795bde5525cae120e4c1c6e53806c3656f5d5ff87b74567921f1771586f93e295d31505144c2c148be850d336c7db2ce049f71b69189f37a35b6d74fcea4549c2d79590adcd7c0fa4265b92809a65c697528e76c2d6ac34931ffe9", 0xe8}, {&(0x7f00000001c0)="468a45ab3c8d08099c07bc016ba1a6afe88ae032f9a0a460c42ff60c9c8bd2c2068bf5f5040c003eb0fa7859e9b89173098dac38dcd55fc3e21f427b23e254d200382afa44fdd80b61fe2d492d9c9ed97494c1e515acd78f41c228bc944b68d1ceb197aa3ed223e777ab6f13a48ce571f527ce7862df4fcfc8aef5", 0x7b}, {&(0x7f0000000140)="70790d1bd6ab7c", 0x7}, {&(0x7f0000000580)="a2d6bc5f5f0b14fc8798f9a1eb03b765984e46fa770e1a75f27832e944c4dba0fc42c020d10d5b510c1cc2130054bec4dc3986ba574579be117b", 0x3a}, {&(0x7f00000005c0)="31833ef6742663e26bb63d6dce85f346c851a31d17d5bb593aee657b51f18941979ee96ff8ab9e811f1b7d79cee71355db45815594b3639ac8d63156f0629146eadc4561ce35a69037df4cdc7b5e0feb6c7d18ced79588a12002696eb3310f108ec5028ed3203f43181a2a8369333cb75894cf28a263cf06ae19572ea2914c7f52d967d6f8e600ade1a4105b49fdf14424fcb7e88926da1177332a27745fd85a8c152bc34773220d6df7e70551b67f4b7f733229ee5ab4595e89d24ee274fcedeb1ea7bac1b6f0f7d7bec804fef8080116bf8d121600cc6dadadff4542e7bd9b7e77fcea78af2fb67770e3adcc1e86235d", 0xf1}, {&(0x7f00000006c0)="e92582d103fe9c08ce362845c08c2fb0035f5f8bdfb50a982345c9ae15fa2407f852d652d295286b161bcb60faf5fdd6dbe9b366a5d9b567a4a23483ee1e30973a1bafca99d95c2ef32ac5687ba627a23a567948d2cf9996c64dc189c25f32bf83c0acbc16301e753aadae61302e3f618d5ca3bb0d9eb4377253a2c6a118b87cc489f88e11bc6ec7b1e38d46933055ca6a071df8105575c0a4cb78b9adbc9db008f7d0f13d5cea9aa0f4397e4d2d98bfa48a917cb8261cb508a65979feecda5ab9530faedf2ffe72fa46ba8c4bbd232da248436cebd1925ffb1a50d14caf00c6fd3dd9d34ca9be002ff83c05da22208b405f2e680c87", 0xf6}, {&(0x7f00000007c0)="28fc69730db9be", 0x7}], 0x9, r2) semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff, 0x1000}], 0x1) tkill(0x0, 0x1000000000016) 17:04:08 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x2) tkill(0x0, 0x0) 17:04:08 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000080)=ANY=[@ANYBLOB="cdae54d9e5a6fec5a058dab30e5a150adc09638c692ecc47fb8cb1d64d1bd872be918c5068da2f79beae7fce4eff15a8820692b7a8bb33baf17036e4e891279e7ceaa73df387cb5586a83dc79b1f5bc3531bed2234cd4d1410f383714a17a5e6f1e8c7"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x0, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000001040)={0x0, 0x0, 0x2080}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:04:08 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b51010000005200}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:04:08 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000080)=ANY=[@ANYBLOB="cdae54d9e5a6fec5a058dab30e5a150adc09638c692ecc47fb8cb1d64d1bd872be918c5068da2f79beae7fce4eff15a8820692b7a8bb33baf17036e4e891279e7ceaa73df387cb5586a83dc79b1f5bc3531bed2234cd4d1410f383714a17a5e6f1e8c7"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x0, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000001040)={0x0, 0x0, 0x2080}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:04:08 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x1) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r4 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) tkill(r4, 0x1000000000016) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000280)=0x1) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x57}], 0x1) 17:04:09 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000002c0)) timer_settime(0x0, 0xfffffffffffffffc, &(0x7f00000001c0)={{r1, r2+30000000}, {0x0, 0x989680}}, &(0x7f0000000300)) r3 = gettid() r4 = dup(r0) capset(&(0x7f0000000140)={0x399f1736, r3}, &(0x7f0000000200)={0xf670, 0xb22, 0x3, 0x0, 0x5}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0x40a85323, &(0x7f0000000080)={{0x9, 0x100000000}, 'port0\x00', 0x3, 0x50041, 0x9, 0xfffffffffffffffc, 0x6, 0x20, 0xfffffffffffffff9, 0x0, 0x1, 0x1}) ioctl$KVM_ASSIGN_DEV_IRQ(r4, 0x4040ae70, &(0x7f0000000340)={0x9, 0x80000000, 0x8, 0x1}) semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) tkill(r3, 0x1000000000016) 17:04:09 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b51010000000111}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:04:09 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000080)=ANY=[@ANYBLOB="cdae54d9e5a6fec5a058dab30e5a150adc09638c692ecc47fb8cb1d64d1bd872be918c5068da2f79beae7fce4eff15a8820692b7a8bb33baf17036e4e891279e7ceaa73df387cb5586a83dc79b1f5bc3531bed2234cd4d1410f383714a17a5e6f1e8c7"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x0, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000001040)={0x0, 0x0, 0x2080}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:04:09 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r4 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f00000002c0)={0x0, 0x1000, "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"}, &(0x7f00000001c0)=0x1008) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000200)={r5, 0x9, 0x800, 0xd1d}, 0x14) tkill(r4, 0x1000000000016) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000280)=0x1) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x57}], 0x1) 17:04:09 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b510100000000b8}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:04:09 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000080)=ANY=[@ANYBLOB="cdae54d9e5a6fec5a058dab30e5a150adc09638c692ecc47fb8cb1d64d1bd872be918c5068da2f79beae7fce4eff15a8820692b7a8bb33baf17036e4e891279e7ceaa73df387cb5586a83dc79b1f5bc3531bed2234cd4d1410f383714a17a5e6f1e8c7"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x0, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000001040)={0x0, 0x0, 0x2080}) 17:04:09 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r1 = request_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000100)="65746830255dc2656d302a00", 0xfffffffffffffff8) r2 = add_key$user(&(0x7f00000008c0)='user\x00', &(0x7f0000000900)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000940)="4ff165fcca0eb675f3c3d6469907959055dda67a0466fc59c3256ecec1ee46509dfbc458b1e166cf1dc165b707cf17608e4c1cd661c2811bcb2e9a8de6f85f8f1b72575b", 0x44, 0xfffffffffffffffc) keyctl$instantiate_iov(0x14, r1, &(0x7f0000000800)=[{&(0x7f0000000280)="66dd5d71e6612ae78ca0f4ab4f6dfcfc7b870493d138f9498067ccc8510c44d4ca88b3f4cd1c07a6e6069628c6436c17b0c31a83392a577251d25ce1fba4bb8fe2cce6f4bf411ee921325ebd85cdbc6377c6be299d28dfd942f4de6551ff92322d892fe95bdbc206eb9181e85b0cc172ff235efc0feb36e23a734cb90b9fd04a8ea7ea3aa2c657821ae7d3a049e09f0a67cb8270c70856d5038d918ad2a9772bc6e8defdcd7da4dd3362acd16de85fd0987ee8ce63421a27c0ca343e04e518b748791d0e8f3d09507e", 0xc9}, {&(0x7f0000000380)="9e8afc99b2451e16d835f35e805a250c5c26cbf89ebd4ab26ba1133ba6306f2953b130c0f380e1f375b01255ae092f3951dc1099a475689e115765d5957f94860bb883c494d18bc2821eac41f0f3a0b773905c951578ff5e5a558cfcd42cbaf8fd9f2285a226e758e6053169cb47ccafd4794ae5db823aa57dd3b821340ead27b093f81b1d037017f70aeb75914defbb6135d4ca3f2fef10c53b8dcba0b560c2bfcba62edd95255e2e0ff149377b8e58c162a846c25487cfeaf26856adc561c5ba99049f477604081316c7be31bec1bc8948c4c64ae0ffdedc2828adc849978b4effcb17747769533306b1fa50d9ab7f33", 0xf1}, {&(0x7f0000000480)="a141a00f4276ae4445b9fdeddced4d2d74893f58ebf808fa8032b6588bf0dd31569a99f5d7742a0f0d4ea2ea49ba4ec3f992744484df60e8bcff61c837daa6543a18146955ece3c2b032f041b6c11a6631c03870ec2625d9d1886f90da11c9e07a24c9a1c901deb0eef02a722ea84d466cb32cac32bed1deab4c9fc602285043faac8691adca23042b18ba40b1795bde5525cae120e4c1c6e53806c3656f5d5ff87b74567921f1771586f93e295d31505144c2c148be850d336c7db2ce049f71b69189f37a35b6d74fcea4549c2d79590adcd7c0fa4265b92809a65c697528e76c2d6ac34931ffe9", 0xe8}, {&(0x7f00000001c0)="468a45ab3c8d08099c07bc016ba1a6afe88ae032f9a0a460c42ff60c9c8bd2c2068bf5f5040c003eb0fa7859e9b89173098dac38dcd55fc3e21f427b23e254d200382afa44fdd80b61fe2d492d9c9ed97494c1e515acd78f41c228bc944b68d1ceb197aa3ed223e777ab6f13a48ce571f527ce7862df4fcfc8aef5", 0x7b}, {&(0x7f0000000140)="70790d1bd6ab7c", 0x7}, {&(0x7f0000000580)="a2d6bc5f5f0b14fc8798f9a1eb03b765984e46fa770e1a75f27832e944c4dba0fc42c020d10d5b510c1cc2130054bec4dc3986ba574579be117b", 0x3a}, {&(0x7f00000005c0)="31833ef6742663e26bb63d6dce85f346c851a31d17d5bb593aee657b51f18941979ee96ff8ab9e811f1b7d79cee71355db45815594b3639ac8d63156f0629146eadc4561ce35a69037df4cdc7b5e0feb6c7d18ced79588a12002696eb3310f108ec5028ed3203f43181a2a8369333cb75894cf28a263cf06ae19572ea2914c7f52d967d6f8e600ade1a4105b49fdf14424fcb7e88926da1177332a27745fd85a8c152bc34773220d6df7e70551b67f4b7f733229ee5ab4595e89d24ee274fcedeb1ea7bac1b6f0f7d7bec804fef8080116bf8d121600cc6dadadff4542e7bd9b7e77fcea78af2fb67770e3adcc1e86235d", 0xf1}, {&(0x7f00000006c0)="e92582d103fe9c08ce362845c08c2fb0035f5f8bdfb50a982345c9ae15fa2407f852d652d295286b161bcb60faf5fdd6dbe9b366a5d9b567a4a23483ee1e30973a1bafca99d95c2ef32ac5687ba627a23a567948d2cf9996c64dc189c25f32bf83c0acbc16301e753aadae61302e3f618d5ca3bb0d9eb4377253a2c6a118b87cc489f88e11bc6ec7b1e38d46933055ca6a071df8105575c0a4cb78b9adbc9db008f7d0f13d5cea9aa0f4397e4d2d98bfa48a917cb8261cb508a65979feecda5ab9530faedf2ffe72fa46ba8c4bbd232da248436cebd1925ffb1a50d14caf00c6fd3dd9d34ca9be002ff83c05da22208b405f2e680c87", 0xf6}, {&(0x7f00000007c0)="28fc69730db9be", 0x7}], 0x9, r2) semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff, 0x1000}], 0x1) tkill(0x0, 0x1000000000016) 17:04:09 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b5101000000bd00}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:04:09 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000080)=ANY=[@ANYBLOB="cdae54d9e5a6fec5a058dab30e5a150adc09638c692ecc47fb8cb1d64d1bd872be918c5068da2f79beae7fce4eff15a8820692b7a8bb33baf17036e4e891279e7ceaa73df387cb5586a83dc79b1f5bc3531bed2234cd4d1410f383714a17a5e6f1e8c7"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x0, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000001040)={0x0, 0x0, 0x2080}) 17:04:09 executing program 3: socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) getrandom(&(0x7f0000000340)=""/37, 0x25, 0x1) fsync(r0) r1 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x4) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r1, 0x40049409, r2) r3 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffb, 0x103) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r6 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) syz_open_dev$mouse(&(0x7f00000002c0)='/dev/input/mouse#\x00', 0x7ff, 0x8000) tkill(r6, 0x1000000000016) prctl$setname(0xf, &(0x7f00000001c0)='/dev/input/mouse#\x00') ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) ioctl$SG_SET_FORCE_PACK_ID(r3, 0x227b, &(0x7f0000000280)=0x1) readv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x57}], 0x1) tee(r4, r1, 0x0, 0x1) syz_open_dev$dspn(&(0x7f0000000200)='/dev/dsp#\x00', 0x4, 0x6000) 17:04:09 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x2) tkill(0x0, 0x0) 17:04:09 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b510100fffffffd}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:04:12 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x8001) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x100000001, 0x103) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x20}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r4 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) tkill(r4, 0x1000000000016) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{}, 0xfffffffffffffffc}) r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000340)="f5b22f62b30cc906fc9fe80eb0948c5d9f19deec9b9dc98efabfd9f2388aadafc25f47383ac8803d517868b5009cf5a601e873161665a6756db2c8118049a81374c1c58465592e20d0eccedd4b42b6d869726308948af7b5893dcab0cc43f1269587168fe086ac2ebc1885816a8899945017ec8f7b317a913a1dc1ef92e868cddc5b75ec2a4d37ae33d6ed92bdf6857250c6062efedb4d52086d08845953f61cf66805a5cb4320af9414a2783e9460bbf8c1239974a343e985b8d0bf25cc", 0xbe, 0x0) r6 = add_key$user(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000480)="51a5d0cf656a1a4597548739bacf1d56e82bc61b61e25d794d602481820f9374a5a12991bb1fb49fad9cd59167a7035ca8cc418e653c5c173c8492487f7153050f72f909f92ec5b0b560a66205c4ed9c27a19c94a7a112d2a994c0f0ada3d6506e3f7554b57850e2b5851241c43a97688b7b2fa7c254b78e7f68fbbd42a2bb8e250c7ba06334456f9bf9b8a5ffeedb35cd2ccd3b8de89b48a5364af47db84a46c332c8b72597ce24b7df81340d11dca7d9e2e2dd7f9402d388d89318044641648dc0258d0b39e9fce13dc72ea619e663daec73c92a8ba2bd4d6099ec53b632259a540fc0893a49ab01d1867724ca00671b4cb7", 0xf3, 0xffffffffffffffff) r7 = add_key(&(0x7f0000000580)='syzkaller\x00', &(0x7f00000005c0)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000600)="4199c04a01610dc7ba63f0acdbfc551a93d7b09709fe1487dd35d9b1a711467232f8c2669aade4e30811fcf37b0e408d8078eb71dd824dd01ca8766db82399ac4ca6e8c3639517560e10f0cc3f6483f863d19c5521441c7c4538904b700e98ae911d2dc83d9c3648196631a7f270b1f767c8f79e65b807e7f13374c5c43e42a39cd5a008fe024d235c36978134f9aeb52805b67bea4f47e281dfffca32cf31b2fbc4cebd5e2680423acd4528aa7bc3a5b85a2c8af1f355c758ee31c138d5320f42d903dc6574ac4c0575c8bee32f56b013a62f65efc012b94c2de6461a0fcfb7a704dca855da52363a7d0300095fe7c257ad34206f4fd8b842", 0xf9, 0xfffffffffffffffa) keyctl$dh_compute(0x17, &(0x7f0000000700)={r5, r6, r7}, &(0x7f0000000740)=""/4096, 0x1000, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000280)=0x1) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x57}], 0x1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000001c0)={0x2, r0}) 17:04:12 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000080)=ANY=[@ANYBLOB="cdae54d9e5a6fec5a058dab30e5a150adc09638c692ecc47fb8cb1d64d1bd872be918c5068da2f79beae7fce4eff15a8820692b7a8bb33baf17036e4e891279e7ceaa73df387cb5586a83dc79b1f5bc3531bed2234cd4d1410f383714a17a5e6f1e8c7"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000001040)={0x0, 0x0, 0x2080}) 17:04:12 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b51010000003b00}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:04:12 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b51010018000000}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:04:12 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r1 = request_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000100)="65746830255dc2656d302a00", 0xfffffffffffffff8) r2 = add_key$user(&(0x7f00000008c0)='user\x00', &(0x7f0000000900)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000940)="4ff165fcca0eb675f3c3d6469907959055dda67a0466fc59c3256ecec1ee46509dfbc458b1e166cf1dc165b707cf17608e4c1cd661c2811bcb2e9a8de6f85f8f1b72575b", 0x44, 0xfffffffffffffffc) keyctl$instantiate_iov(0x14, r1, &(0x7f0000000800)=[{&(0x7f0000000280)="66dd5d71e6612ae78ca0f4ab4f6dfcfc7b870493d138f9498067ccc8510c44d4ca88b3f4cd1c07a6e6069628c6436c17b0c31a83392a577251d25ce1fba4bb8fe2cce6f4bf411ee921325ebd85cdbc6377c6be299d28dfd942f4de6551ff92322d892fe95bdbc206eb9181e85b0cc172ff235efc0feb36e23a734cb90b9fd04a8ea7ea3aa2c657821ae7d3a049e09f0a67cb8270c70856d5038d918ad2a9772bc6e8defdcd7da4dd3362acd16de85fd0987ee8ce63421a27c0ca343e04e518b748791d0e8f3d09507e", 0xc9}, {&(0x7f0000000380)="9e8afc99b2451e16d835f35e805a250c5c26cbf89ebd4ab26ba1133ba6306f2953b130c0f380e1f375b01255ae092f3951dc1099a475689e115765d5957f94860bb883c494d18bc2821eac41f0f3a0b773905c951578ff5e5a558cfcd42cbaf8fd9f2285a226e758e6053169cb47ccafd4794ae5db823aa57dd3b821340ead27b093f81b1d037017f70aeb75914defbb6135d4ca3f2fef10c53b8dcba0b560c2bfcba62edd95255e2e0ff149377b8e58c162a846c25487cfeaf26856adc561c5ba99049f477604081316c7be31bec1bc8948c4c64ae0ffdedc2828adc849978b4effcb17747769533306b1fa50d9ab7f33", 0xf1}, {&(0x7f0000000480)="a141a00f4276ae4445b9fdeddced4d2d74893f58ebf808fa8032b6588bf0dd31569a99f5d7742a0f0d4ea2ea49ba4ec3f992744484df60e8bcff61c837daa6543a18146955ece3c2b032f041b6c11a6631c03870ec2625d9d1886f90da11c9e07a24c9a1c901deb0eef02a722ea84d466cb32cac32bed1deab4c9fc602285043faac8691adca23042b18ba40b1795bde5525cae120e4c1c6e53806c3656f5d5ff87b74567921f1771586f93e295d31505144c2c148be850d336c7db2ce049f71b69189f37a35b6d74fcea4549c2d79590adcd7c0fa4265b92809a65c697528e76c2d6ac34931ffe9", 0xe8}, {&(0x7f00000001c0)="468a45ab3c8d08099c07bc016ba1a6afe88ae032f9a0a460c42ff60c9c8bd2c2068bf5f5040c003eb0fa7859e9b89173098dac38dcd55fc3e21f427b23e254d200382afa44fdd80b61fe2d492d9c9ed97494c1e515acd78f41c228bc944b68d1ceb197aa3ed223e777ab6f13a48ce571f527ce7862df4fcfc8aef5", 0x7b}, {&(0x7f0000000140)="70790d1bd6ab7c", 0x7}, {&(0x7f0000000580)="a2d6bc5f5f0b14fc8798f9a1eb03b765984e46fa770e1a75f27832e944c4dba0fc42c020d10d5b510c1cc2130054bec4dc3986ba574579be117b", 0x3a}, {&(0x7f00000005c0)="31833ef6742663e26bb63d6dce85f346c851a31d17d5bb593aee657b51f18941979ee96ff8ab9e811f1b7d79cee71355db45815594b3639ac8d63156f0629146eadc4561ce35a69037df4cdc7b5e0feb6c7d18ced79588a12002696eb3310f108ec5028ed3203f43181a2a8369333cb75894cf28a263cf06ae19572ea2914c7f52d967d6f8e600ade1a4105b49fdf14424fcb7e88926da1177332a27745fd85a8c152bc34773220d6df7e70551b67f4b7f733229ee5ab4595e89d24ee274fcedeb1ea7bac1b6f0f7d7bec804fef8080116bf8d121600cc6dadadff4542e7bd9b7e77fcea78af2fb67770e3adcc1e86235d", 0xf1}, {&(0x7f00000006c0)="e92582d103fe9c08ce362845c08c2fb0035f5f8bdfb50a982345c9ae15fa2407f852d652d295286b161bcb60faf5fdd6dbe9b366a5d9b567a4a23483ee1e30973a1bafca99d95c2ef32ac5687ba627a23a567948d2cf9996c64dc189c25f32bf83c0acbc16301e753aadae61302e3f618d5ca3bb0d9eb4377253a2c6a118b87cc489f88e11bc6ec7b1e38d46933055ca6a071df8105575c0a4cb78b9adbc9db008f7d0f13d5cea9aa0f4397e4d2d98bfa48a917cb8261cb508a65979feecda5ab9530faedf2ffe72fa46ba8c4bbd232da248436cebd1925ffb1a50d14caf00c6fd3dd9d34ca9be002ff83c05da22208b405f2e680c87", 0xf6}, {&(0x7f00000007c0)="28fc69730db9be", 0x7}], 0x9, r2) semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff, 0x1000}], 0x1) tkill(0x0, 0x1000000000016) 17:04:12 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x20000, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x183003, 0x80) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x800000001400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r1 = gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1) tkill(r1, 0x1000000000016) [ 564.531951] vmwrite error: reg 6c0a value fffffe0000003000 (err 262144) [ 564.538847] CPU: 0 PID: 22714 Comm: syz-executor0 Not tainted 4.19.0-rc4+ #27 [ 564.546147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 564.555515] Call Trace: [ 564.558132] dump_stack+0x1c4/0x2b4 [ 564.561774] ? dump_stack_print_info.cold.2+0x52/0x52 [ 564.566976] ? kvm_arch_vcpu_load+0x247/0x970 [ 564.571481] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 564.576956] vmwrite_error+0x4c/0x60 [ 564.580684] vmx_vcpu_load+0xd10/0x1030 [ 564.584677] ? vmx_write_tsc_offset+0x680/0x680 [ 564.589355] ? check_preemption_disabled+0x48/0x200 [ 564.594379] ? graph_lock+0x170/0x170 [ 564.598190] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 564.603741] ? __perf_event_task_sched_in+0x2a9/0xb60 [ 564.608946] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 564.614504] ? find_held_lock+0x36/0x1c0 [ 564.619058] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 564.624608] ? vmx_sched_in+0xe0/0x600 [ 564.628513] kvm_arch_vcpu_load+0x247/0x970 [ 564.632844] ? trace_hardirqs_on+0xbd/0x310 [ 564.637174] ? kvm_arch_dev_ioctl+0x630/0x630 [ 564.641691] kvm_sched_in+0x82/0xa0 [ 564.645328] finish_task_switch+0x56e/0x900 [ 564.649655] ? __switch_to_asm+0x34/0x70 [ 564.653730] ? preempt_notifier_register+0x200/0x200 [ 564.658842] ? __switch_to_asm+0x34/0x70 [ 564.662911] ? __switch_to_asm+0x34/0x70 [ 564.666975] ? __switch_to_asm+0x40/0x70 [ 564.671037] ? __switch_to_asm+0x34/0x70 [ 564.675100] ? __switch_to_asm+0x40/0x70 [ 564.679183] ? __switch_to_asm+0x34/0x70 [ 564.683250] ? __switch_to_asm+0x40/0x70 [ 564.687320] ? __switch_to_asm+0x34/0x70 [ 564.691393] ? __switch_to_asm+0x34/0x70 [ 564.695458] ? __switch_to_asm+0x40/0x70 [ 564.699524] ? __switch_to_asm+0x34/0x70 [ 564.703593] ? __switch_to_asm+0x40/0x70 [ 564.707660] ? __switch_to_asm+0x34/0x70 [ 564.711724] ? __switch_to_asm+0x40/0x70 [ 564.715801] __schedule+0x874/0x1ed0 [ 564.719555] ? __sched_text_start+0x8/0x8 [ 564.723714] ? check_preemption_disabled+0x48/0x200 [ 564.728748] ? find_held_lock+0x36/0x1c0 [ 564.732825] ? try_to_wake_up+0x10a/0x12f0 [ 564.737068] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 564.742193] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 564.747311] ? lockdep_hardirqs_on+0x421/0x5c0 [ 564.751904] ? preempt_schedule+0x4d/0x60 [ 564.756068] preempt_schedule_common+0x1f/0xd0 [ 564.760673] preempt_schedule+0x4d/0x60 [ 564.764655] ___preempt_schedule+0x16/0x18 [ 564.768903] _raw_spin_unlock_irqrestore+0xbb/0xd0 [ 564.773840] try_to_wake_up+0x10a/0x12f0 [ 564.777905] ? __mutex_lock+0x85e/0x1700 [ 564.781969] ? queue_delayed_work_on+0xec/0x1f0 [ 564.786653] ? migrate_swap_stop+0x930/0x930 [ 564.791073] ? find_held_lock+0x36/0x1c0 [ 564.795168] ? futex_wake+0x613/0x760 [ 564.798980] ? lock_downgrade+0x900/0x900 [ 564.803160] ? kasan_check_read+0x11/0x20 [ 564.807319] ? do_raw_spin_unlock+0xa7/0x2f0 [ 564.811734] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 564.816327] ? __unqueue_futex+0x2e0/0x2e0 [ 564.820576] wake_up_q+0xa4/0x100 [ 564.824042] futex_wake+0x61f/0x760 [ 564.827685] ? get_futex_key+0x21b0/0x21b0 [ 564.831935] ? rcu_lockdep_current_cpu_online+0x1f0/0x2d0 [ 564.837480] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 564.842770] ? rcu_pm_notify+0xc0/0xc0 [ 564.846705] do_futex+0x2e4/0x26d0 [ 564.850265] ? kvm_vcpu_ioctl+0x2a1/0x1150 [ 564.854522] ? exit_robust_list+0x280/0x280 [ 564.858848] ? find_held_lock+0x36/0x1c0 [ 564.862922] ? __fget+0x4aa/0x740 [ 564.866399] ? lock_downgrade+0x900/0x900 [ 564.870562] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 564.876376] ? kasan_check_read+0x11/0x20 [ 564.880548] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 564.885848] ? rcu_bh_qs+0xc0/0xc0 [ 564.889413] ? __fget+0x4d1/0x740 [ 564.892882] ? ksys_dup3+0x680/0x680 [ 564.896637] ? __bpf_trace_initcall_finish+0x2a/0x30 [ 564.901764] ? trace_hardirqs_off+0xb8/0x310 [ 564.906194] ? kvm_vcpu_block+0x1030/0x1030 [ 564.910526] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 564.916080] ? do_vfs_ioctl+0x201/0x1720 [ 564.920162] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 564.925374] ? ioctl_preallocate+0x300/0x300 [ 564.929798] ? selinux_file_mprotect+0x620/0x620 [ 564.934564] ? path_mountpoint+0x51e/0x2190 [ 564.938892] ? rcu_read_lock_sched_held+0x108/0x120 [ 564.943917] ? kmem_cache_free+0x24f/0x290 [ 564.948167] __x64_sys_futex+0x472/0x6a0 [ 564.952242] ? do_futex+0x26d0/0x26d0 [ 564.956046] ? trace_hardirqs_on+0xbd/0x310 [ 564.960546] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 564.966091] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 564.971481] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 564.976944] ? ksys_ioctl+0x81/0xd0 [ 564.980588] do_syscall_64+0x1b9/0x820 [ 564.984487] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 564.989868] ? syscall_return_slowpath+0x5e0/0x5e0 [ 564.994809] ? trace_hardirqs_on_caller+0x310/0x310 [ 565.000110] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 565.005148] ? recalc_sigpending_tsk+0x180/0x180 [ 565.009919] ? kasan_check_write+0x14/0x20 [ 565.014171] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 565.019037] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 565.024239] RIP: 0033:0x457679 [ 565.027443] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 565.046357] RSP: 002b:00007fe3b1d6ecf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 565.054343] RAX: ffffffffffffffda RBX: 000000000072bf08 RCX: 0000000000457679 [ 565.061622] RDX: 0000000000000007 RSI: 0000000000000081 RDI: 000000000072bf0c [ 565.068906] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 565.076190] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000072bf0c [ 565.083476] R13: 00007ffc9d5355df R14: 00007fe3b1d6f9c0 R15: 0000000000000000 [ 565.091336] vmwrite error: reg 6c0c value fffffe0000001000 (err 262144) [ 565.098214] CPU: 0 PID: 22714 Comm: syz-executor0 Not tainted 4.19.0-rc4+ #27 [ 565.105507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 565.114881] Call Trace: [ 565.117486] dump_stack+0x1c4/0x2b4 [ 565.121144] ? dump_stack_print_info.cold.2+0x52/0x52 [ 565.126357] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 565.131830] vmwrite_error+0x4c/0x60 [ 565.135559] vmx_vcpu_load+0xcf9/0x1030 [ 565.139553] ? vmx_write_tsc_offset+0x680/0x680 [ 565.144239] ? check_preemption_disabled+0x48/0x200 [ 565.149275] ? graph_lock+0x170/0x170 [ 565.153094] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 565.158666] ? __perf_event_task_sched_in+0x2a9/0xb60 [ 565.163873] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 565.169437] ? find_held_lock+0x36/0x1c0 [ 565.173524] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 565.179075] ? vmx_sched_in+0xe0/0x600 [ 565.182993] kvm_arch_vcpu_load+0x247/0x970 [ 565.187325] ? trace_hardirqs_on+0xbd/0x310 [ 565.191664] ? kvm_arch_dev_ioctl+0x630/0x630 [ 565.196183] kvm_sched_in+0x82/0xa0 [ 565.199823] finish_task_switch+0x56e/0x900 [ 565.204159] ? __switch_to_asm+0x34/0x70 [ 565.208239] ? preempt_notifier_register+0x200/0x200 [ 565.213353] ? __switch_to_asm+0x34/0x70 [ 565.217423] ? __switch_to_asm+0x34/0x70 [ 565.221489] ? __switch_to_asm+0x40/0x70 [ 565.225555] ? __switch_to_asm+0x34/0x70 [ 565.229628] ? __switch_to_asm+0x40/0x70 [ 565.233695] ? __switch_to_asm+0x34/0x70 [ 565.237759] ? __switch_to_asm+0x40/0x70 [ 565.241824] ? __switch_to_asm+0x34/0x70 [ 565.245895] ? __switch_to_asm+0x34/0x70 [ 565.249966] ? __switch_to_asm+0x40/0x70 [ 565.254034] ? __switch_to_asm+0x34/0x70 [ 565.258098] ? __switch_to_asm+0x40/0x70 [ 565.262178] ? __switch_to_asm+0x34/0x70 [ 565.266244] ? __switch_to_asm+0x40/0x70 [ 565.270321] __schedule+0x874/0x1ed0 [ 565.274054] ? __sched_text_start+0x8/0x8 [ 565.278213] ? check_preemption_disabled+0x48/0x200 [ 565.283255] ? find_held_lock+0x36/0x1c0 [ 565.287331] ? try_to_wake_up+0x10a/0x12f0 [ 565.291583] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 565.296711] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 565.301827] ? lockdep_hardirqs_on+0x421/0x5c0 [ 565.306425] ? preempt_schedule+0x4d/0x60 [ 565.310588] preempt_schedule_common+0x1f/0xd0 [ 565.315186] preempt_schedule+0x4d/0x60 [ 565.319181] ___preempt_schedule+0x16/0x18 [ 565.323446] _raw_spin_unlock_irqrestore+0xbb/0xd0 [ 565.328403] try_to_wake_up+0x10a/0x12f0 [ 565.332485] ? __mutex_lock+0x85e/0x1700 [ 565.336566] ? queue_delayed_work_on+0xec/0x1f0 [ 565.341262] ? migrate_swap_stop+0x930/0x930 [ 565.345693] ? find_held_lock+0x36/0x1c0 [ 565.349780] ? futex_wake+0x613/0x760 [ 565.353601] ? lock_downgrade+0x900/0x900 [ 565.357779] ? kasan_check_read+0x11/0x20 [ 565.361942] ? do_raw_spin_unlock+0xa7/0x2f0 [ 565.366365] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 565.370964] ? __unqueue_futex+0x2e0/0x2e0 [ 565.375218] wake_up_q+0xa4/0x100 [ 565.378690] futex_wake+0x61f/0x760 [ 565.382343] ? get_futex_key+0x21b0/0x21b0 [ 565.386599] ? rcu_lockdep_current_cpu_online+0x1f0/0x2d0 [ 565.392163] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 565.397464] ? rcu_pm_notify+0xc0/0xc0 [ 565.401382] do_futex+0x2e4/0x26d0 [ 565.404942] ? kvm_vcpu_ioctl+0x2a1/0x1150 [ 565.409205] ? exit_robust_list+0x280/0x280 [ 565.413539] ? find_held_lock+0x36/0x1c0 [ 565.417626] ? __fget+0x4aa/0x740 [ 565.421097] ? lock_downgrade+0x900/0x900 [ 565.425288] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 565.431120] ? kasan_check_read+0x11/0x20 [ 565.435292] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 565.440594] ? rcu_bh_qs+0xc0/0xc0 [ 565.444169] ? __fget+0x4d1/0x740 [ 565.447644] ? ksys_dup3+0x680/0x680 [ 565.451372] ? __bpf_trace_initcall_finish+0x2a/0x30 [ 565.456496] ? trace_hardirqs_off+0xb8/0x310 [ 565.460928] ? kvm_vcpu_block+0x1030/0x1030 [ 565.465266] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 565.470821] ? do_vfs_ioctl+0x201/0x1720 [ 565.474898] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 565.480123] ? ioctl_preallocate+0x300/0x300 [ 565.484553] ? selinux_file_mprotect+0x620/0x620 [ 565.489325] ? path_mountpoint+0x51e/0x2190 [ 565.493662] ? rcu_read_lock_sched_held+0x108/0x120 [ 565.498699] ? kmem_cache_free+0x24f/0x290 [ 565.502955] __x64_sys_futex+0x472/0x6a0 [ 565.507039] ? do_futex+0x26d0/0x26d0 [ 565.510860] ? trace_hardirqs_on+0xbd/0x310 [ 565.515198] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 565.520756] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 565.526155] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 565.531623] ? ksys_ioctl+0x81/0xd0 [ 565.535278] do_syscall_64+0x1b9/0x820 [ 565.539180] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 565.544562] ? syscall_return_slowpath+0x5e0/0x5e0 [ 565.549508] ? trace_hardirqs_on_caller+0x310/0x310 [ 565.554542] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 565.559573] ? recalc_sigpending_tsk+0x180/0x180 [ 565.564347] ? kasan_check_write+0x14/0x20 [ 565.568609] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 565.573478] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 565.578680] RIP: 0033:0x457679 [ 565.581882] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 565.600799] RSP: 002b:00007fe3b1d6ecf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 565.608528] RAX: ffffffffffffffda RBX: 000000000072bf08 RCX: 0000000000457679 [ 565.616176] RDX: 0000000000000007 RSI: 0000000000000081 RDI: 000000000072bf0c [ 565.623461] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 565.630750] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000072bf0c [ 565.638036] R13: 00007ffc9d5355df R14: 00007fe3b1d6f9c0 R15: 0000000000000000 [ 565.645436] vmwrite error: reg 6c10 value fffffe0000002200 (err 262144) [ 565.652262] CPU: 0 PID: 22714 Comm: syz-executor0 Not tainted 4.19.0-rc4+ #27 [ 565.659551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 565.668917] Call Trace: [ 565.671522] dump_stack+0x1c4/0x2b4 [ 565.675171] ? dump_stack_print_info.cold.2+0x52/0x52 [ 565.680386] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 565.685863] vmwrite_error+0x4c/0x60 [ 565.689596] vmx_vcpu_load+0xd27/0x1030 [ 565.693599] ? vmx_write_tsc_offset+0x680/0x680 [ 565.698287] ? check_preemption_disabled+0x48/0x200 [ 565.703326] ? graph_lock+0x170/0x170 [ 565.707158] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 565.712721] ? __perf_event_task_sched_in+0x2a9/0xb60 [ 565.717940] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 565.723518] ? find_held_lock+0x36/0x1c0 [ 565.727615] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 565.733209] ? vmx_sched_in+0xe0/0x600 17:04:13 executing program 2 (fault-call:5 fault-nth:0): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) gettid() semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x2) tkill(0x0, 0x0) 17:04:13 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b51010000008200}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) 17:04:13 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b5101001c010000}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) [ 565.737156] kvm_arch_vcpu_load+0x247/0x970 [ 565.741512] ? trace_hardirqs_on+0xbd/0x310 [ 565.745863] ? kvm_arch_dev_ioctl+0x630/0x630 [ 565.750956] kvm_sched_in+0x82/0xa0 [ 565.754612] finish_task_switch+0x56e/0x900 [ 565.758960] ? __switch_to_asm+0x34/0x70 [ 565.763050] ? preempt_notifier_register+0x200/0x200 [ 565.768173] ? __switch_to_asm+0x34/0x70 [ 565.772262] ? __switch_to_asm+0x34/0x70 [ 565.776346] ? __switch_to_asm+0x40/0x70 [ 565.780428] ? __switch_to_asm+0x34/0x70 17:04:13 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b51010000009f00}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x7]}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) r3 = getuid() write$UHID_CREATE2(r1, &(0x7f00000004c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6f, 0xffff, 0x5de, 0x21dcaaee, 0x7, 0x2, "8ce9fec683f4450f1bb12b887ad7bc2d29596660f42ccb85a0f11a21e09107cd1ea5d7081b811073b78b430932098ce5358117423ff7a015692416901159bc7ab5da1f36cfb8ca957437324361fb655bdc05df27876d28cee005ace7d6bfe46f51f7a557d7c7751974c41ecaf0fd84"}, 0x187) ioprio_set$uid(0x3, r3, 0x401) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000000a680)={0x0, 0xa7, "60b6a8b35e742d1b46e7a22bdd40b6aac562023f1ab850bf3b9e013d43eee0ea7276e6a6ac4ecc3af102e1ad9e07e84a7d78e269a558c222ba2aeacbfa22f711efb5881a6ed6d96066eba44350d130535721fa824ec72a87bfca10636e709ebc78ee59e3639f7b65af1cf2fb1582230bff76c60f05de72c1e687d6c4f4a73955b9057e460e1ef17d151687fe11dc964d749abba7b4065823d051284bba00a9a0ac6dcc7e7264a5"}, &(0x7f000000a740)=0xaf) [ 565.784502] ? __switch_to_asm+0x40/0x70 [ 565.788579] ? __switch_to_asm+0x34/0x70 [ 565.792655] ? __switch_to_asm+0x40/0x70 [ 565.796730] ? __switch_to_asm+0x34/0x70 [ 565.800808] ? __switch_to_asm+0x34/0x70 [ 565.804888] ? __switch_to_asm+0x40/0x70 [ 565.808975] ? __switch_to_asm+0x34/0x70 [ 565.813053] ? __switch_to_asm+0x40/0x70 [ 565.817145] ? __switch_to_asm+0x34/0x70 [ 565.821223] ? __switch_to_asm+0x40/0x70 [ 565.825306] __schedule+0x874/0x1ed0 [ 565.829046] ? __sched_text_start+0x8/0x8 [ 565.833210] ? check_preemption_disabled+0x48/0x200 [ 565.838255] ? find_held_lock+0x36/0x1c0 [ 565.842338] ? try_to_wake_up+0x10a/0x12f0 [ 565.846586] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 565.851705] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 565.856820] ? lockdep_hardirqs_on+0x421/0x5c0 [ 565.861411] ? preempt_schedule+0x4d/0x60 [ 565.865572] preempt_schedule_common+0x1f/0xd0 [ 565.870171] preempt_schedule+0x4d/0x60 [ 565.874163] ___preempt_schedule+0x16/0x18 [ 565.878424] _raw_spin_unlock_irqrestore+0xbb/0xd0 [ 565.883371] try_to_wake_up+0x10a/0x12f0 [ 565.887447] ? __mutex_lock+0x85e/0x1700 [ 565.891519] ? queue_delayed_work_on+0xec/0x1f0 [ 565.896213] ? migrate_swap_stop+0x930/0x930 [ 565.900636] ? find_held_lock+0x36/0x1c0 [ 565.904720] ? futex_wake+0x613/0x760 [ 565.908535] ? lock_downgrade+0x900/0x900 [ 565.912705] ? kasan_check_read+0x11/0x20 [ 565.916867] ? do_raw_spin_unlock+0xa7/0x2f0 [ 565.921289] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 565.925883] ? __unqueue_futex+0x2e0/0x2e0 [ 565.930145] wake_up_q+0xa4/0x100 [ 565.933615] futex_wake+0x61f/0x760 [ 565.937268] ? get_futex_key+0x21b0/0x21b0 [ 565.941524] ? rcu_lockdep_current_cpu_online+0x1f0/0x2d0 [ 565.947085] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 565.952402] ? rcu_pm_notify+0xc0/0xc0 [ 565.956326] do_futex+0x2e4/0x26d0 [ 565.959898] ? kvm_vcpu_ioctl+0x2a1/0x1150 [ 565.964180] ? exit_robust_list+0x280/0x280 [ 565.968525] ? find_held_lock+0x36/0x1c0 [ 565.972613] ? __fget+0x4aa/0x740 [ 565.976085] ? lock_downgrade+0x900/0x900 [ 565.980268] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 565.986082] ? kasan_check_read+0x11/0x20 [ 565.990266] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 565.995589] ? rcu_bh_qs+0xc0/0xc0 [ 565.999168] ? __fget+0x4d1/0x740 [ 566.002646] ? ksys_dup3+0x680/0x680 [ 566.006408] ? __bpf_trace_initcall_finish+0x2a/0x30 [ 566.011532] ? trace_hardirqs_off+0xb8/0x310 [ 566.015991] ? kvm_vcpu_block+0x1030/0x1030 [ 566.020334] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 566.025888] ? do_vfs_ioctl+0x201/0x1720 [ 566.029969] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 566.035186] ? ioctl_preallocate+0x300/0x300 [ 566.039616] ? selinux_file_mprotect+0x620/0x620 [ 566.044394] ? path_mountpoint+0x51e/0x2190 [ 566.048732] ? rcu_read_lock_sched_held+0x108/0x120 [ 566.053765] ? kmem_cache_free+0x24f/0x290 [ 566.058018] __x64_sys_futex+0x472/0x6a0 [ 566.062095] ? do_futex+0x26d0/0x26d0 [ 566.065920] ? trace_hardirqs_on+0xbd/0x310 [ 566.070251] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 566.075796] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 566.081195] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 566.086678] ? ksys_ioctl+0x81/0xd0 [ 566.090325] do_syscall_64+0x1b9/0x820 [ 566.094245] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 566.099624] ? syscall_return_slowpath+0x5e0/0x5e0 [ 566.104570] ? trace_hardirqs_on_caller+0x310/0x310 [ 566.109601] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 566.114627] ? recalc_sigpending_tsk+0x180/0x180 [ 566.119399] ? kasan_check_write+0x14/0x20 [ 566.123653] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 566.128522] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 566.133721] RIP: 0033:0x457679 [ 566.136921] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 566.155830] RSP: 002b:00007fe3b1d6ecf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 566.163555] RAX: ffffffffffffffda RBX: 000000000072bf08 RCX: 0000000000457679 [ 566.170841] RDX: 0000000000000007 RSI: 0000000000000081 RDI: 000000000072bf0c [ 566.178140] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 566.185429] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000072bf0c [ 566.192717] R13: 00007ffc9d5355df R14: 00007fe3b1d6f9c0 R15: 0000000000000000 [ 566.200191] kasan: CONFIG_KASAN_INLINE enabled [ 566.204855] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 566.212301] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 566.218552] CPU: 0 PID: 22714 Comm: syz-executor0 Not tainted 4.19.0-rc4+ #27 [ 566.225824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 566.235286] RIP: 0010:kvm_lapic_hv_timer_in_use+0x56/0xd0 [ 566.240841] Code: c1 ea 03 80 3c 02 00 75 7a 48 8b 9b e0 03 00 00 e8 cf 7a 66 00 48 8d 7b 7c 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 04 02 48 89 fa 83 e2 07 38 d0 7f 04 84 c0 75 51 0f b6 5b 7c [ 566.259754] RSP: 0018:ffff880190cdf098 EFLAGS: 00010207 [ 566.265141] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc90002aea000 [ 566.272421] RDX: 000000000000000f RSI: ffffffff811859b1 RDI: 000000000000007c [ 566.279701] RBP: ffff880190cdf0a0 R08: ffff88018ca50380 R09: ffffed0031b76c6c [ 566.286979] R10: ffffed0031b76c6c R11: ffff88018dbb6367 R12: 0000000000000000 [ 566.294257] R13: 1ffff1003219be1a R14: 0000000000000000 R15: ffff88018dbb0860 [ 566.301535] FS: 00007fe3b1d6f700(0000) GS:ffff8801dae00000(0000) knlGS:0000000000000000 [ 566.309791] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 566.315684] CR2: 00000000004edbb8 CR3: 00000001bf012000 CR4: 00000000001426f0 [ 566.322966] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 566.330242] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 566.337513] Call Trace: [ 566.340127] kvm_arch_vcpu_load+0x516/0x970 [ 566.344457] ? trace_hardirqs_on+0xbd/0x310 [ 566.348789] ? kvm_arch_dev_ioctl+0x630/0x630 [ 566.353298] kvm_sched_in+0x82/0xa0 [ 566.356932] finish_task_switch+0x56e/0x900 [ 566.361260] ? __switch_to_asm+0x34/0x70 [ 566.365335] ? preempt_notifier_register+0x200/0x200 [ 566.370446] ? __switch_to_asm+0x34/0x70 [ 566.374513] ? __switch_to_asm+0x34/0x70 [ 566.378575] ? __switch_to_asm+0x40/0x70 [ 566.382639] ? __switch_to_asm+0x34/0x70 [ 566.386704] ? __switch_to_asm+0x40/0x70 [ 566.390764] ? __switch_to_asm+0x34/0x70 [ 566.394825] ? __switch_to_asm+0x40/0x70 [ 566.398884] ? __switch_to_asm+0x34/0x70 [ 566.402949] ? __switch_to_asm+0x34/0x70 [ 566.407015] ? __switch_to_asm+0x40/0x70 [ 566.411122] ? __switch_to_asm+0x34/0x70 [ 566.415199] ? __switch_to_asm+0x40/0x70 [ 566.419268] ? __switch_to_asm+0x34/0x70 [ 566.423331] ? __switch_to_asm+0x40/0x70 [ 566.427400] __schedule+0x874/0x1ed0 [ 566.431135] ? __sched_text_start+0x8/0x8 [ 566.435290] ? check_preemption_disabled+0x48/0x200 [ 566.440325] ? find_held_lock+0x36/0x1c0 [ 566.444394] ? try_to_wake_up+0x10a/0x12f0 [ 566.448639] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 566.453747] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 566.458861] ? lockdep_hardirqs_on+0x421/0x5c0 [ 566.463447] ? preempt_schedule+0x4d/0x60 [ 566.467604] preempt_schedule_common+0x1f/0xd0 [ 566.472197] preempt_schedule+0x4d/0x60 [ 566.476175] ___preempt_schedule+0x16/0x18 [ 566.480422] _raw_spin_unlock_irqrestore+0xbb/0xd0 [ 566.485359] try_to_wake_up+0x10a/0x12f0 [ 566.489421] ? __mutex_lock+0x85e/0x1700 [ 566.493485] ? queue_delayed_work_on+0xec/0x1f0 [ 566.498167] ? migrate_swap_stop+0x930/0x930 [ 566.502582] ? find_held_lock+0x36/0x1c0 [ 566.506656] ? futex_wake+0x613/0x760 [ 566.510470] ? lock_downgrade+0x900/0x900 [ 566.514641] ? kasan_check_read+0x11/0x20 [ 566.518802] ? do_raw_spin_unlock+0xa7/0x2f0 [ 566.523222] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 566.527815] ? __unqueue_futex+0x2e0/0x2e0 [ 566.532064] wake_up_q+0xa4/0x100 [ 566.535526] futex_wake+0x61f/0x760 [ 566.539165] ? get_futex_key+0x21b0/0x21b0 [ 566.543417] ? rcu_lockdep_current_cpu_online+0x1f0/0x2d0 [ 566.548971] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 566.554263] ? rcu_pm_notify+0xc0/0xc0 [ 566.558165] do_futex+0x2e4/0x26d0 [ 566.561717] ? kvm_vcpu_ioctl+0x2a1/0x1150 [ 566.565967] ? exit_robust_list+0x280/0x280 [ 566.570295] ? find_held_lock+0x36/0x1c0 [ 566.574365] ? __fget+0x4aa/0x740 [ 566.577824] ? lock_downgrade+0x900/0x900 [ 566.581984] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 566.587786] ? kasan_check_read+0x11/0x20 [ 566.591944] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 566.597230] ? rcu_bh_qs+0xc0/0xc0 [ 566.600785] ? __fget+0x4d1/0x740 [ 566.604251] ? ksys_dup3+0x680/0x680 [ 566.607976] ? __bpf_trace_initcall_finish+0x2a/0x30 [ 566.613089] ? trace_hardirqs_off+0xb8/0x310 [ 566.618007] ? kvm_vcpu_block+0x1030/0x1030 [ 566.622336] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 566.627882] ? do_vfs_ioctl+0x201/0x1720 [ 566.631950] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 566.637166] ? ioctl_preallocate+0x300/0x300 [ 566.641587] ? selinux_file_mprotect+0x620/0x620 [ 566.646357] ? path_mountpoint+0x51e/0x2190 [ 566.650688] ? rcu_read_lock_sched_held+0x108/0x120 [ 566.655714] ? kmem_cache_free+0x24f/0x290 [ 566.659960] __x64_sys_futex+0x472/0x6a0 [ 566.664030] ? do_futex+0x26d0/0x26d0 [ 566.667834] ? trace_hardirqs_on+0xbd/0x310 [ 566.672165] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 566.677710] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 566.683085] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 566.688554] ? ksys_ioctl+0x81/0xd0 [ 566.692191] do_syscall_64+0x1b9/0x820 [ 566.696082] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 566.701465] ? syscall_return_slowpath+0x5e0/0x5e0 [ 566.706402] ? trace_hardirqs_on_caller+0x310/0x310 [ 566.711423] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 566.716442] ? recalc_sigpending_tsk+0x180/0x180 [ 566.721213] ? kasan_check_write+0x14/0x20 [ 566.725463] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 566.730321] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 566.735520] RIP: 0033:0x457679 [ 566.738724] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 566.757631] RSP: 002b:00007fe3b1d6ecf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 566.765352] RAX: ffffffffffffffda RBX: 000000000072bf08 RCX: 0000000000457679 [ 566.772628] RDX: 0000000000000007 RSI: 0000000000000081 RDI: 000000000072bf0c [ 566.779904] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 566.787176] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000072bf0c [ 566.794448] R13: 00007ffc9d5355df R14: 00007fe3b1d6f9c0 R15: 0000000000000000 [ 566.801725] Modules linked in: [ 566.805042] ---[ end trace 7d389203ea957b19 ]--- [ 566.806922] FAULT_INJECTION: forcing a failure. [ 566.806922] name failslab, interval 1, probability 0, space 0, times 0 [ 566.809831] RIP: 0010:kvm_lapic_hv_timer_in_use+0x56/0xd0 [ 566.809848] Code: c1 ea 03 80 3c 02 00 75 7a 48 8b 9b e0 03 00 00 e8 cf 7a 66 00 48 8d 7b 7c 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 04 02 48 89 fa 83 e2 07 38 d0 7f 04 84 c0 75 51 0f b6 5b 7c [ 566.809855] RSP: 0018:ffff880190cdf098 EFLAGS: 00010207 [ 566.826542] CPU: 1 PID: 22725 Comm: syz-executor2 Tainted: G D 4.19.0-rc4+ #27 [ 566.826706] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc90002aea000 [ 566.845593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 566.845598] Call Trace: [ 566.845628] dump_stack+0x1c4/0x2b4 [ 566.845651] ? dump_stack_print_info.cold.2+0x52/0x52 [ 566.851013] RDX: 000000000000000f RSI: ffffffff811859b1 RDI: 000000000000007c [ 566.859680] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 566.859695] ? __perf_event_task_sched_in+0x2a9/0xb60 [ 566.859714] should_fail.cold.4+0xa/0x17 [ 566.859734] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 566.867031] RBP: ffff880190cdf0a0 R08: ffff88018ca50380 R09: ffffed0031b76c6c [ 566.876369] ? mark_held_locks+0x130/0x130 [ 566.876384] ? mark_held_locks+0x130/0x130 [ 566.876404] ? trace_hardirqs_on+0xbd/0x310 [ 566.878980] R10: ffffed0031b76c6c R11: ffff88018dbb6367 R12: 0000000000000000 [ 566.882597] ? kasan_check_read+0x11/0x20 [ 566.882621] ? finish_task_switch+0x1f5/0x900 [ 566.882641] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 566.887823] R13: 1ffff1003219be1a R14: 0000000000000000 R15: ffff88018dbb0860 [ 566.895096] ? compat_start_thread+0x80/0x80 [ 566.895122] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 566.895138] ? fs_reclaim_acquire+0x20/0x20 [ 566.895157] ? lock_downgrade+0x900/0x900 [ 566.900691] FS: 00007fe3b1d6f700(0000) GS:ffff8801dae00000(0000) knlGS:0000000000000000 [ 566.905873] ? ___might_sleep+0x1ed/0x300 [ 566.905887] ? arch_local_save_flags+0x40/0x40 [ 566.905901] ? rcuwait_wake_up+0x1a1/0x2f0 [ 566.905919] ? __switch_to_asm+0x40/0x70 [ 566.909968] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 566.915066] __should_failslab+0x124/0x180 [ 566.915084] should_failslab+0x9/0x14 [ 566.915115] kmem_cache_alloc+0x2be/0x730 [ 566.922409] CR2: 00000000004edbb8 CR3: 00000001bf012000 CR4: 00000000001426f0 [ 566.926620] ? lock_downgrade+0x900/0x900 [ 566.930825] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 566.935154] taskstats_exit+0x7cd/0xed0 [ 566.935170] ? acct_collect+0x70c/0x860 [ 566.935190] ? taskstats_user_cmd+0x1100/0x1100 [ 566.942478] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 566.946603] ? trace_hardirqs_on+0xbd/0x310 [ 566.951072] Kernel panic - not syncing: Fatal exception [ 566.956526] ? kasan_check_read+0x11/0x20 [ 567.077854] ? acct_collect+0x70c/0x860 [ 567.081837] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 567.087301] ? kasan_check_write+0x14/0x20 [ 567.091542] ? do_raw_spin_lock+0xc1/0x200 [ 567.095786] ? _raw_spin_unlock_irq+0x60/0x80 [ 567.100289] ? acct_collect+0x70c/0x860 [ 567.104273] do_exit+0x527/0x2610 [ 567.107734] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 567.113550] ? mm_update_next_owner+0x990/0x990 [ 567.118235] ? kasan_check_write+0x14/0x20 [ 567.122478] ? do_raw_spin_lock+0xc1/0x200 [ 567.126720] ? kasan_unpoison_shadow+0x35/0x50 [ 567.131309] ? __asan_unpoison_stack_memory+0x9/0x10 [ 567.136420] ? do_semtimedop+0x4b5/0x4b10 [ 567.140588] ? semctl_setval+0xfe0/0xfe0 [ 567.144668] ? __lock_acquire+0x7ec/0x4ec0 [ 567.148915] ? mark_held_locks+0x130/0x130 [ 567.153160] ? __lock_acquire+0x7ec/0x4ec0 [ 567.157399] ? print_usage_bug+0xc0/0xc0 [ 567.161472] ? rcu_bh_qs+0xc0/0xc0 [ 567.165021] ? dput.part.26+0x241/0x790 [ 567.169003] ? lock_downgrade+0x900/0x900 [ 567.173160] ? check_preemption_disabled+0x48/0x200 [ 567.178201] ? mark_held_locks+0x130/0x130 [ 567.182448] ? print_usage_bug+0xc0/0xc0 [ 567.186522] ? __lock_acquire+0x7ec/0x4ec0 [ 567.190768] ? graph_lock+0x170/0x170 [ 567.194584] ? dput.part.26+0x26d/0x790 [ 567.198580] ? graph_lock+0x170/0x170 [ 567.202400] ? graph_lock+0x170/0x170 [ 567.206210] ? memset+0x31/0x40 [ 567.209520] ? __dequeue_signal+0xf9/0x7d0 [ 567.213770] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 567.219321] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 567.224869] ? get_signal+0x95b/0x1980 [ 567.228786] ? lock_downgrade+0x900/0x900 [ 567.232949] do_group_exit+0x177/0x440 [ 567.236848] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 567.242310] ? __ia32_sys_exit+0x50/0x50 [ 567.246380] ? kasan_check_write+0x14/0x20 [ 567.250628] ? do_raw_spin_lock+0xc1/0x200 [ 567.254877] get_signal+0x8b0/0x1980 [ 567.258600] ? ptrace_notify+0x130/0x130 [ 567.262678] ? __f_unlock_pos+0x19/0x20 [ 567.266656] ? lock_downgrade+0x900/0x900 [ 567.270810] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 567.276354] ? proc_fail_nth_write+0x9e/0x210 [ 567.280860] do_signal+0x9c/0x21e0 [ 567.284411] ? kasan_check_write+0x14/0x20 [ 567.288659] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 567.293600] ? setup_sigcontext+0x7d0/0x7d0 [ 567.297934] ? __lock_is_held+0xb5/0x140 [ 567.302009] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 567.307555] ? check_preemption_disabled+0x48/0x200 [ 567.312588] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 567.318156] ? fput+0x130/0x1a0 [ 567.321444] ? do_syscall_64+0x9a/0x820 [ 567.325426] ? do_syscall_64+0x9a/0x820 [ 567.329409] exit_to_usermode_loop+0x2e5/0x380 [ 567.334004] ? syscall_slow_exit_work+0x520/0x520 [ 567.338865] do_syscall_64+0x6be/0x820 [ 567.342756] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 567.348135] ? syscall_return_slowpath+0x5e0/0x5e0 [ 567.353076] ? trace_hardirqs_on_caller+0x310/0x310 [ 567.358115] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 567.363142] ? recalc_sigpending_tsk+0x180/0x180 [ 567.367907] ? kasan_check_write+0x14/0x20 [ 567.372156] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 567.377013] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 567.382206] RIP: 0033:0x457679 [ 567.385409] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 567.404320] RSP: 002b:00007fcdef780c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000041 [ 567.412071] RAX: fffffffffffffffc RBX: 00007fcdef7816d4 RCX: 0000000000457679 [ 567.419357] RDX: 0000000000000002 RSI: 0000000020000040 RDI: 0000000000000000 [ 567.426638] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 567.433919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 567.441216] R13: 00000000004d50a0 R14: 00000000004c3501 R15: 0000000000000000 [ 567.449570] Kernel Offset: disabled [ 567.453214] Rebooting in 86400 seconds..