ffffa) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r8 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r6, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) dup2(r9, r7) 08:43:27 executing program 5: syz_mount_image$xfs(&(0x7f0000000100)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 08:43:27 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x8000, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000180)={0x0, 0x6, 0x1000000000000, 0x101, 0x2, 0x80000000, 0x9, 0x7fff, 0xffff, 0x80000000, 0xfffffffffffffffc}) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}) r1 = syz_open_pts(0xffffffffffffffff, 0x40000) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) close(0xffffffffffffffff) 08:43:27 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r8 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r6, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) dup2(r9, r7) 08:43:27 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) r6 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) keyctl$describe(0x6, r6, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r9 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r7, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r9, 0x1276, 0x0) dup2(r10, r8) [ 353.184301] XFS (loop5): Invalid superblock magic number 08:43:27 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000000c0)=0x1) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0xfffffffffffffe8e}], 0x1) 08:43:27 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="160100010702000d90e90175692765553922ab521f47c86780b716684e817cbedcc714084a799d627a7536c80812924eda06583378d4555aee3baef8280e52138c42894f57b8c3df35820dc4eba1b9fb8b071163581bbc497989637e78fedcad22bff8698e6047c98c0f3ed7249e531d0600d7c3be7c7442f73b4a3e50cddb671888f6cad0237600020000d780e4a40e64604e82108c2613456f44af1b8cf90c59e77fb669eb32a01d000000000000000000000000002f3300da40c3700f7d8168cb01da4fb67902b2edfc003751ebd74aacc696467e9e90c236a179e0858335e710e6da30a50020fa92cd96c53d61f217520c436ff5dd7c1bdc4d322633e50294bf0f615e41886d3e5bbd46ba7377838bb5f6fd27f1e61498f26566f7df7fe0cbeccf2068758265c84699d1d219cbce379adb033a62c1da572b5bc314fb882b08ae9ccb9c143f76975209b1054c829a5f9f67e63de836a40c63267fbbdd78909ab60edad2bac449e499c3c7afbf3b3dfdcedf73e116f2d61261ab113841db6a50ddb8a1fae3f2aa881691ed67b77cbce32a9601d6315a2b1081c1ccccaad920603184c87098751e39f05e04591a8db85e1951accda06412b56ef6332ae476bca48413a75817f59dd53bc632784a89adfe5f941bc188efb3fbf8bb4f6d73035f1660fb6d216022db1296fa4690"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) r6 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) keyctl$describe(0x6, r6, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r9 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r7, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r9, 0x1276, 0x0) dup2(r10, r8) 08:43:27 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x8000, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000180)={0x0, 0x6, 0x1000000000000, 0x101, 0x2, 0x80000000, 0x9, 0x7fff, 0xffff, 0x80000000, 0xfffffffffffffffc}) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}) r1 = syz_open_pts(0xffffffffffffffff, 0x40000) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) close(0xffffffffffffffff) [ 353.536144] IPVS: ftp: loaded support on port[0] = 21 08:43:27 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r8 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r6, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) dup2(r9, r7) 08:43:28 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r0, &(0x7f0000000240), 0x0}, 0x18) 08:43:28 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x131f64) syz_execute_func(&(0x7f00000002c0)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd3196f") clone(0x2102001ff7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000), 0x4) 08:43:28 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0xfffffffffffffffc, 0x1) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) accept4$x25(r0, 0x0, &(0x7f00000000c0), 0x80000) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f0000000000)=0x1) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x57}], 0x1) 08:43:28 executing program 3: openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x8000, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}) r1 = syz_open_pts(r0, 0x40000) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) close(r0) 08:43:28 executing program 5: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() exit(0x0) ptrace(0x10, r0) syz_genetlink_get_family_id$tipc(0x0) ptrace(0x8, r0) 08:43:28 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="160100010702000d90e90175692765553922ab521f47c86780b716684e817cbedcc714084a799d627a7536c80812924eda06583378d4555aee3baef8280e52138c42894f57b8c3df35820dc4eba1b9fb8b071163581bbc497989637e78fedcad22bff8698e6047c98c0f3ed7249e531d0600d7c3be7c7442f73b4a3e50cddb671888f6cad0237600020000d780e4a40e64604e82108c2613456f44af1b8cf90c59e77fb669eb32a01d000000000000000000000000002f3300da40c3700f7d8168cb01da4fb67902b2edfc003751ebd74aacc696467e9e90c236a179e0858335e710e6da30a50020fa92cd96c53d61f217520c436ff5dd7c1bdc4d322633e50294bf0f615e41886d3e5bbd46ba7377838bb5f6fd27f1e61498f26566f7df7fe0cbeccf2068758265c84699d1d219cbce379adb033a62c1da572b5bc314fb882b08ae9ccb9c143f76975209b1054c829a5f9f67e63de836a40c63267fbbdd78909ab60edad2bac449e499c3c7afbf3b3dfdcedf73e116f2d61261ab113841db6a50ddb8a1fae3f2aa881691ed67b77cbce32a9601d6315a2b1081c1ccccaad920603184c87098751e39f05e04591a8db85e1951accda06412b56ef6332ae476bca48413a75817f59dd53bc632784a89adfe5f941bc188efb3fbf8bb4f6d73035f1660fb6d216022db1296fa4690"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) r6 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) keyctl$describe(0x6, r6, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r9 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r7, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r9, 0x1276, 0x0) dup2(r10, r8) 08:43:28 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r6 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r4, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r1}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r6, 0x1276, 0x0) dup2(r7, r5) 08:43:28 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r6 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r4, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r1}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r6, 0x1276, 0x0) dup2(r7, r5) 08:43:28 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) r6 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) keyctl$describe(0x6, r6, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r9 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r7, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r9, 0x1276, 0x0) dup2(r10, r8) 08:43:28 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}) r1 = syz_open_pts(r0, 0x40000) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) close(r0) 08:43:28 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) r6 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) keyctl$describe(0x6, r6, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r9 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r7, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r9, 0x1276, 0x0) dup2(r10, r8) 08:43:29 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r6 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r4, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r1}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r6, 0x1276, 0x0) dup2(r7, r5) 08:43:29 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}) r1 = syz_open_pts(r0, 0x40000) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) close(r0) 08:43:29 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r1, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r7 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r5, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r2}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r7, 0x1276, 0x0) dup2(r8, r6) 08:43:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) r6 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) keyctl$describe(0x6, r6, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r9 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r7, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r9, 0x1276, 0x0) dup2(r10, r8) 08:43:29 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) r6 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) keyctl$describe(0x6, r6, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r9 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r7, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r9, 0x1276, 0x0) dup2(r10, r8) 08:43:29 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) r6 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) keyctl$describe(0x6, r6, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r9 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r7, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r9, 0x1276, 0x0) dup2(r10, r8) 08:43:29 executing program 0: lsetxattr$security_selinux(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='security.selinux\x00', &(0x7f00000003c0)='system_u:object_r:auditd_unit_file_t:s0\x00', 0x28, 0x2) setxattr(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)=@known='trusted.overlay.nlink\x00', &(0x7f0000000480)='system_u:object_r:auditd_unit_file_t:s0\x00', 0x28, 0x2) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000000c0)=0x1) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-control\x00', 0x80, 0x0) ioctl$RTC_AIE_ON(r1, 0x7001) getsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000280), &(0x7f00000002c0)=0x4) sendto(r1, &(0x7f00000004c0)="e45b2ba7d828286e22f98a9b6e00411c64b41f60fb2215c52a910a5e4539fd8c5a2a4e6d25ab7193d2213863fac6e549e9dff86c6e06be6f64a239ee2cbba676d0145cc8ff6abd0aab8d9c2e3bbf51f0bcd5025e9292b88d991398642eff3ed03c4a8aafbc182ba3eb06d391bf3193a237faf6779443b35979a73d6fe18584fafd46d43fc7936a98a3ea1139ee2d6a5b71a575a6faaa75cbf86ab6a04ceb496664a8c779f8df7a8d0c1e18c67895bcf74c14cd76f28aa6cfb0ddafde274cdc96e72bd5cb44c570ae08c1c1e17f97079767dfd68759918e05d2603f2233ec5a2dabe381e813793acb06c6513f4c3555c31670b55bcab1262a", 0xf8, 0x0, &(0x7f00000005c0)=@generic={0xb, "69adb683f7236384a9ea8828c0a40c1e2aba18c938714317339ae10d91b303ad591f68f497e00cec9c6ebe6d36ce274cdf3b82234810ec58152f71eafdf9ae043f93c32121b9b2d1ee24f05cf9e04c788911e692ca782d1ef38a6ac604f71edef038e14bdcdd158982a2b38b492c10388fe6b55a56c261b8a72e252fff87"}, 0x80) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0xfffffffffffffe9a}], 0x0) r2 = gettid() ptrace$getenv(0x4201, r2, 0x0, &(0x7f0000000640)) gettid() mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000) r3 = dup(r0) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000680), 0x8) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000100)='NET_DM\x00') sendmsg$NET_DM_CMD_START(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r4, 0x104, 0x70bd26, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000800) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e23, 0x4, @remote, 0x3}, 0x1c) 08:43:29 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}) r1 = syz_open_pts(r0, 0x40000) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) close(r0) 08:43:30 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}) r1 = syz_open_pts(r0, 0x40000) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) close(r0) 08:43:30 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000000c0)=0x1) r1 = syz_open_dev$radio(&(0x7f0000000180)='/dev/radio#\x00', 0x0, 0x2) write$FUSE_GETXATTR(r1, &(0x7f00000001c0)={0x18, 0x0, 0x2, {0x1}}, 0x18) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400000, 0x0) ioctl$KVM_DIRTY_TLB(r2, 0x4010aeaa, &(0x7f0000000100)={0x0, 0x3af}) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x57}], 0x1) 08:43:30 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="160100010702000d90e90175692765553922ab521f47c86780b716684e817cbedcc714084a799d627a7536c80812924eda06583378d4555aee3baef8280e52138c42894f57b8c3df35820dc4eba1b9fb8b071163581bbc497989637e78fedcad22bff8698e6047c98c0f3ed7249e531d0600d7c3be7c7442f73b4a3e50cddb671888f6cad0237600020000d780e4a40e64604e82108c2613456f44af1b8cf90c59e77fb669eb32a01d000000000000000000000000002f3300da40c3700f7d8168cb01da4fb67902b2edfc003751ebd74aacc696467e9e90c236a179e0858335e710e6da30a50020fa92cd96c53d61f217520c436ff5dd7c1bdc4d322633e50294bf0f615e41886d3e5bbd46ba7377838bb5f6fd27f1e61498f26566f7df7fe0cbeccf2068758265c84699d1d219cbce379adb033a62c1da572b5bc314fb882b08ae9ccb9c143f76975209b1054c829a5f9f67e63de836a40c63267fbbdd78909ab60edad2bac449e499c3c7afbf3b3dfdcedf73e116f2d61261ab113841db6a50ddb8a1fae3f2aa881691ed67b77cbce32a9601d6315a2b1081c1ccccaad920603184c87098751e39f05e04591a8db85e1951accda06412b56ef6332ae476bca48413a75817f59dd53bc632784a89adfe5f941bc188efb3fbf8bb4f6d73035f1660fb6d216022db1296fa4690"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) r6 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) keyctl$describe(0x6, r6, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r9 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r7, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r9, 0x1276, 0x0) dup2(r10, r8) 08:43:30 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r1, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r7 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r5, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r2}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r7, 0x1276, 0x0) dup2(r8, r6) 08:43:30 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="160100010702000d90e90175692765553922ab521f47c86780b716684e817cbedcc714084a799d627a7536c80812924eda06583378d4555aee3baef8280e52138c42894f57b8c3df35820dc4eba1b9fb8b071163581bbc497989637e78fedcad22bff8698e6047c98c0f3ed7249e531d0600d7c3be7c7442f73b4a3e50cddb671888f6cad0237600020000d780e4a40e64604e82108c2613456f44af1b8cf90c59e77fb669eb32a01d000000000000000000000000002f3300da40c3700f7d8168cb01da4fb67902b2edfc003751ebd74aacc696467e9e90c236a179e0858335e710e6da30a50020fa92cd96c53d61f217520c436ff5dd7c1bdc4d322633e50294bf0f615e41886d3e5bbd46ba7377838bb5f6fd27f1e61498f26566f7df7fe0cbeccf2068758265c84699d1d219cbce379adb033a62c1da572b5bc314fb882b08ae9ccb9c143f76975209b1054c829a5f9f67e63de836a40c63267fbbdd78909ab60edad2bac449e499c3c7afbf3b3dfdcedf73e116f2d61261ab113841db6a50ddb8a1fae3f2aa881691ed67b77cbce32a9601d6315a2b1081c1ccccaad920603184c87098751e39f05e04591a8db85e1951accda06412b56ef6332ae476bca48413a75817f59dd53bc632784a89adfe5f941bc188efb3fbf8bb4f6d73035f1660fb6d216022db1296fa4690"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) r6 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) keyctl$describe(0x6, r6, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r9 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r7, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r9, 0x1276, 0x0) dup2(r10, r8) 08:43:30 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}) r1 = syz_open_pts(r0, 0x40000) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) close(r0) 08:43:30 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r1, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r7 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r5, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r2}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r7, 0x1276, 0x0) dup2(r8, r6) 08:43:30 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) r6 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) keyctl$describe(0x6, r6, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r9 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r7, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r9, 0x1276, 0x0) dup2(r10, r8) 08:43:30 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="160100010702000d90e90175692765553922ab521f47c86780b716684e817cbedcc714084a799d627a7536c80812924eda06583378d4555aee3baef8280e52138c42894f57b8c3df35820dc4eba1b9fb8b071163581bbc497989637e78fedcad22bff8698e6047c98c0f3ed7249e531d0600d7c3be7c7442f73b4a3e50cddb671888f6cad0237600020000d780e4a40e64604e82108c2613456f44af1b8cf90c59e77fb669eb32a01d000000000000000000000000002f3300da40c3700f7d8168cb01da4fb67902b2edfc003751ebd74aacc696467e9e90c236a179e0858335e710e6da30a50020fa92cd96c53d61f217520c436ff5dd7c1bdc4d322633e50294bf0f615e41886d3e5bbd46ba7377838bb5f6fd27f1e61498f26566f7df7fe0cbeccf2068758265c84699d1d219cbce379adb033a62c1da572b5bc314fb882b08ae9ccb9c143f76975209b1054c829a5f9f67e63de836a40c63267fbbdd78909ab60edad2bac449e499c3c7afbf3b3dfdcedf73e116f2d61261ab113841db6a50ddb8a1fae3f2aa881691ed67b77cbce32a9601d6315a2b1081c1ccccaad920603184c87098751e39f05e04591a8db85e1951accda06412b56ef6332ae476bca48413a75817f59dd53bc632784a89adfe5f941bc188efb3fbf8bb4f6d73035f1660fb6d216022db1296fa4690"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) r6 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) keyctl$describe(0x6, r6, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r9 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r7, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r9, 0x1276, 0x0) dup2(r10, r8) 08:43:30 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r6 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r4, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r1}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r6, 0x1276, 0x0) dup2(r7, r5) 08:43:30 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}) r1 = syz_open_pts(r0, 0x40000) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) close(r0) 08:43:30 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) r6 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) keyctl$describe(0x6, r6, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r9 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r7, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r9, 0x1276, 0x0) dup2(r10, r8) 08:43:30 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}) r1 = syz_open_pts(r0, 0x40000) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) close(r0) 08:43:31 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000001c0)='/dev/sg#\x00', 0x1, 0xfffffffffffffffe) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000000c0)=0x1) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x57}], 0x1) 08:43:31 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="160100010702000d90e90175692765553922ab521f47c86780b716684e817cbedcc714084a799d627a7536c80812924eda06583378d4555aee3baef8280e52138c42894f57b8c3df35820dc4eba1b9fb8b071163581bbc497989637e78fedcad22bff8698e6047c98c0f3ed7249e531d0600d7c3be7c7442f73b4a3e50cddb671888f6cad0237600020000d780e4a40e64604e82108c2613456f44af1b8cf90c59e77fb669eb32a01d000000000000000000000000002f3300da40c3700f7d8168cb01da4fb67902b2edfc003751ebd74aacc696467e9e90c236a179e0858335e710e6da30a50020fa92cd96c53d61f217520c436ff5dd7c1bdc4d322633e50294bf0f615e41886d3e5bbd46ba7377838bb5f6fd27f1e61498f26566f7df7fe0cbeccf2068758265c84699d1d219cbce379adb033a62c1da572b5bc314fb882b08ae9ccb9c143f76975209b1054c829a5f9f67e63de836a40c63267fbbdd78909ab60edad2bac449e499c3c7afbf3b3dfdcedf73e116f2d61261ab113841db6a50ddb8a1fae3f2aa881691ed67b77cbce32a9601d6315a2b1081c1ccccaad920603184c87098751e39f05e04591a8db85e1951accda06412b56ef6332ae476bca48413a75817f59dd53bc632784a89adfe5f941bc188efb3fbf8bb4f6d73035f1660fb6d216022db1296fa4690"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) r6 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) keyctl$describe(0x6, r6, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r9 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r7, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r9, 0x1276, 0x0) dup2(r10, r8) 08:43:31 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x40000) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) close(r0) 08:43:31 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) r6 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) keyctl$describe(0x6, r6, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r9 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r7, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r9, 0x1276, 0x0) dup2(r10, r8) 08:43:31 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r6 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r4, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r1}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r6, 0x1276, 0x0) dup2(r7, r5) 08:43:31 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) r6 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) keyctl$describe(0x6, r6, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r9 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r7, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r9, 0x1276, 0x0) dup2(r10, r8) 08:43:31 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r1, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r7 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r5, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r2}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r7, 0x1276, 0x0) dup2(r8, r6) 08:43:31 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r1, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r7 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r5, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r2}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r7, 0x1276, 0x0) dup2(r8, r6) 08:43:31 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) r6 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) keyctl$describe(0x6, r6, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r9 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r7, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r9, 0x1276, 0x0) dup2(r10, r8) 08:43:31 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x40000) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) close(r0) 08:43:31 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r6 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r4, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r1}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r6, 0x1276, 0x0) dup2(r7, r5) 08:43:32 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x40000) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) close(r0) 08:43:32 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) r6 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) keyctl$describe(0x6, r6, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r9 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r7, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r9, 0x1276, 0x0) dup2(r10, r8) 08:43:32 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r8 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r6, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) dup2(r9, r7) 08:43:32 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}) r1 = syz_open_pts(r0, 0x40000) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) close(r0) 08:43:32 executing program 4: syz_mount_image$xfs(&(0x7f0000000100)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 08:43:32 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r8 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r6, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) dup2(r9, r7) 08:43:32 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) r6 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) keyctl$describe(0x6, r6, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r9 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r7, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r9, 0x1276, 0x0) dup2(r10, r8) 08:43:32 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x40000) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) close(r0) [ 358.256584] XFS (loop4): Invalid superblock magic number 08:43:32 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r8 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r6, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) dup2(r9, r7) 08:43:32 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(0xffffffffffffffff, 0x40000) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) close(r0) 08:43:32 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) r5 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) keyctl$describe(0x6, r5, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r8 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r6, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) dup2(r9, r7) 08:43:32 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="160100010702000d90e90175692765553922ab521f47c86780b716684e817cbedcc714084a799d627a7536c80812924eda06583378d4555aee3baef8280e52138c42894f57b8c3df35820dc4eba1b9fb8b071163581bbc497989637e78fedcad22bff8698e6047c98c0f3ed7249e531d0600d7c3be7c7442f73b4a3e50cddb671888f6cad0237600020000d780e4a40e64604e82108c2613456f44af1b8cf90c59e77fb669eb32a01d000000000000000000000000002f3300da40c3700f7d8168cb01da4fb67902b2edfc003751ebd74aacc696467e9e90c236a179e0858335e710e6da30a50020fa92cd96c53d61f217520c436ff5dd7c1bdc4d322633e50294bf0f615e41886d3e5bbd46ba7377838bb5f6fd27f1e61498f26566f7df7fe0cbeccf2068758265c84699d1d219cbce379adb033a62c1da572b5bc314fb882b08ae9ccb9c143f76975209b1054c829a5f9f67e63de836a40c63267fbbdd78909ab60edad2bac449e499c3c7afbf3b3dfdcedf73e116f2d61261ab113841db6a50ddb8a1fae3f2aa881691ed67b77cbce32a9601d6315a2b1081c1ccccaad920603184c87098751e39f05e04591a8db85e1951accda06412b56ef6332ae476bca48413a75817f59dd53bc632784a89adfe5f941bc188efb3fbf8bb4f6d73035f1660fb6d216022db1296fa4690"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) r6 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) keyctl$describe(0x6, r6, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r9 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r7, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r9, 0x1276, 0x0) dup2(r10, r8) 08:43:32 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="160100010702000d90e90175692765553922ab521f47c86780b716684e817cbedcc714084a799d627a7536c80812924eda06583378d4555aee3baef8280e52138c42894f57b8c3df35820dc4eba1b9fb8b071163581bbc497989637e78fedcad22bff8698e6047c98c0f3ed7249e531d0600d7c3be7c7442f73b4a3e50cddb671888f6cad0237600020000d780e4a40e64604e82108c2613456f44af1b8cf90c59e77fb669eb32a01d000000000000000000000000002f3300da40c3700f7d8168cb01da4fb67902b2edfc003751ebd74aacc696467e9e90c236a179e0858335e710e6da30a50020fa92cd96c53d61f217520c436ff5dd7c1bdc4d322633e50294bf0f615e41886d3e5bbd46ba7377838bb5f6fd27f1e61498f26566f7df7fe0cbeccf2068758265c84699d1d219cbce379adb033a62c1da572b5bc314fb882b08ae9ccb9c143f76975209b1054c829a5f9f67e63de836a40c63267fbbdd78909ab60edad2bac449e499c3c7afbf3b3dfdcedf73e116f2d61261ab113841db6a50ddb8a1fae3f2aa881691ed67b77cbce32a9601d6315a2b1081c1ccccaad920603184c87098751e39f05e04591a8db85e1951accda06412b56ef6332ae476bca48413a75817f59dd53bc632784a89adfe5f941bc188efb3fbf8bb4f6d73035f1660fb6d216022db1296fa4690"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) r6 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) keyctl$describe(0x6, r6, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r9 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r7, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r9, 0x1276, 0x0) dup2(r10, r8) 08:43:32 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) r5 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) keyctl$describe(0x6, r5, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r8 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r6, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) dup2(r9, r7) 08:43:33 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(0xffffffffffffffff, 0x40000) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) close(r0) 08:43:33 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="160100010702000d90e90175692765553922ab521f47c86780b716684e817cbedcc714084a799d627a7536c80812924eda06583378d4555aee3baef8280e52138c42894f57b8c3df35820dc4eba1b9fb8b071163581bbc497989637e78fedcad22bff8698e6047c98c0f3ed7249e531d0600d7c3be7c7442f73b4a3e50cddb671888f6cad0237600020000d780e4a40e64604e82108c2613456f44af1b8cf90c59e77fb669eb32a01d000000000000000000000000002f3300da40c3700f7d8168cb01da4fb67902b2edfc003751ebd74aacc696467e9e90c236a179e0858335e710e6da30a50020fa92cd96c53d61f217520c436ff5dd7c1bdc4d322633e50294bf0f615e41886d3e5bbd46ba7377838bb5f6fd27f1e61498f26566f7df7fe0cbeccf2068758265c84699d1d219cbce379adb033a62c1da572b5bc314fb882b08ae9ccb9c143f76975209b1054c829a5f9f67e63de836a40c63267fbbdd78909ab60edad2bac449e499c3c7afbf3b3dfdcedf73e116f2d61261ab113841db6a50ddb8a1fae3f2aa881691ed67b77cbce32a9601d6315a2b1081c1ccccaad920603184c87098751e39f05e04591a8db85e1951accda06412b56ef6332ae476bca48413a75817f59dd53bc632784a89adfe5f941bc188efb3fbf8bb4f6d73035f1660fb6d216022db1296fa4690"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) r6 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) keyctl$describe(0x6, r6, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r9 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r7, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r9, 0x1276, 0x0) dup2(r10, r8) 08:43:33 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r8 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r6, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) dup2(r9, r7) 08:43:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) r6 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) keyctl$describe(0x6, r6, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r9 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r7, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r9, 0x1276, 0x0) dup2(r10, r8) 08:43:33 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(0xffffffffffffffff, 0x40000) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) close(r0) 08:43:33 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="160100010702000d90e90175692765553922ab521f47c86780b716684e817cbedcc714084a799d627a7536c80812924eda06583378d4555aee3baef8280e52138c42894f57b8c3df35820dc4eba1b9fb8b071163581bbc497989637e78fedcad22bff8698e6047c98c0f3ed7249e531d0600d7c3be7c7442f73b4a3e50cddb671888f6cad0237600020000d780e4a40e64604e82108c2613456f44af1b8cf90c59e77fb669eb32a01d000000000000000000000000002f3300da40c3700f7d8168cb01da4fb67902b2edfc003751ebd74aacc696467e9e90c236a179e0858335e710e6da30a50020fa92cd96c53d61f217520c436ff5dd7c1bdc4d322633e50294bf0f615e41886d3e5bbd46ba7377838bb5f6fd27f1e61498f26566f7df7fe0cbeccf2068758265c84699d1d219cbce379adb033a62c1da572b5bc314fb882b08ae9ccb9c143f76975209b1054c829a5f9f67e63de836a40c63267fbbdd78909ab60edad2bac449e499c3c7afbf3b3dfdcedf73e116f2d61261ab113841db6a50ddb8a1fae3f2aa881691ed67b77cbce32a9601d6315a2b1081c1ccccaad920603184c87098751e39f05e04591a8db85e1951accda06412b56ef6332ae476bca48413a75817f59dd53bc632784a89adfe5f941bc188efb3fbf8bb4f6d73035f1660fb6d216022db1296fa4690"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) r6 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) keyctl$describe(0x6, r6, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r9 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r7, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r9, 0x1276, 0x0) dup2(r10, r8) 08:43:33 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r8 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r6, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) dup2(r9, r7) 08:43:33 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) r6 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) keyctl$describe(0x6, r6, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r9 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r7, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r9, 0x1276, 0x0) dup2(r10, r8) 08:43:33 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) close(r0) 08:43:33 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) r6 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) keyctl$describe(0x6, r6, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r9 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r7, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r9, 0x1276, 0x0) dup2(r10, r8) 08:43:33 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r8 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r6, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) dup2(r9, r7) 08:43:34 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) r6 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) keyctl$describe(0x6, r6, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r9 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r7, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r9, 0x1276, 0x0) dup2(r10, r8) 08:43:34 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) syz_open_pts(r0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xf) close(r0) 08:43:34 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r1, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r7 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r5, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r2}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r7, 0x1276, 0x0) dup2(r8, r6) 08:43:34 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r1, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r7 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r5, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r2}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r7, 0x1276, 0x0) dup2(r8, r6) 08:43:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) r6 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) keyctl$describe(0x6, r6, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r9 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r7, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r9, 0x1276, 0x0) dup2(r10, r8) 08:43:34 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r8 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r6, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) dup2(r9, r7) 08:43:34 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) syz_open_pts(r0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xf) close(r0) 08:43:34 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) r5 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) keyctl$describe(0x6, r5, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r8 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r6, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) dup2(r9, r7) 08:43:34 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r8 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r6, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) dup2(r9, r7) 08:43:34 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r8 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r6, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) dup2(r9, r7) 08:43:34 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) syz_open_pts(r0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xf) close(r0) 08:43:34 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) r5 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) keyctl$describe(0x6, r5, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r8 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r6, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) dup2(r9, r7) 08:43:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) r6 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) keyctl$describe(0x6, r6, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r9 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r7, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r9, 0x1276, 0x0) dup2(r10, r8) 08:43:34 executing program 0: socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r1, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0xb6) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) r5 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) keyctl$describe(0x6, r5, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r8 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r6, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r2}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) dup2(r9, r7) 08:43:34 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r8 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r6, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) dup2(r9, r7) 08:43:34 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) close(r0) 08:43:34 executing program 5: socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r1, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0xb6) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) r5 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) keyctl$describe(0x6, r5, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r8 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r6, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r2}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) dup2(r9, r7) 08:43:35 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) r5 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) keyctl$describe(0x6, r5, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r8 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r6, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) dup2(r9, r7) 08:43:35 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r8 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r6, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) dup2(r9, r7) 08:43:35 executing program 0: socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r1, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0xb6) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) r5 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) keyctl$describe(0x6, r5, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r8 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r6, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r2}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) dup2(r9, r7) 08:43:35 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0xb6) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) r5 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) keyctl$describe(0x6, r5, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r8 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r6, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) dup2(r9, r7) 08:43:35 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, 0x0) r5 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) keyctl$describe(0x6, r5, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r8 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r6, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) dup2(r9, r7) 08:43:35 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) close(r0) 08:43:35 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r8 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r6, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) dup2(r9, r7) 08:43:35 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r8 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r6, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) dup2(r9, r7) 08:43:35 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) close(r0) 08:43:35 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) r5 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) keyctl$describe(0x6, r5, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r8 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r6, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) dup2(r9, r7) 08:43:35 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0xb6) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) r5 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) keyctl$describe(0x6, r5, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r8 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r6, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) dup2(r9, r7) 08:43:35 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="160100010702000d90e90175692765553922ab521f47c86780b716684e817cbedcc714084a799d627a7536c80812924eda06583378d4555aee3baef8280e52138c42894f57b8c3df35820dc4eba1b9fb8b071163581bbc497989637e78fedcad22bff8698e6047c98c0f3ed7249e531d0600d7c3be7c7442f73b4a3e50cddb671888f6cad0237600020000d780e4a40e64604e82108c2613456f44af1b8cf90c59e77fb669eb32a01d000000000000000000000000002f3300da40c3700f7d8168cb01da4fb67902b2edfc003751ebd74aacc696467e9e90c236a179e0858335e710e6da30a50020fa92cd96c53d61f217520c436ff5dd7c1bdc4d322633e50294bf0f615e41886d3e5bbd46ba7377838bb5f6fd27f1e61498f26566f7df7fe0cbeccf2068758265c84699d1d219cbce379adb033a62c1da572b5bc314fb882b08ae9ccb9c143f76975209b1054c829a5f9f67e63de836a40c63267fbbdd78909ab60edad2bac449e499c3c7afbf3b3dfdcedf73e116f2d61261ab113841db6a50ddb8a1fae3f2aa881691ed67b77cbce32a9601d6315a2b1081c1ccccaad920603184c87098751e39f05e04591a8db85e1951accda06412b56ef6332ae476bca48413a75817f59dd53bc632784a89adfe5f941bc188efb3fbf8bb4f6d73035f1660fb6d216022db1296fa46904a"], 0xb6) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) r5 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) keyctl$describe(0x6, r5, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r8 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r6, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) dup2(r9, r7) 08:43:35 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, 0x0) r5 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) keyctl$describe(0x6, r5, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r8 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r6, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) dup2(r9, r7) 08:43:35 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)) close(r0) 08:43:35 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r8 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r6, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) dup2(r9, r7) 08:43:35 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0xb6) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) r5 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) keyctl$describe(0x6, r5, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r8 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r6, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) dup2(r9, r7) 08:43:36 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)) close(r0) 08:43:36 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)) close(r0) 08:43:36 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0xb6) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) r6 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) keyctl$describe(0x6, r6, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r9 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r7, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r9, 0x1276, 0x0) dup2(r10, r8) 08:43:36 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, 0x0) r5 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) keyctl$describe(0x6, r5, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r8 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r6, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) dup2(r9, r7) 08:43:36 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, 0x0) r5 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) keyctl$describe(0x6, r5, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r8 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r6, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) dup2(r9, r7) 08:43:36 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r8 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r6, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) dup2(r9, r7) 08:43:36 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="160100010702000d90e90175692765553922ab521f47c86780b716684e817cbedcc714084a799d627a7536c80812924eda06583378d4555aee3baef8280e52138c42894f57b8c3df35820dc4eba1b9fb8b071163581bbc497989637e78fedcad22bff8698e6047c98c0f3ed7249e531d0600d7c3be7c7442f73b4a3e50cddb671888f6cad0237600020000d780e4a40e64604e82108c2613456f44af1b8cf90c59e77fb669eb32a01d000000000000000000000000002f3300da40c3700f7d8168cb01da4fb67902b2edfc003751ebd74aacc696467e9e90c236a179e0858335e710e6da30a50020fa92cd96c53d61f217520c436ff5dd7c1bdc4d322633e50294bf0f615e41886d3e5bbd46ba7377838bb5f6fd27f1e61498f26566f7df7fe0cbeccf2068758265c84699d1d219cbce379adb033a62c1da572b5bc314fb882b08ae9ccb9c143f76975209b1054c829a5f9f67e63de836a40c63267fbbdd78909ab60edad2bac449e499c3c7afbf3b3dfdcedf73e116f2d61261ab113841db6a50ddb8a1fae3f2aa881691ed67b77cbce32a9601d6315a2b1081c1ccccaad920603184c87098751e39f05e04591a8db85e1951accda06412b56ef6332ae476bca48413a75817f59dd53bc632784a89adfe5f941bc188efb3fbf8bb4f6d73035f1660fb6d216022db1296fa46904a"], 0xb6) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) r6 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) keyctl$describe(0x6, r6, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r9 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r7, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r9, 0x1276, 0x0) dup2(r10, r8) 08:43:36 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) close(0xffffffffffffffff) 08:43:36 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) close(0xffffffffffffffff) 08:43:36 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) close(0xffffffffffffffff) 08:43:36 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0xb6) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) r6 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) keyctl$describe(0x6, r6, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r9 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r7, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r9, 0x1276, 0x0) dup2(r10, r8) 08:43:36 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="160100010702000d90e90175692765553922ab521f47c86780b716684e817cbedcc714084a799d627a7536c80812924eda06583378d4555aee3baef8280e52138c42894f57b8c3df35820dc4eba1b9fb8b071163581bbc497989637e78fedcad22bff8698e6047c98c0f3ed7249e531d0600d7c3be7c7442f73b4a3e50cddb671888f6cad0237600020000d780e4a40e64604e82108c2613456f44af1b8cf90c59e77fb669eb32a01d000000000000000000000000002f3300da40c3700f7d8168cb01da4fb67902b2edfc003751ebd74aacc696467e9e90c236a179e0858335e710e6da30a50020fa92cd96c53d61f217520c436ff5dd7c1bdc4d322633e50294bf0f615e41886d3e5bbd46ba7377838bb5f6fd27f1e61498f26566f7df7fe0cbeccf2068758265c84699d1d219cbce379adb033a62c1da572b5bc314fb882b08ae9ccb9c143f76975209b1054c829a5f9f67e63de836a40c63267fbbdd78909ab60edad2bac449e499c3c7afbf3b3dfdcedf73e116f2d61261ab113841db6a50ddb8a1fae3f2aa881691ed67b77cbce32a9601d6315a2b1081c1ccccaad920603184c87098751e39f05e04591a8db85e1951accda06412b56ef6332ae476bca48413a75817f59dd53bc632784a89adfe5f941bc188efb3fbf8bb4f6d73035f1660fb6d216022db1296fa4690"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x0, 0x27, 0x0, 0xffffffffffffffff}) r6 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) keyctl$describe(0x6, r6, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r9 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r7, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r9, 0x1276, 0x0) dup2(r10, r8) 08:43:36 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="160100010702000d90e90175692765553922ab521f47c86780b716684e817cbedcc714084a799d627a7536c80812924eda06583378d4555aee3baef8280e52138c42894f57b8c3df35820dc4eba1b9fb8b071163581bbc497989637e78fedcad22bff8698e6047c98c0f3ed7249e531d0600d7c3be7c7442f73b4a3e50cddb671888f6cad0237600020000d780e4a40e64604e82108c2613456f44af1b8cf90c59e77fb669eb32a01d000000000000000000000000002f3300da40c3700f7d8168cb01da4fb67902b2edfc003751ebd74aacc696467e9e90c236a179e0858335e710e6da30a50020fa92cd96c53d61f217520c436ff5dd7c1bdc4d322633e50294bf0f615e41886d3e5bbd46ba7377838bb5f6fd27f1e61498f26566f7df7fe0cbeccf2068758265c84699d1d219cbce379adb033a62c1da572b5bc314fb882b08ae9ccb9c143f76975209b1054c829a5f9f67e63de836a40c63267fbbdd78909ab60edad2bac449e499c3c7afbf3b3dfdcedf73e116f2d61261ab113841db6a50ddb8a1fae3f2aa881691ed67b77cbce32a9601d6315a2b1081c1ccccaad920603184c87098751e39f05e04591a8db85e1951accda06412b56ef6332ae476bca48413a75817f59dd53bc632784a89adfe5f941bc188efb3fbf8bb4f6d73035f1660fb6d216022db1296fa4690"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, 0x0) r5 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) keyctl$describe(0x6, r5, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r8 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r6, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) dup2(r9, r7) 08:43:36 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r8 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r6, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) dup2(r9, r7) 08:43:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x0, 0x27, 0x0, 0xffffffffffffffff}) r6 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) keyctl$describe(0x6, r6, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r9 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r7, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r9, 0x1276, 0x0) dup2(r10, r8) 08:43:37 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0xb6) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) r6 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) keyctl$describe(0x6, r6, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r9 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r7, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r9, 0x1276, 0x0) dup2(r10, r8) 08:43:37 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0xb6) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) r6 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) keyctl$describe(0x6, r6, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r9 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r7, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r9, 0x1276, 0x0) dup2(r10, r8) 08:43:37 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0xb6) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) r6 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) keyctl$describe(0x6, r6, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r9 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r7, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r9, 0x1276, 0x0) dup2(r10, r8) 08:43:37 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r8 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r6, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) dup2(r9, r7) 08:43:37 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0xb6) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) r6 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) keyctl$describe(0x6, r6, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r9 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r7, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r9, 0x1276, 0x0) dup2(r10, r8) 08:43:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x0, 0x27, 0x0, 0xffffffffffffffff}) r6 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) keyctl$describe(0x6, r6, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r9 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r7, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r9, 0x1276, 0x0) dup2(r10, r8) 08:43:37 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0xb6) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) r6 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) keyctl$describe(0x6, r6, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r9 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r7, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r9, 0x1276, 0x0) dup2(r10, r8) 08:43:37 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="160100010702000d90e90175692765553922ab521f47c86780b716684e817cbedcc714084a799d627a7536c80812924eda06583378d4555aee3baef8280e52138c42894f57b8c3df35820dc4eba1b9fb8b071163581bbc497989637e78fedcad22bff8698e6047c98c0f3ed7249e531d0600d7c3be7c7442f73b4a3e50cddb671888f6cad0237600020000d780e4a40e64604e82108c2613456f44af1b8cf90c59e77fb669eb32a01d000000000000000000000000002f3300da40c3700f7d8168cb01da4fb67902b2edfc003751ebd74aacc696467e9e90c236a179e0858335e710e6da30a50020fa92cd96c53d61f217520c436ff5dd7c1bdc4d322633e50294bf0f615e41886d3e5bbd46ba7377838bb5f6fd27f1e61498f26566f7df7fe0cbeccf2068758265c84699d1d219cbce379adb033a62c1da572b5bc314fb882b08ae9ccb9c143f76975209b1054c829a5f9f67e63de836a40c63267fbbdd78909ab60edad2bac449e499c3c7afbf3b3dfdcedf73e116f2d61261ab113841db6a50ddb8a1fae3f2aa881691ed67b77cbce32a9601d6315a2b1081c1ccccaad920603184c87098751e39f05e04591a8db85e1951accda06412b56ef6332ae476bca48413a75817f59dd53bc632784a89adfe5f941bc188efb3fbf8bb4f6d73035f1660fb6d216022db1296fa46904a"], 0xb6) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) r6 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) keyctl$describe(0x6, r6, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r9 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r7, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r9, 0x1276, 0x0) dup2(r10, r8) 08:43:37 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r8 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r6, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) dup2(r9, r7) 08:43:37 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0xb6) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) r5 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) keyctl$describe(0x6, r5, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r8 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r6, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) dup2(r9, r7) 08:43:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r6 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) keyctl$describe(0x6, r6, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r9 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r7, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r9, 0x1276, 0x0) dup2(r10, r8) 08:43:37 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="160100010702000d90e90175692765553922ab521f47c86780b716684e817cbedcc714084a799d627a7536c80812924eda06583378d4555aee3baef8280e52138c42894f57b8c3df35820dc4eba1b9fb8b071163581bbc497989637e78fedcad22bff8698e6047c98c0f3ed7249e531d0600d7c3be7c7442f73b4a3e50cddb671888f6cad0237600020000d780e4a40e64604e82108c2613456f44af1b8cf90c59e77fb669eb32a01d000000000000000000000000002f3300da40c3700f7d8168cb01da4fb67902b2edfc003751ebd74aacc696467e9e90c236a179e0858335e710e6da30a50020fa92cd96c53d61f217520c436ff5dd7c1bdc4d322633e50294bf0f615e41886d3e5bbd46ba7377838bb5f6fd27f1e61498f26566f7df7fe0cbeccf2068758265c84699d1d219cbce379adb033a62c1da572b5bc314fb882b08ae9ccb9c143f76975209b1054c829a5f9f67e63de836a40c63267fbbdd78909ab60edad2bac449e499c3c7afbf3b3dfdcedf73e116f2d61261ab113841db6a50ddb8a1fae3f2aa881691ed67b77cbce32a9601d6315a2b1081c1ccccaad920603184c87098751e39f05e04591a8db85e1951accda06412b56ef6332ae476bca48413a75817f59dd53bc632784a89adfe5f941bc188efb3fbf8bb4f6d73035f1660fb6d216022db1296fa4690"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x0, 0x27, 0x0, 0xffffffffffffffff}) r6 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) keyctl$describe(0x6, r6, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r9 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r7, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r9, 0x1276, 0x0) dup2(r10, r8) 08:43:38 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0xb6) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) r5 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) keyctl$describe(0x6, r5, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r8 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r6, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) dup2(r9, r7) 08:43:38 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r8 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r6, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) dup2(r9, r7) 08:43:38 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x5, 0x305080) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000040)={r2, 0x1, 0x100c000, 0x1000}) ioctl$TCXONC(r1, 0x540a, 0x0) 08:43:38 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="160100010702000d90e90175692765553922ab521f47c86780b716684e817cbedcc714084a799d627a7536c80812924eda06583378d4555aee3baef8280e52138c42894f57b8c3df35820dc4eba1b9fb8b071163581bbc497989637e78fedcad22bff8698e6047c98c0f3ed7249e531d0600d7c3be7c7442f73b4a3e50cddb671888f6cad0237600020000d780e4a40e64604e82108c2613456f44af1b8cf90c59e77fb669eb32a01d000000000000000000000000002f3300da40c3700f7d8168cb01da4fb67902b2edfc003751ebd74aacc696467e9e90c236a179e0858335e710e6da30a50020fa92cd96c53d61f217520c436ff5dd7c1bdc4d322633e50294bf0f615e41886d3e5bbd46ba7377838bb5f6fd27f1e61498f26566f7df7fe0cbeccf2068758265c84699d1d219cbce379adb033a62c1da572b5bc314fb882b08ae9ccb9c143f76975209b1054c829a5f9f67e63de836a40c63267fbbdd78909ab60edad2bac449e499c3c7afbf3b3dfdcedf73e116f2d61261ab113841db6a50ddb8a1fae3f2aa881691ed67b77cbce32a9601d6315a2b1081c1ccccaad920603184c87098751e39f05e04591a8db85e1951accda06412b56ef6332ae476bca48413a75817f59dd53bc632784a89adfe5f941bc188efb3fbf8bb4f6d73035f1660fb6d216022db1296fa4690"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r6 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) keyctl$describe(0x6, r6, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r9 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r7, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r9, 0x1276, 0x0) dup2(r10, r8) 08:43:38 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="160100010702000d90e90175692765553922ab521f47c86780b716684e817cbedcc714084a799d627a7536c80812924eda06583378d4555aee3baef8280e52138c42894f57b8c3df35820dc4eba1b9fb8b071163581bbc497989637e78fedcad22bff8698e6047c98c0f3ed7249e531d0600d7c3be7c7442f73b4a3e50cddb671888f6cad0237600020000d780e4a40e64604e82108c2613456f44af1b8cf90c59e77fb669eb32a01d000000000000000000000000002f3300da40c3700f7d8168cb01da4fb67902b2edfc003751ebd74aacc696467e9e90c236a179e0858335e710e6da30a50020fa92cd96c53d61f217520c436ff5dd7c1bdc4d322633e50294bf0f615e41886d3e5bbd46ba7377838bb5f6fd27f1e61498f26566f7df7fe0cbeccf2068758265c84699d1d219cbce379adb033a62c1da572b5bc314fb882b08ae9ccb9c143f76975209b1054c829a5f9f67e63de836a40c63267fbbdd78909ab60edad2bac449e499c3c7afbf3b3dfdcedf73e116f2d61261ab113841db6a50ddb8a1fae3f2aa881691ed67b77cbce32a9601d6315a2b1081c1ccccaad920603184c87098751e39f05e04591a8db85e1951accda06412b56ef6332ae476bca48413a75817f59dd53bc632784a89adfe5f941bc188efb3fbf8bb4f6d73035f1660fb6d216022db1296fa46904a"], 0xb6) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) r5 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) keyctl$describe(0x6, r5, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r8 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r6, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) dup2(r9, r7) 08:43:38 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="160100010702000d90e90175692765553922ab521f47c86780b716684e817cbedcc714084a799d627a7536c80812924eda06583378d4555aee3baef8280e52138c42894f57b8c3df35820dc4eba1b9fb8b071163581bbc497989637e78fedcad22bff8698e6047c98c0f3ed7249e531d0600d7c3be7c7442f73b4a3e50cddb671888f6cad0237600020000d780e4a40e64604e82108c2613456f44af1b8cf90c59e77fb669eb32a01d000000000000000000000000002f3300da40c3700f7d8168cb01da4fb67902b2edfc003751ebd74aacc696467e9e90c236a179e0858335e710e6da30a50020fa92cd96c53d61f217520c436ff5dd7c1bdc4d322633e50294bf0f615e41886d3e5bbd46ba7377838bb5f6fd27f1e61498f26566f7df7fe0cbeccf2068758265c84699d1d219cbce379adb033a62c1da572b5bc314fb882b08ae9ccb9c143f76975209b1054c829a5f9f67e63de836a40c63267fbbdd78909ab60edad2bac449e499c3c7afbf3b3dfdcedf73e116f2d61261ab113841db6a50ddb8a1fae3f2aa881691ed67b77cbce32a9601d6315a2b1081c1ccccaad920603184c87098751e39f05e04591a8db85e1951accda06412b56ef6332ae476bca48413a75817f59dd53bc632784a89adfe5f941bc188efb3fbf8bb4f6d73035f1660fb6d216022db1296fa46904a"], 0xb6) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) r5 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) keyctl$describe(0x6, r5, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r8 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r6, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) dup2(r9, r7) 08:43:38 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r8 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r6, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) dup2(r9, r7) 08:43:38 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x5, 0x305080) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000040)={r2, 0x1, 0x100c000, 0x1000}) ioctl$TCXONC(r1, 0x540a, 0x0) 08:43:38 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0xb6) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) r6 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) keyctl$describe(0x6, r6, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r9 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r7, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r9, 0x1276, 0x0) dup2(r10, r8) 08:43:38 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="160100010702000d90e90175692765553922ab521f47c86780b716684e817cbedcc714084a799d627a7536c80812924eda06583378d4555aee3baef8280e52138c42894f57b8c3df35820dc4eba1b9fb8b071163581bbc497989637e78fedcad22bff8698e6047c98c0f3ed7249e531d0600d7c3be7c7442f73b4a3e50cddb671888f6cad0237600020000d780e4a40e64604e82108c2613456f44af1b8cf90c59e77fb669eb32a01d000000000000000000000000002f3300da40c3700f7d8168cb01da4fb67902b2edfc003751ebd74aacc696467e9e90c236a179e0858335e710e6da30a50020fa92cd96c53d61f217520c436ff5dd7c1bdc4d322633e50294bf0f615e41886d3e5bbd46ba7377838bb5f6fd27f1e61498f26566f7df7fe0cbeccf2068758265c84699d1d219cbce379adb033a62c1da572b5bc314fb882b08ae9ccb9c143f76975209b1054c829a5f9f67e63de836a40c63267fbbdd78909ab60edad2bac449e499c3c7afbf3b3dfdcedf73e116f2d61261ab113841db6a50ddb8a1fae3f2aa881691ed67b77cbce32a9601d6315a2b1081c1ccccaad920603184c87098751e39f05e04591a8db85e1951accda06412b56ef6332ae476bca48413a75817f59dd53bc632784a89adfe5f941bc188efb3fbf8bb4f6d73035f1660fb6d216022db1296fa46904a"], 0xb6) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) r6 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) keyctl$describe(0x6, r6, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r9 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r7, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r9, 0x1276, 0x0) dup2(r10, r8) 08:43:38 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r6 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) keyctl$describe(0x6, r6, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r9 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r7, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r9, 0x1276, 0x0) dup2(r10, r8) 08:43:38 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x5, 0x305080) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000040)={r2, 0x1, 0x100c000, 0x1000}) ioctl$TCXONC(r1, 0x540a, 0x0) 08:43:39 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r8 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r6, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) dup2(r9, r7) 08:43:39 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r6 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) keyctl$describe(0x6, r6, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r9 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r7, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r9, 0x1276, 0x0) dup2(r10, r8) 08:43:39 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r6 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) keyctl$describe(0x6, r6, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r9 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r7, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r9, 0x1276, 0x0) dup2(r10, r8) 08:43:39 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="160100010702000d90e90175692765553922ab521f47c86780b716684e817cbedcc714084a799d627a7536c80812924eda06583378d4555aee3baef8280e52138c42894f57b8c3df35820dc4eba1b9fb8b071163581bbc497989637e78fedcad22bff8698e6047c98c0f3ed7249e531d0600d7c3be7c7442f73b4a3e50cddb671888f6cad0237600020000d780e4a40e64604e82108c2613456f44af1b8cf90c59e77fb669eb32a01d000000000000000000000000002f3300da40c3700f7d8168cb01da4fb67902b2edfc003751ebd74aacc696467e9e90c236a179e0858335e710e6da30a50020fa92cd96c53d61f217520c436ff5dd7c1bdc4d322633e50294bf0f615e41886d3e5bbd46ba7377838bb5f6fd27f1e61498f26566f7df7fe0cbeccf2068758265c84699d1d219cbce379adb033a62c1da572b5bc314fb882b08ae9ccb9c143f76975209b1054c829a5f9f67e63de836a40c63267fbbdd78909ab60edad2bac449e499c3c7afbf3b3dfdcedf73e116f2d61261ab113841db6a50ddb8a1fae3f2aa881691ed67b77cbce32a9601d6315a2b1081c1ccccaad920603184c87098751e39f05e04591a8db85e1951accda06412b56ef6332ae476bca48413a75817f59dd53bc632784a89adfe5f941bc188efb3fbf8bb4f6d73035f1660fb6d216022db1296fa4690"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r6 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) keyctl$describe(0x6, r6, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r9 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r7, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r9, 0x1276, 0x0) dup2(r10, r8) 08:43:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) r6 = add_key$user(0x0, &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) keyctl$describe(0x6, r6, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r9 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r7, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r9, 0x1276, 0x0) dup2(r10, r8) 08:43:39 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) r3 = syz_open_dev$dspn(0x0, 0x0, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000001280)=ANY=[@ANYBLOB="66696c746572000000000000000000000000000000000000000000000000000007000000040000007004000018010000180100001801000088030000880300008803000004000000", @ANYPTR=&(0x7f0000001740)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000040a699d008532ba0170b3f092a6264dcbd751caca40a28dc48c96d6ca33adafedf93ae41b665f70a54e4"], @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00018010000000000000000000000000000000000000000000000000000280041554449540000000000000000000000000000000000000000000000000002000000000000007f0000010000000100000000ff000000aaaaaaaaaabb00000000000000000000000000000000000000ff00ffff0000000000000000000000aaaaaaaaaa0a000000000000000000000000000000000000ff00007400ff00000000000000000000000100ff0000040000080002726f73653000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000f00030010000000000000000000000000000000000000000000000000000400052415445455354000000000000000000000000000000000000000000000073797a3100000000000000000000000004ff0000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0004001000000000000000000000000000000000000000000000000000050006d616e676c650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414aaac1e01010e000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x4c0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000140)="66b9810000400f322ed30cbad104ec660f38df2b0fe21526660ff85e503ede1b0f20c06635000000800f22c0b800088ec00fae470b", 0x35}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) recvfrom$inet(r3, &(0x7f0000000280)=""/4096, 0x1000, 0x2, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10) fsetxattr$security_smack_entry(r0, &(0x7f0000000100)='security.SMACK64IPOUT\x00', &(0x7f00000001c0)='/dev/ptmx\x00', 0xa, 0x2) ioctl$TCXONC(r1, 0x540f, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x1, 0x106002, 0x1000, &(0x7f0000ff2000/0x1000)=nil}) 08:43:39 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x5, 0x305080) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000040)={r2, 0x1, 0x100c000, 0x1000}) 08:43:39 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0xb6) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) r6 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) keyctl$describe(0x6, r6, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r9 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r7, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r9, 0x1276, 0x0) dup2(r10, r8) 08:43:39 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0x100c000, 0x1000}) 08:43:39 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0xb6) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) r4 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) keyctl$describe(0x6, r4, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r7 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r5, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r7, 0x1276, 0x0) dup2(r8, r6) 08:43:39 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r8 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r6, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) dup2(r9, r7) 08:43:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) r6 = add_key$user(0x0, &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) keyctl$describe(0x6, r6, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r9 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r7, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r9, 0x1276, 0x0) dup2(r10, r8) 08:43:40 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r8 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r6, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) dup2(r9, r7) 08:43:40 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r8 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r6, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) dup2(r9, r7) 08:43:40 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) r6 = add_key$user(0x0, &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) keyctl$describe(0x6, r6, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r9 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r7, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r9, 0x1276, 0x0) dup2(r10, r8) 08:43:40 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0x100c000, 0x1000}) 08:43:40 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0xb6) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) r4 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) keyctl$describe(0x6, r4, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r7 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r5, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r7, 0x1276, 0x0) dup2(r8, r6) 08:43:40 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) r6 = add_key$user(0x0, &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) keyctl$describe(0x6, r6, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r9 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r7, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r9, 0x1276, 0x0) dup2(r10, r8) 08:43:40 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r8 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r6, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) dup2(r9, r7) 08:43:40 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) r6 = add_key$user(&(0x7f00000002c0)='user\x00', 0x0, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) keyctl$describe(0x6, r6, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r9 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r7, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r9, 0x1276, 0x0) dup2(r10, r8) 08:43:40 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0x100c000, 0x1000}) 08:43:40 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) r6 = add_key$user(0x0, &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) keyctl$describe(0x6, r6, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r9 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r7, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r9, 0x1276, 0x0) dup2(r10, r8) 08:43:41 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r8 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r6, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) dup2(r9, r7) 08:43:41 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0xb6) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27}) r5 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) keyctl$describe(0x6, r5, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r8 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r6, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) dup2(r9, r7) 08:43:41 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0x100c000, 0x1000}) 08:43:41 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) r6 = add_key$user(&(0x7f00000002c0)='user\x00', 0x0, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) keyctl$describe(0x6, r6, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r9 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r7, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r9, 0x1276, 0x0) dup2(r10, r8) 08:43:41 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0xb6) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) r6 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) keyctl$describe(0x6, r6, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r9 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r7, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r9, 0x1276, 0x0) dup2(r10, r8) 08:43:41 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r8 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r6, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) dup2(r9, r7) 08:43:41 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0xb6) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) r6 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) keyctl$describe(0x6, r6, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) ioctl$PPPOEIOCSFWD(r7, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) dup2(r9, r8) 08:43:41 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r8 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r6, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) dup2(r9, r7) 08:43:41 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) r6 = add_key$user(&(0x7f00000002c0)='user\x00', 0x0, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) keyctl$describe(0x6, r6, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r9 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r7, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r9, 0x1276, 0x0) dup2(r10, r8) 08:43:41 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0xb6) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27}) r5 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) keyctl$describe(0x6, r5, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r8 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r6, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) dup2(r9, r7) 08:43:41 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0x100c000, 0x1000}) 08:43:41 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x800455ca, 0x0) 08:43:42 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="160100010702000d90e90175692765553922ab521f47c86780b716684e817cbedcc714084a799d627a7536c80812924eda06583378d4555aee3baef8280e52138c42894f57b8c3df35820dc4eba1b9fb8b071163581bbc497989637e78fedcad22bff8698e6047c98c0f3ed7249e531d0600d7c3be7c7442f73b4a3e50cddb671888f6cad0237600020000d780e4a40e64604e82108c2613456f44af1b8cf90c59e77fb669eb32a01d000000000000000000000000002f3300da40c3700f7d8168cb01da4fb67902b2edfc003751ebd74aacc696467e9e90c236a179e0858335e710e6da30a50020fa92cd96c53d61f217520c436ff5dd7c1bdc4d322633e50294bf0f615e41886d3e5bbd46ba7377838bb5f6fd27f1e61498f26566f7df7fe0cbeccf2068758265c84699d1d219cbce379adb033a62c1da572b5bc314fb882b08ae9ccb9c143f76975209b1054c829a5f9f67e63de836a40c63267fbbdd78909ab60edad2bac449e499c3c7afbf3b3dfdcedf73e116f2d61261ab113841db6a50ddb8a1fae3f2aa881691ed67b77cbce32a9601d6315a2b1081c1ccccaad920603184c87098751e39f05e04591a8db85e1951accda06412b56ef6332ae476bca48413a75817f59dd53bc632784a89adfe5f941bc188efb3fbf8bb4f6d73035f1660fb6d216022db1296fa46904a"], 0xb6) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) r6 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) keyctl$describe(0x6, r6, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) ioctl$PPPOEIOCSFWD(r7, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) dup2(r9, r8) 08:43:42 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) r6 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz'}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) keyctl$describe(0x6, r6, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r9 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r7, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r9, 0x1276, 0x0) dup2(r10, r8) 08:43:42 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r8 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r6, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) dup2(r9, r7) 08:43:42 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0x100c000, 0x1000}) 08:43:42 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x800455ca, 0x0) 08:43:42 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) r6 = add_key$user(&(0x7f00000002c0)='user\x00', 0x0, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) keyctl$describe(0x6, r6, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r9 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r7, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r9, 0x1276, 0x0) dup2(r10, r8) 08:43:42 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) r6 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz'}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) keyctl$describe(0x6, r6, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r9 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r7, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r9, 0x1276, 0x0) dup2(r10, r8) 08:43:42 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xf) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0x100c000, 0x1000}) 08:43:42 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) r6 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz'}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) keyctl$describe(0x6, r6, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r9 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r7, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r9, 0x1276, 0x0) dup2(r10, r8) 08:43:42 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x800455ca, 0x0) 08:43:42 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0xb6) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) r6 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) keyctl$describe(0x6, r6, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) ioctl$PPPOEIOCSFWD(r7, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) dup2(r9, r8) 08:43:42 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r8 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r6, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) dup2(r9, r7) 08:43:42 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) r6 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz'}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) keyctl$describe(0x6, r6, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r9 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r7, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r9, 0x1276, 0x0) dup2(r10, r8) 08:43:43 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r8 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r6, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) dup2(r9, r7) 08:43:43 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xf) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0x100c000, 0x1000}) 08:43:43 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r1, 0x800455ca, 0x0) 08:43:43 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r8 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r6, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) dup2(r9, r7) 08:43:43 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xf) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0x100c000, 0x1000}) 08:43:43 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r8 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r6, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) dup2(r9, r7) 08:43:43 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) r6 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$describe(0x6, r6, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r9 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r7, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r9, 0x1276, 0x0) dup2(r10, r8) 08:43:43 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r1, 0x800455ca, 0x0) 08:43:43 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r8 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r6, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) dup2(r9, r7) 08:43:43 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0x100c000, 0x1000}) 08:43:43 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) r6 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz'}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) keyctl$describe(0x6, r6, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r9 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r7, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r9, 0x1276, 0x0) dup2(r10, r8) 08:43:43 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0xb6) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) r6 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) keyctl$describe(0x6, r6, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) ioctl$PPPOEIOCSFWD(r7, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) dup2(r9, r8) 08:43:43 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) r6 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$describe(0x6, r6, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r9 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r7, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r9, 0x1276, 0x0) dup2(r10, r8) 08:43:43 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r8 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r6, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) dup2(r9, r7) 08:43:43 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r1, 0x800455ca, 0x0) 08:43:44 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0x100c000, 0x1000}) 08:43:44 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="160100010702000d90e90175692765553922ab521f47c86780b716684e817cbedcc714084a799d627a7536c80812924eda06583378d4555aee3baef8280e52138c42894f57b8c3df35820dc4eba1b9fb8b071163581bbc497989637e78fedcad22bff8698e6047c98c0f3ed7249e531d0600d7c3be7c7442f73b4a3e50cddb671888f6cad0237600020000d780e4a40e64604e82108c2613456f44af1b8cf90c59e77fb669eb32a01d000000000000000000000000002f3300da40c3700f7d8168cb01da4fb67902b2edfc003751ebd74aacc696467e9e90c236a179e0858335e710e6da30a50020fa92cd96c53d61f217520c436ff5dd7c1bdc4d322633e50294bf0f615e41886d3e5bbd46ba7377838bb5f6fd27f1e61498f26566f7df7fe0cbeccf2068758265c84699d1d219cbce379adb033a62c1da572b5bc314fb882b08ae9ccb9c143f76975209b1054c829a5f9f67e63de836a40c63267fbbdd78909ab60edad2bac449e499c3c7afbf3b3dfdcedf73e116f2d61261ab113841db6a50ddb8a1fae3f2aa881691ed67b77cbce32a9601d6315a2b1081c1ccccaad920603184c87098751e39f05e04591a8db85e1951accda06412b56ef6332ae476bca48413a75817f59dd53bc632784a89adfe5f941bc188efb3fbf8bb4f6d73035f1660fb6d216022db1296fa46904a"], 0xb6) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) r6 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) keyctl$describe(0x6, r6, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r9 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r7, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r9, 0x1276, 0x0) dup2(r10, r8) 08:43:44 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r8 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r6, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) dup2(r9, r7) 08:43:44 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) r6 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$describe(0x6, r6, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r9 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r7, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r9, 0x1276, 0x0) dup2(r10, r8) 08:43:44 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(0xffffffffffffffff, 0x800455ca, 0x0) 08:43:44 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0x100c000, 0x1000}) 08:43:44 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) r6 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400), 0x0, 0xfffffffffffffffa) keyctl$describe(0x6, r6, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r9 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r7, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r9, 0x1276, 0x0) dup2(r10, r8) 08:43:44 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) r6 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$describe(0x6, r6, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r9 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r7, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r9, 0x1276, 0x0) dup2(r10, r8) 08:43:44 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x400455c8, 0x0) 08:43:44 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r8 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r6, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) dup2(r9, r7) 08:43:44 executing program 4: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)) r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0x100c000, 0x1000}) 08:43:44 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(0xffffffffffffffff, 0x800455ca, 0x0) 08:43:44 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) r6 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400), 0x0, 0xfffffffffffffffa) keyctl$describe(0x6, r6, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r9 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r7, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r9, 0x1276, 0x0) dup2(r10, r8) 08:43:45 executing program 4: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)) r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0x100c000, 0x1000}) 08:43:45 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0xb6) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) r6 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) keyctl$describe(0x6, r6, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r8 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) dup2(r9, r7) 08:43:45 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r8 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r6, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) dup2(r9, r7) 08:43:45 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(0xffffffffffffffff, 0x800455ca, 0x0) 08:43:45 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) r6 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400), 0x0, 0xfffffffffffffffa) keyctl$describe(0x6, r6, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r9 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r7, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r9, 0x1276, 0x0) dup2(r10, r8) 08:43:45 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r1, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r7 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r5, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r2}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r7, 0x1276, 0x0) dup2(r8, r6) 08:43:45 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x800455ca, 0x0) [ 372.827759] Bluetooth: hci0: command 0x1003 tx timeout [ 372.833153] Bluetooth: hci0: sending frame failed (-49) [ 374.907752] Bluetooth: hci0: command 0x1001 tx timeout [ 374.913929] Bluetooth: hci0: sending frame failed (-49) [ 376.987722] Bluetooth: hci0: command 0x1009 tx timeout 08:43:55 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x400455c8, 0x0) 08:43:55 executing program 4: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)) r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0x100c000, 0x1000}) 08:43:55 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) r6 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d", 0x20, 0xfffffffffffffffa) keyctl$describe(0x6, r6, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r9 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r7, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r9, 0x1276, 0x0) dup2(r10, r8) 08:43:55 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x800455ca, 0x0) 08:43:55 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r8 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r6, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) dup2(r9, r7) 08:43:55 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r1, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r7 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r5, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r2}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r7, 0x1276, 0x0) dup2(r8, r6) 08:43:55 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) r6 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d", 0x20, 0xfffffffffffffffa) keyctl$describe(0x6, r6, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r9 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r7, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r9, 0x1276, 0x0) dup2(r10, r8) 08:43:55 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x800455ca, 0x0) 08:43:55 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0x100c000, 0x1000}) 08:43:55 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r1, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r7 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r5, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r2}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r7, 0x1276, 0x0) dup2(r8, r6) 08:43:56 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0x100c000, 0x1000}) 08:43:56 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) r6 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d", 0x20, 0xfffffffffffffffa) keyctl$describe(0x6, r6, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r9 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r7, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r9, 0x1276, 0x0) dup2(r10, r8) [ 383.547714] Bluetooth: hci0: command 0x1003 tx timeout [ 383.553162] Bluetooth: hci0: sending frame failed (-49) [ 385.627825] Bluetooth: hci0: command 0x1001 tx timeout [ 385.633242] Bluetooth: hci0: sending frame failed (-49) [ 387.707785] Bluetooth: hci0: command 0x1009 tx timeout 08:44:05 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x400455c8, 0x0) 08:44:05 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0xb6) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) r6 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) keyctl$describe(0x6, r6, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r8 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) dup2(r9, r7) 08:44:05 executing program 0: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)) r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r0, 0x800455ca, 0x0) 08:44:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r8 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r6, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) dup2(r9, r7) 08:44:05 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0x100c000, 0x1000}) 08:44:05 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="160100010702000d90e90175692765553922ab521f47c86780b716684e817cbedcc714084a799d627a7536c80812924eda06583378d4555aee3baef8280e52138c42894f57b8c3df35820dc4eba1b9fb8b071163581bbc497989637e78fedcad22bff8698e6047c98c0f3ed7249e531d0600d7c3be7c7442f73b4a3e50cddb671888f6cad0237600020000d780e4a40e64604e82108c2613456f44af1b8cf90c59e77fb669eb32a01d000000000000000000000000002f3300da40c3700f7d8168cb01da4fb67902b2edfc003751ebd74aacc696467e9e90c236a179e0858335e710e6da30a50020fa92cd96c53d61f217520c436ff5dd7c1bdc4d322633e50294bf0f615e41886d3e5bbd46ba7377838bb5f6fd27f1e61498f26566f7df7fe0cbeccf2068758265c84699d1d219cbce379adb033a62c1da572b5bc314fb882b08ae9ccb9c143f76975209b1054c829a5f9f67e63de836a40c63267fbbdd78909ab60edad2bac449e499c3c7afbf3b3dfdcedf73e116f2d61261ab113841db6a50ddb8a1fae3f2aa881691ed67b77cbce32a9601d6315a2b1081c1ccccaad920603184c87098751e39f05e04591a8db85e1951accda06412b56ef6332ae476bca48413a75817f59dd53bc632784a89adfe5f941bc188efb3fbf8bb4f6d73035f1660fb6d216022db1296fa4690"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) r6 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc", 0x30, 0xfffffffffffffffa) keyctl$describe(0x6, r6, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r9 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r7, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r9, 0x1276, 0x0) dup2(r10, r8) 08:44:06 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0x100c000, 0x1000}) 08:44:06 executing program 0: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)) r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r0, 0x800455ca, 0x0) 08:44:06 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) r6 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc", 0x30, 0xfffffffffffffffa) keyctl$describe(0x6, r6, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r9 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r7, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r9, 0x1276, 0x0) dup2(r10, r8) 08:44:06 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r1, 0x400455c8, 0x0) 08:44:06 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0x100c000, 0x1000}) 08:44:06 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r1, 0x400455c8, 0x0) 08:44:06 executing program 0: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)) r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r0, 0x800455ca, 0x0) 08:44:06 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="160100010702000d90e90175692765553922ab521f47c86780b716684e817cbedcc714084a799d627a7536c80812924eda06583378d4555aee3baef8280e52138c42894f57b8c3df35820dc4eba1b9fb8b071163581bbc497989637e78fedcad22bff8698e6047c98c0f3ed7249e531d0600d7c3be7c7442f73b4a3e50cddb671888f6cad0237600020000d780e4a40e64604e82108c2613456f44af1b8cf90c59e77fb669eb32a01d000000000000000000000000002f3300da40c3700f7d8168cb01da4fb67902b2edfc003751ebd74aacc696467e9e90c236a179e0858335e710e6da30a50020fa92cd96c53d61f217520c436ff5dd7c1bdc4d322633e50294bf0f615e41886d3e5bbd46ba7377838bb5f6fd27f1e61498f26566f7df7fe0cbeccf2068758265c84699d1d219cbce379adb033a62c1da572b5bc314fb882b08ae9ccb9c143f76975209b1054c829a5f9f67e63de836a40c63267fbbdd78909ab60edad2bac449e499c3c7afbf3b3dfdcedf73e116f2d61261ab113841db6a50ddb8a1fae3f2aa881691ed67b77cbce32a9601d6315a2b1081c1ccccaad920603184c87098751e39f05e04591a8db85e1951accda06412b56ef6332ae476bca48413a75817f59dd53bc632784a89adfe5f941bc188efb3fbf8bb4f6d73035f1660fb6d216022db1296fa4690"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) r6 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc", 0x30, 0xfffffffffffffffa) keyctl$describe(0x6, r6, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r9 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r7, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r9, 0x1276, 0x0) dup2(r10, r8) 08:44:06 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0x100c000, 0x1000}) 08:44:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r8 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r6, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) dup2(r9, r7) 08:44:06 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="160100010702000d90e90175692765553922ab521f47c86780b716684e817cbedcc714084a799d627a7536c80812924eda06583378d4555aee3baef8280e52138c42894f57b8c3df35820dc4eba1b9fb8b071163581bbc497989637e78fedcad22bff8698e6047c98c0f3ed7249e531d0600d7c3be7c7442f73b4a3e50cddb671888f6cad0237600020000d780e4a40e64604e82108c2613456f44af1b8cf90c59e77fb669eb32a01d000000000000000000000000002f3300da40c3700f7d8168cb01da4fb67902b2edfc003751ebd74aacc696467e9e90c236a179e0858335e710e6da30a50020fa92cd96c53d61f217520c436ff5dd7c1bdc4d322633e50294bf0f615e41886d3e5bbd46ba7377838bb5f6fd27f1e61498f26566f7df7fe0cbeccf2068758265c84699d1d219cbce379adb033a62c1da572b5bc314fb882b08ae9ccb9c143f76975209b1054c829a5f9f67e63de836a40c63267fbbdd78909ab60edad2bac449e499c3c7afbf3b3dfdcedf73e116f2d61261ab113841db6a50ddb8a1fae3f2aa881691ed67b77cbce32a9601d6315a2b1081c1ccccaad920603184c87098751e39f05e04591a8db85e1951accda06412b56ef6332ae476bca48413a75817f59dd53bc632784a89adfe5f941bc188efb3fbf8bb4f6d73035f1660fb6d216022db1296fa4690"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) r6 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc", 0x30, 0xfffffffffffffffa) keyctl$describe(0x6, r6, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r9 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r7, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r9, 0x1276, 0x0) dup2(r10, r8) 08:44:06 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x800455ca, 0x0) 08:44:06 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r1, 0x400455c8, 0x0) 08:44:06 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0x100c000, 0x1000}) 08:44:06 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(0xffffffffffffffff, 0x400455c8, 0x0) 08:44:06 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x800455ca, 0x0) 08:44:06 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0x100c000, 0x1000}) 08:44:07 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) r6 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d", 0x38, 0xfffffffffffffffa) keyctl$describe(0x6, r6, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r9 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r7, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r9, 0x1276, 0x0) dup2(r10, r8) 08:44:07 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r8 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r6, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) dup2(r9, r7) 08:44:07 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="160100010702000d90e90175692765553922ab521f47c86780b716684e817cbedcc714084a799d627a7536c80812924eda06583378d4555aee3baef8280e52138c42894f57b8c3df35820dc4eba1b9fb8b071163581bbc497989637e78fedcad22bff8698e6047c98c0f3ed7249e531d0600d7c3be7c7442f73b4a3e50cddb671888f6cad0237600020000d780e4a40e64604e82108c2613456f44af1b8cf90c59e77fb669eb32a01d000000000000000000000000002f3300da40c3700f7d8168cb01da4fb67902b2edfc003751ebd74aacc696467e9e90c236a179e0858335e710e6da30a50020fa92cd96c53d61f217520c436ff5dd7c1bdc4d322633e50294bf0f615e41886d3e5bbd46ba7377838bb5f6fd27f1e61498f26566f7df7fe0cbeccf2068758265c84699d1d219cbce379adb033a62c1da572b5bc314fb882b08ae9ccb9c143f76975209b1054c829a5f9f67e63de836a40c63267fbbdd78909ab60edad2bac449e499c3c7afbf3b3dfdcedf73e116f2d61261ab113841db6a50ddb8a1fae3f2aa881691ed67b77cbce32a9601d6315a2b1081c1ccccaad920603184c87098751e39f05e04591a8db85e1951accda06412b56ef6332ae476bca48413a75817f59dd53bc632784a89adfe5f941bc188efb3fbf8bb4f6d73035f1660fb6d216022db1296fa4690"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) r6 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc", 0x30, 0xfffffffffffffffa) keyctl$describe(0x6, r6, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r9 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r7, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r9, 0x1276, 0x0) dup2(r10, r8) 08:44:07 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x800455ca, 0x0) 08:44:07 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(0xffffffffffffffff, 0x400455c8, 0x0) 08:44:07 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0x100c000, 0x1000}) 08:44:07 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) r6 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d", 0x38, 0xfffffffffffffffa) keyctl$describe(0x6, r6, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r9 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r7, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r9, 0x1276, 0x0) dup2(r10, r8) 08:44:07 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x800455ca, 0x0) 08:44:07 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0x100c000, 0x1000}) 08:44:07 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) r6 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d", 0x20, 0xfffffffffffffffa) keyctl$describe(0x6, r6, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r9 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r7, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r9, 0x1276, 0x0) dup2(r10, r8) 08:44:07 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(0xffffffffffffffff, 0x400455c8, 0x0) 08:44:07 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x800455ca, 0x0) 08:44:07 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0x100c000, 0x1000}) 08:44:07 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r8 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r6, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) dup2(r9, r7) 08:44:07 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) r6 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d", 0x38, 0xfffffffffffffffa) keyctl$describe(0x6, r6, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r9 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r7, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r9, 0x1276, 0x0) dup2(r10, r8) 08:44:07 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x400455c8, 0x0) 08:44:08 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x400455c8, 0x0) 08:44:08 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x800455ca, 0x0) 08:44:08 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0x100c000, 0x1000}) 08:44:08 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0xb6) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) r6 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) keyctl$describe(0x6, r6, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r8 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) dup2(r9, r7) 08:44:08 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x800455ca, 0x0) 08:44:08 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="160100010702000d90e90175692765553922ab521f47c86780b716684e817cbedcc714084a799d627a7536c80812924eda06583378d4555aee3baef8280e52138c42894f57b8c3df35820dc4eba1b9fb8b071163581bbc497989637e78fedcad22bff8698e6047c98c0f3ed7249e531d0600d7c3be7c7442f73b4a3e50cddb671888f6cad0237600020000d780e4a40e64604e82108c2613456f44af1b8cf90c59e77fb669eb32a01d000000000000000000000000002f3300da40c3700f7d8168cb01da4fb67902b2edfc003751ebd74aacc696467e9e90c236a179e0858335e710e6da30a50020fa92cd96c53d61f217520c436ff5dd7c1bdc4d322633e50294bf0f615e41886d3e5bbd46ba7377838bb5f6fd27f1e61498f26566f7df7fe0cbeccf2068758265c84699d1d219cbce379adb033a62c1da572b5bc314fb882b08ae9ccb9c143f76975209b1054c829a5f9f67e63de836a40c63267fbbdd78909ab60edad2bac449e499c3c7afbf3b3dfdcedf73e116f2d61261ab113841db6a50ddb8a1fae3f2aa881691ed67b77cbce32a9601d6315a2b1081c1ccccaad920603184c87098751e39f05e04591a8db85e1951accda06412b56ef6332ae476bca48413a75817f59dd53bc632784a89adfe5f941bc188efb3fbf8bb4f6d73035f1660fb6d216022db1296fa4690"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) r6 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d", 0x3c, 0xfffffffffffffffa) keyctl$describe(0x6, r6, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r9 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r7, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r9, 0x1276, 0x0) dup2(r10, r8) 08:44:08 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xf) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0x100c000, 0x1000}) 08:44:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r8 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r6, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) dup2(r9, r7) 08:44:08 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xf) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0x100c000, 0x1000}) 08:44:08 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x400455c8, 0x0) 08:44:08 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x800455ca, 0x0) 08:44:08 executing program 5 (fault-call:4 fault-nth:0): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) close(r0) 08:44:08 executing program 3: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)) r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r0, 0x400455c8, 0x0) 08:44:08 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) close(r0) 08:44:08 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xf) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0x100c000, 0x1000}) 08:44:08 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="160100010702000d90e90175692765553922ab521f47c86780b716684e817cbedcc714084a799d627a7536c80812924eda06583378d4555aee3baef8280e52138c42894f57b8c3df35820dc4eba1b9fb8b071163581bbc497989637e78fedcad22bff8698e6047c98c0f3ed7249e531d0600d7c3be7c7442f73b4a3e50cddb671888f6cad0237600020000d780e4a40e64604e82108c2613456f44af1b8cf90c59e77fb669eb32a01d000000000000000000000000002f3300da40c3700f7d8168cb01da4fb67902b2edfc003751ebd74aacc696467e9e90c236a179e0858335e710e6da30a50020fa92cd96c53d61f217520c436ff5dd7c1bdc4d322633e50294bf0f615e41886d3e5bbd46ba7377838bb5f6fd27f1e61498f26566f7df7fe0cbeccf2068758265c84699d1d219cbce379adb033a62c1da572b5bc314fb882b08ae9ccb9c143f76975209b1054c829a5f9f67e63de836a40c63267fbbdd78909ab60edad2bac449e499c3c7afbf3b3dfdcedf73e116f2d61261ab113841db6a50ddb8a1fae3f2aa881691ed67b77cbce32a9601d6315a2b1081c1ccccaad920603184c87098751e39f05e04591a8db85e1951accda06412b56ef6332ae476bca48413a75817f59dd53bc632784a89adfe5f941bc188efb3fbf8bb4f6d73035f1660fb6d216022db1296fa4690"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) r6 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3c", 0x39, 0xfffffffffffffffa) keyctl$describe(0x6, r6, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r9 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r7, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r9, 0x1276, 0x0) dup2(r10, r8) 08:44:08 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x800455ca, 0x0) 08:44:08 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000180)) r1 = accept4$llc(r0, 0x0, &(0x7f0000000040), 0x80800) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000280)={0x8, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}}}, 0x88) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000140)={'\x00', 0x8000}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r0, 0x200000) pipe(&(0x7f0000000000)={0xffffffffffffffff}) getsockopt$llc_int(r3, 0x10c, 0x4, &(0x7f0000000100), &(0x7f00000000c0)=0x2d2) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r4, 0x84, 0x74, &(0x7f0000000080)=""/112, &(0x7f0000000100)=0x70) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) close(r0) 08:44:08 executing program 3: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)) r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r0, 0x400455c8, 0x0) 08:44:09 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r8 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r6, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) dup2(r9, r7) 08:44:09 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x800455ca, 0x0) 08:44:09 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0x100c000, 0x1000}) 08:44:09 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) close(r0) close(r0) lsetxattr$security_evm(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.evm\x00', &(0x7f00000000c0)=@sha1={0x1, "512a815cb4cdb25731bd52ea6fb634ae398e6f06"}, 0x15, 0xf7878e020a7f00b9) 08:44:09 executing program 3: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)) r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r0, 0x400455c8, 0x0) 08:44:09 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) r6 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3c", 0x39, 0xfffffffffffffffa) keyctl$describe(0x6, r6, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r9 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r7, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r9, 0x1276, 0x0) dup2(r10, r8) 08:44:09 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x800455ca, 0x0) 08:44:09 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x400455c8, 0x0) 08:44:09 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0x100c000, 0x1000}) 08:44:09 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x400455c8, 0x0) 08:44:09 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x800455ca, 0x0) 08:44:09 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x40) ioctl$CAPI_NCCI_GETUNIT(r2, 0x80044327, &(0x7f0000000040)) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f00000000c0), &(0x7f0000000100)=0x4) close(r0) 08:44:09 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r8 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r6, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) dup2(r9, r7) 08:44:09 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) r6 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3c", 0x39, 0xfffffffffffffffa) keyctl$describe(0x6, r6, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r9 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r7, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r9, 0x1276, 0x0) dup2(r10, r8) 08:44:09 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0x100c000, 0x1000}) 08:44:09 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x13) close(r0) 08:44:09 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x400455c8, 0x0) 08:44:09 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x800455ca, 0x0) 08:44:09 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x400455c8, 0x0) 08:44:09 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x3f) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x7f, 0x101000) ioctl$BLKIOOPT(r1, 0x1279, &(0x7f0000000140)) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x19) close(r0) 08:44:10 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0x100c000, 0x1000}) 08:44:10 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x800455ca, 0x0) 08:44:10 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x400455c8, 0x0) 08:44:10 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) r6 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae", 0x3b, 0xfffffffffffffffa) keyctl$describe(0x6, r6, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r9 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r7, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r9, 0x1276, 0x0) dup2(r10, r8) 08:44:10 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r8 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r6, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) dup2(r9, r7) 08:44:10 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) 08:44:10 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0x100c000, 0x1000}) 08:44:10 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x400455c8, 0x0) 08:44:10 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x800455ca, 0x0) 08:44:10 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) r6 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae", 0x3b, 0xfffffffffffffffa) keyctl$describe(0x6, r6, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r9 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r7, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r9, 0x1276, 0x0) dup2(r10, r8) 08:44:10 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0x100c000, 0x1000}) 08:44:10 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0xffffffffffffffff, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x212000, 0x0) ioctl$SIOCRSACCEPT(r2, 0x89e3) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x37) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x200000000000000e) syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x4000000000000006, 0x501800) close(r0) 08:44:10 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x400455c8, 0x0) 08:44:10 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) ioctl$TCXONC(r1, 0x800455ca, 0x0) 08:44:10 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0x100c000, 0x1000}) 08:44:10 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x400455c8, 0x0) 08:44:10 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r8 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r6, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) dup2(r9, r7) 08:44:10 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="160100010702000d90e90175692765553922ab521f47c86780b716684e817cbedcc714084a799d627a7536c80812924eda06583378d4555aee3baef8280e52138c42894f57b8c3df35820dc4eba1b9fb8b071163581bbc497989637e78fedcad22bff8698e6047c98c0f3ed7249e531d0600d7c3be7c7442f73b4a3e50cddb671888f6cad0237600020000d780e4a40e64604e82108c2613456f44af1b8cf90c59e77fb669eb32a01d000000000000000000000000002f3300da40c3700f7d8168cb01da4fb67902b2edfc003751ebd74aacc696467e9e90c236a179e0858335e710e6da30a50020fa92cd96c53d61f217520c436ff5dd7c1bdc4d322633e50294bf0f615e41886d3e5bbd46ba7377838bb5f6fd27f1e61498f26566f7df7fe0cbeccf2068758265c84699d1d219cbce379adb033a62c1da572b5bc314fb882b08ae9ccb9c143f76975209b1054c829a5f9f67e63de836a40c63267fbbdd78909ab60edad2bac449e499c3c7afbf3b3dfdcedf73e116f2d61261ab113841db6a50ddb8a1fae3f2aa881691ed67b77cbce32a9601d6315a2b1081c1ccccaad920603184c87098751e39f05e04591a8db85e1951accda06412b56ef6332ae476bca48413a75817f59dd53bc632784a89adfe5f941bc188efb3fbf8bb4f6d73035f1660fb6d216022db1296fa4690"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) r6 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae", 0x3b, 0xfffffffffffffffa) keyctl$describe(0x6, r6, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r9 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r7, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r9, 0x1276, 0x0) dup2(r10, r8) 08:44:10 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x1f, 0x0) ioctl$KVM_GET_LAPIC(r2, 0x8400ae8e, &(0x7f0000000500)={"af9262a63d887b007009275eb6ea4ae85d88eabe8775949203ee2f584435a45adbd146e5f1aad94aab004875aa45374fca9512764e2c31a9bca8a4a8d766270929951d6bbbf73466e0364fea055310f3789f26a9e2c58504b034c5748d07b36ca40e7d753e5284baa242c0551b54e212847bc9f5838fd1fc3092fad5c2f607e365d8c1ef7df876c2ea71adcc049ae4249123a6a8b0a9e2c477ad11ba34153299306f9fcb009ea37738ff4a5f1cdaf5c85986391874588918933d1ad1a6fe6658b419cd607cb9718019b7b1a374bf7abce9694a756d8c93f94c96a0721c69ce0a5f09e3366703f166a047ff05c74968b6ebebde4cc0adb4b3e7d564bd86e86a717173a47bdc28ea427bbc172e18eb38b2173af55bf2dd62c6ffe86fc87f751edeaf3166cf1147c05d074e29383ef6c098a105a175a766e1b49d68d00419ddfcf4922156dd627c3298ae46d7e1d3f939b1f875f76d7e74944dfbe81378bff11f0e2f6ef37a5bd47e0511fc57e260637f34e1c624a8ed2fadd94c1273bfb11490c7f31ed540e9aa1f00305f9ec02f2ebeaa66f28a5599bed6c0e7d68d027603af45f757f48efca0326bdc59fb6cfbd57cb2c4c8318cb52e2934c56e48e165e904b9b4eeb392fa303acd47efa2bae23c8699937aa61885c95225f89c14dc8713e25f5c896df78a45c6188c70c787dbf8270feeb5e872a9d8512d241c78db46566f7ba1972d576d52b02f625305dbb9593160fbb9d722542937eb8717e4e9aeb651344d801a7290cb8c998d6465c4356eb688fb207b7005ae304e1d5fd8928f1e68b9894be970642c540afdb9adeebde7d05de5c2cb55551853c5b16431d5eacaace9435b1b35f5fa7504572247ca630ada7c96192d7befef6682f441559c1805be5a0528ab1553c77a58d994881d05e9645b5d0595236c1a53dba9d40875275637e73f835d464ccd24b7f637c1935586f628e41d01d65381a5e39fa2cd8973ae4220c0413d6fdf3ae8cc7686c4633647fb88357de33722cc2c6a5f42c465b0e91fec7255692410fc8c3c96a56818766b38738203311da16c093dc59e2afb9d0d92577e8e80e9104c4f8a2c6e7c94b53c1fc902dab0a2b0f76a436c7d24acd920b2e579c91a54dbc6a951a339bb58a829723a9e97f688fe23c4d82f2dd6812d04791592de57e373f715d0961c64a0dcf8d453a56798a91d18e03ce0617634d7275942d18a3ea87e3f5bce82c89349c0237dc32439b70e1258c174ecc6ebc63f81e889aefce93ec2af4d6ed01d799392d89d605fa79d527c347b18c1aa98a1fb01ddf67db3e2f7a09fb3012181b5db6f6107305c36f1dcbbe11b209f0aaf808474942696d8975cabd287b7dff6842dedf3e223e6e5ea2b9f8c1334dee9457678c60fefa70abecde141cd5ccafe03f4936f9386defdab03e2e7bc741223a7de1b25b130"}) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x278, r3, 0x20, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8001}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x401}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffff}]}, @TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x20, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffffffffb319}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x401}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}, @TIPC_NLA_BEARER={0xf8, 0x1, [@TIPC_NLA_BEARER_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffffffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb138}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xaa94}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xe07}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x207}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x1, @ipv4={[], [], @local}, 0x81}}}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4c9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x10000}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff}]}, @TIPC_NLA_MEDIA={0x8c, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffffffa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8d47}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x108e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x278}, 0x1, 0x0, 0x0, 0x20004044}, 0x0) close(r0) 08:44:10 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) ioctl$TCXONC(r1, 0x800455ca, 0x0) 08:44:11 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x400455c8, 0x0) 08:44:11 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0x100c000, 0x1000}) 08:44:11 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) ioctl$TCXONC(r1, 0x800455ca, 0x0) 08:44:11 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) close(r0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x2000, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000000c0)={0x7b, 0x0, [0xfff, 0xcd96, 0x1, 0xb4c]}) 08:44:11 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="160100010702000d90e90175692765553922ab521f47c86780b716684e817cbedcc714084a799d627a7536c80812924eda06583378d4555aee3baef8280e52138c42894f57b8c3df35820dc4eba1b9fb8b071163581bbc497989637e78fedcad22bff8698e6047c98c0f3ed7249e531d0600d7c3be7c7442f73b4a3e50cddb671888f6cad0237600020000d780e4a40e64604e82108c2613456f44af1b8cf90c59e77fb669eb32a01d000000000000000000000000002f3300da40c3700f7d8168cb01da4fb67902b2edfc003751ebd74aacc696467e9e90c236a179e0858335e710e6da30a50020fa92cd96c53d61f217520c436ff5dd7c1bdc4d322633e50294bf0f615e41886d3e5bbd46ba7377838bb5f6fd27f1e61498f26566f7df7fe0cbeccf2068758265c84699d1d219cbce379adb033a62c1da572b5bc314fb882b08ae9ccb9c143f76975209b1054c829a5f9f67e63de836a40c63267fbbdd78909ab60edad2bac449e499c3c7afbf3b3dfdcedf73e116f2d61261ab113841db6a50ddb8a1fae3f2aa881691ed67b77cbce32a9601d6315a2b1081c1ccccaad920603184c87098751e39f05e04591a8db85e1951accda06412b56ef6332ae476bca48413a75817f59dd53bc632784a89adfe5f941bc188efb3fbf8bb4f6d73035f1660fb6d216022db1296fa4690"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d", 0x3c, 0xfffffffffffffffa) keyctl$describe(0x6, 0x0, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r8 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r6, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) dup2(r9, r7) 08:44:11 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x400455c8, 0x0) 08:44:11 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0x100c000, 0x1000}) 08:44:11 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)) ioctl$TCXONC(r1, 0x800455ca, 0x0) 08:44:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r8 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r6, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) dup2(r9, r7) 08:44:11 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VT_ACTIVATE(r0, 0x5606, 0x800) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f0000000040)=0x2, 0x4) close(r0) 08:44:11 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d", 0x3c, 0xfffffffffffffffa) keyctl$describe(0x6, 0x0, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r8 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r6, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) dup2(r9, r7) 08:44:11 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x400455c8, 0x0) 08:44:11 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)) ioctl$TCXONC(r1, 0x800455ca, 0x0) 08:44:11 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$UDMABUF_CREATE(r1, 0x40187542, 0x0) 08:44:11 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) epoll_create(0x6) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x400) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000001580)={0x2, &(0x7f00000013c0)=[{0xfff, 0x9}, {0xf9f0, 0x2}]}) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000200)={&(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/251, 0xfb}, {&(0x7f0000000280)=""/4096, 0x1000}], 0x2, &(0x7f0000001280)=""/226, 0xe2}, 0x2100) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001600)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000001540)={&(0x7f0000001380), 0xc, &(0x7f0000001500)={&(0x7f0000001400)={0xe4, r3, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x64}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@initdev={0xfe, 0x88, [], 0x1, 0x0}}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x1d}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xb8a8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3f}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x46}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x64}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7ff}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xfffffffffffffffd}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) close(r0) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000001640)={0x0, @bcast, @bpq0='bpq0\x00', 0x1ff, 'syz1\x00', @bcast, 0x2, 0x3, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @bcast, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) 08:44:11 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) r6 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae", 0x3b, 0xfffffffffffffffa) keyctl$describe(0x6, r6, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r9 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r7, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r9, 0x1276, 0x0) dup2(r10, r8) 08:44:11 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)) ioctl$TCXONC(r1, 0x800455ca, 0x0) 08:44:11 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x400455c8, 0x0) 08:44:11 executing program 2: socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r1, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917}, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r7 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r5, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r2}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r7, 0x1276, 0x0) dup2(r8, r6) 08:44:11 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d", 0x3c, 0xfffffffffffffffa) keyctl$describe(0x6, 0x0, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r8 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r6, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) dup2(r9, r7) 08:44:12 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x400455c8, 0x0) 08:44:12 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(0xffffffffffffffff, 0x800455ca, 0x0) 08:44:12 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) r6 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae", 0x3b, 0xfffffffffffffffa) keyctl$describe(0x6, r6, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r9 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r7, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r9, 0x1276, 0x0) dup2(r10, r8) 08:44:12 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffff5}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) close(r0) 08:44:12 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x400455c8, 0x0) 08:44:12 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) r6 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d", 0x3c, 0xfffffffffffffffa) keyctl$describe(0x6, r6, 0x0, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r9 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r7, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r9, 0x1276, 0x0) dup2(r10, r8) 08:44:12 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(0xffffffffffffffff, 0x800455ca, 0x0) 08:44:12 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x400455c8, 0x0) 08:44:12 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x3e8, 0x424040) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000040)) close(r0) 08:44:12 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) ioctl$TCXONC(r1, 0x400455c8, 0x0) 08:44:12 executing program 2: socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r1, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917}, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r7 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r5, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r2}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r7, 0x1276, 0x0) dup2(r8, r6) 08:44:12 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(0xffffffffffffffff, 0x800455ca, 0x0) 08:44:12 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x7ffffffffffffd) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f0000000040)) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$KDGETLED(r1, 0x4b31, &(0x7f00000000c0)) close(r0) 08:44:12 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) r6 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d", 0x3c, 0xfffffffffffffffa) keyctl$describe(0x6, r6, 0x0, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r9 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r7, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r9, 0x1276, 0x0) dup2(r10, r8) 08:44:12 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="160100010702000d90e90175692765553922ab521f47c86780b716684e817cbedcc714084a799d627a7536c80812924eda06583378d4555aee3baef8280e52138c42894f57b8c3df35820dc4eba1b9fb8b071163581bbc497989637e78fedcad22bff8698e6047c98c0f3ed7249e531d0600d7c3be7c7442f73b4a3e50cddb671888f6cad0237600020000d780e4a40e64604e82108c2613456f44af1b8cf90c59e77fb669eb32a01d000000000000000000000000002f3300da40c3700f7d8168cb01da4fb67902b2edfc003751ebd74aacc696467e9e90c236a179e0858335e710e6da30a50020fa92cd96c53d61f217520c436ff5dd7c1bdc4d322633e50294bf0f615e41886d3e5bbd46ba7377838bb5f6fd27f1e61498f26566f7df7fe0cbeccf2068758265c84699d1d219cbce379adb033a62c1da572b5bc314fb882b08ae9ccb9c143f76975209b1054c829a5f9f67e63de836a40c63267fbbdd78909ab60edad2bac449e499c3c7afbf3b3dfdcedf73e116f2d61261ab113841db6a50ddb8a1fae3f2aa881691ed67b77cbce32a9601d6315a2b1081c1ccccaad920603184c87098751e39f05e04591a8db85e1951accda06412b56ef6332ae476bca48413a75817f59dd53bc632784a89adfe5f941bc188efb3fbf8bb4f6d73035f1660fb6d216022db1296fa4690"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) r6 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae", 0x3b, 0xfffffffffffffffa) keyctl$describe(0x6, r6, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r9 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r7, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r9, 0x1276, 0x0) dup2(r10, r8) 08:44:12 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) ioctl$TCXONC(r1, 0x400455c8, 0x0) 08:44:13 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) r6 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d", 0x3c, 0xfffffffffffffffa) keyctl$describe(0x6, r6, 0x0, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r9 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r7, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r9, 0x1276, 0x0) dup2(r10, r8) 08:44:13 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) r6 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d", 0x3c, 0xfffffffffffffffa) keyctl$describe(0x6, r6, 0x0, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r9 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r7, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r9, 0x1276, 0x0) dup2(r10, r8) 08:44:13 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) ioctl$TCXONC(r1, 0x400455c8, 0x0) 08:44:13 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1000000011) close(r0) 08:44:13 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d", 0x3c, 0xfffffffffffffffa) keyctl$describe(0x6, 0x0, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r8 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r6, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) dup2(r9, r7) 08:44:13 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x80000) ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f0000000080)=""/98) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x5a9, 0x81, 0x4, 0xc, 0x8, 0xfffffffffffffffa, 0x2, 0x6, 0x0, 0x5a0, 0x3}) syz_open_pts(r0, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x300, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x40081) ioctl$VIDIOC_G_AUDIO(r1, 0x80345621, &(0x7f0000001340)) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000280)=""/4096) close(r0) 08:44:13 executing program 2: socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r1, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917}, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r7 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r5, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r2}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r7, 0x1276, 0x0) dup2(r8, r6) 08:44:13 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)) ioctl$TCXONC(r1, 0x400455c8, 0x0) 08:44:13 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27}) r5 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d", 0x3c, 0xfffffffffffffffa) keyctl$describe(0x6, r5, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r8 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r6, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) dup2(r9, r7) 08:44:14 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1000000011) close(r0) 08:44:14 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)) ioctl$TCXONC(r1, 0x400455c8, 0x0) 08:44:14 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)) ioctl$TCXONC(r1, 0x400455c8, 0x0) 08:44:14 executing program 5: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)) r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) close(0xffffffffffffffff) 08:44:14 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="160100010702000d90e90175692765553922ab521f47c86780b716684e817cbedcc714084a799d627a7536c80812924eda06583378d4555aee3baef8280e52138c42894f57b8c3df35820dc4eba1b9fb8b071163581bbc497989637e78fedcad22bff8698e6047c98c0f3ed7249e531d0600d7c3be7c7442f73b4a3e50cddb671888f6cad0237600020000d780e4a40e64604e82108c2613456f44af1b8cf90c59e77fb669eb32a01d000000000000000000000000002f3300da40c3700f7d8168cb01da4fb67902b2edfc003751ebd74aacc696467e9e90c236a179e0858335e710e6da30a50020fa92cd96c53d61f217520c436ff5dd7c1bdc4d322633e50294bf0f615e41886d3e5bbd46ba7377838bb5f6fd27f1e61498f26566f7df7fe0cbeccf2068758265c84699d1d219cbce379adb033a62c1da572b5bc314fb882b08ae9ccb9c143f76975209b1054c829a5f9f67e63de836a40c63267fbbdd78909ab60edad2bac449e499c3c7afbf3b3dfdcedf73e116f2d61261ab113841db6a50ddb8a1fae3f2aa881691ed67b77cbce32a9601d6315a2b1081c1ccccaad920603184c87098751e39f05e04591a8db85e1951accda06412b56ef6332ae476bca48413a75817f59dd53bc632784a89adfe5f941bc188efb3fbf8bb4f6d73035f1660fb6d216022db1296fa4690"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27}) r5 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d", 0x3c, 0xfffffffffffffffa) keyctl$describe(0x6, r5, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r8 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r6, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) dup2(r9, r7) 08:44:14 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x284400, 0x0) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000100)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r3, 0x300, 0x70bd2d, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40080) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) close(r0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r2, 0x40045731, &(0x7f0000000200)) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000000)=0xf51) timer_create(0x7, &(0x7f0000000280)={0x0, 0x22, 0x2}, &(0x7f00000002c0)=0x0) timer_gettime(r4, &(0x7f0000000300)) 08:44:14 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="160100010702000d90e90175692765553922ab521f47c86780b716684e817cbedcc714084a799d627a7536c80812924eda06583378d4555aee3baef8280e52138c42894f57b8c3df35820dc4eba1b9fb8b071163581bbc497989637e78fedcad22bff8698e6047c98c0f3ed7249e531d0600d7c3be7c7442f73b4a3e50cddb671888f6cad0237600020000d780e4a40e64604e82108c2613456f44af1b8cf90c59e77fb669eb32a01d000000000000000000000000002f3300da40c3700f7d8168cb01da4fb67902b2edfc003751ebd74aacc696467e9e90c236a179e0858335e710e6da30a50020fa92cd96c53d61f217520c436ff5dd7c1bdc4d322633e50294bf0f615e41886d3e5bbd46ba7377838bb5f6fd27f1e61498f26566f7df7fe0cbeccf2068758265c84699d1d219cbce379adb033a62c1da572b5bc314fb882b08ae9ccb9c143f76975209b1054c829a5f9f67e63de836a40c63267fbbdd78909ab60edad2bac449e499c3c7afbf3b3dfdcedf73e116f2d61261ab113841db6a50ddb8a1fae3f2aa881691ed67b77cbce32a9601d6315a2b1081c1ccccaad920603184c87098751e39f05e04591a8db85e1951accda06412b56ef6332ae476bca48413a75817f59dd53bc632784a89adfe5f941bc188efb3fbf8bb4f6d73035f1660fb6d216022db1296fa4690"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) r6 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae", 0x3b, 0xfffffffffffffffa) keyctl$describe(0x6, r6, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r9 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r7, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r9, 0x1276, 0x0) dup2(r10, r8) 08:44:14 executing program 2: socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r1, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917}, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r7 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r5, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r2}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r7, 0x1276, 0x0) dup2(r8, r6) 08:44:14 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(0xffffffffffffffff, 0x400455c8, 0x0) 08:44:14 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r8 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r6, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) dup2(r9, r7) 08:44:14 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27}) r5 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d", 0x3c, 0xfffffffffffffffa) keyctl$describe(0x6, r5, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, 0x0) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r8 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r6, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) dup2(r9, r7) 08:44:14 executing program 5: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)) r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) close(0xffffffffffffffff) 08:44:14 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="160100010702000d90e90175692765553922ab521f47c86780b716684e817cbedcc714084a799d627a7536c80812924eda06583378d4555aee3baef8280e52138c42894f57b8c3df35820dc4eba1b9fb8b071163581bbc497989637e78fedcad22bff8698e6047c98c0f3ed7249e531d0600d7c3be7c7442f73b4a3e50cddb671888f6cad0237600020000d780e4a40e64604e82108c2613456f44af1b8cf90c59e77fb669eb32a01d000000000000000000000000002f3300da40c3700f7d8168cb01da4fb67902b2edfc003751ebd74aacc696467e9e90c236a179e0858335e710e6da30a50020fa92cd96c53d61f217520c436ff5dd7c1bdc4d322633e50294bf0f615e41886d3e5bbd46ba7377838bb5f6fd27f1e61498f26566f7df7fe0cbeccf2068758265c84699d1d219cbce379adb033a62c1da572b5bc314fb882b08ae9ccb9c143f76975209b1054c829a5f9f67e63de836a40c63267fbbdd78909ab60edad2bac449e499c3c7afbf3b3dfdcedf73e116f2d61261ab113841db6a50ddb8a1fae3f2aa881691ed67b77cbce32a9601d6315a2b1081c1ccccaad920603184c87098751e39f05e04591a8db85e1951accda06412b56ef6332ae476bca48413a75817f59dd53bc632784a89adfe5f941bc188efb3fbf8bb4f6d73035f1660fb6d216022db1296fa4690"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27}) r5 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d", 0x3c, 0xfffffffffffffffa) keyctl$describe(0x6, r5, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r8 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r6, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) dup2(r9, r7) 08:44:15 executing program 2: socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r1, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917}, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r7 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r5, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r2}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r7, 0x1276, 0x0) dup2(r8, r6) 08:44:15 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(0xffffffffffffffff, 0x400455c8, 0x0) 08:44:15 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000000)) msgget(0x2, 0x421) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0xa4000, 0x0) ioctl$ASHMEM_GET_NAME(r2, 0x81007702, &(0x7f00000000c0)=""/164) close(r0) getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f0000000180)=""/152, &(0x7f0000000280)=0x98) 08:44:15 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27}) r5 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d", 0x3c, 0xfffffffffffffffa) keyctl$describe(0x6, r5, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, 0x0) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r8 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r6, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) dup2(r9, r7) 08:44:15 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) r6 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3c", 0x39, 0xfffffffffffffffa) keyctl$describe(0x6, r6, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r9 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r7, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r9, 0x1276, 0x0) dup2(r10, r8) 08:44:15 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(0xffffffffffffffff, 0x400455c8, 0x0) 08:44:15 executing program 2: socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r1, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917}, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r7 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r5, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r2}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r7, 0x1276, 0x0) dup2(r8, r6) 08:44:15 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) close(r0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r2, 0x4008af14, &(0x7f0000000040)={0x0, 0x400}) 08:44:15 executing program 4 (fault-call:4 fault-nth:0): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x800455ca, 0x0) 08:44:15 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27}) r5 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d", 0x3c, 0xfffffffffffffffa) keyctl$describe(0x6, r5, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, 0x0) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r8 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r6, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) dup2(r9, r7) 08:44:15 executing program 0 (fault-call:4 fault-nth:0): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$UDMABUF_CREATE(r1, 0x40187542, 0x0) 08:44:15 executing program 3 (fault-call:4 fault-nth:0): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x400455c8, 0x0) [ 401.627539] FAULT_INJECTION: forcing a failure. [ 401.627539] name failslab, interval 1, probability 0, space 0, times 0 [ 401.661173] CPU: 0 PID: 14811 Comm: syz-executor.3 Not tainted 5.0.0-rc6 #67 [ 401.668759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 401.678125] Call Trace: [ 401.680769] dump_stack+0x172/0x1f0 [ 401.684445] should_fail.cold+0xa/0x1b [ 401.684463] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 401.684477] ? lock_downgrade+0x810/0x810 [ 401.684495] ? ___might_sleep+0x163/0x280 [ 401.684519] __should_failslab+0x121/0x190 [ 401.684539] should_failslab+0x9/0x14 [ 401.684556] kmem_cache_alloc_trace+0x2d1/0x760 [ 401.684574] ? ___might_sleep+0x163/0x280 [ 401.684682] h4_open+0x46/0x160 [ 401.693867] hci_uart_tty_ioctl+0x2d4/0xa70 [ 401.694011] tty_ioctl+0xac9/0x14d0 [ 401.730449] ? hci_uart_init_work+0x150/0x150 [ 401.734974] ? tty_vhangup+0x30/0x30 [ 401.738710] ? mark_held_locks+0x100/0x100 [ 401.738811] ? proc_fail_nth_write+0x9d/0x1e0 [ 401.738830] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 401.747651] ? smack_log+0x415/0x540 [ 401.747671] ? smk_access_entry+0x1c0/0x1c0 [ 401.761269] ? __fget+0x340/0x540 [ 401.764735] ? smk_access+0x40d/0x570 [ 401.768559] ? find_held_lock+0x35/0x130 [ 401.772712] ? smk_tskacc+0x2ba/0x390 [ 401.776542] ? tty_vhangup+0x30/0x30 [ 401.780284] do_vfs_ioctl+0xd6e/0x1390 [ 401.784202] ? smk_curacc+0x7f/0xa0 [ 401.787847] ? ioctl_preallocate+0x210/0x210 [ 401.792330] ? smack_file_ioctl+0x196/0x300 [ 401.796683] ? smack_file_lock+0x240/0x240 [ 401.800937] ? __fget+0x367/0x540 [ 401.804424] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 401.809988] ? fput+0x128/0x1a0 [ 401.813300] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 401.818869] ? security_file_ioctl+0x93/0xc0 [ 401.823288] ksys_ioctl+0xab/0xd0 [ 401.826750] __x64_sys_ioctl+0x73/0xb0 [ 401.830662] do_syscall_64+0x103/0x610 [ 401.834559] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 401.834571] RIP: 0033:0x457e39 [ 401.834587] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 401.842956] RSP: 002b:00007f3a9c3f8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 401.869557] RAX: ffffffffffffffda RBX: 00007f3a9c3f8c90 RCX: 0000000000457e39 08:44:16 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x400, 0x0) sendto$isdn(r2, &(0x7f0000000040)={0x3ea, 0x100000001, "9272af87a69f3af0ccaf04963f48d1e91d02a4d009082a4138320ff0626ae58e"}, 0x28, 0x20000855, &(0x7f00000000c0)={0x22, 0xfd5, 0x8, 0x404000000000, 0xf}, 0x6) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) close(r0) 08:44:16 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$UDMABUF_CREATE(r1, 0x40187542, 0x0) 08:44:16 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x100000000000b) close(r0) 08:44:16 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$UDMABUF_CREATE(r1, 0x2, 0x0) 08:44:16 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x800455ca, 0x0) [ 401.876826] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000004 [ 401.884098] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 401.891382] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3a9c3f96d4 [ 401.898656] R13: 00000000004c1f67 R14: 00000000004d46d8 R15: 0000000000000005 08:44:16 executing program 3 (fault-call:4 fault-nth:1): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x400455c8, 0x0) 08:44:16 executing program 2: socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r1, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917}, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r7 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r5, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r2}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r7, 0x1276, 0x0) dup2(r8, r6) 08:44:16 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27}) r5 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d", 0x3c, 0xfffffffffffffffa) keyctl$describe(0x6, r5, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, 0x0) pipe2(0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r6 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r6, 0x1276, 0x0) dup2(r7, 0xffffffffffffffff) 08:44:16 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x2, 0x0) 08:44:16 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) iopl(0x85) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) close(r0) 08:44:16 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$UDMABUF_CREATE(r1, 0x5401, 0x0) [ 402.256364] FAULT_INJECTION: forcing a failure. [ 402.256364] name failslab, interval 1, probability 0, space 0, times 0 [ 402.306594] CPU: 1 PID: 14847 Comm: syz-executor.3 Not tainted 5.0.0-rc6 #67 [ 402.313833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 402.323193] Call Trace: [ 402.325809] dump_stack+0x172/0x1f0 [ 402.329459] should_fail.cold+0xa/0x1b [ 402.333358] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 402.338486] ? lock_downgrade+0x810/0x810 [ 402.342656] ? ___might_sleep+0x163/0x280 [ 402.346822] __should_failslab+0x121/0x190 [ 402.351072] should_failslab+0x9/0x14 [ 402.354880] kmem_cache_alloc_trace+0x2d1/0x760 [ 402.359553] ? lockdep_init_map+0x10c/0x5b0 [ 402.363992] hci_alloc_dev+0x43/0x1d00 [ 402.367914] hci_uart_tty_ioctl+0x321/0xa70 [ 402.372347] tty_ioctl+0xac9/0x14d0 [ 402.375982] ? hci_uart_init_work+0x150/0x150 [ 402.380511] ? tty_vhangup+0x30/0x30 [ 402.384257] ? mark_held_locks+0x100/0x100 [ 402.388492] ? proc_fail_nth_write+0x9d/0x1e0 [ 402.392992] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 402.398533] ? smack_log+0x415/0x540 [ 402.402253] ? smk_access_entry+0x1c0/0x1c0 [ 402.406607] ? __fget+0x340/0x540 [ 402.410074] ? smk_access+0x40d/0x570 [ 402.413889] ? find_held_lock+0x35/0x130 [ 402.418093] ? smk_tskacc+0x2ba/0x390 [ 402.421915] ? tty_vhangup+0x30/0x30 [ 402.425650] do_vfs_ioctl+0xd6e/0x1390 [ 402.429557] ? smk_curacc+0x7f/0xa0 [ 402.433289] ? ioctl_preallocate+0x210/0x210 [ 402.437716] ? smack_file_ioctl+0x196/0x300 [ 402.442062] ? smack_file_lock+0x240/0x240 [ 402.446304] ? __fget+0x367/0x540 [ 402.449778] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 402.455324] ? fput+0x128/0x1a0 [ 402.458618] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 402.464167] ? security_file_ioctl+0x93/0xc0 [ 402.469661] ksys_ioctl+0xab/0xd0 [ 402.469680] __x64_sys_ioctl+0x73/0xb0 [ 402.469700] do_syscall_64+0x103/0x610 [ 402.469721] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 402.469736] RIP: 0033:0x457e39 08:44:16 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x5409, 0x0) 08:44:16 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$UDMABUF_CREATE(r1, 0x5402, 0x0) [ 402.489489] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 08:44:16 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000100)='tls\x00', 0x4) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x40, 0x0) setsockopt$inet_tcp_TLS_RX(r3, 0x6, 0x2, &(0x7f0000000040), 0x4) close(r0) 08:44:16 executing program 3 (fault-call:4 fault-nth:2): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x400455c8, 0x0) [ 402.489499] RSP: 002b:00007f3a9c3f8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 402.489514] RAX: ffffffffffffffda RBX: 00007f3a9c3f8c90 RCX: 0000000000457e39 08:44:17 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27}) r5 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d", 0x3c, 0xfffffffffffffffa) keyctl$describe(0x6, r5, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, 0x0) pipe2(0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r6 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r6, 0x1276, 0x0) dup2(r7, 0xffffffffffffffff) 08:44:17 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x540b, 0x0) [ 402.489524] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000004 08:44:17 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$UDMABUF_CREATE(r1, 0x5403, 0x0) [ 402.489533] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 402.489542] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3a9c3f96d4 [ 402.489552] R13: 00000000004c1f67 R14: 00000000004d46d8 R15: 0000000000000005 [ 402.561047] Bluetooth: Can't allocate HCI device [ 402.720642] FAULT_INJECTION: forcing a failure. [ 402.720642] name failslab, interval 1, probability 0, space 0, times 0 [ 402.720662] CPU: 0 PID: 14875 Comm: syz-executor.3 Not tainted 5.0.0-rc6 #67 [ 402.720671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 402.720677] Call Trace: [ 402.720700] dump_stack+0x172/0x1f0 [ 402.720720] should_fail.cold+0xa/0x1b [ 402.720740] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 402.720756] ? lock_downgrade+0x810/0x810 [ 402.720774] ? ___might_sleep+0x163/0x280 [ 402.720800] __should_failslab+0x121/0x190 [ 402.720821] should_failslab+0x9/0x14 [ 402.720837] __kmalloc+0x2dc/0x740 [ 402.720933] ? __alloc_workqueue_key+0x137/0xe00 [ 402.720959] __alloc_workqueue_key+0x137/0xe00 [ 402.721000] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 402.721020] ? scnprintf+0x140/0x140 [ 402.721073] ? __init_waitqueue_head+0x36/0x90 [ 402.721128] ? pm_runtime_init+0x364/0x420 [ 402.721152] hci_register_dev+0x1c6/0x880 [ 402.721204] ? hci_init_sysfs+0x7c/0xa0 [ 402.721230] hci_uart_tty_ioctl+0x72a/0xa70 [ 402.721267] tty_ioctl+0xac9/0x14d0 [ 402.721288] ? hci_uart_init_work+0x150/0x150 [ 402.721307] ? tty_vhangup+0x30/0x30 [ 402.721334] ? mark_held_locks+0x100/0x100 [ 402.721352] ? proc_fail_nth_write+0x9d/0x1e0 [ 402.721368] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 402.721382] ? smack_log+0x415/0x540 [ 402.721403] ? smk_access_entry+0x1c0/0x1c0 [ 402.721417] ? __fget+0x340/0x540 [ 402.721430] ? smk_access+0x40d/0x570 [ 402.721444] ? find_held_lock+0x35/0x130 [ 402.721473] ? smk_tskacc+0x2ba/0x390 [ 402.721491] ? tty_vhangup+0x30/0x30 [ 402.721512] do_vfs_ioctl+0xd6e/0x1390 [ 402.721529] ? smk_curacc+0x7f/0xa0 [ 402.721549] ? ioctl_preallocate+0x210/0x210 [ 402.721567] ? smack_file_ioctl+0x196/0x300 [ 402.721588] ? smack_file_lock+0x240/0x240 [ 402.721602] ? __fget+0x367/0x540 [ 402.721630] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 402.721647] ? fput+0x128/0x1a0 [ 402.721667] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 402.721686] ? security_file_ioctl+0x93/0xc0 [ 402.721705] ksys_ioctl+0xab/0xd0 [ 402.721724] __x64_sys_ioctl+0x73/0xb0 [ 402.721746] do_syscall_64+0x103/0x610 [ 402.721767] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 402.721779] RIP: 0033:0x457e39 [ 402.721796] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 402.721804] RSP: 002b:00007f3a9c3f8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 402.721820] RAX: ffffffffffffffda RBX: 00007f3a9c3f8c90 RCX: 0000000000457e39 [ 402.721829] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000004 [ 402.721838] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 08:44:17 executing program 2: socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r1, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917}, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r7 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r5, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r2}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r7, 0x1276, 0x0) dup2(r8, r6) 08:44:17 executing program 3 (fault-call:4 fault-nth:3): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x400455c8, 0x0) 08:44:17 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x540c, 0x0) 08:44:17 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$UDMABUF_CREATE(r1, 0x5404, 0x0) [ 402.721849] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3a9c3f96d4 [ 402.721858] R13: 00000000004c1f67 R14: 00000000004d46d8 R15: 0000000000000005 [ 402.735986] Bluetooth: Can't register HCI device 08:44:17 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27}) r5 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d", 0x3c, 0xfffffffffffffffa) keyctl$describe(0x6, r5, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, 0x0) pipe2(0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r6 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r6, 0x1276, 0x0) dup2(r7, 0xffffffffffffffff) 08:44:17 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x10302, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000040)=0xfff) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) close(r0) 08:44:17 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x540d, 0x0) 08:44:17 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$UDMABUF_CREATE(r1, 0x5405, 0x0) 08:44:17 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) writev(r1, &(0x7f0000000400)=[{&(0x7f00000000c0)="b727d28df6f2469ff635ebd8bd01fcf5778627578ed9746e9cd8e9c0dd5c958633bcb7b18c287433d012bc7620a9fa5328aac5927ac7392ef9fee2add28dccce1e3c5662bda48221ed0abd31c29f2c6115e78aa757d0aa83bd43b7b0f1c73c16406febc5434ec5fe5be6aa6e08775239a695a2b7b1702a8e72b3e2b543c15ddc023fae79233357d80ec8f27f98143bba926c0c1dd0924728bb58edbe814d58c304029c688b3e68c577be45cc867516b0a24579b608d1a3e2780e651199b33426ad9ae04978c892922ef580c9436b088c5f8544010592c9f1d9349e667772457cdb0078", 0xe3}, {&(0x7f0000000000)="314a11a7a3cf7eafd95d48c4e0c5a7a156bc8ab1a59a591a697d0daf6513a44ab25fc175b0905ae2dc4d5793052111cfa5ce4e7a4d186feb65476e55cb4a2241ce95f56f698159b00299dab7bd0455360218405a4707fbb4cd18e91716f4ff139f69170411e90d25", 0x68}, {&(0x7f0000000280)="1f4a1e9819d8870d293770a66318dcebe549ed3ad73dc30d13fa81d7986098a8785350cc0215ca08bf3a54bf97bc3d5fb55d08326591bc01213a88557eb22a8b07d5edc2f51d74dab299fb87c35674eca25d6e87b52112d3a1f75810fe8fc7b7a8b01ce2b54f9134a0c9b0a6514405525fcc87d5a7c8b4fe714b87ee001bc9caec55fa54928fab9d9e4f5c25507cb060583d6f57db870119336c9501a6a86419", 0xa0}, {&(0x7f0000000340)="fe7d737de7fffb0d620df6630bf2ad35f43b4370c5b73013a2b97216710a53aee7ed2292c82868856a1dcef8890279be69206b95fb4aa7b32543b7f2aed558bf9f7755e1e762c01fdd4167b23c85cc87e512d0e6f351334a9bfcc1103e75bf78cb5810c04ae7123a2325092f6d73ad4011deb9cebcf901f471a2599063123dd8c6af45da9bf6d4d7dd6d1f", 0x8b}, {&(0x7f00000001c0)="29e0794135e6ddc4365bfdb9ebe4e82447d8d06c938abae3cf0d16214cd066e269939244160b7f98e45b9bb4256b5b764ab53f3239df568a52e81f4d14cf36a26df46ba8b4ab78df0ed228f98bea9bf4167ef7ff363b67e1278e494cdc1d0978", 0x60}], 0x5) close(r0) [ 403.541349] FAULT_INJECTION: forcing a failure. [ 403.541349] name failslab, interval 1, probability 0, space 0, times 0 [ 403.594994] CPU: 0 PID: 14920 Comm: syz-executor.3 Not tainted 5.0.0-rc6 #67 [ 403.602221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 403.611576] Call Trace: [ 403.611604] dump_stack+0x172/0x1f0 [ 403.611629] should_fail.cold+0xa/0x1b [ 403.611650] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 403.626816] ? lock_downgrade+0x810/0x810 [ 403.630968] ? ___might_sleep+0x163/0x280 [ 403.635127] __should_failslab+0x121/0x190 [ 403.639368] should_failslab+0x9/0x14 [ 403.643176] kmem_cache_alloc_trace+0x2d1/0x760 [ 403.647928] ? rcu_read_lock_sched_held+0x110/0x130 [ 403.652950] ? __kmalloc+0x5d5/0x740 [ 403.652973] alloc_workqueue_attrs+0x82/0x120 [ 403.652992] __alloc_workqueue_key+0x161/0xe00 [ 403.665778] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 403.670798] ? scnprintf+0x140/0x140 [ 403.674536] ? __init_waitqueue_head+0x36/0x90 [ 403.679124] ? pm_runtime_init+0x364/0x420 [ 403.679143] hci_register_dev+0x1c6/0x880 [ 403.679158] ? hci_init_sysfs+0x7c/0xa0 [ 403.679177] hci_uart_tty_ioctl+0x72a/0xa70 [ 403.691501] tty_ioctl+0xac9/0x14d0 [ 403.699415] ? hci_uart_init_work+0x150/0x150 [ 403.699431] ? tty_vhangup+0x30/0x30 [ 403.699453] ? mark_held_locks+0x100/0x100 [ 403.699470] ? proc_fail_nth_write+0x9d/0x1e0 [ 403.716394] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 403.721939] ? smack_log+0x415/0x540 [ 403.725660] ? smk_access_entry+0x1c0/0x1c0 [ 403.729989] ? __fget+0x340/0x540 [ 403.733446] ? smk_access+0x40d/0x570 [ 403.737259] ? find_held_lock+0x35/0x130 [ 403.741342] ? smk_tskacc+0x2ba/0x390 [ 403.745147] ? tty_vhangup+0x30/0x30 [ 403.748867] do_vfs_ioctl+0xd6e/0x1390 [ 403.752761] ? smk_curacc+0x7f/0xa0 [ 403.756423] ? ioctl_preallocate+0x210/0x210 [ 403.760847] ? smack_file_ioctl+0x196/0x300 [ 403.765208] ? smack_file_lock+0x240/0x240 [ 403.769455] ? __fget+0x367/0x540 [ 403.772924] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 403.778467] ? fput+0x128/0x1a0 [ 403.781749] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 403.787290] ? security_file_ioctl+0x93/0xc0 [ 403.791715] ksys_ioctl+0xab/0xd0 08:44:18 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4010, r0, 0x0) r1 = syz_open_pts(r0, 0x0) r2 = fcntl$dupfd(r1, 0x406, r0) sendmsg$key(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0x2, 0x800, 0x8, 0x2f, 0x0, 0x70bd27, 0x25dfdbfd, [@sadb_x_nat_t_port={0x1, 0x16, 0x4e22}, @sadb_x_nat_t_type={0x1, 0x14, 0x3}, @sadb_spirange={0x2, 0x10, 0x4d6, 0x4d5}, @sadb_address={0x5, 0x17, 0x0, 0xa0, 0x0, @in6={0xa, 0x4e20, 0x9, @mcast2, 0x2}}, @sadb_x_policy={0x8, 0x12, 0x3, 0x4, 0x0, 0x6e6bb3, 0x4, {0x6, 0x33, 0x0, 0x6, 0x0, 0xffffffff, 0x0, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@rand_addr=0xdc6}}, @sadb_x_sa2={0x2, 0x13, 0xffcd, 0x0, 0x0, 0x70bd2c, 0x3503}, @sadb_x_sec_ctx={0xf, 0x18, 0x3, 0x1000, 0x6a, "e437eaa0f8fd49e389bc375ca2697c0cfb766824df66276e4b2046510d8ca6acc8d5f7b17adbfdc324b2d7e4515e02ec7221215517d27ac619f9768b05dd72d4c77e10f7750c7e5ed04c1c2dc9b3b8c9e2a0a90d064ba85f05251df0d7a617fc6c230b86bb3d5b5bd834"}, @sadb_x_filter={0x5, 0x1a, @in6=@remote, @in=@empty, 0x11, 0x14}, @sadb_key={0x6, 0x8, 0x118, 0x0, "523faf6dac9412c7ac8d45d81bebd914517052e51080f99e80e28aebf7fc623d32fede"}]}, 0x178}}, 0x4) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) close(r0) 08:44:18 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x540e, 0x0) 08:44:18 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="160100010702000d90e90175692765553922ab521f47c86780b716684e817cbedcc714084a799d627a7536c80812924eda06583378d4555aee3baef8280e52138c42894f57b8c3df35820dc4eba1b9fb8b071163581bbc497989637e78fedcad22bff8698e6047c98c0f3ed7249e531d0600d7c3be7c7442f73b4a3e50cddb671888f6cad0237600020000d780e4a40e64604e82108c2613456f44af1b8cf90c59e77fb669eb32a01d000000000000000000000000002f3300da40c3700f7d8168cb01da4fb67902b2edfc003751ebd74aacc696467e9e90c236a179e0858335e710e6da30a50020fa92cd96c53d61f217520c436ff5dd7c1bdc4d322633e50294bf0f615e41886d3e5bbd46ba7377838bb5f6fd27f1e61498f26566f7df7fe0cbeccf2068758265c84699d1d219cbce379adb033a62c1da572b5bc314fb882b08ae9ccb9c143f76975209b1054c829a5f9f67e63de836a40c63267fbbdd78909ab60edad2bac449e499c3c7afbf3b3dfdcedf73e116f2d61261ab113841db6a50ddb8a1fae3f2aa881691ed67b77cbce32a9601d6315a2b1081c1ccccaad920603184c87098751e39f05e04591a8db85e1951accda06412b56ef6332ae476bca48413a75817f59dd53bc632784a89adfe5f941bc188efb3fbf8bb4f6d73035f1660fb6d216022db1296fa4690"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27}) r5 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d", 0x3c, 0xfffffffffffffffa) keyctl$describe(0x6, r5, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, 0x0) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, 0x0) r8 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r6, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) dup2(r9, r7) [ 403.795171] __x64_sys_ioctl+0x73/0xb0 [ 403.795190] do_syscall_64+0x103/0x610 [ 403.795220] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 403.795235] RIP: 0033:0x457e39 [ 403.803002] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 403.803011] RSP: 002b:00007f3a9c3f8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 403.803026] RAX: ffffffffffffffda RBX: 00007f3a9c3f8c90 RCX: 0000000000457e39 08:44:18 executing program 2: socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r1, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917}, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r7 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r5, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r2}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r7, 0x1276, 0x0) dup2(r8, r6) [ 403.803035] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000004 [ 403.803044] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 403.803057] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3a9c3f96d4 [ 403.867060] R13: 00000000004c1f67 R14: 00000000004d46d8 R15: 0000000000000005 [ 403.940911] Bluetooth: Can't register HCI device 08:44:18 executing program 3 (fault-call:4 fault-nth:4): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x400455c8, 0x0) 08:44:18 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x540f, 0x0) 08:44:18 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) close(r0) r2 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x7, 0x10000) symlinkat(&(0x7f0000000000)='./file0\x00', r2, &(0x7f00000000c0)='./file0\x00') 08:44:18 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$UDMABUF_CREATE(r1, 0x5406, 0x0) 08:44:18 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x2200, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000001) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x0, @ipv4={[], [], @broadcast}, 0xffff}, {0xa, 0x4e24, 0x7fffffff, @empty, 0x8}, r3, 0x8}}, 0x48) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e22, @broadcast}}, 0x9, 0xfffffffffffffffe, 0x7ff, 0x100000000, 0x10}, &(0x7f0000000040)=0x98) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f0000000280)={0xd54, "050ef3047e940bb3fd5458fc04a6ffa922727f7953caa499ad0ec01878077b41", 0x2, 0x8001, 0x3, 0xff06ff, 0x100, 0x4}) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000180)={r4, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xd}}}}, 0x84) close(r1) 08:44:18 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x5410, 0x0) 08:44:18 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$UDMABUF_CREATE(r1, 0x5407, 0x0) [ 404.241471] FAULT_INJECTION: forcing a failure. [ 404.241471] name failslab, interval 1, probability 0, space 0, times 0 [ 404.271253] CPU: 0 PID: 14960 Comm: syz-executor.3 Not tainted 5.0.0-rc6 #67 [ 404.278490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 404.287846] Call Trace: [ 404.290450] dump_stack+0x172/0x1f0 [ 404.294101] should_fail.cold+0xa/0x1b [ 404.298151] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 404.303283] ? lock_downgrade+0x810/0x810 [ 404.307463] ? ___might_sleep+0x163/0x280 [ 404.311628] __should_failslab+0x121/0x190 [ 404.315875] should_failslab+0x9/0x14 [ 404.319684] __kmalloc+0x2dc/0x740 [ 404.323234] ? __lock_is_held+0xb6/0x140 [ 404.327320] ? apply_wqattrs_prepare+0xfb/0x9f0 [ 404.332006] apply_wqattrs_prepare+0xfb/0x9f0 [ 404.336530] apply_workqueue_attrs_locked+0xcb/0x140 [ 404.341648] apply_workqueue_attrs+0x31/0x50 [ 404.346070] __alloc_workqueue_key+0x7ef/0xe00 [ 404.350667] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 404.355683] ? __init_waitqueue_head+0x36/0x90 [ 404.360257] ? pm_runtime_init+0x364/0x420 [ 404.364482] hci_register_dev+0x1c6/0x880 [ 404.368614] ? hci_init_sysfs+0x7c/0xa0 [ 404.372577] hci_uart_tty_ioctl+0x72a/0xa70 [ 404.376885] tty_ioctl+0xac9/0x14d0 [ 404.380500] ? hci_uart_init_work+0x150/0x150 [ 404.385002] ? tty_vhangup+0x30/0x30 [ 404.388730] ? mark_held_locks+0x100/0x100 [ 404.392983] ? proc_fail_nth_write+0x9d/0x1e0 [ 404.397498] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 404.403050] ? smack_log+0x415/0x540 [ 404.406773] ? smk_access_entry+0x1c0/0x1c0 [ 404.411083] ? __fget+0x340/0x540 [ 404.414522] ? smk_access+0x40d/0x570 [ 404.418311] ? find_held_lock+0x35/0x130 [ 404.422364] ? smk_tskacc+0x2ba/0x390 [ 404.426155] ? tty_vhangup+0x30/0x30 [ 404.429859] do_vfs_ioctl+0xd6e/0x1390 [ 404.433735] ? smk_curacc+0x7f/0xa0 [ 404.437352] ? ioctl_preallocate+0x210/0x210 [ 404.441753] ? smack_file_ioctl+0x196/0x300 [ 404.446070] ? smack_file_lock+0x240/0x240 [ 404.450295] ? __fget+0x367/0x540 [ 404.453767] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 404.459325] ? fput+0x128/0x1a0 [ 404.462595] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 404.468130] ? security_file_ioctl+0x93/0xc0 [ 404.472540] ksys_ioctl+0xab/0xd0 [ 404.475988] __x64_sys_ioctl+0x73/0xb0 [ 404.479885] do_syscall_64+0x103/0x610 [ 404.483795] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 404.488987] RIP: 0033:0x457e39 [ 404.492178] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 404.511087] RSP: 002b:00007f3a9c3f8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 404.518788] RAX: ffffffffffffffda RBX: 00007f3a9c3f8c90 RCX: 0000000000457e39 [ 404.526066] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000004 [ 404.533369] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 08:44:18 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) close(r0) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000000)={0x4, 0x3, 0x152}) 08:44:18 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x5412, 0x0) [ 404.540665] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3a9c3f96d4 [ 404.547954] R13: 00000000004c1f67 R14: 00000000004d46d8 R15: 0000000000000005 [ 404.579101] Bluetooth: Can't register HCI device 08:44:18 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="160100010702000d90e90175692765553922ab521f47c86780b716684e817cbedcc714084a799d627a7536c80812924eda06583378d4555aee3baef8280e52138c42894f57b8c3df35820dc4eba1b9fb8b071163581bbc497989637e78fedcad22bff8698e6047c98c0f3ed7249e531d0600d7c3be7c7442f73b4a3e50cddb671888f6cad0237600020000d780e4a40e64604e82108c2613456f44af1b8cf90c59e77fb669eb32a01d000000000000000000000000002f3300da40c3700f7d8168cb01da4fb67902b2edfc003751ebd74aacc696467e9e90c236a179e0858335e710e6da30a50020fa92cd96c53d61f217520c436ff5dd7c1bdc4d322633e50294bf0f615e41886d3e5bbd46ba7377838bb5f6fd27f1e61498f26566f7df7fe0cbeccf2068758265c84699d1d219cbce379adb033a62c1da572b5bc314fb882b08ae9ccb9c143f76975209b1054c829a5f9f67e63de836a40c63267fbbdd78909ab60edad2bac449e499c3c7afbf3b3dfdcedf73e116f2d61261ab113841db6a50ddb8a1fae3f2aa881691ed67b77cbce32a9601d6315a2b1081c1ccccaad920603184c87098751e39f05e04591a8db85e1951accda06412b56ef6332ae476bca48413a75817f59dd53bc632784a89adfe5f941bc188efb3fbf8bb4f6d73035f1660fb6d216022db1296fa4690"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27}) r5 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d", 0x3c, 0xfffffffffffffffa) keyctl$describe(0x6, r5, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, 0x0) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, 0x0) r8 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r6, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) dup2(r9, r7) 08:44:19 executing program 2: socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r1, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917}, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) ioctl$TIOCGSID(r1, 0x5429, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r6 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r4, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r6, 0x1276, 0x0) dup2(r7, r5) 08:44:19 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$UDMABUF_CREATE(r1, 0x5408, 0x0) 08:44:19 executing program 3 (fault-call:4 fault-nth:5): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x400455c8, 0x0) 08:44:19 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x5c6, 0xa000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106, 0x1001}}, 0x20) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm_plock\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000180)={0x12, 0x10, 0xfa00, {&(0x7f0000000040), r2, r3}}, 0x18) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r4 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xf) close(r0) ioctl$TCFLSH(r4, 0x540b, 0x3) ioctl$TIOCNOTTY(r4, 0x5422) 08:44:19 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x5413, 0x0) 08:44:19 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x5414, 0x0) 08:44:19 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x400455c8, 0x0) 08:44:19 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$UDMABUF_CREATE(r1, 0x5409, 0x0) 08:44:19 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) close(r0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) setsockopt$netrom_NETROM_IDLE(r2, 0x103, 0x7, &(0x7f0000000040)=0x4, 0x4) 08:44:19 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27}) r5 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d", 0x3c, 0xfffffffffffffffa) keyctl$describe(0x6, r5, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, 0x0) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, 0x0) r8 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r6, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) dup2(r9, r7) 08:44:19 executing program 2: socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r1, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917}, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) ioctl$TIOCGSID(r1, 0x5429, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r6 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r4, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r6, 0x1276, 0x0) dup2(r7, r5) 08:44:19 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) close(r0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r2, &(0x7f0000000040)={0x2a, 0x6, 0x0, {0x5, 0x2, 0x1, 0x0, '&'}}, 0x2a) 08:44:19 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$UDMABUF_CREATE(r1, 0x540a, 0x0) 08:44:19 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x5415, 0x0) 08:44:19 executing program 5: prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) close(r0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000100)={0x7fff, 0xff, 0x100000001, 0x2, 0x13, 0x74e, 0x4, 0x800, 0x40, 0x1, 0xf76, 0xb3}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x24000, 0x0) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 08:44:19 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$UDMABUF_CREATE(r1, 0x540b, 0x0) 08:44:19 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x5416, 0x0) 08:44:19 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x23c381, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xbf, 0x480040) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)) splice(r1, &(0x7f00000000c0), r2, &(0x7f0000000100), 0x5c4, 0x1) close(r0) [ 407.227740] Bluetooth: hci0: command 0x1003 tx timeout [ 407.233265] Bluetooth: hci0: sending frame failed (-49) [ 409.307779] Bluetooth: hci0: command 0x1001 tx timeout [ 409.313220] Bluetooth: hci0: sending frame failed (-49) [ 411.387709] Bluetooth: hci0: command 0x1009 tx timeout 08:44:29 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x2, 0x0) 08:44:29 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27}) r5 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d", 0x3c, 0xfffffffffffffffa) keyctl$describe(0x6, r5, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, 0x0) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r8 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$PPPOEIOCSFWD(r6, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) dup2(r9, r7) 08:44:29 executing program 2: socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r1, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917}, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) ioctl$TIOCGSID(r1, 0x5429, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r6 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r4, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r6, 0x1276, 0x0) dup2(r7, r5) 08:44:29 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$UDMABUF_CREATE(r1, 0x540c, 0x0) 08:44:29 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0xe0505) r2 = dup3(r1, r0, 0x80000) ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, &(0x7f0000000280)=""/4096) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) close(r0) ioctl$EVIOCSABS20(r2, 0x401845e0, &(0x7f0000000200)={0xc26, 0x4, 0x0, 0x51fb, 0x8001, 0x7ff}) r3 = dup3(r1, r0, 0x80000) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000000c0)={{0x4000, 0x2000, 0x9, 0x2, 0x5, 0x1, 0x5, 0x1000, 0x0, 0xea4, 0x1b, 0x3cc}, {0x1, 0xd000, 0x0, 0x100, 0x9, 0x2, 0x7f, 0xff, 0x7, 0x2, 0x5, 0x100000001}, {0xd000, 0xf001, 0x3, 0x9, 0x100, 0x100000000, 0x8, 0xfffffffffffffe01, 0xee21, 0x3f, 0x3f, 0x200}, {0x6000, 0x1000, 0xe, 0x8, 0x4, 0x2, 0x7fffffff, 0x6, 0x4, 0x5, 0x4, 0xd10}, {0x3000, 0x5000, 0xb, 0xffff, 0x76, 0x0, 0x1, 0x0, 0x8, 0x0, 0x5, 0x200000000}, {0x3000, 0x0, 0xe, 0x4, 0xbefc, 0x8, 0x4, 0xfa8d, 0x7, 0x9, 0x6, 0x8000}, {0x6002, 0xf000, 0xf, 0x80000000, 0x2e0000000000000, 0x9, 0x5, 0x40, 0xaa73, 0x5, 0x5, 0x9b2}, {0x4000, 0x6000, 0x0, 0x7fffffff, 0x6, 0xff, 0x7, 0x10000, 0x3, 0x1, 0x11d, 0x100}, {0x5000, 0x11f002}, {0x6000, 0x7002}, 0x8000003a, 0x0, 0xd000, 0x200, 0xb, 0x1401, 0x1, [0xff, 0x80, 0x6, 0x8]}) r4 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000040)={0x5, 0x0, 0x4, {0x6, 0x0, 0x7, 0x9}}) ioctl$ASHMEM_PURGE_ALL_CACHES(r4, 0x770a, 0x0) 08:44:29 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x5418, 0x0) 08:44:29 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) r1 = syz_open_dev$sndpcmp(&(0x7f00000001c0)='/dev/snd/pcmC#D#p\x00', 0x2, 0xf00) sendto$x25(r1, &(0x7f0000000280)="6705f3ff0799de9a258842f1795348c11e4a68fdfa3b5ef0f94e9c1aa0670fb4bc2eb9b74ff125bf5e4ce3c5ba9da116e1a9b4124fd54158b5b00d34d299c6d2629de3607b134ce9a89d2490d125f62a", 0x50, 0x80, &(0x7f0000000200)={0x9, @remote={[], 0x1}}, 0x12) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) close(r0) r3 = syz_open_dev$usb(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0x7, 0x80) perf_event_open$cgroup(&(0x7f00000000c0)={0x3, 0x70, 0x8, 0x9, 0x8001, 0xbc4, 0x0, 0x5, 0x800, 0x9, 0x2, 0xffff, 0x3, 0x3, 0x3f, 0x2, 0xffffffff, 0xf9b0, 0x3, 0x81, 0xf298, 0x101, 0x0, 0x7, 0x694e, 0x5, 0x40, 0x8, 0x67, 0x80000000, 0x2, 0x200, 0xffff, 0xd2, 0x2, 0x9, 0x5, 0xfff, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000040), 0xf}, 0x10, 0x100, 0xfffffffffffffff8, 0x7, 0x9, 0x4, 0x7}, r3, 0x7, 0xffffffffffffff9c, 0x9) ioctl$TIOCLINUX4(r3, 0x541c, &(0x7f0000000180)) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000300)={0x3f, 0x8004, 0xfffffffffffffe00, 0x1, 0x0}, &(0x7f0000000340)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000380)={r4, @in={{0x2, 0x4e24, @empty}}, 0xff, 0x9, 0x3, 0x800, 0x7}, &(0x7f0000000440)=0x98) r5 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x1a, 0x1c0) ioctl$SIOCNRDECOBS(r5, 0x89e2) 08:44:29 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x541d, 0x0) 08:44:29 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$UDMABUF_CREATE(r1, 0x540d, 0x0) 08:44:29 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x5409, 0x0) 08:44:29 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27}) r5 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d", 0x3c, 0xfffffffffffffffa) keyctl$describe(0x6, r5, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, 0x0) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r8 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$PPPOEIOCSFWD(r6, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) dup2(r9, r7) 08:44:29 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x102, 0x0) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$DRM_IOCTL_GET_UNIQUE(r2, 0xc0106401, &(0x7f00000000c0)={0x18, &(0x7f0000000040)=""/24}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) close(r0) 08:44:30 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x541e, 0x0) 08:44:30 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$UDMABUF_CREATE(r1, 0x540e, 0x0) 08:44:30 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x540b, 0x0) 08:44:30 executing program 2: socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r1, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917}, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r7 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r5, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r2}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r7, 0x1276, 0x0) dup2(r8, r6) 08:44:30 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="160100010702000d90e90175692765553922ab521f47c86780b716684e817cbedcc714084a799d627a7536c80812924eda06583378d4555aee3baef8280e52138c42894f57b8c3df35820dc4eba1b9fb8b071163581bbc497989637e78fedcad22bff8698e6047c98c0f3ed7249e531d0600d7c3be7c7442f73b4a3e50cddb671888f6cad0237600020000d780e4a40e64604e82108c2613456f44af1b8cf90c59e77fb669eb32a01d000000000000000000000000002f3300da40c3700f7d8168cb01da4fb67902b2edfc003751ebd74aacc696467e9e90c236a179e0858335e710e6da30a50020fa92cd96c53d61f217520c436ff5dd7c1bdc4d322633e50294bf0f615e41886d3e5bbd46ba7377838bb5f6fd27f1e61498f26566f7df7fe0cbeccf2068758265c84699d1d219cbce379adb033a62c1da572b5bc314fb882b08ae9ccb9c143f76975209b1054c829a5f9f67e63de836a40c63267fbbdd78909ab60edad2bac449e499c3c7afbf3b3dfdcedf73e116f2d61261ab113841db6a50ddb8a1fae3f2aa881691ed67b77cbce32a9601d6315a2b1081c1ccccaad920603184c87098751e39f05e04591a8db85e1951accda06412b56ef6332ae476bca48413a75817f59dd53bc632784a89adfe5f941bc188efb3fbf8bb4f6d73035f1660fb6d216022db1296fa4690"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27}) r5 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d", 0x3c, 0xfffffffffffffffa) keyctl$describe(0x6, r5, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, 0x0) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r8 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$PPPOEIOCSFWD(r6, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) dup2(r9, r7) 08:44:30 executing program 5: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) fstatfs(r0, &(0x7f0000000140)=""/63) syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)={0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe72ed61, 0x0, 0x0, 0x0, 0xfff}) r2 = syz_open_pts(r1, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x100) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000100)={0x2, 0x10000, 0x5, 0x3, 0xd, 0x3c6, 0x5, 0x1, 0x3, 0xe69, 0x1f, 0x8}) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) close(r1) 08:44:30 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x541f, 0x0) 08:44:30 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$UDMABUF_CREATE(r1, 0x540f, 0x0) 08:44:30 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x540c, 0x0) 08:44:30 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27}) r5 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d", 0x3c, 0xfffffffffffffffa) keyctl$describe(0x6, r5, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, 0x0) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r7 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r7, 0x1276, 0x0) dup2(r8, r6) 08:44:30 executing program 2: socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r1, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917}, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r7 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r5, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r2}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r7, 0x1276, 0x0) dup2(r8, r6) 08:44:30 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x400000, 0x0) ioctl$VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f00000000c0)={0x6, @raw_data="a5a7d80acec73dafb09985c9f416c12f0448d5864f128171af3ca522465419fda23fbb1d889d60bbcb50ef8cf0fcc3c82a45d36e9ff12852de3485af5bfa3847a874bbc8d23cb6c54c33bbcde1c6a696006f28b12daed16246112ab33830035a57d98a4e355ceae76d955154db38695f3cc46b5c479cea6e7e7d68df5368da50ed03e70ae67d96f7db4020624c6f29288ca131f01f504ef624e471cd70e61080ec4a08693b5c80aa62d4eadf95092fb797968198acf0ff96fde56aa59d34637758b6ee085719b6e6"}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) mount(&(0x7f0000000340)=ANY=[@ANYBLOB="2f643000bddb4dda05eca309c4709b059770ad22c6507e549be06011ab00000000000000000000000000000000000000000000000000"], &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='ramfs\x00', 0x240004, &(0x7f0000000300)='/proc/capi/capi20ncci\x00') close(r0) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f00000001c0)={r3, 0x22}) 08:44:30 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x5421, 0x0) 08:44:30 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27}) r5 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d", 0x3c, 0xfffffffffffffffa) keyctl$describe(0x6, r5, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, 0x0) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r7 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r7, 0x1276, 0x0) dup2(r8, r6) 08:44:30 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$UDMABUF_CREATE(r1, 0x5410, 0x0) 08:44:30 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x540d, 0x0) 08:44:30 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x8}) r1 = accept4$x25(0xffffffffffffffff, &(0x7f0000000100)={0x9, @remote}, &(0x7f0000000140)=0x12, 0x80000) connect$x25(r1, &(0x7f0000000180)={0x9, @remote={[], 0x2}}, 0x12) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xf) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x101000, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) ioctl$KVM_GET_CLOCK(r3, 0x8030ae7c, &(0x7f0000000040)) ioctl$IOC_PR_RELEASE(r2, 0x401070ca, &(0x7f0000000340)={0x3, 0x4, 0x1}) close(0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f00000003c0)={0xb6e, 0x642, 0x81d, 0x6, 0x5, 0xa686}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r2, 0x12, 0x2, &(0x7f0000000280)=""/169, &(0x7f0000000200)=0xa9) 08:44:30 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x5422, 0x0) 08:44:30 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$UDMABUF_CREATE(r1, 0x5412, 0x0) 08:44:30 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x540e, 0x0) 08:44:30 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0xfffffffffffffffd, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x8, 0x242) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='/dev/ptmx\x00', r1}, 0x10) r2 = syz_open_pts(r1, 0x0) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000180)) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) close(r0) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000000)={0xffffffff00000001, 0x3ff, 0x4, 0x2, 0x3, 0x101, 0x0, 0x2, 0x5, 0x4}) 08:44:31 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x5423, 0x0) 08:44:31 executing program 2: socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r1, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917}, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r7 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r5, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r2}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r7, 0x1276, 0x0) dup2(r8, r6) 08:44:31 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$UDMABUF_CREATE(r1, 0x5413, 0x0) 08:44:31 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="160100010702000d90e90175692765553922ab521f47c86780b716684e817cbedcc714084a799d627a7536c80812924eda06583378d4555aee3baef8280e52138c42894f57b8c3df35820dc4eba1b9fb8b071163581bbc497989637e78fedcad22bff8698e6047c98c0f3ed7249e531d0600d7c3be7c7442f73b4a3e50cddb671888f6cad0237600020000d780e4a40e64604e82108c2613456f44af1b8cf90c59e77fb669eb32a01d000000000000000000000000002f3300da40c3700f7d8168cb01da4fb67902b2edfc003751ebd74aacc696467e9e90c236a179e0858335e710e6da30a50020fa92cd96c53d61f217520c436ff5dd7c1bdc4d322633e50294bf0f615e41886d3e5bbd46ba7377838bb5f6fd27f1e61498f26566f7df7fe0cbeccf2068758265c84699d1d219cbce379adb033a62c1da572b5bc314fb882b08ae9ccb9c143f76975209b1054c829a5f9f67e63de836a40c63267fbbdd78909ab60edad2bac449e499c3c7afbf3b3dfdcedf73e116f2d61261ab113841db6a50ddb8a1fae3f2aa881691ed67b77cbce32a9601d6315a2b1081c1ccccaad920603184c87098751e39f05e04591a8db85e1951accda06412b56ef6332ae476bca48413a75817f59dd53bc632784a89adfe5f941bc188efb3fbf8bb4f6d73035f1660fb6d216022db1296fa4690"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27}) r5 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d", 0x3c, 0xfffffffffffffffa) keyctl$describe(0x6, r5, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, 0x0) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r7 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, 0x0) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r7, 0x1276, 0x0) dup2(r8, r6) 08:44:31 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x540f, 0x0) 08:44:31 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x40000, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r1, 0xae45, 0xce) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) close(r0) 08:44:31 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x5424, 0x0) 08:44:31 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$UDMABUF_CREATE(r1, 0x5414, 0x0) 08:44:31 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x5410, 0x0) 08:44:31 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x400000, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) close(r1) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000140)) ioctl$KVM_GET_DEVICE_ATTR(r2, 0x4018aee2, &(0x7f0000000100)={0x0, 0x7fff, 0x8, &(0x7f00000000c0)=0x10000}) 08:44:31 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$UDMABUF_CREATE(r1, 0x5415, 0x0) 08:44:31 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x5412, 0x0) 08:44:31 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x2000000000003, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x802, 0x0) write$P9_RLOCK(r1, &(0x7f0000000240)={0x8, 0x35, 0x2, 0x1}, 0x8) r2 = syz_open_pts(r0, 0x3) write$FUSE_WRITE(r1, &(0x7f00000002c0)={0x18, 0x0, 0x3, {0x5}}, 0x18) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) r3 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x7750000, 0x502) recvfrom$unix(r3, &(0x7f00000000c0)=""/221, 0x1a0, 0x40, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) fcntl$setflags(r0, 0x2, 0x1) close(r0) 08:44:31 executing program 2: socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r1, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917}, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r7 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r5, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r2}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r7, 0x1276, 0x0) dup2(r8, r6) 08:44:31 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x5425, 0x0) 08:44:31 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27}) r5 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d", 0x3c, 0xfffffffffffffffa) keyctl$describe(0x6, r5, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, 0x0) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r7 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, 0x0) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r7, 0x1276, 0x0) dup2(r8, r6) 08:44:31 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x5427, 0x0) 08:44:31 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x5413, 0x0) 08:44:31 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) close(r0) fstat(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = dup3(r0, r1, 0x80000) inotify_add_watch(r3, &(0x7f00000000c0)='./file0\x00', 0x8) setfsgid(r2) 08:44:32 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$UDMABUF_CREATE(r1, 0x5416, 0x0) 08:44:32 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x5414, 0x0) 08:44:32 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x5428, 0x0) 08:44:32 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$EVIOCGBITKEY(r2, 0x80404521, &(0x7f0000000100)=""/176) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) close(r0) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000000)=""/113) 08:44:32 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x5429, 0x0) 08:44:32 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x5415, 0x0) 08:44:32 executing program 2: socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r1, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917}, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r7 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r5, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r2}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r7, 0x1276, 0x0) dup2(r8, r6) 08:44:32 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$UDMABUF_CREATE(r1, 0x5418, 0x0) 08:44:32 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27}) r5 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d", 0x3c, 0xfffffffffffffffa) keyctl$describe(0x6, r5, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, 0x0) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r7 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, 0x0) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r7, 0x1276, 0x0) dup2(r8, r6) 08:44:32 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x800, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x3, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0xc480, 0x0) getsockopt$nfc_llcp(r2, 0x118, 0x1, &(0x7f00000013c0)=""/55, 0x37) sendmsg$nfc_llcp(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x27, 0x1, 0x2, 0x0, 0x3fff800000000, 0x8, "1ed7de316df6acc62ec259f1264f316dfb144361ff467dbc15dc6dde4577d8d0b4cea00293eb562f65858d45087978b4a54b60dbcf591ff527234fea79acda", 0x30}, 0x60, &(0x7f00000001c0)=[{&(0x7f0000000140)="08843955cb6478b04f092266de5887817cbf8d0b1018f9f8222d048da45f72f752803ae2b843af8d89d332203c7571055af439", 0x33}, {&(0x7f0000000280)="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", 0x1000}, {&(0x7f0000000180)="d7e16979cb65e358e30b7359368af0d4a554f82dbea9ff6df8a80da18f64e76fc929afbc0221cfc80f89ec8f407f3e", 0x2f}, {&(0x7f0000001280)="6c17f396b65ba412c6b98d48add2b05d267928acd743b1e393774db30a0c7e73c0cbfbeba48499ac40f1959e09a5337674c05f99101bc0fcdcd8addd924be65d052154faaa4488d0feffb032f90202514365c5fec5ed3668f58c850215d7818428ae56f06c4c54143ffd790993b1faea5b35cb89e32561f0888a90aaad80dfac8640ce42fe3272", 0x87}], 0x4, &(0x7f0000001340)=ANY=[@ANYBLOB="5000000000000000ff00210001000000f571ab69c223e1ca75c2d72e3d9cc5b584139eee02d3be0c7e81881a8b88eb9bf786acc08dd8db7d50b024a7e8d46950b5ebb341501238242c68f5dc49153a3e"], 0x50, 0xc800}, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x7, 0x0, 0x4, 0x0, 0xd, 0x7056e895, 0x100, 0xffff, 0x0, 0x9, 0x20, 0x8}) close(r0) 08:44:32 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x5437, 0x0) 08:44:32 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x5416, 0x0) 08:44:32 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$UDMABUF_CREATE(r1, 0x5419, 0x0) 08:44:32 executing program 5: getpeername(0xffffffffffffff9c, &(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f0000000400)=0x80) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffff9c, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x1}, &(0x7f0000000140)=0xc) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000180)={r1, 0x9}, &(0x7f00000001c0)=0x8) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000240)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40080}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r2, 0xe00, 0x70bd2a, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x3}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_TYPE={0x8, 0x4, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x81) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x60801, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)={0x6, 0x0, 0x0, 0x4, 0xfffffffffffffffe, 0xfffffffffffbffff, 0xfffffffffffffff7, 0x0, 0xffffffffffff5c0e, 0x0, 0x4d, 0x7}) r4 = syz_open_pts(r3, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xf) close(r3) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x6, 0x4a0400) 08:44:32 executing program 2: socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r1, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917}, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r7 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r5, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r2}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r7, 0x1276, 0x0) dup2(r8, r6) 08:44:32 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x5441, 0x0) 08:44:32 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27}) r5 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d", 0x3c, 0xfffffffffffffffa) keyctl$describe(0x6, r5, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, 0x0) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r7 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, 0x0) r8 = openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r7, 0x1276, 0x0) dup2(r8, r6) 08:44:32 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x5418, 0x0) 08:44:32 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x5450, 0x0) 08:44:32 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$UDMABUF_CREATE(r1, 0x541a, 0x0) 08:44:33 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) write(r0, &(0x7f00000000c0)="5a2778a01a7c7642faca2064aa411bc289156501203db990af81ba4c28831411a8f202970e5c12e59a6c30b80154c428d8d19b491cc699a419521283cfacd0f2f16645e742b305980887e7db55a0eba89cb1d26b547a526fdeab40701f59b46d60bf55c4da158869acdf7a27b0588357b87d49b7acebdca98f6b35576ad9c0ba2323f6bae7a8007c2f943d64ebc0ed4df30e722e5c8466bb751a27fd46f71a05291507f55f64374c713b31b54dc9dcf1e910281166facf6eac1b0751bda3535e53575e8ffc0d817edb694daf8d568720d5e98b44a48a8148ef7fef", 0xdb) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) close(r0) 08:44:33 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x5451, 0x0) 08:44:33 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$UDMABUF_CREATE(r1, 0x541d, 0x0) 08:44:33 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x541d, 0x0) 08:44:33 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_dev$dmmidi(&(0x7f00000001c0)='/dev/dmmidi#\x00', 0x9, 0x400000) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f00000003c0)=ANY=[@ANYBLOB="6d616e676c65000000000000150000000026b4c98e000000000000000000000004000000040000000000360000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x68) r2 = syz_open_pts(r0, 0x800) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) close(r0) pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) ioctl$DRM_IOCTL_GET_UNIQUE(r3, 0xc0106401, &(0x7f0000000040)={0xc3, &(0x7f00000000c0)=""/195}) ioctl$VIDIOC_G_STD(r1, 0x80085617, &(0x7f0000000200)) write$binfmt_script(r2, &(0x7f0000000280)={'#! ', './file0', [{0x20, '*'}, {0x20, '/dev/ptmx\x00'}], 0xa, "21a6d644e7dd2908a09e5c9a553b52518dc5b07f837552dc9863c0ed365d2a77dfe9ab081bddd5230291ece6eb90e4e604237e65490d12079de54cd831dd6b9549a31906f331b10438148bd44faa3e458551b265456d96501d061766b7135e2fe71f009755667e622fa8318c3980d90646bed11734781b54bc7e0569a7299abe4037e3d4fa28005a34b0be7d5f43fe45eb18625df4a993d960d7a94adee94d90"}, 0xb8) 08:44:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27}) r5 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d", 0x3c, 0xfffffffffffffffa) keyctl$describe(0x6, r5, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, 0x0) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r7 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, 0x0) r8 = openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r7, 0x1276, 0x0) dup2(r8, r6) 08:44:33 executing program 2: socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r1, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917}, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r7 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r5, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r2}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r7, 0x1276, 0x0) dup2(r8, r6) 08:44:33 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x5452, 0x0) 08:44:33 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x545d, 0x0) 08:44:33 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x541e, 0x0) 08:44:33 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$UDMABUF_CREATE(r1, 0x541e, 0x0) 08:44:33 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) socketpair(0x3, 0x0, 0x4, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$netlink(r1, 0x10e, 0x6, &(0x7f00000000c0), &(0x7f0000000100)) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) ioctl$KDGETKEYCODE(r2, 0x4b4c, &(0x7f00000000c0)={0x6, 0x2}) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000000000)={0x8, 0x100, 0x7f, 0x0, 0x1, 0x8}) close(r0) 08:44:33 executing program 2: socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r1, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917}, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r7 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r5, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r2}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r7, 0x1276, 0x0) dup2(r8, r6) 08:44:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27}) r5 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d", 0x3c, 0xfffffffffffffffa) keyctl$describe(0x6, r5, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, 0x0) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r7 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, 0x0) r8 = openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r7, 0x1276, 0x0) dup2(r8, r6) 08:44:33 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x5460, 0x0) 08:44:34 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x541f, 0x0) 08:44:34 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$UDMABUF_CREATE(r1, 0x541f, 0x0) 08:44:34 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x10) close(r0) 08:44:34 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x400455c8, 0x0) 08:44:34 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$UDMABUF_CREATE(r1, 0x5421, 0x0) 08:44:34 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27}) r5 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d", 0x3c, 0xfffffffffffffffa) keyctl$describe(0x6, r5, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, 0x0) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r7 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, 0x0) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r7, 0x1276, 0x0) dup2(r8, r6) 08:44:34 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x5421, 0x0) 08:44:34 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/btrfs-control\x00', 0x1, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r1, 0x800442d3, &(0x7f00000002c0)={0x9, 0xcc21, 0x631b, @link_local, 'bridge_slave_1\x00'}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r0, 0x0) write$binfmt_misc(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="73797a30ac4210e3b3c6eb8e46417763c41567cae52140b94d06905a6644b451fbb9bd948d01676e1acea25ab23ac09e5337d49b0df513fd969c494ffbc8be524ada6d20998baebba0c0927e2374bb29fe862c38b9aecf2220671ac33cbcdfbde2ded9f05865f93f65b07c719c8538b578d004f8d6e4454f76ec05e6f996d6699b02235aaf164379aa1b5f132b7a2e21de7401e724f1d556bbf02d3ead5ba45214e79ceab1757c7956c44f5b17d7e478f0c75acd4cb36e540000000000000000"], 0x7f) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xd) r3 = accept4$inet(r2, 0x0, &(0x7f00000000c0), 0x80800) pipe(&(0x7f0000000300)) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x10) accept4$netrom(r4, 0x0, &(0x7f0000000040), 0x800) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f0000000340)=ANY=[@ANYBLOB="6e6174000000000a000500000000000000000000000040000000000000020000bc01000000000000000000000000000000002000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000f20000000000000000000000"], 0xfffffffffffffe4e) close(r0) 08:44:34 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x400455cb, 0x0) 08:44:34 executing program 2: socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r1, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917}, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r7 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r5, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r2}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r7, 0x1276, 0x0) dup2(r8, r6) 08:44:34 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$UDMABUF_CREATE(r1, 0x5422, 0x0) 08:44:34 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x40049409, 0x0) 08:44:34 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x5422, 0x0) 08:44:34 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0xf) r2 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x0}]}) ioctl$DRM_IOCTL_RM_CTX(r2, 0xc0086421, &(0x7f0000000100)={r3, 0x3}) close(r0) 08:44:34 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27}) r5 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d", 0x3c, 0xfffffffffffffffa) keyctl$describe(0x6, r5, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, 0x0) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r7 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, 0x0) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r7, 0x1276, 0x0) dup2(r8, r6) 08:44:34 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$UDMABUF_CREATE(r1, 0x5423, 0x0) 08:44:34 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x5423, 0x0) 08:44:34 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x4020940d, 0x0) 08:44:34 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) close(r0) 08:44:34 executing program 2: socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r1, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917}, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r7 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r5, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r2}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r7, 0x1276, 0x0) dup2(r8, r6) 08:44:35 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x80045432, 0x0) 08:44:35 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27}) r5 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d", 0x3c, 0xfffffffffffffffa) keyctl$describe(0x6, r5, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, 0x0) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r7 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, 0x0) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r7, 0x1276, 0x0) dup2(r8, r6) 08:44:35 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$UDMABUF_CREATE(r1, 0x5424, 0x0) 08:44:35 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x5424, 0x0) 08:44:35 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0x101400, 0x40) mkdirat(r2, &(0x7f0000000040)='./file0\x00', 0xb0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) r3 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x3, 0x2) openat$cgroup_ro(r3, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x0, 0x0) close(r0) 08:44:35 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x80045440, 0x0) 08:44:35 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$UDMABUF_CREATE(r1, 0x5425, 0x0) 08:44:35 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x5425, 0x0) 08:44:35 executing program 2: socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r1, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917}, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r7 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r5, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r2}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r7, 0x1276, 0x0) dup2(r8, r6) 08:44:35 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27}) r5 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d", 0x3c, 0xfffffffffffffffa) keyctl$describe(0x6, r5, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, 0x0) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r7 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, 0x0) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r7, 0x1276, 0x0) dup2(r8, r6) 08:44:35 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x800455c9, 0x0) 08:44:35 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ptmx\x00', 0x20004, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) close(r0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffff9c, &(0x7f0000000100)={0x10, 0x30, 0xfa00, {&(0x7f00000000c0)={0xffffffffffffffff}, 0x1, {0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, [], 0x11}, 0x3ff}}}, 0x38) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000180)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000280)={{0x9, 0x6, 0x2, 0xd95b, '\x00', 0x8}, 0x1, 0x48, 0x2, r4, 0x5, 0x5, 'syz0\x00', &(0x7f00000001c0)=['*.eth1\x00', '/)]md5sum\xb5\x00', '\x00', '/dev/ptmx\x00', '/proc/sys/net/ipv4/vs/sync_qlen_max\x00'], 0x41, [], [0x5, 0x3, 0x1, 0x7590]}) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f0000000140)={0x11, 0x10, 0xfa00, {&(0x7f0000000040), r3}}, 0x18) 08:44:35 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x5427, 0x0) 08:44:35 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$UDMABUF_CREATE(r1, 0x5427, 0x0) 08:44:35 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x800455cc, 0x0) 08:44:35 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27}) r5 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d", 0x3c, 0xfffffffffffffffa) keyctl$describe(0x6, r5, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, 0x0) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r7 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, 0x0) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r7, 0x1276, 0x0) dup2(r8, r6) 08:44:35 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) close(r0) r2 = socket(0xb, 0x80007, 0x5) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) 08:44:36 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$UDMABUF_CREATE(r1, 0x5428, 0x0) 08:44:36 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x5428, 0x0) 08:44:36 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27}) r5 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d", 0x3c, 0xfffffffffffffffa) keyctl$describe(0x6, r5, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, 0x0) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r7 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, 0x0) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r7, 0x1276, 0x0) dup2(r8, r6) 08:44:36 executing program 2: socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r1, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917}, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r7 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r5, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r2}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r7, 0x1276, 0x0) dup2(r8, r6) 08:44:36 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0xc0045878, 0x0) 08:44:36 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$UDMABUF_CREATE(r1, 0x5429, 0x0) 08:44:36 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000000)=@alg, &(0x7f00000000c0)=0x80, 0x80800) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYBLOB="09000000ebf7e9f54d05880000d00ccc98e4d6ab7e49"], &(0x7f0000000140)=0x11) vmsplice(r0, &(0x7f0000000480)=[{&(0x7f00000001c0)="26e436dfe7eb53861368", 0xffffffffffffff06}, {&(0x7f0000000280)="d73a00be53400b279533e9b012b371cb888b07c1911e61fb76ea64a29d5da1670a8a19d0889cce93f26e6ffb47dc666ca09f66742ae41c98649d794d8bb03b8e9aac9ddec9a312ace0acc157721a26068ccb4c761cd7ed3e473bb810d0b36cc76a4a660e2c8d5fdf4139f028ee7c867a9762ad83737947b8e4984addb955dedd7e19c9172870c7c463afbb94dcbeab3a17b36bba09eaba3935dd504eab7843900666f15662888b97c9aa90970acba08af26e74221a5c43b2e3f4f8da5b61748cfc5a63acc8b461225d97b6db9eced7f87d4c17ef2e88b141", 0xd8}, {&(0x7f0000000200)}, {&(0x7f0000000380)="f30f382cac52922aeb2edce9c8b213a99d485f17c96bfd891aaaad6c2883452a744b319e26", 0x25}, {&(0x7f00000003c0)="0af87f97e91a0a58605a235d5de89ede1116e176cdf3746d4fac3081b1446426394ccad9e74755f4dd6b09d9575668bc537f", 0x32}], 0x5, 0x9) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000180)={0x3f, 0x0, 0x5, 0x6, r2}, 0x10) r3 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xf) close(r0) 08:44:36 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27}) r4 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d", 0x3c, 0xfffffffffffffffa) keyctl$describe(0x6, r4, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, 0x0) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r6 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, 0x0) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r6, 0xc0481273, 0x0) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r6, 0x1276, 0x0) dup2(r7, r5) 08:44:36 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x5429, 0x0) 08:44:36 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0xc0045878, 0x0) 08:44:36 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$UDMABUF_CREATE(r1, 0x5432, 0x0) 08:44:36 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x1fffffffffffffe, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000200)=""/45) r2 = syz_open_pts(r0, 0x0) lseek(r2, 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) close(r0) 08:44:36 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x5437, 0x0) 08:44:36 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27}) r4 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d", 0x3c, 0xfffffffffffffffa) keyctl$describe(0x6, r4, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, 0x0) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r6 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, 0x0) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r6, 0xc0481273, 0x0) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r6, 0x1276, 0x0) dup2(r7, r5) 08:44:36 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0xc0189436, 0x0) 08:44:36 executing program 2: socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r1, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917}, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r6 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r4, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r2}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r6, 0x1276, 0x0) dup2(r7, r5) 08:44:36 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$UDMABUF_CREATE(r1, 0x5433, 0x0) 08:44:36 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) close(r0) 08:44:36 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x5441, 0x0) 08:44:37 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$UDMABUF_CREATE(r1, 0x5434, 0x0) 08:44:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27}) r4 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d", 0x3c, 0xfffffffffffffffa) keyctl$describe(0x6, r4, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, 0x0) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r6 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, 0x0) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r6, 0xc0481273, 0x0) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r6, 0x1276, 0x0) dup2(r7, r5) 08:44:37 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x8, 0x410000) ioctl$NBD_CLEAR_QUE(r1, 0xab05) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) close(r0) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x5, 0x8000) 08:44:37 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0xc020660b, 0x0) 08:44:37 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x5450, 0x0) 08:44:37 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$UDMABUF_CREATE(r1, 0x5435, 0x0) 08:44:37 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) close(r0) ioctl$KDMKTONE(r1, 0x4b30, 0x0) 08:44:37 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$UDMABUF_CREATE(r1, 0x5437, 0x0) 08:44:37 executing program 2: socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r1, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917}, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r6 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r4, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r2}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r6, 0x1276, 0x0) dup2(r7, r5) 08:44:37 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x800, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(0xffffffffffffffff, 0x800455ca, 0x0) 08:44:37 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x5451, 0x0) 08:44:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27}) r5 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d", 0x3c, 0xfffffffffffffffa) keyctl$describe(0x6, r5, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, 0x0) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r7 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, 0x0) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x0, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r7, 0x1276, 0x0) dup2(r8, r6) 08:44:37 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) close(r0) 08:44:37 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x800455ca, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x60042, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000040)={0x0}) r4 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x5, 0x10802) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000100)={r3, 0x80000, r4}) 08:44:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27}) r5 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d", 0x3c, 0xfffffffffffffffa) keyctl$describe(0x6, r5, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, 0x0) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r7 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, 0x0) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x0, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r7, 0x1276, 0x0) dup2(r8, r6) 08:44:37 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x5452, 0x0) 08:44:37 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$UDMABUF_CREATE(r1, 0x5441, 0x0) 08:44:37 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x10000000042, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f00000000c0)=0x10802, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ptmx\x00', 0x80000000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$VIDIOC_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000400)={0x5, 0x0, [], {0x0, @bt={0x318, 0xfffffffffffffffb, 0x0, 0x2, 0x7fffffff, 0x3cf0, 0x5, 0x7, 0x9, 0xfffffffffffffc01, 0x80, 0x8000, 0x100000000, 0xe5d, 0x4, 0x3c}}}) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x40, 0x0, 0x0, 0x4, 0x0, 0x100000001, 0x3ff}) pipe(&(0x7f0000000280)={0xffffffffffffffff}) ioctl$TCGETS(r1, 0x5401, &(0x7f00000001c0)) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040)={0x3, 0xfffffffffffffffd, 0x6, 0x4, 0x2, 0x7, 0x4}, 0xc) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xf) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000140)={0x1, 0x8}) ioctl$DRM_IOCTL_AGP_ENABLE(r0, 0x40086432, &(0x7f0000000180)=0x6) close(0xffffffffffffffff) ioctl$KVM_GET_EMULATED_CPUID(r3, 0xc008ae09, &(0x7f00000002c0)=""/208) ioctl$CAPI_GET_MANUFACTURER(r0, 0xc0044306, &(0x7f00000003c0)=0xf0000000000) write$binfmt_misc(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="73797a30d7fb04000000effed1138d94cc1f8d85"], 0x14) 08:44:37 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x13, 0x3f, 0x0, 0x400000000, 0x3, 0x0, 0x0, 0xffffffff}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) close(r0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x20100, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f00000000c0)={'filter\x00', 0x4}, 0x68) 08:44:37 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x4) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000000040)) r2 = syz_open_pts(r0, 0x8003f) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r2, 0x800455ca, 0x0) 08:44:38 executing program 2: socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r1, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917}, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r6 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r4, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r2}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r6, 0x1276, 0x0) dup2(r7, r5) 08:44:38 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x545d, 0x0) 08:44:38 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$UDMABUF_CREATE(r1, 0x5450, 0x0) 08:44:38 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) close(r0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x400000, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001540)={{{@in6=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@broadcast}}, &(0x7f0000001640)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000003040)={{{@in=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f0000003140)=0xe8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000003180)={'yam0\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000003240)={0x0, @local, @initdev}, &(0x7f0000003280)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f00000032c0)={{{@in=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@local}}, &(0x7f00000033c0)=0xe8) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x24, &(0x7f0000003400)={@dev, @rand_addr, 0x0}, &(0x7f0000003440)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000004bc0)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c00)={{{@in=@multicast2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@local}}, &(0x7f0000004d00)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004d40)={{{@in6=@ipv4={[], [], @remote}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@initdev}}, &(0x7f0000004e40)=0xe8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f000000b3c0)={'veth1\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f000000b400)={{{@in6=@remote, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f000000b500)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f000000b600)={'team0\x00', 0x0}) accept$packet(0xffffffffffffffff, &(0x7f000000b640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f000000b680)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f000000bb00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f000000bb40)=0x14) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f000000bb80)={{{@in=@initdev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f000000bc80)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f000000bcc0)={0x0, @multicast1, @initdev}, &(0x7f000000bd00)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f000000be00)={{{@in6=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f000000bf00)=0xe8) accept$packet(0xffffffffffffffff, &(0x7f000000c4c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f000000c500)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f000000e800)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f000000e900)={{{@in6, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@remote}}, &(0x7f000000ea00)=0xe8) accept4$packet(0xffffffffffffff9c, &(0x7f000000ea40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f000000ea80)=0x14, 0x800) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x23, &(0x7f000000eb80)={@loopback, @multicast1, 0x0}, &(0x7f000000ebc0)=0xc) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f000000ed80)={@multicast2, @multicast1, 0x0}, &(0x7f000000edc0)=0xc) accept$packet(0xffffffffffffffff, &(0x7f000000ee00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f000000ee40)=0x14) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f000000f080)={{{@in6=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@mcast1}}, &(0x7f000000f180)=0xe8) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f000000fa00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f000000f9c0)={&(0x7f000000f1c0)={0x7f8, r3, 0xa10, 0x70bd2b, 0x25dfdbff, {}, [{{0x8, 0x1, r4}, {0x1ec, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r7}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0xffffffffffffff7f}}, {0x8}}}]}}, {{0x8, 0x1, r9}, {0x44, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8, 0x1, r10}, {0xb0, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r11}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r13}}}]}}, {{0x8, 0x1, r14}, {0x1ec, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0xffff}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r15}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r16}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x401}}, {0x8, 0x6, r17}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r18}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r19}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0xff}}}]}}, {{0x8, 0x1, r20}, {0x80, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r21}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xffffffffffffff01}}, {0x8, 0x6, r22}}}]}}, {{0x8, 0x1, r23}, {0x130, 0x2, [{0x7c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x4c, 0x4, [{0xf28, 0x9, 0xe1, 0x7}, {0xffffffffffffff0f, 0xba5, 0xffffffff, 0x479d}, {0x4, 0x23, 0x59, 0xa7}, {0x2, 0x5, 0x400, 0x2}, {0x3, 0x1, 0x5}, {0x1, 0x65b, 0x81, 0x5}, {0x3ff, 0x401, 0x6, 0x1c000000}, {0xffffffffffffffff, 0x6, 0x1a254a67, 0x5}, {0x5, 0x5ecd8369, 0x80000000, 0x4}]}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r24}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r25}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x3}}}]}}, {{0x8, 0x1, r26}, {0x130, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r27}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r28}}}, {0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x14, 0x4, [{0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x3}, {0x9, 0x4, 0x1, 0x3}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0xffffffff}}}]}}]}, 0x7f8}, 0x1, 0x0, 0x0, 0x4008001}, 0x4008890) 08:44:38 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27}) r5 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d", 0x3c, 0xfffffffffffffffa) keyctl$describe(0x6, r5, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, 0x0) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r7 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, 0x0) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x0, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r7, 0x1276, 0x0) dup2(r8, r6) 08:44:38 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) r2 = shmget(0x3, 0x3000, 0x54000222, &(0x7f0000ffa000/0x3000)=nil) shmctl$IPC_INFO(r2, 0x3, &(0x7f0000000280)=""/4096) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x800455ca, 0x0) 08:44:38 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x5460, 0x0) 08:44:38 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="160100010702000d90e90175692765553922ab521f47c86780b716684e817cbedcc714084a799d627a7536c80812924eda06583378d4555aee3baef8280e52138c42894f57b8c3df35820dc4eba1b9fb8b071163581bbc497989637e78fedcad22bff8698e6047c98c0f3ed7249e531d0600d7c3be7c7442f73b4a3e50cddb671888f6cad0237600020000d780e4a40e64604e82108c2613456f44af1b8cf90c59e77fb669eb32a01d000000000000000000000000002f3300da40c3700f7d8168cb01da4fb67902b2edfc003751ebd74aacc696467e9e90c236a179e0858335e710e6da30a50020fa92cd96c53d61f217520c436ff5dd7c1bdc4d322633e50294bf0f615e41886d3e5bbd46ba7377838bb5f6fd27f1e61498f26566f7df7fe0cbeccf2068758265c84699d1d219cbce379adb033a62c1da572b5bc314fb882b08ae9ccb9c143f76975209b1054c829a5f9f67e63de836a40c63267fbbdd78909ab60edad2bac449e499c3c7afbf3b3dfdcedf73e116f2d61261ab113841db6a50ddb8a1fae3f2aa881691ed67b77cbce32a9601d6315a2b1081c1ccccaad920603184c87098751e39f05e04591a8db85e1951accda06412b56ef6332ae476bca48413a75817f59dd53bc632784a89adfe5f941bc188efb3fbf8bb4f6d73035f1660fb6d216022db1296fa4690"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27}) r5 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d", 0x3c, 0xfffffffffffffffa) keyctl$describe(0x6, r5, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, 0x0) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r7 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, 0x0) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x0, 0x0, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r7, 0x1276, 0x0) dup2(r8, r6) 08:44:38 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) r1 = accept(0xffffffffffffff9c, &(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, &(0x7f00000000c0)=0x80) setsockopt$inet_group_source_req(r1, 0x0, 0x2f, &(0x7f0000000100)={0x2, {{0x2, 0x4e22, @multicast2}}, {{0x2, 0x4e21, @loopback}}}, 0x108) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) close(r2) msync(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x7) 08:44:38 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f00000001c0)={0x17, 0x78, &(0x7f0000000140)="f251cbe66439d8eeb611bc001af2c35d5d14be6a728241e3df4518d9601ff8f8a92b2910129c0f55658b6e912dd1c3b751a5537f0974f95613ad30a69a0f41e886dedaf08dfdefafd607324ceb33b3a2cadecdf5a6a4d868d204af498650f25dc35891352adc7d2970cf5901ffb2b62c5e93830e5871caa6"}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000300)=0x0) fcntl$setown(r0, 0x8, r1) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x604000, 0x0) ioctl$TIOCLINUX7(r2, 0x541c, &(0x7f00000000c0)={0x7, 0x5}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) fsetxattr$security_selinux(r3, &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000280)='system_u:object_r:smartcard_device_t:s0\x00', 0x28, 0x2) ioctl$TCSETS(r3, 0x40045431, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r4 = syz_open_pts(r3, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xf) r5 = socket$inet6(0xa, 0x3, 0xffffffff) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) ioctl$int_in(r2, 0x5473, &(0x7f0000000340)=0x7d91) ioctl$TCXONC(r4, 0x800455ca, 0x0) 08:44:38 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$UDMABUF_CREATE(r1, 0x5451, 0x0) 08:44:38 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x400455cb, 0x0) 08:44:38 executing program 2: socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r1, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917}, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, 0x0) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r6 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r4, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r2}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r6, 0x1276, 0x0) dup2(r7, r5) 08:44:38 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27}) r5 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d", 0x3c, 0xfffffffffffffffa) keyctl$describe(0x6, r5, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, 0x0) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r7 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, 0x0) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x0, 0x0, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r7, 0x1276, 0x0) dup2(r8, r6) 08:44:38 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$UDMABUF_CREATE(r1, 0x5452, 0x0) 08:44:38 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = msgget$private(0x0, 0x4) msgrcv(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0xcb, 0x3, 0x1000) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) r3 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$TCXONC(r0, 0x540a, 0x7f) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e22, @local}}, 0x0, 0xfffffffffffffff8}, &(0x7f0000000000)=0x90) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000040)={0x9, 0x2, 0x7, 0x7, 0x9, 0xfd3e, 0x6, 0x7fff, r4}, &(0x7f0000000180)=0x20) ioctl$TCXONC(r2, 0x800455ca, 0x0) 08:44:38 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000000c0)) close(r0) 08:44:38 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27}) r5 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d", 0x3c, 0xfffffffffffffffa) keyctl$describe(0x6, r5, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, 0x0) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r7 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, 0x0) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x0, 0x0, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r7, 0x1276, 0x0) dup2(r8, r6) 08:44:38 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x40049409, 0x0) 08:44:39 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f00000000c0)={0x0, 0xb6, "76818108c0d60329fb7d3d16c6b3a30d56299092d0b9334359f832e2fe55efbd56b33ddb99aa747bd0787df3dd7151a09db5ff3ec8163f654facefbecb6da6c56607416ee2eced12e3c0160fab7c2e076544b61b7bc4bf159c72ff876011d708dae39c09eb0c0731ad4364be0eddc8a24265769e87d8b22107ab1f5e533308131ba0915f1dc6f4b7d1d38d14e243b146b96722fabb40a639d62074cdaaff3091fa531adf9adcfba612589b432c1134ee253cc61f261d"}, &(0x7f0000000000)=0xbe) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e20, 0x4, @ipv4={[], [], @remote}, 0x7f}}}, 0x84) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x103400, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0], 0x1}) close(r1) 08:44:39 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$UDMABUF_CREATE(r1, 0x5456, 0x0) 08:44:39 executing program 2: socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r1, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917}, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, 0x0) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r6 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r4, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r2}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r6, 0x1276, 0x0) dup2(r7, r5) 08:44:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27}) r4 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d", 0x3c, 0xfffffffffffffffa) keyctl$describe(0x6, r4, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, 0x0) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r6 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, 0x0) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x0, 0x279d}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r6, 0x1276, 0x0) dup2(r7, r5) 08:44:39 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x4020940d, 0x0) 08:44:39 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x18) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) close(r0) 08:44:39 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x80045432, 0x0) 08:44:39 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$UDMABUF_CREATE(r1, 0x5457, 0x0) 08:44:39 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x800455ca, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x10000, 0x0) getresuid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)=0x0) r4 = getegid() lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000380)={{{@in6=@mcast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@local}}, &(0x7f0000000480)=0xe8) mount$fuseblk(&(0x7f0000000000)='/dev/loop0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='fuseblk\x00', 0x1080400, &(0x7f00000004c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x800}}, {@max_read={'max_read', 0x3d, 0x200}}, {@default_permissions='default_permissions'}, {@allow_other='allow_other'}, {@max_read={'max_read', 0x3d, 0x100000001}}, {@default_permissions='default_permissions'}], [{@fowner_eq={'fowner', 0x3d, r5}}, {@dont_measure='dont_measure'}, {@fowner_eq={'fowner', 0x3d, r6}}, {@euid_lt={'euid<', r7}}]}}) 08:44:39 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000000)) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) close(r0) 08:44:39 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x80045440, 0x0) 08:44:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="160100010702000d90e90175692765553922ab521f47c86780b716684e817cbedcc714084a799d627a7536c80812924eda06583378d4555aee3baef8280e52138c42894f57b8c3df35820dc4eba1b9fb8b071163581bbc497989637e78fedcad22bff8698e6047c98c0f3ed7249e531d0600d7c3be7c7442f73b4a3e50cddb671888f6cad0237600020000d780e4a40e64604e82108c2613456f44af1b8cf90c59e77fb669eb32a01d000000000000000000000000002f3300da40c3700f7d8168cb01da4fb67902b2edfc003751ebd74aacc696467e9e90c236a179e0858335e710e6da30a50020fa92cd96c53d61f217520c436ff5dd7c1bdc4d322633e50294bf0f615e41886d3e5bbd46ba7377838bb5f6fd27f1e61498f26566f7df7fe0cbeccf2068758265c84699d1d219cbce379adb033a62c1da572b5bc314fb882b08ae9ccb9c143f76975209b1054c829a5f9f67e63de836a40c63267fbbdd78909ab60edad2bac449e499c3c7afbf3b3dfdcedf73e116f2d61261ab113841db6a50ddb8a1fae3f2aa881691ed67b77cbce32a9601d6315a2b1081c1ccccaad920603184c87098751e39f05e04591a8db85e1951accda06412b56ef6332ae476bca48413a75817f59dd53bc632784a89adfe5f941bc188efb3fbf8bb4f6d73035f1660fb6d216022db1296fa4690"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27}) r4 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d", 0x3c, 0xfffffffffffffffa) keyctl$describe(0x6, r4, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, 0x0) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r6 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, 0x0) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x0, 0x279d}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r6, 0x1276, 0x0) dup2(r7, r5) 08:44:39 executing program 2: socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r1, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917}, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, 0x0) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r6 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r4, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r2}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r6, 0x1276, 0x0) dup2(r7, r5) 08:44:39 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$UDMABUF_CREATE(r1, 0x545d, 0x0) 08:44:39 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$UDMABUF_CREATE(r1, 0x5460, 0x0) 08:44:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="160100010702000d90e90175692765553922ab521f47c86780b716684e817cbedcc714084a799d627a7536c80812924eda06583378d4555aee3baef8280e52138c42894f57b8c3df35820dc4eba1b9fb8b071163581bbc497989637e78fedcad22bff8698e6047c98c0f3ed7249e531d0600d7c3be7c7442f73b4a3e50cddb671888f6cad0237600020000d780e4a40e64604e82108c2613456f44af1b8cf90c59e77fb669eb32a01d000000000000000000000000002f3300da40c3700f7d8168cb01da4fb67902b2edfc003751ebd74aacc696467e9e90c236a179e0858335e710e6da30a50020fa92cd96c53d61f217520c436ff5dd7c1bdc4d322633e50294bf0f615e41886d3e5bbd46ba7377838bb5f6fd27f1e61498f26566f7df7fe0cbeccf2068758265c84699d1d219cbce379adb033a62c1da572b5bc314fb882b08ae9ccb9c143f76975209b1054c829a5f9f67e63de836a40c63267fbbdd78909ab60edad2bac449e499c3c7afbf3b3dfdcedf73e116f2d61261ab113841db6a50ddb8a1fae3f2aa881691ed67b77cbce32a9601d6315a2b1081c1ccccaad920603184c87098751e39f05e04591a8db85e1951accda06412b56ef6332ae476bca48413a75817f59dd53bc632784a89adfe5f941bc188efb3fbf8bb4f6d73035f1660fb6d216022db1296fa4690"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27}) r4 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d", 0x3c, 0xfffffffffffffffa) keyctl$describe(0x6, r4, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, 0x0) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r6 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, 0x0) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x0, 0x279d}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r6, 0x1276, 0x0) dup2(r7, r5) 08:44:40 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x2000) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) close(r0) 08:44:40 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27}) r5 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d", 0x3c, 0xfffffffffffffffa) keyctl$describe(0x6, r5, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, 0x0) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r7 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, 0x0) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x0, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(0x0, 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r7, 0x1276, 0x0) dup2(r8, r6) 08:44:40 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x10000, 0x0) ioctl$KVM_SET_CPUID(r0, 0x4008ae8a, &(0x7f0000000040)={0x1, 0x0, [{0xc0000000, 0x3, 0x6, 0x200, 0x8}]}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x0) ioctl$VIDIOC_G_ENC_INDEX(r0, 0x8818564c, &(0x7f0000000280)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e20, 0xd5, @ipv4={[], [], @loopback}, 0x5}, @in6={0xa, 0x4e21, 0x3, @rand_addr="72d89c94b1c666d29f2e63d7c1b314bc", 0x84}, @in6={0xa, 0x4e21, 0x1, @rand_addr="05000cd84034c0580654c9b2e2dd45c9", 0x7}, @in6={0xa, 0x4e21, 0x8, @local, 0x80000000}, @in={0x2, 0x4e21, @multicast1}], 0x80) getdents(r0, &(0x7f00000000c0)=""/24, 0x18) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000180)=0x0) syz_open_procfs(r3, &(0x7f00000001c0)='coredump_filter\x00') ioctl$TCXONC(r2, 0x800455ca, 0x0) 08:44:40 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x800455c9, 0x0) 08:44:40 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$UDMABUF_CREATE(r1, 0x400455c8, 0x0) 08:44:40 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TIOCSCTTY(r1, 0x540e, 0x1000) ioctl$TCXONC(r1, 0x800455ca, 0x0) 08:44:40 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000000)=0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xf) close(r0) 08:44:40 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x800455ca, 0x0) 08:44:40 executing program 2: socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r1, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917}, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000180)={0x0, 0x27, 0x0, 0xffffffffffffffff}) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r7 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r5, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r2}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r7, 0x1276, 0x0) dup2(r8, r6) 08:44:40 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27}) r5 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d", 0x3c, 0xfffffffffffffffa) keyctl$describe(0x6, r5, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, 0x0) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r7 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, 0x0) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x0, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(0x0, 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r7, 0x1276, 0x0) dup2(r8, r6) 08:44:40 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x240000, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x800455ca, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000500)='/proc/self/net/pfkey\x00', 0x400, 0x0) accept4$llc(r2, &(0x7f0000000540)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000580)=0x10, 0x800) 08:44:40 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x800455cc, 0x0) 08:44:40 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xffff, 0x100) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f00000000c0)={'raw\x00', 0x2, [{}, {}]}, 0x48) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) close(r0) 08:44:40 executing program 4: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffff9c) accept4$alg(r0, 0x0, 0x0, 0x80800) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000040)=0x7ff) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCXONC(r2, 0x800455ca, 0x0) 08:44:40 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27}) r5 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d", 0x3c, 0xfffffffffffffffa) keyctl$describe(0x6, r5, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, 0x0) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r7 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, 0x0) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x0, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(0x0, 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r7, 0x1276, 0x0) dup2(r8, r6) 08:44:40 executing program 2: socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r1, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917}, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000180)={0x0, 0x27, 0x0, 0xffffffffffffffff}) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r7 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r5, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r2}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r7, 0x1276, 0x0) dup2(r8, r6) [ 428.027770] Bluetooth: hci0: command 0x1003 tx timeout [ 428.033206] Bluetooth: hci0: sending frame failed (-49) [ 430.107844] Bluetooth: hci0: command 0x1001 tx timeout [ 430.113281] Bluetooth: hci0: sending frame failed (-49) [ 432.187804] Bluetooth: hci0: command 0x1009 tx timeout 08:44:50 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$UDMABUF_CREATE(r1, 0x400455cb, 0x0) 08:44:50 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0xc0045878, 0x0) 08:44:50 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x42, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000140)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x40000, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x2) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) r3 = syz_open_dev$radio(&(0x7f0000000280)='/dev/radio#\x00', 0x1, 0x2) ioctl$SIOCAX25DELFWD(r3, 0x89eb, &(0x7f0000000040)={@default, @null}) close(r3) 08:44:50 executing program 4: socket$bt_cmtp(0x1f, 0x3, 0x5) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x800455ca, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x400000, 0x0) ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f0000000040)={0x33, 0xf, 0x1, 0x8, 0x8, 0x4, 0x0, 0xbb, 0xffffffffffffffff}) 08:44:50 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="160100010702000d90e90175692765553922ab521f47c86780b716684e817cbedcc714084a799d627a7536c80812924eda06583378d4555aee3baef8280e52138c42894f57b8c3df35820dc4eba1b9fb8b071163581bbc497989637e78fedcad22bff8698e6047c98c0f3ed7249e531d0600d7c3be7c7442f73b4a3e50cddb671888f6cad0237600020000d780e4a40e64604e82108c2613456f44af1b8cf90c59e77fb669eb32a01d000000000000000000000000002f3300da40c3700f7d8168cb01da4fb67902b2edfc003751ebd74aacc696467e9e90c236a179e0858335e710e6da30a50020fa92cd96c53d61f217520c436ff5dd7c1bdc4d322633e50294bf0f615e41886d3e5bbd46ba7377838bb5f6fd27f1e61498f26566f7df7fe0cbeccf2068758265c84699d1d219cbce379adb033a62c1da572b5bc314fb882b08ae9ccb9c143f76975209b1054c829a5f9f67e63de836a40c63267fbbdd78909ab60edad2bac449e499c3c7afbf3b3dfdcedf73e116f2d61261ab113841db6a50ddb8a1fae3f2aa881691ed67b77cbce32a9601d6315a2b1081c1ccccaad920603184c87098751e39f05e04591a8db85e1951accda06412b56ef6332ae476bca48413a75817f59dd53bc632784a89adfe5f941bc188efb3fbf8bb4f6d73035f1660fb6d216022db1296fa4690"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27}) r5 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d", 0x3c, 0xfffffffffffffffa) keyctl$describe(0x6, r5, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, 0x0) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r7 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, 0x0) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x0, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r7, 0x1276, 0x0) dup2(r8, r6) 08:44:50 executing program 2: socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r1, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917}, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000180)={0x0, 0x27, 0x0, 0xffffffffffffffff}) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r7 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r5, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r2}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r7, 0x1276, 0x0) dup2(r8, r6) 08:44:50 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27}) r5 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d", 0x3c, 0xfffffffffffffffa) keyctl$describe(0x6, r5, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, 0x0) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r7 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, 0x0) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x0, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r7, 0x1276, 0x0) dup2(r8, r6) 08:44:50 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0xc0045878, 0x0) 08:44:50 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x80000) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) close(r0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r2, 0xc10c5541, &(0x7f00000000c0)={0x4, 0x8, 0x7, 0x0, 0x0, [], [], [], 0x401, 0x7fff}) 08:44:50 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$UDMABUF_CREATE(r1, 0x40049409, 0x0) 08:44:51 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x800455ca, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x200, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000180)={r3, &(0x7f00000000c0)=""/168}) 08:44:51 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="160100010702000d90e90175692765553922ab521f47c86780b716684e817cbedcc714084a799d627a7536c80812924eda06583378d4555aee3baef8280e52138c42894f57b8c3df35820dc4eba1b9fb8b071163581bbc497989637e78fedcad22bff8698e6047c98c0f3ed7249e531d0600d7c3be7c7442f73b4a3e50cddb671888f6cad0237600020000d780e4a40e64604e82108c2613456f44af1b8cf90c59e77fb669eb32a01d000000000000000000000000002f3300da40c3700f7d8168cb01da4fb67902b2edfc003751ebd74aacc696467e9e90c236a179e0858335e710e6da30a50020fa92cd96c53d61f217520c436ff5dd7c1bdc4d322633e50294bf0f615e41886d3e5bbd46ba7377838bb5f6fd27f1e61498f26566f7df7fe0cbeccf2068758265c84699d1d219cbce379adb033a62c1da572b5bc314fb882b08ae9ccb9c143f76975209b1054c829a5f9f67e63de836a40c63267fbbdd78909ab60edad2bac449e499c3c7afbf3b3dfdcedf73e116f2d61261ab113841db6a50ddb8a1fae3f2aa881691ed67b77cbce32a9601d6315a2b1081c1ccccaad920603184c87098751e39f05e04591a8db85e1951accda06412b56ef6332ae476bca48413a75817f59dd53bc632784a89adfe5f941bc188efb3fbf8bb4f6d73035f1660fb6d216022db1296fa4690"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27}) r5 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d", 0x3c, 0xfffffffffffffffa) keyctl$describe(0x6, r5, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, 0x0) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r7 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, 0x0) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x0, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r7, 0x1276, 0x0) dup2(r8, r6) 08:44:51 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0xc0189436, 0x0) 08:44:51 executing program 2: socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r1, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917}, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r7 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r5, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r2}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r7, 0x1276, 0x0) dup2(r8, r6) 08:44:51 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x198, r2, 0x101, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5e1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x100000001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100000001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3f}]}, @TIPC_NLA_SOCK={0x34, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x96}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1b82}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x100}]}, @TIPC_NLA_SOCK={0x1c, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK={0xc4, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}, @TIPC_NLA_LINK={0x10, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5e}]}, @TIPC_NLA_SOCK={0x18, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x100000001}]}]}, 0x198}}, 0x0) r3 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xf) close(r0) 08:44:51 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$UDMABUF_CREATE(r1, 0x4020940d, 0x0) 08:44:51 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x400, 0x0) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f00000000c0)={0x0, {0x2, 0x4e22, @empty}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xd}}, {0x2, 0x4e23, @remote}, 0x5, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000040)='bpq0\x00', 0x401, 0x4, 0xb3}) ioctl$TCXONC(r1, 0x800455ca, 0x0) 08:44:51 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27}) r5 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d", 0x3c, 0xfffffffffffffffa) keyctl$describe(0x6, r5, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, 0x0) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r7 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, 0x0) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x0, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) dup2(r8, r6) 08:44:51 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0xc020660b, 0x0) 08:44:51 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$UDMABUF_CREATE(r1, 0x402c542b, 0x0) 08:44:51 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)=""/242) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) close(r1) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x8000, 0x0) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f00000001c0)) 08:44:51 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x400455c8, 0x2) 08:44:51 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) ioctl$TCSBRKP(r0, 0x5425, 0xc8) r1 = syz_open_pts(r0, 0x800) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x800455ca, 0x0) 08:44:51 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27}) r5 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d", 0x3c, 0xfffffffffffffffa) keyctl$describe(0x6, r5, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, 0x0) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r7 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, 0x0) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x0, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) dup2(r8, r6) 08:44:51 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$UDMABUF_CREATE(r1, 0x402c542c, 0x0) 08:44:51 executing program 2: socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r1, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917}, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r7 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r5, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r2}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r7, 0x1276, 0x0) dup2(r8, r6) 08:44:51 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='pids.current\x00', 0x0, 0x0) ioctl$KVM_GET_XSAVE(r2, 0x9000aea4, &(0x7f0000000280)) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) close(r0) 08:44:52 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x800455ca, 0x0) r2 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0xffffffff, 0x40) r3 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r3, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x3}, @FOU_ATTR_TYPE={0x8, 0x4, 0x1}, @FOU_ATTR_TYPE={0x8, 0x4, 0x3}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x45) 08:44:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27}) r5 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d", 0x3c, 0xfffffffffffffffa) keyctl$describe(0x6, r5, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, 0x0) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r7 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, 0x0) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x0, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) dup2(r8, r6) 08:44:52 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x400455c8, 0x3) 08:44:52 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$UDMABUF_CREATE(r1, 0x402c542d, 0x0) 08:44:52 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x40001, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000140)={0x4}) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value, &(0x7f0000000100)=0x8) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r0, 0x238001) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) close(r2) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x2, 0x1c000, 0x5, 0x11, 0x7, 0x5, 0xa6, 0x3, 0x0, 0x6d8c, 0x7}) 08:44:52 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x3, 0x220000) r2 = syz_open_dev$usbmon(&(0x7f0000000180)='/dev/usbmon#\x00', 0x0, 0x83) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x22b, 0x2, 0x1, r2}) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x21) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000040)) r4 = syz_open_pts(r0, 0x0) ioctl$KDGETMODE(r3, 0x4b3b, &(0x7f00000000c0)) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r4, 0x800455ca, 0x0) ioctl$TIOCMBIS(r4, 0x5416, &(0x7f0000000000)=0x1) 08:44:52 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x400455c8, 0x4) 08:44:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="160100010702000d90e90175692765553922ab521f47c86780b716684e817cbedcc714084a799d627a7536c80812924eda06583378d4555aee3baef8280e52138c42894f57b8c3df35820dc4eba1b9fb8b071163581bbc497989637e78fedcad22bff8698e6047c98c0f3ed7249e531d0600d7c3be7c7442f73b4a3e50cddb671888f6cad0237600020000d780e4a40e64604e82108c2613456f44af1b8cf90c59e77fb669eb32a01d000000000000000000000000002f3300da40c3700f7d8168cb01da4fb67902b2edfc003751ebd74aacc696467e9e90c236a179e0858335e710e6da30a50020fa92cd96c53d61f217520c436ff5dd7c1bdc4d322633e50294bf0f615e41886d3e5bbd46ba7377838bb5f6fd27f1e61498f26566f7df7fe0cbeccf2068758265c84699d1d219cbce379adb033a62c1da572b5bc314fb882b08ae9ccb9c143f76975209b1054c829a5f9f67e63de836a40c63267fbbdd78909ab60edad2bac449e499c3c7afbf3b3dfdcedf73e116f2d61261ab113841db6a50ddb8a1fae3f2aa881691ed67b77cbce32a9601d6315a2b1081c1ccccaad920603184c87098751e39f05e04591a8db85e1951accda06412b56ef6332ae476bca48413a75817f59dd53bc632784a89adfe5f941bc188efb3fbf8bb4f6d73035f1660fb6d216022db1296fa4690"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27}) r5 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d", 0x3c, 0xfffffffffffffffa) keyctl$describe(0x6, r5, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, 0x0) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r7 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x0, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r7, 0x1276, 0x0) dup2(0xffffffffffffffff, r6) 08:44:52 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0xfffdfffffc000004) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x40000, 0x0) 08:44:52 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$UDMABUF_CREATE(r1, 0x80045432, 0x0) 08:44:52 executing program 2: socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r1, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917}, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r7 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r5, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r2}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r7, 0x1276, 0x0) dup2(r8, r6) 08:44:52 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x80000001, 0x20000) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f00000000c0)=""/124) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x200000, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f00000001c0)={0x4, 0x8, 0xfa00, {r3, 0x6}}, 0x10) r4 = syz_open_pts(r0, 0x0) ioctl$KDADDIO(r4, 0x4b34, 0xa75) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r4, 0x800455ca, 0xffffffffffff2722) 08:44:52 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0xac0, 0x40000) accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000000c0)=0x14) setsockopt$inet_mreqn(r2, 0x0, 0x0, &(0x7f0000000100)={@multicast2, @broadcast, r3}, 0xc) ioctl$TCXONC(r1, 0x800455ca, 0x0) 08:44:52 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x400455c8, 0x5) 08:44:52 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x81}) ioctl$SIOCX25GSUBSCRIP(r0, 0x89e0, &(0x7f0000000100)={'ip6gre0\x00', 0x81, 0x200}) r1 = socket$inet_tcp(0x2, 0x3, 0x6) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="2321202e10ffffff65308b0ebd825de7c1780e0070f700bd0000ef676f96094bdac534049016507dab3a4600"], 0x2c) write$binfmt_script(r1, &(0x7f0000000080)={'#! ', '.', [{0x20, '+'}, {0x20, '#'}], 0xa, "8890e9b0848ae8c41c8bd00317bd6044a9f1a37f7a5564669a1f145addc30f78789c27"}, 0x2c) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x101000, 0x0) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000380)={0x18, 0x0, {0x3, @random="4971333e9758", 'bond_slave_1\x00'}}) write$P9_RWALK(r2, &(0x7f0000000040)={0x23, 0x6f, 0x2, {0x2, [{0x2, 0x3, 0x6}, {0x10, 0x2}]}}, 0x23) r3 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xf) write$binfmt_script(r2, &(0x7f0000000280)={'#! ', './file0', [{0x20, '/dev/ptmx\x00'}, {0x20, 'ip6gre0\x00'}, {0x20, 'ip6gre0\x00'}, {0x20, 'ip6gre0\x00'}, {0x20, 'ip6gre0\x00'}, {0x20, 'em1system+'}, {0x20, '/dev/ptmx\x00'}, {0x20, '\xad][cpuset'}], 0xa, "27f42c7f2f8f5e84f673a9675d7da3bd880bf4f4a127b05728f04c195bea58c620982c94bc9c597f8a3f0d7e27b4811b5d1681a9b30e8793d4d5e7b7357262e3a21341331d60db3d23c69652254d929a48d20023ec57a9200939bacd2ab5cfe5597504367923ba97b7553d8103c49e9c8b41f4edef7b6e93a94ed07acebc7b02dc007c6e12f7fc2cb678d8e30344d1d2eff1bc3fa829b2ed3e37fb7158"}, 0xf7) ioctl$TIOCSCTTY(r2, 0x540e, 0x5) ioctl$TCSETSW(r2, 0x5403, &(0x7f00000000c0)={0x1, 0x81, 0x9, 0x9, 0x9, 0x2, 0x3ff, 0x0, 0x289, 0x7, 0x8, 0x9}) bind$isdn(r2, &(0x7f0000000200)={0x22, 0x1, 0x5, 0xabae, 0x5}, 0x17a) 08:44:52 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$UDMABUF_CREATE(r1, 0x80045440, 0x0) 08:44:52 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x7, 0xffffffff, 0x80, 0x100000000, 0x9, 0x3, 0xba7, 0x52a, 0x80000001, 0x800, 0x8, 0x2}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x800455ca, 0x0) 08:44:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27}) r5 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d", 0x3c, 0xfffffffffffffffa) keyctl$describe(0x6, r5, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, 0x0) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r7 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x0, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r7, 0x1276, 0x0) dup2(0xffffffffffffffff, r6) 08:44:53 executing program 2: socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r1, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917}, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) add_key$user(0x0, &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r7 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r5, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r2}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r7, 0x1276, 0x0) dup2(r8, r6) 08:44:53 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x400, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x41, &(0x7f00000000c0)={'nat\x00', 0xa7, "45c7ababc9e23ddb09bd3de706d8b4e9a31175204e76d411f814a0dd1cd0752b44b69a3021b23e0a89fa3b7807d00ae7327b8481cebec417784559ac4425bae6672a8eaa9e6d680f826ac6c882f633bb0bfd34afc722671646ffad4178357e9dbf818b132b81f6630700412129a33eb6df7a0968c3b6402a1637df684118285a3f1d91c42ad96e919b8e9a5b929f6abcda707444ea8b554f1456822ecbb9d3faf11488ab9c5fce"}, &(0x7f0000000040)=0xcb) socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) close(r0) 08:44:53 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$UDMABUF_CREATE(r1, 0x800455c9, 0x0) 08:44:53 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x40000, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xd) ioctl$TIOCGPTPEER(r1, 0x5441, 0x8006) ioctl$TCXONC(r1, 0x800455ca, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x3, 0x2) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x101040, 0x0) renameat(r2, &(0x7f0000000080)='./file0\x00', r3, &(0x7f0000000140)='./file0\x00') 08:44:53 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x400455c8, 0x6) 08:44:53 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$UDMABUF_CREATE(r1, 0x800455ca, 0x0) 08:44:53 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) r2 = dup(r0) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000), 0x10) close(r0) 08:44:53 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x400455c8, 0x7) 08:44:53 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1ed) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27}) r5 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d", 0x3c, 0xfffffffffffffffa) keyctl$describe(0x6, r5, &(0x7f0000000700)=""/249, 0xfffffffffffffec8) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, 0x0) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r7 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x0, 0x279d, 0x0, 0x0, r3}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r7, 0x1276, 0x0) dup2(0xffffffffffffffff, r6) 08:44:53 executing program 4: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(0xffffffffffffffff, 0x800455ca, 0xff) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4068aea3, &(0x7f00000000c0)={0x7b, 0x0, [0x7fff, 0x0, 0x0, 0x240000000000000]}) 08:44:53 executing program 2: socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r1, 0x400, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(r0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917}, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000100)=0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) add_key$user(0x0, &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869be3a9120c328f4d3e7d543405cbab050006cd53c4d70fdc1d5c8c04f218853d3ce2ae0d86bbbf", 0x3f, 0xfffffffffffffffa) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r7 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r5, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'sit0\x00'}}) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r2}) syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r7, 0x1276, 0x0) dup2(r8, r6) 08:44:53 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$UDMABUF_CREATE(r1, 0x800455cc, 0x0) 08:44:53 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r1, 0x400455c8, 0x8) 08:44:53 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x2, 0x100, 0x0, 0x81}) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0xfffffffffffffff9, 0x404200) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000040)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000000c0)=0x24) munlockall() r2 = syz_open_pts(r0, 0x0) r3 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9) r4 = getuid() getgroups(0x3, &(0x7f00000001c0)=[0xffffffffffffffff, 0x0, 0xee01]) keyctl$chown(0x4, r3, r4, r5) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) close(r0) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) [ 439.297259] kasan: CONFIG_KASAN_INLINE enabled [ 439.302241] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 439.309734] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 439.315998] CPU: 0 PID: 8560 Comm: kworker/u5:1 Not tainted 5.0.0-rc6 #67 [ 439.322932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 439.332321] Workqueue: hci0 hci_power_on [ 439.332418] RIP: 0010:qca_setup+0x134/0x1550 [ 439.332432] Code: c1 ea 03 80 3c 02 00 0f 85 08 12 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 63 08 49 8d bc 24 f8 00 00 00 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 d7 11 00 00 4d 8b ac 24 f8 00 00 00 49 8d 85 f0 [ 439.332438] RSP: 0018:ffff88804eecfa00 EFLAGS: 00010202 [ 439.332448] RAX: dffffc0000000000 RBX: ffff88808f46aa00 RCX: ffffffff84ecfa52 [ 439.332455] RDX: 000000000000001f RSI: ffffffff84ee0c01 RDI: 00000000000000f8 [ 439.332462] RBP: ffff88804eecfb50 R08: ffff88809b3d4200 R09: 0000000000000004 [ 439.332470] R10: ffffed10117e456d R11: ffff88808bf22b6f R12: 0000000000000000 [ 439.332477] R13: ffff888056f74c00 R14: ffff88804eecfb28 R15: 0000000000000000 [ 439.332487] FS: 0000000000000000(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 439.332495] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 439.332503] CR2: 00007fff8b668010 CR3: 0000000051405000 CR4: 00000000001406f0 [ 439.332512] Call Trace: [ 439.332543] ? tty_termios_encode_baud_rate+0x3ca/0x4e0 [ 439.332560] ? qca_send_power_pulse+0x200/0x200 [ 439.332571] ? hci_uart_set_baudrate+0x157/0x1c0 [ 439.332588] ? debug_object_deactivate+0x1e4/0x360 [ 439.332602] ? find_held_lock+0x35/0x130 [ 439.332615] ? qca_send_power_pulse+0x200/0x200 [ 439.332627] hci_uart_setup+0x1c4/0x490 [ 439.332640] ? hci_uart_set_baudrate+0x1c0/0x1c0 [ 439.332654] hci_dev_do_open+0x67e/0x14b0 [ 439.332668] ? hci_rx_work+0xaa0/0xaa0 [ 439.332681] ? kasan_check_read+0x11/0x20 [ 439.332695] ? process_one_work+0x890/0x1790 [ 439.332705] ? find_held_lock+0x35/0x130 [ 439.332718] ? process_one_work+0x890/0x1790 [ 439.332730] hci_power_on+0x10d/0x580 [ 439.332740] ? hci_error_reset+0xf0/0xf0 [ 439.332750] ? __lock_is_held+0xb6/0x140 [ 439.332760] ? check_preemption_disabled+0x48/0x290 [ 439.332815] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 439.332832] process_one_work+0x98e/0x1790 [ 439.332852] ? pwq_dec_nr_in_flight+0x320/0x320 [ 439.332864] ? lock_acquire+0x16f/0x3f0 [ 439.332884] worker_thread+0x98/0xe40 [ 439.332897] ? trace_hardirqs_on+0x67/0x230 [ 439.332918] kthread+0x357/0x430 [ 439.332932] ? process_one_work+0x1790/0x1790 [ 439.332945] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 439.332960] ret_from_fork+0x3a/0x50 [ 439.332972] Modules linked in: [ 439.337453] ---[ end trace 8e788ec37411d99f ]--- [ 439.337477] RIP: 0010:qca_setup+0x134/0x1550 [ 439.337492] Code: c1 ea 03 80 3c 02 00 0f 85 08 12 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 63 08 49 8d bc 24 f8 00 00 00 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 d7 11 00 00 4d 8b ac 24 f8 00 00 00 49 8d 85 f0 [ 439.337500] RSP: 0018:ffff88804eecfa00 EFLAGS: 00010202 [ 439.337512] RAX: dffffc0000000000 RBX: ffff88808f46aa00 RCX: ffffffff84ecfa52 [ 439.337521] RDX: 000000000000001f RSI: ffffffff84ee0c01 RDI: 00000000000000f8 [ 439.337530] RBP: ffff88804eecfb50 R08: ffff88809b3d4200 R09: 0000000000000004 [ 439.337539] R10: ffffed10117e456d R11: ffff88808bf22b6f R12: 0000000000000000 [ 439.337548] R13: ffff888056f74c00 R14: ffff88804eecfb28 R15: 0000000000000000 [ 439.337559] FS: 0000000000000000(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 439.337568] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 439.337576] CR2: 00000000011e1400 CR3: 0000000095652000 CR4: 00000000001406f0 [ 439.337589] Kernel panic - not syncing: Fatal exception [ 439.338646] Kernel Offset: disabled [ 439.652842] Rebooting in 86400 seconds..