xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x40) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}], 0x1) 16:18:12 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2202, &(0x7f0000000000)) 16:18:12 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2271, &(0x7f0000000000)) 16:18:12 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d8008d9982be49b0d317f5d", 0xd}], 0x1) 16:18:12 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2276, &(0x7f0000000000)) 16:18:13 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SELLOADLUT(r1, 0x541c, &(0x7f0000000000)={0xb}) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000100)=0x8) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400000, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x8008551d, &(0x7f0000000040)={0x3a7c, 0x7, [{0x5}, {0x2, 0x1}, {0xd}, {0x8}, {0xb}, {0x7}, {0x3, 0x1}]}) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}], 0x1) r3 = socket(0x200000000000011, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r3, &(0x7f0000000240)={0x11, 0x0, r5}, 0x14) getsockname$packet(r3, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) sendmsg$can_bcm(r3, &(0x7f0000000280)={&(0x7f0000000140), 0x10, &(0x7f0000000240)={&(0x7f00000001c0)={0x0, 0xd00, 0x6e4, {r6, r7/1000+10000}, {}, {0x1, 0x1}, 0x1, @can={{0x4}, 0x6, 0x0, 0x0, 0x0, "12b5a14dfe81a7ca"}}, 0x48}}, 0x28084) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080), &(0x7f00000000c0)=0x14) 16:18:13 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2203, &(0x7f0000000000)) 16:18:13 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d8009d9982be49b0d317f5d", 0xd}], 0x1) 16:18:13 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2272, &(0x7f0000000000)) 16:18:13 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2279, &(0x7f0000000000)) 16:18:13 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2275, &(0x7f0000000000)) 16:18:13 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2205, &(0x7f0000000000)) 16:18:13 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ad9982be49b0d317f5d", 0xd}], 0x1) 16:18:13 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x227a, &(0x7f0000000000)) 16:18:13 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000007000100070c10000000000000000000", 0x58}], 0x1) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00') r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = socket$inet6(0xa, 0x400000000001, 0x0) close(r4) r5 = open(&(0x7f00000002c0)='./bus\x00', 0x143042, 0x0) ftruncate(r5, 0x2008002) sendfile(r4, r5, 0x0, 0x200fff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x42}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x88, r2, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r5}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000001}, 0x40) 16:18:13 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0xffffff6e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r2, 0x10099b7) sendfile(r0, r2, 0x0, 0x88000fc000000) 16:18:13 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2276, &(0x7f0000000000)) 16:18:13 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800cd9982be49b0d317f5d", 0xd}], 0x1) 16:18:13 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x227c, &(0x7f0000000000)) 16:18:13 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2270, &(0x7f0000000000)) 16:18:14 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2279, &(0x7f0000000000)) 16:18:14 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2271, &(0x7f0000000000)) 16:18:14 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800dd9982be49b0d317f5d", 0xd}], 0x1) 16:18:14 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x227d, &(0x7f0000000000)) 16:18:14 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x227a, &(0x7f0000000000)) 16:18:14 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2272, &(0x7f0000000000)) 16:18:14 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x227e, &(0x7f0000000000)) [ 460.593923][ T27] audit: type=1800 audit(1578759494.586:32): pid=12151 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=16792 res=0 16:18:14 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0xffffff6e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r2, 0x10099b7) sendfile(r0, r2, 0x0, 0x88000fc000000) 16:18:14 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x227b, &(0x7f0000000000)) 16:18:14 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800fd9982be49b0d317f5d", 0xd}], 0x1) 16:18:14 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2275, &(0x7f0000000000)) 16:18:14 executing program 0: socket$inet_smc(0x2b, 0x1, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}], 0x1) r1 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x200000) r2 = dup3(r1, 0xffffffffffffffff, 0x0) r3 = socket(0x200000000000011, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r3, &(0x7f0000000240)={0x11, 0x0, r5}, 0x14) getsockname$packet(r3, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x1, 0x5, 0x47, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r6}, 0x3c) r7 = socket(0x200000000000011, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r7, &(0x7f0000000240)={0x11, 0x0, r9}, 0x14) getsockname$packet(r7, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x1, 0x5, 0x47, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r10}, 0x3c) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20080000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@mpls_getroute={0x3c, 0x1a, 0x400, 0x70bd26, 0x25dfdbff, {0x1c, 0x20, 0x20, 0x0, 0xfe, 0x1, 0xc8, 0x6, 0x1000}, [@RTA_MULTIPATH={0xc, 0x9, {0x8000, 0x4, 0x2}}, @RTA_OIF={0x8, 0x4, r6}, @RTA_MULTIPATH={0xc, 0x9, {0x1f, 0x3f, 0xc7, r10}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x40000) 16:18:14 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x227f, &(0x7f0000000000)) 16:18:14 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2282, &(0x7f0000000000)) 16:18:14 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2276, &(0x7f0000000000)) 16:18:14 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d8010d9982be49b0d317f5d", 0xd}], 0x1) 16:18:14 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x227c, &(0x7f0000000000)) 16:18:15 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000000)) 16:18:15 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0xfffffffe, 0x8, &(0x7f0000000500)=[{&(0x7f0000000100)="8b28fb732c55a7e9e90e102d7ce4d3ab94e3fa4492e0377b5d872df416af293d62947dd56f8828f36b99695be324d63ffb324973a17ba8671ca518e29e5b20cc11e12f781b10dedb897b1897f4da9968abfada3caf51695ac25c9b1338216b386d2d409b9839bfac8955b763cf67dfb51d2cb08a6b066e1dcbcbb6", 0x7b, 0x5}, {&(0x7f0000000180)="dad44f02a0a42d349495ab3939e338a067fef27a8f49", 0x16}, {&(0x7f00000001c0), 0xffffffffffffffc8, 0x40}, {&(0x7f0000000200)="990562f1809425d6c4023c0ef736309404c2478de1d9ef2e2c95fd24b9af7cc40d2e60305b5b105e6a9a4781f7a6c42299bcfcfd916edea46642ccd1df138b3dc8c39b119ec3cf7fed2034ab56c347f213eb4e", 0x53, 0x8}, {&(0x7f0000000280)="04d6882b6f71258bd110c684b4d0e09165e4d8fa765d3a8131ce1b789d1e1dfc9d58e0786c9c73582d5c229e48a80176023ff53d0884ee0d990a436988b5a0814c0e3d4de258a3ee381a987ba10394599340032761bfa5ee4569f7c502ebc1146b7c14fd3bc352ccc47b75266ce93d707a7c7dc4be2fa2f6882c03c443c842f76d3ccf8b1da771b3dca842a2f419f1a503468cb765077246475f941f76182351b35cdfa487cc1d2cc241931f46e7a188f7b53a1c576154d84bb7f2c1b936cf427a5222b6913bd5d8cc24d3d4980a8bfc790727b47032225b414b7215ec0a48940032f0b889bc32b8d5681f86", 0xec, 0xfffffffffffffffa}, {&(0x7f0000000380)="82fc4add1babc5cc4e0c9bc9547d4de99f615aee775bd57b64", 0x19, 0x5}, {&(0x7f00000003c0)="a154ec4fbd13eb627bff6c23dca28eff6f131187df6b9691dda629a274a561343fde51d79a1b60e72bbdf77b23f59bfbb0f272c96d52e2596ec3d1a64f3c4f37", 0x40, 0x7}, {&(0x7f0000000400)="2ef62c2b8fccbf95aa114aceb51bc14ecb7197cebc58fd5d4c79984a7fc0db2a9f63ce7ebb45e904a5b82ac90b516c51d9043ffb8b6b0eb878f2394c89957a04636e05fa211d1f566a92ef838ade3b3a2e882212fd8d62ae48ff4a28b940fb62ff57b414e2248feef9c9e1b70b3b1a1ed277d7627fcde65991d45d078c0ceffe649c0f2065d0c809c8589e66b7f0ed85acf825aaaf92f2ad80024de61879118e4506a1a547ca29ba396c1b02adce9b40eba2130ed7d84bb47e7ea424a17c5935c5aa90b8d6b5473c7605ae834c80186efbc1e69ab3a4d348532208d00d8571d975", 0xe1, 0x2000000000005}], 0xc0430, &(0x7f0000000780)={[{@shortname_win95='shortname=win95'}, {@shortname_mixed='shortname=mixed'}], [{@pcr={'pcr', 0x3d, 0x24}}, {@hash='hash'}, {@smackfshat={'smackfshat', 0x3d, ')nodevem1lo*vmnet0*@lo'}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@pcr={'pcr', 0x3d, 0xc}}, {@measure='measure'}, {@smackfsdef={'smackfsdef', 0x3d, 'wlan1'}}]}) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x80, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000680)={@in6={{0xa, 0x4e23, 0x80, @remote, 0x4}}, 0x0, 0x0, 0x3f, 0x0, "ed34b522cee895258e5ea154ad296bd740373edf629ab9cecfbc9c7176384510e3354f91f27d8db424ab5d806fcfcae4ad17850dfcc41b765d0c7197354c2079a9590d31d42ca7299cfc0446119bc0f3"}, 0xd8) writev(r0, &(0x7f0000000040)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}, {&(0x7f0000000000)="b875e47a2a3241da9bf74b9b434a3caa27749cb34d5e3ac87665080a8477080954c771b5", 0x24}], 0x9e8f87373ab8921) 16:18:15 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0xffffff6e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r2, 0x10099b7) sendfile(r0, r2, 0x0, 0x88000fc000000) 16:18:15 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2279, &(0x7f0000000000)) 16:18:15 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d8018d9982be49b0d317f5d", 0xd}], 0x1) 16:18:15 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2284, &(0x7f0000000000)) 16:18:15 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x227d, &(0x7f0000000000)) 16:18:15 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) 16:18:15 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540), 0x0) 16:18:15 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d801ad9982be49b0d317f5d", 0xd}], 0x1) 16:18:15 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2285, &(0x7f0000000000)) 16:18:15 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x227a, &(0x7f0000000000)) 16:18:15 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x227e, &(0x7f0000000000)) 16:18:16 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) pidfd_open(0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000000)="7c3162f9cefc7f61199b640000000000b97e3b4f7011585600000100", 0xf}, {&(0x7f0000000900)="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", 0x33c}, {&(0x7f0000002900)="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", 0xfffffffffffffe7c}, {&(0x7f0000000080)="8db62253989dcef58adb4a8035df7e97cdc7403628677f0869cae7563b581f4c93e988efa0d89890c9b94dbfee9fce6c29879dfe8f58ae78d3d25b64e71357c2d06859e8c457ee51863afa32ac0522601a621d68be48c5035e2a9a5fa9a51a7a6742ecfe68b46d51f87321251730d414ee64a1d182399e9c8428ce305209567b5922e5", 0x83}, {&(0x7f0000000480)="08456529f33c8723f820e1652d4157bacb77b937dcd4dab3c007e76ded5760cb6587425748cd913cd9056c329cb2ae190c1ebcc6502da268db72964cc13b969cc875d370b6c580d77ec6a4717d", 0x4d}, {&(0x7f0000000500)="8ee79be676ed00e23180e47688f23100343d36849886cceb5894408754e718bda1babafbb92f3c80ded56ccf1b8cef6870f21e2c558c00bc8b43dedac56a353af895ec543154b2e7baf86f3ef695a34ce3b061102f6e5236c4b5502dfa84", 0xfffffffffffffff1}, {&(0x7f0000000240)="1108507d9b9f6e2c", 0xffffffffffffff73}, {&(0x7f0000000280)="6316f96e0da08b21a8eb06c02dafe374b2eedd6b9e703f9126be724b45764c7caddb96294011381c7442c2509973e26354ef77091a9e78d5e34c63b6de23c1198e1b5529894a2dc9b1b7421dfd6c9b37a6aa8bcfdd97c7a0a154f8b4e9880c1e5a5aa21573ded5174cce81c05d46b18889035b906831b8032d1dcb16f91c19f21f6e16609eb473f345e8a70a4dbc331ce36ccf087d", 0x95}, {&(0x7f0000000340)="d0864418e137eefe9c2440a4a94952b53c8bd0d86d9e8bd8be45a4b37be3dbc6359d8ee3bf7b3cb375c97ea0f1d4b79cdce2b3e15a9a1af4166be73843138daeed16e17db3731d0400eec70ce605d01a081b288aa4e61e", 0x3c8}], 0x9) 16:18:16 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0xffffff6e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r2, 0x10099b7) sendfile(r0, r2, 0x0, 0x88000fc000000) 16:18:16 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d801bd9982be49b0d317f5d", 0xd}], 0x1) 16:18:16 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x227f, &(0x7f0000000000)) 16:18:16 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2286, &(0x7f0000000000)) 16:18:16 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x227b, &(0x7f0000000000)) 16:18:16 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000000)={0x4, 0xa, 0x4, 0x400, 0x2, {0x77359400}, {0x5, 0x1, 0x1, 0x9, 0x4, 0x92, "8a0b7181"}, 0x8001, 0x2, @offset=0x7, 0x0, 0x0, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000080)={0x4, 0x401, 0x8, 0x0, 0xc}) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000500)={0x155, 0x10, &(0x7f0000000100)="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"}) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}], 0x1) 16:18:16 executing program 0: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x8f3c76d9267a04f6, 0x0) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000040)=""/209) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r1, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}], 0x1) 16:18:16 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2282, &(0x7f0000000000)) 16:18:16 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x227c, &(0x7f0000000000)) 16:18:16 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d802ad9982be49b0d317f5d", 0xd}], 0x1) 16:18:16 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2287, &(0x7f0000000000)) 16:18:17 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000000)) 16:18:17 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0xffffff6e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r2, 0x10099b7) sendfile(r0, r2, 0x0, 0x88000fc000000) 16:18:17 executing program 0: r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80080}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x8, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0x800}}, ["", "", ""]}, 0x24}}, 0x800) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r1, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}], 0x1) setsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, &(0x7f00000001c0)=0x7f, 0x4) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x80000, 0x0) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000180)={0x2, {0x2, 0xd0cf, 0x40, 0x9, 0xff}}) 16:18:17 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x227d, &(0x7f0000000000)) 16:18:17 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2288, &(0x7f0000000000)) 16:18:17 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d8059d9982be49b0d317f5d", 0xd}], 0x1) 16:18:17 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2284, &(0x7f0000000000)) 16:18:17 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d805ed9982be49b0d317f5d", 0xd}], 0x1) 16:18:17 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2289, &(0x7f0000000000)) 16:18:17 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2285, &(0x7f0000000000)) 16:18:17 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x227e, &(0x7f0000000000)) 16:18:17 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SELLOADLUT(r0, 0x541c, &(0x7f0000000000)={0xb}) ioctl$KDDELIO(r0, 0x4b35, 0x5) lsetxattr$trusted_overlay_origin(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.origin\x00', &(0x7f0000000100)='y\x00', 0x2, 0x3) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SELLOADLUT(r1, 0x541c, &(0x7f0000000000)={0xb}) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f0000000040)={0x1800000, 0x6, 0x400, 0x2, 0x2, 0x40}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SELLOADLUT(r2, 0x541c, &(0x7f0000000000)={0xb}) ioctl$KDSIGACCEPT(r2, 0x4b4e, 0x32) 16:18:17 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d809bd9982be49b0d317f5d", 0xd}], 0x1) 16:18:18 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0xffffff6e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r2, 0x10099b7) sendfile(r0, r2, 0x0, 0x88000fc000000) 16:18:18 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x4c01, &(0x7f0000000000)) 16:18:18 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x227f, &(0x7f0000000000)) 16:18:18 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2286, &(0x7f0000000000)) 16:18:18 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d80dfd9982be49b0d317f5d", 0xd}], 0x1) 16:18:18 executing program 0: epoll_create(0x6) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}], 0x1) 16:18:18 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x5382, &(0x7f0000000000)) 16:18:18 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800e9b982be49b0d317f5d", 0xd}], 0x1) 16:18:18 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2282, &(0x7f0000000000)) 16:18:18 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2287, &(0x7f0000000000)) 16:18:18 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="7c8d800ed9982be49b0d317f679b64", 0xf}], 0x1) socket$inet6(0xa, 0xa, 0x20) 16:18:18 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x5385, &(0x7f0000000000)) 16:18:19 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000000)) 16:18:19 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800edf982be49b0d317f5d", 0xd}], 0x1) 16:18:19 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2288, &(0x7f0000000000)) 16:18:19 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SELLOADLUT(r1, 0x541c, &(0x7f0000000000)={0xb}) ioctl$VT_RELDISP(r1, 0x5605) writev(r0, &(0x7f0000000140), 0x1000000000000307) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000000)={0x2, 0x1, 0x3ff, 0x7, 0x15, "a8b28c6556eed615"}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SELLOADLUT(r2, 0x541c, &(0x7f0000000000)={0xb}) ioctl$TIOCCBRK(r2, 0x5428) socket$netlink(0x10, 0x3, 0x4) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x1) 16:18:19 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0xffffff6e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r2, 0x10099b7) sendfile(r0, r2, 0x0, 0x88000fc000000) 16:18:19 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x5386, &(0x7f0000000000)) 16:18:19 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed99b2be49b0d317f5d", 0xd}], 0x1) 16:18:19 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x5421, &(0x7f0000000000)) 16:18:19 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_open_procfs(r0, &(0x7f0000000100)='net/bnep\x00') ioctl$NBD_CLEAR_QUE(r1, 0xab05) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = getuid() setresuid(0xee01, r5, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, &(0x7f00000004c0)={0xffffffff, 0x8368, {r0}, {r5}, 0xe8, 0x7}) writev(r2, &(0x7f00000000c0)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}, {&(0x7f0000000000)="c5e138cea8943f0266bf87a9edf33d30379fa87913e797fcfe7f0f007c9423a75283989aea1e62fbc8dc69eb84d70e2ce7350bd316629c8ff367b36e93239587628c766fb81b2a2881284a33e92e87ed02d5de5159c3a409ba19bbf3088e2b08a2feb396a80f62d87913d05c04a43553a2be8c3b4067d1b507414edda7bd79f4a451a4e04998", 0x86}], 0x2) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r6, 0x800000c004500a, &(0x7f0000000300)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) write$cgroup_subtree(r8, &(0x7f0000000440)={[{0x7d, 'cpu'}, {0x2b, 'pids'}, {0x2d, 'io'}, {0x2d, 'cpu'}]}, 0x14) pwritev(r6, &(0x7f00000003c0)=[{&(0x7f0000000140)="30433f9990f44a6e20866b7ad450efd4130ff0c8d84c989e5c45bda92f821d7ba984441dfc2476704fefa1674406e226137fbfa51af895584b324448b4ca445e3b48e430de2266364111b3882bc6ea7201505b", 0x53}, {&(0x7f00000001c0)="9812da8387d329deb7084637e440370f26042dcd7dbe950cfdce6c012e4afc9a6cb08f7bbf6c2d8006501365dc11b9189123d531f030fe713041c3b846bdc4ce56d2e639c1ad4c6f4ad4c51ddcb91393443574071e7f9c2773d719174906c96800599f3fd4ac00028d79522c97488feca1b5851ba5e3b850769e081b90486c0f3412063e4c7b5ad542f1f6f83c9d4f9ced3e6356dc727af4d7be27761d28f56629ace06d856f1223abb9702206c2f54bd7b7e16772399d8963ef3ef3c3c5eb565b43db87af6bac", 0xc7}, {&(0x7f00000002c0)="7475d047f2e76dacfb5ebd4c85805e14d825e621d677fe5501e7ea70b8387a1896b27bb3c9b5cfbd1e88264e9e66e30cb33e38a2f7e2fcb0d052d155c0", 0x3d}, {&(0x7f0000000300)="82e6ca29f64a8e424f5628e512d1708e72b646a3b0cc65123ca423676a529f12562689d08ab50c7869a729b2ff3a8f8352812f058156ae0a8cdf464e10ceb52a4d27cc84f3049f9341094b1bb1c3d2f5b7fa73c77966825a276135afc13fb24dd6a7ac175b63627f5eade9a4d5daefcfd2a884c673b89a72c2fc", 0x7a}, {&(0x7f0000000900)="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", 0x1000}], 0x5, 0xfffffffffffffffa) r9 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r9, 0x800c6613, &(0x7f0000000480)=@v2={0x2, @aes128, 0x2, [], "6ec23e3a3c69057ddcd6959073da7035"}) 16:18:19 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2289, &(0x7f0000000000)) 16:18:19 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2285, &(0x7f0000000000)) 16:18:19 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9df2be49b0d317f5d", 0xd}], 0x1) 16:18:19 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x4c01, &(0x7f0000000000)) 16:18:19 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x5450, &(0x7f0000000000)) 16:18:19 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2286, &(0x7f0000000000)) 16:18:20 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x5380, &(0x7f0000000000)) 16:18:20 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0xffffff6e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r2, 0x10099b7) sendfile(r0, r2, 0x0, 0x88000fc000000) 16:18:20 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed99808e49b0d317f5d", 0xd}], 0x1) 16:18:20 executing program 0: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x4600, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) r4 = open(&(0x7f00000002c0)='./bus\x00', 0x143042, 0x0) ftruncate(r4, 0x2008002) sendfile(r3, r4, 0x0, 0x200fff) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f00000000c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x80082102, &(0x7f0000000140)=r5) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) ioctl$TCSBRK(r7, 0x5409, 0x9) writev(r6, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}], 0x1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000180)=[@window={0x3, 0x81}, @sack_perm, @mss={0x2, 0x7fff}], 0x3) ioctl$SIOCRSGL2CALL(r7, 0x89e5, &(0x7f0000000040)=@bcast) syz_open_dev$ttys(0xc, 0x2, 0x0) 16:18:20 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x5451, &(0x7f0000000000)) 16:18:20 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2287, &(0x7f0000000000)) 16:18:20 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x5381, &(0x7f0000000000)) 16:18:20 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x5382, &(0x7f0000000000)) 16:18:20 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed99809e49b0d317f5d", 0xd}], 0x1) 16:18:20 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x5452, &(0x7f0000000000)) 16:18:20 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2288, &(0x7f0000000000)) 16:18:20 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0xffffff6e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r2, 0x10099b7) sendfile(r0, r2, 0x0, 0x88000fc000000) 16:18:20 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x5386, &(0x7f0000000000)) 16:18:20 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9980ae49b0d317f5d", 0xd}], 0x1) 16:18:20 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2289, &(0x7f0000000000)) 16:18:21 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0xffffff6e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r2, 0x10099b7) sendfile(r0, r2, 0x0, 0x88000fc000000) 16:18:21 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x5460, &(0x7f0000000000)) 16:18:21 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9980de49b0d317f5d", 0xd}], 0x1) 16:18:21 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x5387, &(0x7f0000000000)) [ 467.169242][ T27] audit: type=1800 audit(1578759501.166:33): pid=12511 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=16819 res=0 16:18:21 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x4c01, &(0x7f0000000000)) 16:18:21 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}], 0x1) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f00000002c0)='./bus\x00', 0x143042, 0x0) ftruncate(r2, 0x2008002) sendfile(r1, r2, 0x0, 0x200fff) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f00000004c0)={0xa20000, 0xfffffcdd, 0x7, r0, 0x0, &(0x7f0000000480)={0x980928, 0x4, [], @p_u8=&(0x7f0000000440)=0x1f}}) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000dae89657ff455a9f079f02a65349c5ecda0e26e46f0d6df8f95825afda775e8c9223958c32d7328843fc71e0bf5026c43fa44712faab6b5e5aed6be7c13e5fc92e5cc5c98d42a4590508000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r6 = syz_open_dev$vcsu(&(0x7f0000000180)='/dev/vcsu#\x00', 0x5e06dc5e, 0x80) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f0000000040)={r5}, &(0x7f0000000100)=0x11d) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000500)={r5, 0x2}, &(0x7f0000000580)=0x8) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000000)={0x485, 0x3f, 0xffffffff, 0x4, 0x1b, "cd2804b9adc183c436094b7c105a3c2bd4605b"}) 16:18:21 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed99859e49b0d317f5d", 0xd}], 0x1) 16:18:21 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x4c04, &(0x7f0000000000)) 16:18:21 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x6364, &(0x7f0000000000)) 16:18:21 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x5421, &(0x7f0000000000)) 16:18:21 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0xffffff6e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r2, 0x10099b7) sendfile(r0, r2, 0x0, 0x88000fc000000) 16:18:21 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9985ee49b0d317f5d", 0xd}], 0x1) 16:18:21 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x5450, &(0x7f0000000000)) 16:18:21 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x8933, &(0x7f0000000000)) 16:18:21 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0xffffff6e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r2, 0x10099b7) sendfile(r0, r2, 0x0, 0x88000fc000000) 16:18:21 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x5380, &(0x7f0000000000)) 16:18:21 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9989be49b0d317f5d", 0xd}], 0x1) 16:18:22 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x5451, &(0x7f0000000000)) 16:18:22 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x400454ca, &(0x7f0000000000)) 16:18:22 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x5381, &(0x7f0000000000)) 16:18:22 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0xffffff6e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r2, 0x10099b7) sendfile(r0, r2, 0x0, 0x88000fc000000) 16:18:22 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}], 0x1) write$binfmt_elf64(r0, &(0x7f0000000900)=ANY=[@ANYBLOB="7f454c46040320038100000000000000030006009ab6291e0d0300000000000040000000000000001e0100000000000008000000feff3800020000000500ff0002000000010000000100000000000000010000000000000007000000000000005601000000000000e700000000000000090000000000000060f4f5a1c07f6356dae41058314e468cfa0a5e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000032c44f644e00"/1169], 0x48b) 16:18:22 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed998dfe49b0d317f5d", 0xd}], 0x1) [ 468.220492][ T27] audit: type=1800 audit(1578759502.216:34): pid=12578 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=16515 res=0 16:18:22 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982b9b9b0d317f5d", 0xd}], 0x1) 16:18:22 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0xffffff6e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r2, 0x10099b7) sendfile(r0, r2, 0x0, 0x88000fc000000) 16:18:22 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x5382, &(0x7f0000000000)) 16:18:22 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x40047452, &(0x7f0000000000)) 16:18:22 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x5452, &(0x7f0000000000)) 16:18:22 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be4070d317f5d", 0xd}], 0x1) 16:18:22 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0x7}], 0x1) 16:18:22 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x40049409, &(0x7f0000000000)) 16:18:22 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0xffffff6e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r2, 0x10099b7) sendfile(r0, r2, 0x0, 0x88000fc000000) 16:18:22 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x5460, &(0x7f0000000000)) 16:18:22 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x5385, &(0x7f0000000000)) 16:18:22 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be4080d317f5d", 0xd}], 0x1) 16:18:22 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) ioctl$KDDISABIO(r0, 0x4b37) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000000)="7c8d800ed9982be49b0d317f679b64", 0xfffffffffffffd63}], 0x1) 16:18:22 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x40186366, &(0x7f0000000000)) 16:18:22 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x6364, &(0x7f0000000000)) 16:18:23 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be4090d317f5d", 0xd}], 0x1) 16:18:23 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x5386, &(0x7f0000000000)) 16:18:23 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r2}, 0x14) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$UI_SET_SNDBIT(r4, 0x4004556a, 0x5) getsockname$packet(r0, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) sendto$rxrpc(r0, &(0x7f0000000000)="598bfcb3d2473b9bb92199e02b854248ca828102df15f12ec31d9d972f6cf0cbdc9a446626ce99c7ac9d44c876ce80afa0c8efe24b32d2861294ef95db9f517856808caf454bd29b59606a3b4c9f830f5b4b17d61d98b8c290fcb5ce657c1abcc77ddef721ae43539829005f5778906972377f5a0eae82bbd13f5c6950df35f6ff8da61a1b476d917a9cefaab3abc7c150771a88d99719090fe473f9", 0x9c, 0x200c4, &(0x7f00000000c0)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e21, @empty}}, 0x24) writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000100)="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", 0x109}], 0x0) 16:18:23 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0xffffff6e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r2, 0x10099b7) sendfile(r0, r2, 0x0, 0x88000fc000000) 16:18:23 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x4020940d, &(0x7f0000000000)) 16:18:23 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x5387, &(0x7f0000000000)) 16:18:23 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be40a0d317f5d", 0xd}], 0x1) 16:18:23 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x8933, &(0x7f0000000000)) 16:18:23 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0xffffff6e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r2, 0x10099b7) sendfile(r0, r2, 0x0, 0x88000fc000000) 16:18:23 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xfffffffffffffc34}], 0x1) 16:18:23 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x800454d2, &(0x7f0000000000)) 16:18:23 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be40c0d317f5d", 0xd}], 0x1) 16:18:23 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0xffffff6e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r2, 0x10099b7) sendfile(r0, r2, 0x0, 0x88000fc000000) 16:18:23 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000000)="7c8d800ed9982be49b0d317f679b64", 0xf}], 0x10000000000001dd) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000300)) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000480)="580000001400192340834b80040d8c560a067f0200ff210000000000000058000b482455606543791ae4aff7bbca945f64002e23f0ffbeffe807000000070c1000f4ffffffffffffe600"/83, 0x58}], 0x37d) r3 = accept$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCBRDELBR(r3, 0x89a1, &(0x7f0000000300)='veth1\x00') r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') r5 = dup(r2) write$vhost_msg(r5, &(0x7f0000000340)={0x1, {&(0x7f0000000200)=""/84, 0x54, &(0x7f0000000580)=""/4096, 0x0, 0x4}}, 0x48) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x302}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r4, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x3b}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x1c}}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc6ca15c3271c01b3}, 0x20000) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000007000100070c10000000000000000000", 0x58}], 0x1) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') r8 = socket(0x200000000000011, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r8, &(0x7f0000000240)={0x11, 0x0, r10}, 0x14) getsockname$packet(r8, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) getsockopt$IPT_SO_GET_INFO(r8, 0x0, 0x40, &(0x7f0000001580)={'raw\x00'}, &(0x7f0000000280)=0x54) sendmsg$IPVS_CMD_SET_CONFIG(r6, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00042dbd7000ffdbdf250c000000080006004a010000000004000800000008000500620c000081020300080003000400000000000200766c616e3000000000000000000000000800030000000000060004000900000008000500ffffffff000001009e65b7a30800060005000000"], 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004) 16:18:23 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x5421, &(0x7f0000000000)) 16:18:23 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x80086301, &(0x7f0000000000)) 16:18:23 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be40d0d317f5d", 0xd}], 0x1) 16:18:23 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x89e0, &(0x7f0000000000)) 16:18:23 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0xffffff6e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r2, 0x10099b7) sendfile(r0, r2, 0x0, 0x88000fc000000) 16:18:23 executing program 0: mq_unlink(&(0x7f0000000000)='-]!\x00') r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}], 0x1) fsetxattr$security_capability(r0, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v1={0x1000000, [{0xfffffff9, 0x3ff}]}, 0xc, 0x5) 16:18:23 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x5450, &(0x7f0000000000)) 16:18:23 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be40e0d317f5d", 0xd}], 0x1) 16:18:24 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x89f1, &(0x7f0000000000)) 16:18:24 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0xffffff6e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r2, 0x10099b7) sendfile(r0, r2, 0x0, 0x88000fc000000) 16:18:24 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x8010aa01, &(0x7f0000000000)) 16:18:24 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}], 0x1) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, &(0x7f0000000240), &(0x7f0000000280)) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r3, 0x800000c004500a, &(0x7f0000000300)) r4 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x7, 0x400) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000)="2890c017a244d86fa00bed89124890c907043458ec77fd429d40b919d0faa39549a6038a7ba1c3546b10a51355d841a8c7a277e1d57add412ac1d5dd4450cae6093721cf34810d4ed37980a81d67c888e879c193dc779dbb68da22e024953d05fb17b2819c64d6ee733da4bab5dcac5b847d3eb971fda08bdcf44ce2dfc0ba3c80b9dd9b555943a915705d2cd7cc9caddb3a7f52f9e7c3a0b9c98bc6672d0c5fae4bad4365b828cb889c9dfd604adc185b88f9c14c6cba1f915ddbd91f954efb07f89826be5a50c6", 0xc8, r4}, 0x68) 16:18:24 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be40f0d317f5d", 0xd}], 0x1) 16:18:24 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x5451, &(0x7f0000000000)) 16:18:24 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x400454ca, &(0x7f0000000000)) 16:18:24 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0xffffff6e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r2, 0x10099b7) sendfile(r0, r2, 0x0, 0x88000fc000000) 16:18:24 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0xc0045878, &(0x7f0000000000)) 16:18:24 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x5452, &(0x7f0000000000)) 16:18:24 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be4180d317f5d", 0xd}], 0x1) 16:18:24 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2, 0x0) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}], 0x1) 16:18:24 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0xffffff6e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r2, 0x10099b7) sendfile(r0, r2, 0x0, 0x88000fc000000) 16:18:24 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x40049409, &(0x7f0000000000)) 16:18:24 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0xc0045878, &(0x7f0000000000)) 16:18:24 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be41a0d317f5d", 0xd}], 0x1) 16:18:24 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x5460, &(0x7f0000000000)) 16:18:24 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x40186366, &(0x7f0000000000)) 16:18:24 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0xffffff6e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r2, 0x10099b7) sendfile(r0, r2, 0x0, 0x88000fc000000) 16:18:24 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000000)="7ce9d89201c3ada58cbb7b1180a164000000470000006394b43279c814d24300"/42, 0x2a}], 0x1) 16:18:25 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be41b0d317f5d", 0xd}], 0x1) 16:18:25 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0xc008551c, &(0x7f0000000000)) 16:18:25 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x6364, &(0x7f0000000000)) 16:18:25 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x4020940d, &(0x7f0000000000)) 16:18:25 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0xffffff6e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r2, 0x10099b7) sendfile(r0, r2, 0x0, 0x88000fc000000) 16:18:25 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540), 0x1000000000000186) 16:18:25 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be4df0d317f5d", 0xd}], 0x1) 16:18:25 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0xc0189436, &(0x7f0000000000)) 16:18:25 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x8912, &(0x7f0000000000)) 16:18:25 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0xffffff6e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r2, 0x10099b7) sendfile(r0, r2, 0x0, 0x88000fc000000) 16:18:25 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x800454d2, &(0x7f0000000000)) 16:18:25 executing program 0: writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}], 0x1) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) fchdir(r0) r1 = socket(0x200000000000011, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) recvmsg$can_bcm(r1, &(0x7f0000000140)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x80, &(0x7f0000000100), 0x0, &(0x7f00000001c0)=""/86, 0x56}, 0x0) bind$packet(r1, &(0x7f0000000240)={0x11, 0x0, r3}, 0x14) getsockname$packet(r1, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) bind$unix(r1, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) 16:18:25 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b02317f5d", 0xd}], 0x1) 16:18:25 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x8933, &(0x7f0000000000)) 16:18:25 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0xffffff6e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r2, 0x10099b7) sendfile(r0, r2, 0x0, 0x88000fc000000) 16:18:25 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0xc020660b, &(0x7f0000000000)) 16:18:25 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x80086301, &(0x7f0000000000)) 16:18:25 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0xab05, &(0x7f0000000000)) 16:18:25 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b03317f5d", 0xd}], 0x1) 16:18:25 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0xffffff6e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r2, 0x10099b7) sendfile(r0, r2, 0x0, 0x88000fc000000) 16:18:26 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0xc0481273, &(0x7f0000000000)) 16:18:26 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0xc0045878, &(0x7f0000000000)) 16:18:26 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x400454ca, &(0x7f0000000000)) 16:18:26 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x100800, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x3, 0x6fa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000900], 0x0, &(0x7f0000000080), &(0x7f0000000900)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x2, [{0x11, 0x20, 0x88e7, 'veth1_to_bridge\x00', 'xfrm0\x00', 'vcan0\x00', 'veth0_vlan\x00', @broadcast, [0xff, 0xff, 0x0, 0x0, 0x1fe], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, [0xc1025fd302a70c80, 0x0, 0x0, 0x0, 0x181], 0xa6, 0x11e, 0x16e, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x6, 0xe3, 0xfff}}}], [@common=@nflog={'nflog\x00', 0x50, {{0xc981, 0xe1d0, 0x81, 0x0, 0x0, "98ae939c0d3b9e29be643049b96b5310c5ae3abe7aa5de6a47051ddc68e5c436ed729d70242b8a694adf18e9083c6d1cbe593135ea7ade1a39b534e068aec750"}}}], @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x7f, 'syz1\x00', {0x6389}}}}}, {0x5, 0xa, 0x84835ca7f047e8f3, 'batadv0\x00', 'vxcan1\x00', 'vlan0\x00', 'ip6gretap0\x00', @remote, [0x0, 0x0, 0x0, 0xff], @link_local, [0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 0xf6, 0x13e, 0x16e, [@ip={{'ip\x00', 0x0, 0x20}, {{@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x18100007f, 0x9, 0x21, 0xc, 0x1, 0x4e23, 0x4e24, 0x4e21, 0x4e21}}}, @connbytes={{'connbytes\x00', 0x0, 0x18}, {{[{0x7}, {0xbef}], 0x2, 0x1}}}], [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x8, 0x4, {0x9}}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x7}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0x4282a5a48284e546, 0x1, [{0x11, 0x67551c0c8ce72336, 0x29edb9b17ae257a9, 'veth0_virt_wifi\x00', 'veth1\x00', 'hsr0\x00', 'ip6tnl0\x00', @empty, [0xff, 0x99e1de8b221baae7, 0xff, 0x7f, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0x0, 0x0, 0xff, 0x0, 0xff], 0x2de, 0x30e, 0x35e, [@realm={{'realm\x00', 0x0, 0x10}, {{0x7c, 0x6, 0x1}}}, @bpf0={{'bpf\x00', 0x0, 0x210}, {{0x39, [{0x8, 0x81, 0x40, 0xffffb0ee}, {0x3ff, 0x7, 0x80, 0x8000}, {0x3f, 0x5, 0x5, 0x6}, {0x80, 0x80, 0x2, 0x81}, {0x8, 0x3, 0x80, 0x2}, {0x5e1, 0x3, 0x6, 0x80000001}, {0x1, 0x5, 0x5, 0x3}, {0x81, 0x6, 0x3f, 0x1}, {0x7ff, 0x3, 0x7, 0x8}, {0x1, 0x1, 0x3}, {0x499, 0x20, 0x1, 0x7fff}, {0x2, 0x5, 0x81, 0x2}, {0x9, 0x3f, 0x0, 0x3}, {0xfffc, 0xce, 0x1, 0x80}, {0xbfe, 0x3f, 0x7f, 0x101}, {0x7000, 0x2, 0x7a}, {0x6, 0x5, 0x20, 0xc6c4}, {0x8000, 0x2, 0x4, 0x24000000}, {0x7ff, 0x84, 0x7f, 0x2000000}, {0x3, 0x0, 0x0, 0x400}, {0x200, 0x8, 0x1f}, {0x8, 0x27, 0x9, 0x800}, {0x101, 0x0, 0x0, 0x5}, {0xfff, 0xc2, 0x8, 0x7}, {0x4, 0xd1, 0xa0, 0x6}, {0x400, 0x1, 0xff, 0x3}, {0x401, 0x1, 0x4}, {0x3, 0xf5, 0x8, 0x8}, {0xc4, 0xc1, 0x0, 0x1}, {0x3, 0x6, 0x5, 0xdf15}, {0x5, 0xfc, 0x0, 0xffff}, {0xfffa, 0x3f, 0x40, 0x1}, {0x101, 0x1, 0x1}, {0x3, 0x8, 0x81, 0x4}, {0xfff, 0x1}, {0x1000, 0x7f, 0x40, 0x10000}, {0xfff, 0x5, 0x7}, {0x0, 0x40, 0x7f, 0x20}, {0xfff8, 0x8, 0x4, 0x2}, {0xffff, 0x3, 0x7, 0x7}, {0x3, 0x7, 0x0, 0x10000000}, {0x401, 0x7, 0x1f, 0x7}, {0x8, 0x91, 0x3f, 0x80}, {0xfff8, 0x8, 0x2f, 0x80}, {0x1ff, 0x5, 0x7}, {0x2, 0x0, 0x20, 0x400}, {0x6, 0x1f, 0xa6, 0xffffffff}, {0x7, 0x22, 0x1, 0x401}, {0x6, 0x1, 0x1, 0x401}, {0x2, 0x9, 0x20, 0x9}, {0x1, 0x2, 0x7, 0x14}, {0x3, 0x1, 0x1, 0x8001}, {0x400, 0x0, 0xc1, 0x8001}, {0x6, 0xdc, 0x4, 0x400}, {0xffff, 0x7, 0x3, 0x8}, {0x0, 0x4, 0x2, 0xffffff03}, {0xdb, 0x2, 0x4, 0xa23}, {0x9, 0x95, 0x5, 0xffffffff}, {0x7fff, 0x1, 0x6, 0x9}, {0x5, 0x3f, 0xff, 0x6}, {0x9, 0xc3, 0xf9, 0x7}, {0xac0, 0x5, 0x8, 0x7}, {0xffff, 0xb7, 0x4, 0xfffffff8}, {0x2, 0x2, 0x3, 0x2}], {0xfffffffffffffff7}}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0xa4}}}], @common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x0, 0x3, {0x7fff}}}}}]}]}, 0x772) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}], 0x1) creat(&(0x7f0000000040)='./file0\x00', 0x9e) prctl$PR_GET_TIMERSLACK(0x1e) 16:18:26 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0xffffff6e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r2, 0x10099b7) sendfile(r0, r2, 0x0, 0x88000fc000000) 16:18:26 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b04317f5d", 0xd}], 0x1) 16:18:26 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0xc0045878, &(0x7f0000000000)) 16:18:26 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x227b, &(0x7f0000000000)) 16:18:26 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x40049409, &(0x7f0000000000)) 16:18:26 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x40186366, &(0x7f0000000000)) 16:18:26 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b05317f5d", 0xd}], 0x1) 16:18:26 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x227b, &(0x7f0000000000)=0x2) 16:18:26 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0xffffff6e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r2, 0x10099b7) sendfile(r0, r2, 0x0, 0x88000fc000000) 16:18:26 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0xc0189436, &(0x7f0000000000)) 16:18:26 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_PAUSE(r1, 0x40044145, &(0x7f00000000c0)=0x1) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x80000, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r2, &(0x7f0000000040)={0x29, 0x3, 0x0, {0x0, 0x8, 0x0, 'wlan1/--'}}, 0x29) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) r4 = open(&(0x7f00000002c0)='./bus\x00', 0x143042, 0x0) ftruncate(r4, 0x2008002) sendfile(r3, r4, 0x0, 0x200fff) ioctl$TUNSETVNETHDRSZ(r4, 0x400454d8, &(0x7f0000000100)=0x7fffffff) r5 = syz_open_pts(0xffffffffffffffff, 0x42b500) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000140)={0x0, r0, 0x10000, 0x3, 0xbbb, 0x3}) 16:18:26 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b06317f5d", 0xd}], 0x1) 16:18:26 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0xc020660b, &(0x7f0000000000)) 16:18:26 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x227b, &(0x7f0000000000)=0x3) 16:18:26 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x4020940d, &(0x7f0000000000)) 16:18:27 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0xffffff6e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r2, 0x10099b7) sendfile(r0, r2, 0x0, 0x88000fc000000) 16:18:27 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x227b, &(0x7f0000000000)=0x4) 16:18:27 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x800454d2, &(0x7f0000000000)) 16:18:27 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b07317f5d", 0xd}], 0x1) 16:18:27 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0xc0481273, &(0x7f0000000000)) 16:18:27 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b08317f5d", 0xd}], 0x1) 16:18:27 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x5385, &(0x7f0000000000)) 16:18:27 executing program 0: writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}], 0x1) 16:18:27 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x80086301, &(0x7f0000000000)) 16:18:27 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0xffffff6e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r2, 0x10099b7) sendfile(r0, r2, 0x0, 0x88000fc000000) 16:18:27 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x227b, &(0x7f0000000000)=0x5) 16:18:27 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b09317f5d", 0xd}], 0x1) 16:18:27 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x5385, &(0x7f0000000000)=0x2) [ 473.622401][ T27] audit: type=1800 audit(1578759507.616:35): pid=12979 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=16838 res=0 16:18:27 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x227b, &(0x7f0000000000)=0x6) 16:18:27 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0a317f5d", 0xd}], 0x1) 16:18:27 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0xc0045878, &(0x7f0000000000)) 16:18:27 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x5385, &(0x7f0000000000)=0x3) 16:18:27 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet_tcp_int(r1, 0x6, 0x0, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0xffffff6e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r2, 0x10099b7) sendfile(r0, r2, 0x0, 0x88000fc000000) 16:18:27 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}], 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SELLOADLUT(r3, 0x541c, &(0x7f0000000000)={0xb}) ioctl$TCSETAF(r3, 0x5408, &(0x7f0000000240)={0x101, 0xfffa, 0x8000, 0x1, 0x15, "c9af28794db492e1"}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r4 = getuid() setresuid(0xee01, r4, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) r6 = getuid() setresuid(0xee01, r6, 0x0) mount$fuseblk(&(0x7f0000000000)='/dev/loop0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='fuseblk\x00', 0x80, &(0x7f0000000140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x600}}], [{@obj_role={'obj_role'}}, {@subj_type={'subj_type', 0x3d, '#&}\''}}, {@seclabel='seclabel'}, {@fowner_lt={'fowner<', r6}}, {@smackfstransmute={'smackfstransmute', 0x3d, '-:cgroup /)loposix_acl_access:'}}]}}) 16:18:28 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x227b, &(0x7f0000000000)=0x7) 16:18:28 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0b317f5d", 0xd}], 0x1) 16:18:28 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0xc0045878, &(0x7f0000000000)) 16:18:28 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x5385, &(0x7f0000000000)=0x4) 16:18:28 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x227b, &(0x7f0000000000)=0x8) 16:18:28 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0c317f5d", 0xd}], 0x1) 16:18:28 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSRS485(r0, 0x542f, &(0x7f0000000040)={0x6d6b10cf}) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x209) setsockopt$TIPC_MCAST_BROADCAST(r1, 0x10f, 0x85) syz_open_dev$ttys(0xc, 0x2, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000300)) writev(r2, &(0x7f0000000540), 0x2f4) syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x2, 0x800) 16:18:28 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet_tcp_int(r1, 0x6, 0x0, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0xffffff6e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r2, 0x10099b7) sendfile(r0, r2, 0x0, 0x88000fc000000) 16:18:28 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x227b, &(0x7f0000000000)=0x300) 16:18:28 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0xc0189436, &(0x7f0000000000)) 16:18:28 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x5385, &(0x7f0000000000)=0x5) 16:18:28 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0e317f5d", 0xd}], 0x1) 16:18:28 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet_tcp_int(r1, 0x6, 0x0, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0xffffff6e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r2, 0x10099b7) sendfile(r0, r2, 0x0, 0x88000fc000000) 16:18:28 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x227b, &(0x7f0000000000)=0x500) 16:18:28 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0xc020660b, &(0x7f0000000000)) 16:18:28 executing program 0: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r2}, 0x14) getsockname$packet(r0, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000040)={r4}, &(0x7f0000000140)=0x8) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000040)={r6}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000180)={r6, 0x7fffffff}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000200)={r4, 0x2, 0x9, 0x20, 0xff36, 0x6, 0xe84f, 0x6, {r7, @in={{0x2, 0x4e24, @multicast1}}, 0x6, 0xa4, 0x3f, 0x100, 0xe644}}, &(0x7f00000002c0)=0xb0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) r10 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r10, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000007000100070c10000000000000000000", 0x58}], 0x1) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r10, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r11, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x1000) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) write$P9_RUNLINKAT(r9, &(0x7f0000000000)={0x7, 0x4d, 0x2}, 0x7) r12 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r12, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}], 0x1) 16:18:28 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0f317f5d", 0xd}], 0x1) 16:18:28 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x5385, &(0x7f0000000000)=0x6) 16:18:29 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0xc0481273, &(0x7f0000000000)) 16:18:29 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x227b, &(0x7f0000000000)=0x600) 16:18:29 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0xffffff6e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r2, 0x10099b7) sendfile(r0, r2, 0x0, 0x88000fc000000) 16:18:29 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b10317f5d", 0xd}], 0x1) 16:18:29 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x8000, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140), &(0x7f0000000280)=0x4) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) writev(r1, &(0x7f0000000100)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}, {&(0x7f0000000000)="47780a83250dca6a6fa9a49b3c323804ee0726bc0f2887718b4d606d5a91205106e6b3a00bf506ed5ecca7c8e96d214db98af87e558dcdd21bf34d68f48126e5fc5f7906013a4ee545e2bce48019bee1b2fafaf04cfbbe70dc30534548200d7b89d454a8c58719dbc5deb6ff157b6e93af1d3cecf398155112bc4a1f237c756b1dd0a14e3980fec4e49fbb39", 0x8c}], 0x2) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000300)) write(r2, &(0x7f00000001c0)="d5da31f58ab8fb8ff68148523d809aa2445c0a338ed968c2195d9173e61de915dbab1fb4dd14d00d2ce06b7d2a0c85a3ac14d1d90e0570e9529a2c68a490e731897e2172d6009725cb2a59b68f981785af123b3e0783d7555e3a550b2cd5530e78636cec5dc8f7b6210d25bc757c849943a5996b470e76f2971344c2ff9890b789ddd7143fe99a9bd3a04bbc489101ddf8", 0x91) 16:18:29 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x5385, &(0x7f0000000000)=0x7) 16:18:29 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2284, &(0x7f0000000000)) 16:18:29 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x227b, &(0x7f0000000000)=0x700) 16:18:29 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b12317f5d", 0xd}], 0x1) 16:18:29 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000300)) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000300)) r3 = fcntl$dupfd(r1, 0x406, r0) ioctl$TIOCMBIC(r3, 0x5417, &(0x7f0000000000)=0xfff) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}], 0x1) 16:18:29 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x5385, &(0x7f0000000000)=0x8) 16:18:29 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0xffffff6e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r2, 0x10099b7) sendfile(r0, r2, 0x0, 0x88000fc000000) 16:18:29 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2284, &(0x7f0000000000)=0x2) 16:18:29 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x227b, &(0x7f0000000000)=0x4000) 16:18:29 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b18317f5d", 0xd}], 0x1) 16:18:29 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x5385, &(0x7f0000000000)=0xf) 16:18:29 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x800, 0x0) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}], 0x1) 16:18:29 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2284, &(0x7f0000000000)=0x3) 16:18:29 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0xffffff6e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r2, 0x10099b7) sendfile(r0, r2, 0x0, 0x88000fc000000) 16:18:29 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b1a317f5d", 0xd}], 0x1) 16:18:29 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x227b, &(0x7f0000000000)=0xff00) 16:18:29 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, &(0x7f0000000000)={0x4, 0x6}) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}], 0x1) 16:18:30 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x5385, &(0x7f0000000000)=0x300) 16:18:30 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b1b317f5d", 0xd}], 0x1) 16:18:30 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2284, &(0x7f0000000000)=0x4) 16:18:30 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0xffffff6e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r2, 0x10099b7) sendfile(r0, r2, 0x0, 0x88000fc000000) 16:18:30 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x227b, &(0x7f0000000000)=0x400000) 16:18:30 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b2a317f5d", 0xd}], 0x1) 16:18:30 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}], 0x1) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) 16:18:30 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x5385, &(0x7f0000000000)=0x500) 16:18:30 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2284, &(0x7f0000000000)=0x5) 16:18:30 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b59317f5d", 0xd}], 0x1) 16:18:30 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}], 0x100000000000004a) 16:18:30 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x5385, &(0x7f0000000000)=0x600) 16:18:30 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x227b, &(0x7f0000000000)=0x800000) 16:18:30 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0xffffff6e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r2, 0x10099b7) sendfile(r0, r2, 0x0, 0x88000fc000000) 16:18:30 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2284, &(0x7f0000000000)=0x6) 16:18:30 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b5e317f5d", 0xd}], 0x1) 16:18:30 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000100)="89307d62c626d0860069d579e7e7d420df0e288ddf934849eb9e53831c9cc20371f5e2464eccc58fb513527dcdb2705b834e256601aff60019d3797ef0"}, {&(0x7f00000001c0)="3edf0febd43f04bd51a3a33d56debf912064b1f8cb60bb8869bfa2d39df7c1f2bc4365d13bd35d1dbf069a321646504fef6b4994e7e243b4270943b9680df36b937a1da30b0bfe01d41fd219457dd01cde526a62a7dceb90b93dec9110d053e12f0b8b0dcfd4aab0b0984e30dffcb4d432e3bdafff62e0c28c1dab8d89c8b7379c8d7e69f9123a621c7f456ecaad4bef21e3f9a9a5382e6fad6404b8f849670ec1a2b95c34a1d1bc1d"}, {&(0x7f0000000340)="419d821e13de898e60f4a99dce7a97d529782b56bed49d143f090717d6f704a0e32957d94209d3faa99f468c95546fae8e64d2075d82f113bdf570916a98db083a20860a075a79cd104b2650e0cf9e8d15884114e679e7a4d9012e7e7ace50a1bb7d923acf796715e694e8342a408cb4dbf61214c28fe6d774292da52f4b9a680de253d6e8017bf503396cc11d815cfa59f4c78776e6ccf66d7bb334c95442abfd94f1aa5ff6978e509351e463a9d137972c5f41144f9105435381f08c4a2d2bb73d502273c79fad2282862e56f6"}, {&(0x7f0000000440)="115202ef5a1a18bd45c8d4ca39c808ba340ba3b78b0341b9fe380001cdbbd06550c95d7bb7947956db7b36246fcbcf847ce29ad68702c157b4fc3470185d665da7f381a1903ddf1f93867a35f76d0168509df041d888ef0d538874a170af09bad56e2ab1dfdf4d7de733234889b33c494236e20d6c8bc768cfd17ae10cb40ff659af5d8db61ef9d85bca5307b0b90fe7d1c3c9f674ee34e3814cde088782d62930ba1c6e4ddb2d3bb71be99dffb9739c"}, {&(0x7f0000000580)="23ea1dc66abc73184482ceb705cfe5c5cbcb48c9c2c8c922d570fe29adca4f4bd69b4ccea5647bcc0843d33343613e308a6ee26bce5451a38807e6281656be80a6c6475c65fedceab02e1ecb2279300d65d999db8180a04634f129636b0061416d38effafa00f9f0de0df23115ad9f9f1dd52e0f4db8000d1fd3e6004e366ca8afe51a3b55416c34741100dca0d85d12a56295d2960165accdbf493c63117c26655f3f3c4100561297e085f7ca1f873a7dbf42810148b5a4f3e6df7ab605c4900eab898486ac56e0874c42ab86b051f784c7c8c068398bde0741dbf6ad7977c33c16447eed81f999cd9e85e3881227829e94"}, {&(0x7f0000000140)="ea9923d50c276600810afc253d4785cc8243b03e0dae47d86eb8747514fedabcdb4eddb11f8b08d88bdaed1f45995914e919a9f173fd14b2eede36c5bd"}], 0x10d5) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000040)={0x372a, 0x0, 0x4, 0x80000, 0x3618, {}, {0x2, 0x1, 0x1, 0x0, 0x21, 0x6, "e8d3a927"}, 0x8001, 0x4, @planes=&(0x7f0000000000)={0x401, 0x4, @userptr=0x17d, 0x3ff}, 0x2, 0x0, r1}) ioctl$KVM_S390_UCAS_MAP(r2, 0x4018ae50, &(0x7f00000000c0)={0x5, 0x8, 0x6}) 16:18:30 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x5385, &(0x7f0000000000)=0x700) 16:18:30 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x227b, &(0x7f0000000000)=0x1000000) 16:18:30 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2284, &(0x7f0000000000)=0x7) 16:18:31 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b9b317f5d", 0xd}], 0x1) 16:18:31 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0xffffff6e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r2, 0x10099b7) sendfile(r0, r2, 0x0, 0x88000fc000000) 16:18:31 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x540a, 0x3) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}], 0x1) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) r2 = socket(0x200000000000011, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r2, &(0x7f0000000240)={0x11, 0x0, r4}, 0x14) getsockname$packet(r2, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x1, 0x5, 0x47, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r5}, 0x3c) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r5, 0x1, 0x6, @remote}, 0x10) 16:18:31 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x5385, &(0x7f0000000000)=0xf00) 16:18:31 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x227b, &(0x7f0000000000)=0x2000000) 16:18:31 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49bdf317f5d", 0xd}], 0x1) 16:18:31 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2284, &(0x7f0000000000)=0x8) 16:18:31 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0xffffff6e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r2, 0x10099b7) sendfile(r0, r2, 0x0, 0x88000fc000000) 16:18:31 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x5385, &(0x7f0000000000)=0x4000) 16:18:31 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="0d317f679b64", 0x6}], 0x1) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x3) 16:18:31 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x227b, &(0x7f0000000000)=0x3000000) 16:18:31 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d077f5d", 0xd}], 0x1) 16:18:31 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2284, &(0x7f0000000000)=0x300) 16:18:31 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d087f5d", 0xd}], 0x1) 16:18:31 executing program 0: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x5, 0x1, &(0x7f00000003c0)={0x77359400}, &(0x7f0000000400)) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000140)={0x9, 0x1, 0x4, 0x1000000, 0x3, {r0, r1/1000+30000}, {0x4, 0x11, 0xc1, 0x0, 0xc2, 0x1, "d96b1c66"}, 0xffffffc1, 0x0, @planes=&(0x7f0000000100)={0x5, 0x7, @fd, 0x7}, 0xce, 0x0, 0xffffffffffffffff}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r2, 0x40045542, &(0x7f00000001c0)) ioctl$SIOCGIFHWADDR(r2, 0x8927, &(0x7f0000000440)) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000200)={0x8f, 0x1, 0x2, 0x10000, 0x7, [{0xa3, 0x8, 0x3, [], 0x88}, {0x1f, 0xf5, 0xb6e7, [], 0xdac597fd05e242f1}, {0x91f, 0x100, 0x6, [], 0x880}, {0x9, 0x2a43, 0x80000001, [], 0x1c06}, {0x7, 0x9, 0x4000000000, [], 0x800}, {0x6, 0xffffffffffffff6e, 0x8, [], 0x80}, {0x5, 0x4a, 0xffff, [], 0x1404}]}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x7537387b2629a771, 0x0) getsockopt$inet_sctp_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0xe) writev(r3, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}], 0x1) r5 = socket(0x200000000000011, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r5, &(0x7f0000000240)={0x11, 0x0, r7}, 0x14) getsockname$packet(r5, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) r8 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/qat_adf_ctl\x00', 0x28d62ebe5749b383, 0x0) getsockopt$ARPT_SO_GET_INFO(r8, 0x0, 0x60, &(0x7f0000000600)={'filter\x00'}, &(0x7f0000000580)=0x12) 16:18:31 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x5385, &(0x7f0000000000)=0xff00) 16:18:31 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x227b, &(0x7f0000000000)=0x4000000) 16:18:31 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d097f5d", 0xd}], 0x1) 16:18:31 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2284, &(0x7f0000000000)=0x500) 16:18:31 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0xffffff6e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r2, 0x10099b7) sendfile(r0, r2, 0x0, 0x88000fc000000) 16:18:31 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x5385, &(0x7f0000000000)=0x400000) 16:18:32 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x181001, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r3, &(0x7f0000000040)=[{&(0x7f00000008c0)="7c8d800e64", 0x5}], 0x1) 16:18:32 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x227b, &(0x7f0000000000)=0x5000000) 16:18:32 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d0a7f5d", 0xd}], 0x1) 16:18:32 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2284, &(0x7f0000000000)=0x600) 16:18:32 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x5385, &(0x7f0000000000)=0x800000) 16:18:32 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x227b, &(0x7f0000000000)=0x6000000) 16:18:32 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d0c7f5d", 0xd}], 0x1) 16:18:32 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x6, &(0x7f0000000100)={0x8, &(0x7f00000000c0)=[{0xc, 0x7, 0x1f, 0x20}, {0x5, 0x2, 0x40, 0x1670}, {0x0, 0x0, 0x2, 0xb7b}, {0x5cd, 0x4, 0x81, 0x3}, {0x0, 0x77, 0xae, 0x3}, {0x5c, 0x7f, 0x4, 0xfffffffd}, {0x5, 0x9, 0x8, 0x80000000}, {0x200, 0x2, 0x0, 0x401}]}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f0000000000)={0x7f, {{0xa, 0x4e22, 0xd93f, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x20007}}}, 0x2e4) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}], 0x1) 16:18:32 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2284, &(0x7f0000000000)=0x700) 16:18:32 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0xffffff6e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r2, 0x10099b7) sendfile(r0, r2, 0x0, 0x88000fc000000) 16:18:32 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d0d7f5d", 0xd}], 0x1) 16:18:32 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140), 0x0) 16:18:32 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2284, &(0x7f0000000000)=0x3f00) 16:18:32 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x5385, &(0x7f0000000000)=0x1000000) 16:18:32 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x227b, &(0x7f0000000000)=0x7000000) 16:18:32 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0xffffff6e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r2, 0x10099b7) sendfile(r0, r2, 0x0, 0x88000fc000000) 16:18:32 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d0e7f5d", 0xd}], 0x1) 16:18:32 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2284, &(0x7f0000000000)=0x4000) 16:18:33 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x227b, &(0x7f0000000000)=0x8000000) 16:18:33 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x5385, &(0x7f0000000000)=0x2000000) 16:18:33 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d0f7f5d", 0xd}], 0x1) 16:18:33 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000007000100070c10000000000000000000", 0x58}], 0x1) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x10104}, 0x4000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r1, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}], 0x1) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x90800, 0x0) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$RTC_WKALM_RD(r5, 0x80287010, &(0x7f0000000240)) ptrace$peek(0x5, r3, &(0x7f0000000100)) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r2, 0x8008ae9d, &(0x7f0000000040)=""/182) 16:18:33 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2284, &(0x7f0000000000)=0xff00) 16:18:33 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x5385, &(0x7f0000000000)=0x3000000) 16:18:33 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d187f5d", 0xd}], 0x1) 16:18:33 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x227b, &(0x7f0000000000)=0x40000000) 16:18:33 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0xffffff6e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r2, 0x10099b7) sendfile(r0, r2, 0x0, 0x88000fc000000) 16:18:33 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}], 0x1000000000000451) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000002340)='/proc/self/net/pfkey\x00', 0x20900, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001540)='/dev/sequencer2\x00', 0x440, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') r4 = epoll_create1(0x0) close(r4) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000c85000)) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xf2ba825992b3006c}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="fb000000", @ANYRES16=r3, @ANYRES64=r4], 0x3}, 0x1, 0x0, 0x0, 0x40000}, 0x20004811) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80001040}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='\b\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="08082abd7000fddbdf25050000000c00020020000000000000000800010000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4984d6f2dcb8200}, 0x10) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="280000008008827a26dbe2ba6b30c20bed01995e97cbddf5710ac464505f957b88d70a9e60e1e13774472e9b99112b3b0087ba7877f6e3966d68bf5033394fbb2129435833e4a495c113495ce78f32175c1c11c7fdb374f909f13fefcf96268724572e30", @ANYRES16=r3, @ANYBLOB="000429bd7000fcdbdf250100000008000100000000000c0002000600000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x20048}, 0x20001821) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000002440)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002400)={&(0x7f00000023c0)={0x2c, r3, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2d4}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1010}, 0x800) 16:18:33 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2284, &(0x7f0000000000)=0x400000) 16:18:33 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d1a7f5d", 0xd}], 0x1) 16:18:33 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x5385, &(0x7f0000000000)=0x4000000) 16:18:33 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x227b, &(0x7f0000000000)=0xfdfdffff) 16:18:33 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fsetxattr$security_evm(r0, &(0x7f0000000000)='security.evm\x00', &(0x7f0000000040)=@sha1={0x1, "30401aaae5d25ec9bb360f68199853ef9ee52c9e"}, 0x15, 0x0) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982bc69b0d317f679b64", 0xffffffffffffffdb}], 0x1) 16:18:33 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2284, &(0x7f0000000000)=0x800000) 16:18:33 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d1b7f5d", 0xd}], 0x1) 16:18:33 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x227b, &(0x7f0000000000)=0xff000000) 16:18:33 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x5385, &(0x7f0000000000)=0x5000000) 16:18:33 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0xffffff6e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r2, 0x10099b7) sendfile(r0, r2, 0x0, 0x88000fc000000) 16:18:33 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000440)='/dev/dlm_plock\x00', 0x400000, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000480)={'nr0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}], 0x1) r2 = socket(0x200000000000011, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r2, &(0x7f0000000240)={0x11, 0x0, r4}, 0x14) getsockname$packet(r2, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f00000004c0), &(0x7f0000000500)=0x4) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000400)={0xbf, 0xc}) 16:18:33 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d3b7f5d", 0xd}], 0x1) 16:18:34 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2284, &(0x7f0000000000)=0x1000000) 16:18:34 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x227b, &(0x7f0000000000)=0xfffffdfd) 16:18:34 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2284, &(0x7f0000000000)=0x2000000) 16:18:34 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x5385, &(0x7f0000000000)=0x6000000) 16:18:34 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d3c7f5d", 0xd}], 0x1) 16:18:34 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540), 0x0) 16:18:34 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x227b, &(0x7f0000000000)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) r2 = fcntl$dupfd(r1, 0xbf7c7ad442aa9f74, r0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) 16:18:34 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380), 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0xffffff6e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r2, 0x10099b7) sendfile(r0, r2, 0x0, 0x88000fc000000) 16:18:34 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d3d7f5d", 0xd}], 0x1) 16:18:34 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0x57}], 0x7b) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f00000002c0)='./bus\x00', 0x143042, 0x0) ftruncate(r2, 0x2008002) sendfile(r1, r2, 0x0, 0x200fff) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_NMI(r3, 0xae9a) 16:18:34 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2284, &(0x7f0000000000)=0x3000000) 16:18:34 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x5385, &(0x7f0000000000)=0x7000000) 16:18:34 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xc16fad845be07175, 0x1010, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x227b, &(0x7f0000000000)) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsu\x00', 0x32a02, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x9) 16:18:34 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d3e7f5d", 0xd}], 0x1) 16:18:34 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x5385, &(0x7f0000000000)=0x8000000) 16:18:34 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2284, &(0x7f0000000000)=0x4000000) 16:18:34 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380), 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0xffffff6e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r2, 0x10099b7) sendfile(r0, r2, 0x0, 0x88000fc000000) 16:18:34 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d597f5d", 0xd}], 0x1) 16:18:35 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2284, &(0x7f0000000000)=0x5000000) 16:18:35 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x5385, &(0x7f0000000000)=0xf000000) 16:18:35 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d5b7f5d", 0xd}], 0x1) [ 481.182132][ T27] audit: type=1800 audit(1578759515.176:36): pid=13547 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=16847 res=0 16:18:35 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SELLOADLUT(r1, 0x541c, &(0x7f0000000000)={0xb}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SELLOADLUT(r2, 0x541c, &(0x7f0000000000)={0xb}) ioctl$PIO_FONT(r2, 0x4b61, &(0x7f0000000140)="0bb36ce85971c3e8ef25373f12a153707bcc29e8e1b97ff823f5557a5eb8e43c186eb561634ad98c808ccb7a977cf27e3e646cf5b908cd25a78db35f8e") ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000100)=0x3ff) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}], 0x1) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x20, 0x0) ioctl$int_in(r5, 0x800000c004500a, &(0x7f0000000300)) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0xa1e3, 0x8, 0x4, 0x20, 0x3ff, {r3, r4/1000+10000}, {0x5, 0x1, 0x5, 0x8, 0x4, 0xb2, "d01195e1"}, 0x2, 0x1, @fd, 0x2, 0x0, r5}) accept4$packet(r6, 0x0, &(0x7f00000000c0), 0x800) 16:18:35 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380), 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0xffffff6e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r2, 0x10099b7) sendfile(r0, r2, 0x0, 0x88000fc000000) 16:18:35 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2284, &(0x7f0000000000)=0x6000000) 16:18:35 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d5e7f5d", 0xd}], 0x1) 16:18:35 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x5385, &(0x7f0000000000)=0x20000000) 16:18:35 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d9b7f5d", 0xd}], 0x1) 16:18:35 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2284, &(0x7f0000000000)=0x7000000) 16:18:35 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x101180) ioctl$KVM_IRQ_LINE(r0, 0x4008ae61, &(0x7f0000000040)={0x5, 0x2}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r1, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}], 0x1) 16:18:35 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x5385, &(0x7f0000000000)=0x40000000) 16:18:35 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(0x0, 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0xffffff6e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r2, 0x10099b7) sendfile(r0, r2, 0x0, 0x88000fc000000) 16:18:35 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0ddf7f5d", 0xd}], 0x1) 16:18:35 executing program 0: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r2}, 0x14) getsockname$packet(r0, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) setsockopt$inet_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000000)="fa7c1cc29164d2fe3502b0c04a20da2dc754d86683a751d6e2b45633710e80e1c0a0d46fd44848c5d2fd39d70476ebdd286615893d1ab1446a59e0017a4b8814c7b4047098bb19caa818cbd17a54e7e4c4289dfd5bfe0f7d1f43a27d67c374001919e457d5f0b36c34b3355de8cb5efd34fb6d3fc7f948c0dcdeb6daeef3e7b4dab20251f556b41d211c48ec5af8e4e2c42d", 0x92) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r3, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}], 0x1000000000000252) 16:18:35 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2284, &(0x7f0000000000)=0x8000000) 16:18:35 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x5385, &(0x7f0000000000)=0xff000000) 16:18:36 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d31075d", 0xd}], 0x1) 16:18:36 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x227b, &(0x7f0000000000)) r1 = getuid() setresuid(0xee01, r1, 0x0) r2 = getuid() setresuid(0xee01, r2, 0x0) getresuid(&(0x7f0000000100)=0x0, &(0x7f0000000140), &(0x7f0000000180)) r4 = getuid() setresuid(0xee01, r4, 0x0) r5 = getuid() setresuid(0xee01, r5, 0x0) r6 = socket(0x200000000000011, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r6, &(0x7f0000000240)={0x11, 0x0, r8}, 0x14) getsockname$packet(r6, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f00000001c0)={{{@in=@initdev, @in6=@ipv4={[], [], @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f00000002c0)=0x312) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/icmp6\x00') fstat(r10, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = socket$vsock_stream(0x28, 0x1, 0x0) fstat(r12, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r11, r13) getgroups(0x8, &(0x7f0000000100)=[0x0, 0xffffffffffffffff, 0xee01, 0xee01, 0x0, r13, 0xee00, 0x0]) r15 = syz_open_procfs(0x0, 0x0) fstat(r15, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r16, 0x0) setresgid(0xee00, r14, r16) r17 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/icmp6\x00') fstat(r17, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r19 = socket$vsock_stream(0x28, 0x1, 0x0) fstat(r19, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r18, r20) getgroups(0x8, &(0x7f0000000100)=[0x0, 0xffffffffffffffff, 0xee01, 0xee01, 0x0, r20, 0xee00, 0x0]) getgroups(0x1, &(0x7f0000000300)=[0x0]) r22 = syz_open_procfs(0x0, &(0x7f00000004c0)='auxv\x00') fstat(r22, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r23, 0x0) setregid(r23, 0x0) r24 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/icmp6\x00') fstat(r24, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r25, 0x0) r26 = getegid() syz_open_procfs(0x0, &(0x7f00000004c0)='auxv\x00') r27 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r27, 0x800000c004500a, &(0x7f0000000300)) fstat(r27, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r28, 0x0) setregid(r28, 0x0) r29 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/icmp6\x00') fstat(r29, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r30, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r32 = socket$vsock_stream(0x28, 0x1, 0x0) fstat(r32, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r31, r33) getgroups(0x8, &(0x7f0000000100)=[0x0, 0xffffffffffffffff, 0xee01, 0xee01, 0x0, r33, 0xee00, 0x0]) r34 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/icmp6\x00') fstat(r34, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r36 = socket$vsock_stream(0x28, 0x1, 0x0) fstat(r36, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r35, r37) getgroups(0x8, &(0x7f0000000100)=[0x0, 0xffffffffffffffff, 0xee01, 0xee01, 0x0, r37, 0xee00, 0x0]) getgroups(0x9, &(0x7f0000000340)=[r28, 0xee00, 0xee00, 0xee01, r30, r33, 0xee00, 0xffffffffffffffff, r37]) getresgid(&(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)=0x0) r40 = getgid() setxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB="02000000010003000000000002000100", @ANYRES32=r1, @ANYBLOB="02000200", @ANYRES32=r2, @ANYBLOB="02000200", @ANYRES32=r3, @ANYBLOB="02000100", @ANYRES32=r4, @ANYBLOB="02000300", @ANYRES32=r5, @ANYBLOB="02000400", @ANYRES32=r9, @ANYBLOB="04000600000000000800b6a4", @ANYRES32=r16, @ANYBLOB="fafa54afb201e9660000000000000000119309c38f369006558e355bd924bdb123a44e841d5bfa01233a3723902558543b81bc1e4cde81e22478e8ce2e7332667babec301d8cac8a13bfd9025babc72d81459cecf02db27aa552c93cde107317f85a8c1b5a701adcab6db0207a33e0c427de0ee8cfca662086c353c2c6249cc0f6a16916ba507af279eb052187d2a4437ff0ce0bdb090054d96a5f27fcf5f4ec318a6a13fa38e0a161cfe4e62feb1b5018fd44d653c7bcef8bfab451c8ad0f7f", @ANYRES32=r20, @ANYBLOB='\b\x00\f\x00', @ANYRES32=r21, @ANYBLOB='\b\x00g@', @ANYRES32=r23, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r25, @ANYBLOB="08000100", @ANYRES32=r26, @ANYBLOB="08000600", @ANYRES32=r38, @ANYBLOB="08000200", @ANYRES32=r39, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r40, @ANYBLOB="10000000000000002000040000000000"], 0x9c, 0x3) 16:18:36 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(0x0, 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0xffffff6e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r2, 0x10099b7) sendfile(r0, r2, 0x0, 0x88000fc000000) 16:18:36 executing program 0: writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}], 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$TIOCL_SELLOADLUT(r0, 0x541c, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0x1}) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x200000, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mISDNtimer\x00', 0x400, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x6) ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f0000000000)={0x8000, 0xd0ff, 0x1, 0x0, 0x2}) 16:18:36 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x100, 0x80400) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) pwrite64(r1, &(0x7f0000000080)="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", 0x1000, 0x7) r2 = socket(0x200000000000011, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r2, &(0x7f0000000240)={0x11, 0x0, r4}, 0x14) getsockname$packet(r2, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000001080)={'nat\x00'}, &(0x7f0000001100)=0x54) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8982, &(0x7f0000001140)={0x6, 'veth1_vlan\x00', {}, 0x1ff}) ioctl$SG_NEXT_CMD_LEN(r0, 0x5385, &(0x7f0000000000)) 16:18:36 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2284, &(0x7f0000000000)=0x3f000000) 16:18:36 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(0x0, 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0xffffff6e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r2, 0x10099b7) sendfile(r0, r2, 0x0, 0x88000fc000000) 16:18:36 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000000040)=""/52, 0x34}, {&(0x7f0000001380)=""/4096, 0x1000}], 0x3, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000240)="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", 0x11f}, {&(0x7f0000000180)="1daa89ddb6d4be7049cbbc84252756929e2cd58ece9b5aa1b69a7e2e6b5b510ce37d36fdfe01adee6af0577a78f8cf2cefdb6e3d8627522e44dbdc139443332bab9bbefe5cf27a04dbc5b91753d8c198f881b391c337c4eb67337c60cb7a22fcc1de04cb052d04361c8ee0ac2b3ebe026ee2abcfa18cabff18e00fe37a16", 0x7e}], 0x2) r2 = socket(0x200000000000011, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r2, &(0x7f0000000240)={0x11, 0x0, r4}, 0x14) getsockname$packet(r2, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000028c0)={{{@in6=@mcast1, @in6=@ipv4={[], [], @loopback}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f00000029c0)=0xe8) r6 = getuid() setresuid(0xee01, r6, 0x0) syz_mount_image$exfat(&(0x7f00000000c0)='exfat\x00', &(0x7f0000000100)='./file0\x00', 0x81, 0x7, &(0x7f0000002800)=[{&(0x7f0000002380)="9a08273269cd010726ad1ae0883cb0333122b22308f21af3cf0eeddabc4c438efeb6316db327e812cea119943cf51042485fe1bb77dfb819b3853d5ad889ea2582644bc5a5dba1f26d60345088e260d3212ab86bfff92ff26d03650d2c4a1e0fdbcfa337e9a1424c141cac2b6de900a2de1b10c6f9b9ce730a7b8f768e97a100203725f00aec61727e71a4db", 0x8c, 0x10001}, {&(0x7f0000002440)="b546a03b3bd7b2a7f3ed4efa3822af2afd01084846b3db5bb452764d3c1a930f16fc6310246286104e6d79ae11bb8cef17c81149f29f799dd7e6ee2ead0ee870c2d2557b5d6fd8d3e72c979f2d24dde00c1930c8bb800485de33cb94435ad742a09eed6d6cad23b9", 0x68, 0xc618}, {&(0x7f00000024c0)="29be6acf58c720ea6cf24da35b484e74a16443bab1718f3e839ada8993d1f289c90772a346cc455e0f3cb3eef02733771016de72350b2a391ddea6ad2d7ef2b81d6453c0f9c8a3e47e43c5fd70fa34468578795db6e07ddd8aacf161f7d3452e609e4dbb04fdac", 0x67, 0x100000000}, {&(0x7f0000002540)="2b50cc55a5d78946eb943fb848ad70128d20e29ac3cd0356288e54522ac10aadf62371f7300d80e8db019055ffbd4bba8f032b039905cbb968484ffadf6fc291bf74e69aefaa3a2db63f01a57a5f34935b1cb047f1968918918f562aa2fc08f34c3ddf42e62ff919396c074855b7b03462996c6268565b19f8a0ba0cf8d5751ece33efa3a984510c8976ca5dd700c76ccef7070a7ce89d997b", 0x99, 0x40}, {&(0x7f0000002600)="f10a8de78bcfb728ed9bdf6cb68367981a1c47021954ad6cb172cb47be5192c9322d0311cef69249b69a7d4aace39503541123444f2b948f0c81e5b5a42199bb2b257735553deda6752fcb71025bf3a058019a6714af003cd0fa5312c6153c4e790907478cabd6e93153cf53a8943b44e4084ab61ad2a5cc50b69801c72397cb7bba24adf386ba7354fa2ecbb3770e2b73fad990e1a113946d8f4e2eb0b9bef410574eb715a7890c80389c22bbd7ae6ca05384ef4c1848c705fb5f48d33e0fea933ede9397a950b67f6017036f8664f118fd04574bb777895670fd9c58ec6f394c145555", 0xe4, 0x7}, {&(0x7f0000000140)="f9debd64820f4a57fb", 0x9, 0xffffffffffffffc1}, {&(0x7f0000002700)="91317e1758e9614bab3693014ccc1bbf38455e8ee174d5b97dc6115d5db1c231e0d671ee047399b882d24a927fe578870d13ceb80c37dd6239ec20f83a1b38195043270dd3a0421ee503d128c3a81dcee0048b83ec971fc2303a49d1771ae6a3bf365a09722aa69849dac563cb469c901daef2bfd64da59ce78ad7227a02cab8aa19b71a1474f037b14c797d358ab9e488ea8b7483c79271ca8071c4f4631138ef87892adb576e6b4e04f56562945c10570bb01455fad7cc6a29b4eace61bce6277ac1452b0e3637ad877f4da8cf5b605ff185570be2ea", 0xd7, 0x3}], 0x40000, &(0x7f0000002a00)={[{@utf8='utf8'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'ppp1procvmnet1]trusted[em0!securitysecurity%-)wlan0ppp1'}}, {@smackfsroot={'smackfsroot', 0x3d, 'proc\\&!eth0vmnet0wlan0&'}}, {@euid_eq={'euid', 0x3d, r5}}, {@hash='hash'}, {@euid_lt={'euid<', r6}}, {@subj_type={'subj_type', 0x3d, 'vmnet0cpusetvboxnet1-eth1&'}}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/audio\x00'}}, {@dont_measure='dont_measure'}]}) 16:18:36 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d31085d", 0xd}], 0x1) 16:18:36 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2284, &(0x7f0000000000)=0x40000000) 16:18:36 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x321944) r1 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x10, r1, 0xb25d8000) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$VIDIOC_RESERVED(r2, 0x5601, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x5385, &(0x7f0000000000)) 16:18:36 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d31095d", 0xd}], 0x1) 16:18:36 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2284, &(0x7f0000000000)=0xfdfdffff) 16:18:36 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000007000100070c10000000000000000000", 0x58}], 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r6, 0x1, 0x0, 0x0, {0x1a}, [@NL80211_ATTR_REG_ALPHA2={0xfffffffffffffd7c, 0x21, 'bb\x00'}]}, 0x1c}}, 0x0) accept4$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14, 0x800) sendmsg$NL80211_CMD_GET_SCAN(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="dcfcffff", @ANYRES16=r6, @ANYBLOB="00042bbd7000fcdbdf252022000000000100030000000700010cb6bf64f104a00b85ffffffff"], 0x2c}, 0x1, 0x0, 0x0, 0x2008004}, 0x4000000) bind$packet(r1, &(0x7f0000000240)={0x11, 0x0, r3}, 0x14) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) r8 = socket(0x200000000000011, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'gre0\x00', r7}) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000200)={@empty, 0x40, r3}) bind$packet(r8, &(0x7f0000000240)={0x11, 0x0, r9}, 0x14) getsockname$packet(r8, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x1, 0x5, 0x47, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r10}, 0x3c) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'vxcan1\x00', r10}) setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000640)={@dev={0xac, 0x14, 0x14, 0x16}, @local, r11}, 0xc) ioctl$SG_NEXT_CMD_LEN(r0, 0x227b, &(0x7f0000000000)) 16:18:36 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0xffffff6e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r2, 0x10099b7) sendfile(r0, r2, 0x0, 0x88000fc000000) 16:18:36 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x4c0080) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000000080)={0x4, 0x6, 0x4, 0xe000, 0x7, {0x77359400}, {0x3, 0xc, 0x20, 0xfc, 0x4, 0x8}, 0x80, 0x4, @planes=&(0x7f0000000200)={0x401, 0xfffffffb, @userptr=0x100000001, 0x9}, 0x80000001, 0x0, r0}) getsockopt$TIPC_CONN_TIMEOUT(r5, 0x10f, 0x82, &(0x7f0000000100), &(0x7f0000000140)=0x4) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SELLOADLUT(r6, 0x541c, &(0x7f0000000000)={0xb}) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x101040, 0x0) ioctl$TIOCNOTTY(r6, 0x5422) ioctl$SG_NEXT_CMD_LEN(r0, 0x5385, &(0x7f0000000000)) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x20000, 0x0) ioctl$KDGETKEYCODE(r7, 0x4b4c, &(0x7f00000001c0)={0x5, 0x1020}) 16:18:36 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d310a5d", 0xd}], 0x1) 16:18:37 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}], 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCGABS3F(r2, 0x8018457f, &(0x7f0000000040)=""/68) openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video2\x00', 0x2, 0x0) 16:18:37 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0xffffff6e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r2, 0x10099b7) sendfile(r0, r2, 0x0, 0x88000fc000000) 16:18:37 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2284, &(0x7f0000000000)=0xff000000) 16:18:37 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d310c5d", 0xd}], 0x1) 16:18:37 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1, 0x20011, r1, 0x21c1b000) ioctl$SG_NEXT_CMD_LEN(r0, 0x5385, &(0x7f0000000000)) 16:18:37 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0xffffff6e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r2, 0x10099b7) sendfile(r0, r2, 0x0, 0x88000fc000000) 16:18:37 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SELLOADLUT(r0, 0x541c, &(0x7f0000000000)={0xb}) ioctl$TIOCSCTTY(r0, 0x540e, 0xffffffffffffffc0) ioctl$TCSETXF(0xffffffffffffffff, 0x5434, &(0x7f0000000040)={0x3, 0x5, [0x400, 0xb6, 0xc8d, 0x7, 0x3], 0x1083}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) ioctl$void(r1, 0xc0042600) r2 = socket(0x2f, 0x4, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000007000100070c10000000000000000000", 0x58}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000007000100070c10000000000000000000", 0x58}], 0x100000000000004a) r6 = socket(0x200000000000011, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000007000100070c10000000000000000000", 0x58}], 0x1) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r8, 0x8982, &(0x7f0000000100)={0x7, 'erspan0\x00', {0x5}, 0x7a}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r6, &(0x7f0000000240)={0x11, 0x0, r9}, 0x14) getsockname$packet(r6, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x1, 0x5, 0x47, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r10}, 0x3c) getsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f0000000140)={@initdev, 0x0}, &(0x7f00000001c0)=0xda) r12 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r12, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000007000100070c10000000000000000000", 0x58}], 0x1) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000003c0)={'team0\x00', r11}) bind$packet(r2, &(0x7f0000000240)={0x11, 0x0, r9, 0x1, 0x81}, 0x14) getsockname$packet(r2, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) getpeername$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000000c0)=0x1c) writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}], 0x1) 16:18:37 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d310d5d", 0xd}], 0x1) 16:18:37 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x227b, &(0x7f0000000000)) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f00000002c0)='./bus\x00', 0x143042, 0x0) ftruncate(r2, 0x2008002) sendfile(r1, r2, 0x0, 0x200fff) ioctl$VIDIOC_S_AUDIO(r2, 0x40345622, &(0x7f0000000080)={0xffffffff, "a95c00d36ff906b71e3a505969b53e404b37098295597f132c2ed3493365fd1f", 0x1, 0x1}) 16:18:37 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2284, &(0x7f0000000000)=0xfffffdfd) 16:18:37 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/net/pfkey\x00', 0x30200, 0x0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) r4 = open(&(0x7f00000002c0)='./bus\x00', 0x143042, 0x0) ftruncate(r4, 0x2008002) ioctl$SIOCPNGETOBJECT(r2, 0x89e0, &(0x7f0000000340)=0x1f) sendfile(r3, r4, 0x0, 0x200fff) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r5, 0x800000c004500a, &(0x7f0000000300)) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r5) ioctl$USBDEVFS_DISCARDURB(r2, 0x550b, &(0x7f0000000280)=0x54) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) ioctl$SOUND_MIXER_READ_RECMASK(r1, 0x80044dfd, &(0x7f0000000200)) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000180)={0x53, 0xffffffffffffffff, 0x2e, 0x25, @buffer={0x0, 0x1c, &(0x7f0000000080)=""/28}, &(0x7f00000000c0)="0d3a922532816c37a8caeb6c0351c80bde3983aa8d27c151fe62ad239fb49161ab264ed343248c22312bee3fed96", &(0x7f0000000100)=""/19, 0x3, 0x10036, 0x10001, &(0x7f0000000140)}) ioctl$SG_NEXT_CMD_LEN(r0, 0x5385, &(0x7f0000000000)) 16:18:37 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0xffffff6e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r2, 0x10099b7) sendfile(r0, r2, 0x0, 0x88000fc000000) 16:18:37 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d310e5d", 0xd}], 0x1) 16:18:37 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000000)) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}], 0x1) 16:18:37 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x608, 0x800c0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={r1, 0xc, 0x1, 0x20, &(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x3}, 0x20) ioctl$SG_NEXT_CMD_LEN(r0, 0x5385, &(0x7f0000000000)) 16:18:37 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2284, &(0x7f0000000000)=0x3) 16:18:37 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xe, 0x4030, r0, 0x57932000) ioctl$SG_NEXT_CMD_LEN(r0, 0x227b, &(0x7f0000000000)) 16:18:37 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d310f5d", 0xd}], 0x1) 16:18:38 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000007000100070c10000000000000000000", 0x58}], 0x1) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000000)={0x0, 0x75128991, 0x9c, 0x4}, 0x10) 16:18:38 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0xffffff6e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r2, 0x10099b7) sendfile(r0, r2, 0x0, 0x88000fc000000) 16:18:38 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000080)=0x3, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x227b, &(0x7f0000000000)) 16:18:38 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000000140)='./bus\x00', 0x143042, 0x80) ftruncate(r2, 0x2008002) setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f00000000c0)=0x22, 0x4) sendfile(r1, r2, 0x0, 0x200fff) syz_open_dev$char_usb(0xc, 0xb4, 0x800) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x10000, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc028ae92, &(0x7f0000000080)={0x0, 0x3}) ioctl$SG_NEXT_CMD_LEN(r0, 0x5385, &(0x7f0000000000)) 16:18:38 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d31185d", 0xd}], 0x1) 16:18:38 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000080)={0xfffffffa}, 0x4) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r1, 0x0) r2 = socket(0x200000000000011, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r2, &(0x7f0000000240)={0x11, 0x0, r4}, 0x14) getsockname$packet(r2, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000100)={'filter\x00', 0x7, 0x4, 0x3c8, 0x1d8, 0x1d8, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, &(0x7f00000000c0), {[{{@arp={@local, @empty, 0xff, 0x70e84628ed954922, 0xc, 0x0, {@empty, {[0x587b41dd206af37f, 0xff]}}, {@empty, {[0xff, 0x7f, 0xa6b66b0c316d3515, 0xff]}}, 0x402, 0x4, 0xf82, 0x5, 0x9, 0x1f, 'veth1_to_hsr\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x0, 0x200}, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0xbaa6, 0x3, 0x81}}}, {{@arp={@local, @rand_addr=0x8, 0x0, 0x0, 0x5, 0x4, {@mac=@broadcast, {[0x0, 0x101, 0xff, 0x0, 0x0, 0x7f]}}, {@mac, {[0xff, 0x0, 0xff]}}, 0x3ff, 0x4800, 0x7fff, 0x1, 0x2, 0x0, 'bridge_slave_1\x00', 'syzkaller0\x00', {0xff}, {}, 0x0, 0x318}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@arp={@remote, @broadcast, 0xffffffff, 0xffffffff, 0x4, 0x6, {@empty, {[0xbefc49b66a5bc3e6, 0x0, 0xff, 0xff]}}, {@mac=@remote, {[0x0, 0xff, 0x7f, 0xff, 0x0, 0xff]}}, 0x3, 0x26, 0x1ff, 0x0, 0x0, 0x2, 'bond_slave_0\x00', 'gre0\x00', {0x1125b6b7ae800562}, {}, 0x0, 0x8}, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x3, {0x2}}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x418) ioctl$SG_NEXT_CMD_LEN(r1, 0x227b, &(0x7f0000000000)) 16:18:38 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) pipe2(&(0x7f0000000080), 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x5385, &(0x7f0000000000)) 16:18:38 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0xffffff6e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r2, 0x10099b7) sendfile(r0, r2, 0x0, 0x88000fc000000) 16:18:38 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d311a5d", 0xd}], 0x1) 16:18:38 executing program 0: ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000440)={0x2, 'veth0_to_team\x00', {0x3}}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000400)={0x11b, 0x20, &(0x7f0000000000)="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"}) r1 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000007c0)="585ccbe4ed83b836c1a647492ada388e174bfd206895b66147b3c9e1587a050000000700000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e0000ce0637ce0000b4ec24c52b3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274e95c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f477253900000000000000005da06773ddaf4d0c0b3627c2b1bf8283a6bd4d4d55a5f3759254f6f2070e861ce6f926dfd00d8ca491", 0xe0, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200)='user\x00', 0x0, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000a00)='asymmetric\x00', 0x0, &(0x7f0000000200)="3081", 0x2, r3) r4 = request_key(&(0x7f0000000a00)='user\x00', &(0x7f0000000a40)={'syz', 0x1}, &(0x7f0000000a80)='hwsim0\x00', r3) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r1, r2}, 0x0, 0x0, 0x0) r5 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000007c0)="585ccbe4ed83b836c1a647492ada388e174bfd206895b66147b3c9e1587a050000000700000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e0000ce0637ce0000b4ec24c52b3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274e95c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f477253900000000000000005da06773ddaf4d0c0b3627c2b1bf8283a6bd4d4d55a5f3759254f6f2070e861ce6f926dfd00d8ca491", 0xe0, 0xfffffffffffffffe) r6 = add_key$user(&(0x7f0000000200)='user\x00', 0x0, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r7 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000a00)='asymmetric\x00', 0x0, &(0x7f0000000200)="3081", 0x2, r7) r8 = request_key(&(0x7f0000000a00)='user\x00', &(0x7f0000000a40)={'syz', 0x1}, &(0x7f0000000a80)='hwsim0\x00', r7) keyctl$dh_compute(0x17, &(0x7f0000000140)={r8, r5, r6}, 0x0, 0x0, 0x0) r9 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000007c0)="585ccbe4ed83b836c1a647492ada388e174bfd206895b66147b3c9e1587a050000000700000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e0000ce0637ce0000b4ec24c52b3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274e95c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f477253900000000000000005da06773ddaf4d0c0b3627c2b1bf8283a6bd4d4d55a5f3759254f6f2070e861ce6f926dfd00d8ca491", 0xe0, 0xfffffffffffffffe) r10 = add_key$user(&(0x7f0000000200)='user\x00', 0x0, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r11 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000a00)='asymmetric\x00', 0x0, &(0x7f0000000200)="3081", 0x2, r11) r12 = request_key(&(0x7f0000000a00)='user\x00', &(0x7f0000000a40)={'syz', 0x1}, &(0x7f0000000a80)='hwsim0\x00', r11) keyctl$dh_compute(0x17, &(0x7f0000000140)={r12, r9, r10}, 0x0, 0x0, 0x0) r13 = add_key(&(0x7f0000000480)='.dead\x00', &(0x7f00000004c0)={'syz', 0x3}, &(0x7f0000000580)="2894ba19eddfdc523caf75c801e7f70daa6b90d7ce3caaab28eda1c771150b9f75c887acf0935a39cdc37e105ffc1acbb0068b7d79b31b3e861b9c77c0d29f5b37542d4d6f29a60a7625adc7c8a6519f69e6c6b5fe0a29f986200ec7ea37a9410af73665217a7cf04293b76ae9382ba9c16befe6828914", 0x77, r12) keyctl$dh_compute(0x17, &(0x7f0000000500)={r2, r8, r13}, &(0x7f0000000600)=""/178, 0xb2, &(0x7f0000000780)={&(0x7f00000006c0)={'ghash\x00'}, &(0x7f0000000700)="0fded7590179787f8cc2e68c65229fed4c43cb76c3131da8deb76a7a94b77aeb2f414f29492c7f26d909e75a569417a6ff1001b25092d0b7bedb8a58afcebff387b88704d0909e4c3f", 0x49}) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}], 0x1) 16:18:38 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x24035, r0, 0xc2267000) ioctl$SG_NEXT_CMD_LEN(r0, 0x2284, &(0x7f0000000000)) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x6200, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0x100, 0x6}) sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r3, 0x1, 0x0, 0x0, {0x1a}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'bb\x00'}]}, 0x1c}}, 0x0) r4 = socket(0x200000000000011, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r4, &(0x7f0000000240)={0x11, 0x0, r6, 0x1, 0x3}, 0x14) getsockname$packet(r4, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x1, 0x5, 0x47, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r7}, 0x3c) sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xfc, r3, 0x534370f57364fdd7, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x9c, 0xbe, "d15a75d25dacf10c48df0beb353feadb50c052c37e54c363ac6a962a6a0f06ba4e3f4a5508c303d3d97b8aa5f8eeab0d20589e4af68999abd16ccbea56ce573700cb6714824dbcddef941aafa14d48d2aaad2d2d88ae11059014b96476ef5317f0d68faa8afa1a6567b6a91c4828828ed171f19dda08cb9dcda74edee2ba01d8614f26b4b944b9fedb0d9751e09869eb50b31eefb6e87f49"}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x7ff}, @NL80211_ATTR_STA_WME={0x14, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x1}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r7}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x2}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x49f}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}]}, 0xfc}, 0x1, 0x0, 0x0, 0x80}, 0x6) 16:18:38 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d311b5d", 0xd}], 0x1) 16:18:38 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}], 0x1) r1 = socket(0x200000000000011, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r1, &(0x7f0000000240)={0x11, 0x0, r3}, 0x14) getsockname$packet(r1, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000001c0)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000200)=0x10) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000a80)=[{&(0x7f0000000000)=@in={0x2, 0x4e23, @rand_addr=0x2}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000040)="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", 0xff}, {&(0x7f0000000140)="0bf21c4dc471c296e0646f0995e6ca03272148f1b646eefc9fa53469aff841eb0347bf66f0", 0x25}], 0x2, &(0x7f0000000240)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0xea9, 0x4, 0x100, 0x3, 0x7fffffff, 0xce, 0x1, r4}}, @dstaddrv4={0x18, 0x84, 0x7, @loopback}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x7}}, @init={0x18, 0x84, 0x0, {0x1000, 0x0, 0x401, 0x8}}, @init={0x18, 0x84, 0x0, {0x1f, 0x1, 0x7ff, 0x6}}, @init={0x18, 0x84, 0x0, {0x8, 0x81, 0x1ff}}], 0xa8, 0x804}, {&(0x7f0000000300)=@in6={0xa, 0x4e20, 0x80000001, @mcast2, 0x101}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000340)="434a324fcd801aec312d7ad7f249628da1897cb0f0a6d239b762bbdd19e1d9bd6593f79c75eeb15fe9673f49ea69b65efb1102ce11450a19941a1dc707e47fb70e84d5ba412dc292edada578546517bdcdafa8436f5ee18494e3a352aa6d59544ab21f44d92d93dfc475491094d2925dffd17ac39b6f72b28e4a", 0x7a}], 0x1, &(0x7f0000000400)=[@dstaddrv6={0x20, 0x84, 0x8, @mcast2}], 0x20, 0xc0}, {&(0x7f0000000440)=@in6={0xa, 0x4e21, 0x5, @local, 0x3f}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000580)="886ecf51fcad1ea49a9dcfe68254da46c4c913adb1c2cd426e71acf9571607f61b3e302cac53281c444acb3f31a791e4546482b2784af3b0c02883c05e194087c24d042026ecaef8373fdcf9b78c37f578bd14925f62cb21160a3c18927384509282580234be679895d335417cc034cf0baf47c35bca610741f111c644960155a99453221147ee92c66a6b812144fa2e79ee3f5d9d83a92e0e7e4a4e81c02b717e7b3e5244da9a4bb0aed7314ae035442b55f78f53271b9ad46c41aa6eceb40731073f704135df44e3b36017381edb2f620f9876ea07136aea62e31ab97708b9464d7d", 0xe3}, {&(0x7f0000000480)="01ad28c32c689fa71f778ff4e9e2990f810c099fea1ff52ac8099ccfdc082be847d44994424e8eef59d3e969b0121742e35105ae4d1eca0ebf3aafcd971ab1c2", 0x40}, {&(0x7f00000004c0)="f2cbdfd11ee74943d0058f21eecbb5cecbeae2", 0x13}], 0x3, &(0x7f0000000680)=[@dstaddrv4={0x18, 0x84, 0x7, @local}, @dstaddrv6={0x20, 0x84, 0x8, @loopback}, @init={0x18, 0x84, 0x0, {0x6, 0x7, 0x8833, 0x6}}], 0x50, 0xb8c7b1658414ea9f}, {&(0x7f0000000700)=@in={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f0000000780)=[{&(0x7f0000000740)="fc24d067084b5d5da510b437ba52268b66ee1e9e52373064", 0x18}], 0x1, &(0x7f00000007c0)=[@init={0x18, 0x84, 0x0, {0x6, 0x8001, 0x4, 0x9}}, @dstaddrv4={0x18, 0x84, 0x7, @broadcast}, @dstaddrv4={0x18, 0x84, 0x7, @broadcast}, @sndinfo={0x20, 0x84, 0x2, {0x85, 0x8000, 0x38dc, 0xffff}}], 0x68, 0x4000000}, {&(0x7f0000000840)=@in={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000900)="8516c30f212049fe9b723c80294fc99807436eacfa022d4903256cb8732924d20b23d60e556130fa4e8682e3045a2a3194cd1d07484efa57dd31b54d0f490079beacacef7949617f32f9f38e6e70e16eb3ce1cf9fe82a47441b5ccc849bc907c9d09df35c417795af3c02a40853d4628133c76a143f5d67297e00ede2fb4186f84e7e7cba7af5848c51eacc6f127430a9eeb400e74ccabddbbe0ff3f8ce1043f8623ff61814aca43", 0xa8}, {&(0x7f00000009c0)="f411ae2e031aeca5387809b0ce2df98285925732f8d37202d5eaa8aea1aa438dc9fe3ef273220e12aadbd466dc2af22713625f1b0873a1446714ea8c28371531743a99a9a8a74221e94206311858b4b8b340f8", 0x53}], 0x2, &(0x7f0000000a40)=[@dstaddrv4={0x18, 0x84, 0x7, @empty}, @sndinfo={0x20, 0x84, 0x2, {0x3, 0x8000, 0xffff0000, 0xe2f7}}], 0x38, 0x4}], 0x5, 0x40000) 16:18:38 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0xd) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x2c, r3, 0x1, 0x0, 0x0, {0xa}, [@TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8400040}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xec, r3, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x2c, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x56}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x2c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5250}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK={0x10, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000000}]}]}, @TIPC_NLA_LINK={0x5c, 0x4, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbc0}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x52b8bdb6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fffffff}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x2000000}, 0x80) ioctl$SG_NEXT_CMD_LEN(r0, 0x5385, &(0x7f0000000000)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) 16:18:38 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x227b, &(0x7f0000000000)=0x80000065) 16:18:38 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r2, 0x10099b7) sendfile(r0, r2, 0x0, 0x88000fc000000) 16:18:38 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2284, &(0x7f0000000080)=0x4) 16:18:38 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d319b5d", 0xd}], 0x1) 16:18:38 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xf04, 0x220000) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f0000000040)={0x6, 0x0, [{0x80000007, 0x7, 0x4, 0x0, 0x491b2b1b, 0x3, 0x3f}, {0x40000001, 0x8, 0x4, 0x7, 0x3, 0x6, 0x1f}, {0xd, 0x3, 0x1, 0x1, 0x7, 0x7, 0x1f}, {0x80000002, 0xfffffffb, 0x6, 0x2, 0x0, 0x6, 0x7}, {0xb460048eb299a5ab, 0xffffff7f, 0x0, 0x78461b7a, 0x6, 0x0, 0x3}, {0x7, 0xfffffffa, 0x2, 0x800, 0x95, 0x1ff, 0x8}]}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r1, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}], 0x1) 16:18:39 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x4004051, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x5385, &(0x7f0000000000)) r1 = dup3(r0, r0, 0x80000) ioctl$TIOCGPKT(r1, 0x80045438, &(0x7f00000000c0)) r2 = socket$rxrpc(0x21, 0x2, 0xf3ce97cc87d4c3c) recvfrom$rxrpc(r2, &(0x7f0000000080)=""/17, 0x11, 0x20000, 0x0, 0x0) 16:18:39 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r1, &(0x7f0000000240)={0x11, 0x0, r3}, 0x14) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x1, 0x5, 0x47, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r4}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r5, &(0x7f0000000540), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000080)={r5, 0x0, &(0x7f0000000340)}, 0x20) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000080)=r5, 0x4) ioctl$SG_NEXT_CMD_LEN(r0, 0x227b, &(0x7f0000000000)) 16:18:39 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d31df5d", 0xd}], 0x1) 16:18:39 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2284, &(0x7f0000000000)) r1 = socket(0x200000000000011, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r1, &(0x7f0000000240)={0x11, 0x0, r3}, 0x14) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000007000100070c10000000000000000000", 0x58}], 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x2c, r6, 0x1, 0x0, 0x0, {0xa}, [@TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000540)={0x1d8, r6, 0xb30, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ADDR={0x8}]}, @TIPC_NLA_MEDIA={0x30, 0x5, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x50db0807}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x644db804}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe8c}]}]}, @TIPC_NLA_NET={0x10, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}]}, @TIPC_NLA_BEARER={0x11c, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x73, @dev={0xfe, 0x80, [], 0x1f}, 0x4c9}}, {0x14, 0x2, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x15}}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x0, @ipv4={[], [], @empty}, 0x8001}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0xe7, @mcast2, 0x8}}, {0x14, 0x2, @in={0x2, 0x4e20, @broadcast}}}}]}]}, 0x1d8}}, 0x10) getsockname$packet(r1, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000080)=0x1, 0x4) 16:18:39 executing program 0: writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}], 0x1) 16:18:39 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x10004, 0x0) getsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f00000000c0)=0x4, &(0x7f0000000100)=0x1) ioctl$SG_NEXT_CMD_LEN(r0, 0x5385, &(0x7f0000000000)) 16:18:39 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f07", 0xd}], 0x1) 16:18:39 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}], 0x1) pwrite64(r0, &(0x7f0000000000)="000cc2d8b79d328ede4ce38bd807d53fbd0cf1acbe1802a7018aff88b1d3557833bdaa79ae7e33e18934ee9042fe9e9d8c2610300e3552ca99109d215ef6edca6bfa805373c6014f44fb89d809efd38ccd596bb5aef48d008dcd479c5c190be052c3ffffa09e0d905c92daf420806ba75ad183eedecfb737fc80d60929d232973f866fa6ae5478a78c3eda2467c707259d3e22f727", 0x95, 0x7) 16:18:39 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r2, 0x10099b7) sendfile(r0, r2, 0x0, 0x88000fc000000) 16:18:39 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x30013, r0, 0x3d143000) ioctl$SG_NEXT_CMD_LEN(r0, 0x227b, &(0x7f0000000000)) r1 = socket(0x200000000000011, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$RTC_WKALM_SET(r4, 0x4028700f, &(0x7f0000000180)={0x0, 0x1, {0xf, 0x26, 0x12, 0x5, 0x6, 0x5, 0x2, 0x5a, 0x1}}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) ioctl$VIDIOC_DECODER_CMD(0xffffffffffffffff, 0xc0485660, &(0x7f0000000100)={0x6, 0x2, @start={0x401, 0x2}}) bind$packet(r1, &(0x7f0000000240)={0x11, 0x0, r5}, 0x14) getsockname$packet(r1, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000080), &(0x7f00000000c0)=0x4) syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x40) 16:18:39 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000280)=0x68) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x2, 0x9, 0x4, 0x0, 0x7, {0x77359400}, {0x5, 0x2, 0x1, 0x1, 0x2, 0x5, "8c1d328c"}, 0xfff, 0x4, @userptr=0xa46d9f6, 0x401, 0x0, 0xffffffffffffffff}) sendmsg$NET_DM_CMD_START(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000010}, 0x408c800) ioctl$SG_NEXT_CMD_LEN(r0, 0x5385, &(0x7f0000000000)) 16:18:39 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f00000002c0)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2008002) sendfile(r0, r1, 0x0, 0x200fff) ioctl$RTC_PLL_SET(r1, 0x40207012, &(0x7f00000000c0)={0x9, 0x0, 0x80, 0x3, 0x0, 0x80000001, 0x8}) r2 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r2, 0x0) r3 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0xe, 0x0) ioctl$SG_NEXT_CMD_LEN(r3, 0x2284, &(0x7f0000000000)=0x74) 16:18:39 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f08", 0xd}], 0x1) 16:18:39 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000100)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0x3d4}, {&(0x7f0000000000)="191547d344f745b5f2f25ed8564fc52ef73b901548db2ce352db3c5d8e8119a6648fe59a2f246e4597d3f4dc10be0d76b82ab10f69773fa9cae18c69d33d880f61db65495230829b5df425cd775a300875e04a7b91a898213733061731bacc703d74aaa08203ea81c25819c85b205246fae348a635e513d7eb33cb3856d2411524942593272be70e5ab31f8c40126fea8d7716e0466443c8ecb38be04ab0f13dfe7ee07b5caa6cda3d88087024b652bd066f951c1124f0c04180ab83822383dca4f78c31dd8bd819fe61e4c9119557c1756fd347af6fea88406f101f94779032bce4a7681a8b397b578b82"}], 0x10000215) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SELLOADLUT(r1, 0x541c, &(0x7f0000000000)={0xb}) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000140)={0x0, 0x4}) 16:18:39 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000007000100070c10000000000000000000", 0x58}], 0x1) r2 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x16006) ioctl$DRM_IOCTL_ADD_MAP(r2, 0xc0286415, &(0x7f0000000180)={&(0x7f0000ffd000/0x2000)=nil, 0x6, 0x5, 0x13e7485ac8743027, &(0x7f0000000000/0x3000)=nil, 0x7d5e}) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r3, 0x800000c004500a, &(0x7f0000000300)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r4, 0x800000c004500a, &(0x7f0000000300)) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r5, 0x800000c004500a, &(0x7f0000000300)) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000240)=[r4, r5, r3, 0xffffffffffffffff, r2, r3], 0x6) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x28000, 0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000200)=[r0, 0xffffffffffffffff, r0, r3, r6], 0x5) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000080)) ioctl$SG_NEXT_CMD_LEN(r0, 0x227b, &(0x7f0000000000)) 16:18:39 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f09", 0xd}], 0x1) 16:18:40 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x5385, &(0x7f0000000000)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvme-fabrics\x00', 0x218402, 0x0) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000020}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)={0x19c, r3, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x130, 0xc, [{0x2c, 0xb, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x32e928f5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2092}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4605b78c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x12fb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb6e9}]}, {0x2c, 0xb, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3c06}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6a3a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2d85eaf8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd0a6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x217e}]}, {0x24, 0xb, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1717da08}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x259a5f7f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xac9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x56b7}]}, {0x4c, 0xb, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9fc0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4b693cdd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6459413f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3921}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x468c5880}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3379252}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6a08}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x9}]}, {0xc, 0xb, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2873}]}, {0xc, 0xb, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1512}]}, {0x4c, 0xb, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfe93}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3ec0d134}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbf1f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x36dc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6e052010}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x41ca2c6f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x12268110}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7f483cd0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6495b087}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}, {0x5}]}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x30004019}, 0x4000000) r4 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SG_SET_DEBUG(r4, 0x227e, &(0x7f0000000080)) 16:18:40 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="bc7a1f7e97b954059b0d317f679b64", 0xf}], 0x0) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x4, 0x3ff, 0x401, 0x1, 0x8, 0x7}) 16:18:40 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r2, 0x10099b7) sendfile(r0, r2, 0x0, 0x88000fc000000) 16:18:40 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000000080)) ioctl$SG_NEXT_CMD_LEN(r0, 0x227b, &(0x7f0000000000)) 16:18:40 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f0a", 0xd}], 0x1) 16:18:40 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}], 0x1) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x92000, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000040)=0xc, 0x4) 16:18:40 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x5385, &(0x7f0000000000)) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000000080)) 16:18:40 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg\x00', 0x40a00, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f00000002c0)='./bus\x00', 0x143042, 0x0) ftruncate(r2, 0x2008002) sendfile(r1, r2, 0x0, 0x200fff) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BLKIOOPT(r4, 0x1279, &(0x7f0000000180)) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2284, &(0x7f0000000000)) 16:18:40 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f0c", 0xd}], 0x1) 16:18:40 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x227b, &(0x7f0000000000)) 16:18:40 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[], 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r2, 0x10099b7) sendfile(r0, r2, 0x0, 0x88000fc000000) 16:18:40 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x5385, &(0x7f0000000000)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$cgroup_int(r2, &(0x7f0000000100)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x10040, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f00000000c0)) 16:18:40 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {&(0x7f00000000c0), r1, r0}}, 0x18) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r1, 0x4}}, 0x10) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r3, &(0x7f0000000540)=[{&(0x7f0000000000)="7c8d800ed9982be49b0d6aa9da5f317f679b64", 0x13}], 0x1) 16:18:40 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0xc10000, 0x0) ioctl$SIOCPNDELRESOURCE(r0, 0x89ef, &(0x7f00000000c0)) r1 = socket(0x200000000000011, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r1, &(0x7f0000000240)={0x11, 0x0, r3}, 0x14) getsockname$packet(r1, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000100)=0x5, 0x4) r4 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r4, 0x0) ioctl$SG_NEXT_CMD_LEN(r4, 0x227b, &(0x7f0000000000)) 16:18:40 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f0d", 0xd}], 0x1) 16:18:40 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f0e", 0xd}], 0x1) 16:18:41 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}], 0x1) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f0000000000)) 16:18:41 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f0f", 0xd}], 0x1) 16:18:41 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000017c0)='/dev/full\x00', 0x10101, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0x4, 0x4) r2 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x185440) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x26011, 0xffffffffffffffff, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x2000, 0x0) recvmsg$can_bcm(r3, &(0x7f0000001780)={&(0x7f00000001c0)=@vsock, 0x80, &(0x7f0000001600)=[{&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/142, 0x8e}, {&(0x7f0000001300)=""/148, 0x94}, {&(0x7f00000013c0)=""/242, 0xf2}, {&(0x7f00000014c0)=""/27, 0x1b}, {&(0x7f0000001500)=""/17, 0x11}, {&(0x7f0000001540)=""/110, 0x6e}, {&(0x7f00000015c0)=""/13, 0xd}], 0x8, &(0x7f0000001680)=""/234, 0xea}, 0x400000a0) prctl$PR_GET_FPEMU(0x9, &(0x7f0000001800)) syz_open_dev$video(&(0x7f00000018c0)='/dev/video#\x00', 0x9, 0x82) ioctl$SG_NEXT_CMD_LEN(r0, 0x227b, &(0x7f0000000000)) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x40, 0x0) ioctl$VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f0000001840)={0x0, 0x3, 0x4, 0x4191c038, 0x2, {0x77359400}, {0x5, 0x0, 0x0, 0x8, 0xff, 0x29, "a693d751"}, 0x8, 0x2, @userptr=0x4, 0x0, 0x0, 0xffffffffffffffff}) ioctl$RTC_UIE_OFF(r5, 0x7004) setsockopt$inet6_dccp_int(r4, 0x21, 0x10, &(0x7f0000000140)=0x800000, 0x4) 16:18:41 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2284, &(0x7f0000000000)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) 16:18:41 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f18", 0xd}], 0x1) 16:18:41 executing program 0: writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f00000008c0)="7c8d040ed9982be49b0d4d7f679b64", 0x2c2}], 0x1) socket$inet_udp(0x2, 0x2, 0x0) 16:18:41 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[], 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r2, 0x10099b7) sendfile(r0, r2, 0x0, 0x88000fc000000) 16:18:41 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x5385, &(0x7f0000000000)) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000300)) r3 = dup3(r2, 0xffffffffffffffff, 0x80000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r5, 0x1, 0x0, 0x0, {0x1a}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'bb\x00'}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_GET_KEY(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4200}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x28, r5, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_KEY_SEQ={0x7, 0xa, "cf6694"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x20004040) close(r1) r6 = open(&(0x7f00000002c0)='./bus\x00', 0x143042, 0x0) ftruncate(r6, 0x2008002) sendfile(r1, r6, 0x0, 0x200fff) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r6, 0xc008551a, &(0x7f0000000080)={0x80000001, 0x8, [0x9, 0x7]}) 16:18:41 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="40d06e747169f964e85b5e9218e73e31c0be6cd2d9278f1f4c6fbbceabd05a6c5b74ed7f2b2e7fea9fe9128d6cf1079bccd94489dd9d42f804ea4d2b16625cf3f1f1c03f0eebda2a4df59b", 0x4b}], 0x1) 16:18:41 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x227b, &(0x7f0000000000)) 16:18:41 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f1a", 0xd}], 0x1) 16:18:41 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0xfff2e22fabedee2a) semget$private(0x0, 0x1, 0x80) ioctl$SG_NEXT_CMD_LEN(r0, 0x5385, &(0x7f0000000000)) 16:18:41 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r1, &(0x7f0000000240)={0x11, 0x0, r3}, 0x14) getsockname$packet(r1, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) ioctl$SIOCX25CALLACCPTAPPRV(r1, 0x89e8) ioctl$SG_NEXT_CMD_LEN(r0, 0x2284, &(0x7f0000000000)) 16:18:41 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}], 0x1) 16:18:41 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[], 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r2, 0x10099b7) sendfile(r0, r2, 0x0, 0x88000fc000000) 16:18:41 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002700)={0x44, r1, 0x1, 0x0, 0x0, {0x21}, [{{@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}]}, 0x44}}, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r2, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x12080, 0x0) r4 = accept$ax25(0xffffffffffffffff, &(0x7f00000000c0)={{0x3, @rose}, [@default, @netrom, @remote, @bcast, @rose, @netrom, @null, @netrom]}, &(0x7f0000000140)=0x48) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x101000, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000280)={r4, r5, 0x1, 0xa1, &(0x7f00000001c0)="d8b59906346e24f8fe179a01b0ac1665523b16125cd093d9704914c3ea4797c1f12984d1b3168e755e91caff5d78b48db8ab7690bf3180981a508128f4683feaff040b1c9255fa75e706de33bdfe6a95d8e9ec25808dae1d2f7e3b881f1e4d10ae06b04f107c3730eff38a19173f2ba1bf39fcae80ac0e0a4bef81d44e9be4cd61ea759d7420e52f42d84e28152ea7d4de5870885228416c262e2f94bb32c0c29b", 0x0, 0x2, 0x7ff, 0x3ff, 0x1, 0x2, 0x7f, 'syz0\x00'}) ioctl$SG_NEXT_CMD_LEN(r2, 0x227b, &(0x7f0000000000)) 16:18:42 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f1b", 0xd}], 0x1) 16:18:42 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r1, &(0x7f0000000240)={0x11, 0x0, r3}, 0x14) getsockname$packet(r1, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000100)=0x2, 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) r4 = open(&(0x7f0000000080)='./file0\x00', 0xe04a00, 0x10) ioctl$SOUND_PCM_READ_CHANNELS(r4, 0x80045006, &(0x7f00000000c0)) ioctl$SG_NEXT_CMD_LEN(r0, 0x5385, &(0x7f0000000000)) [ 488.103363][T14052] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 16:18:42 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) keyctl$read(0x6, r1, &(0x7f0000000240)=""/102388, 0xfffffffffffffe84) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}], 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) r4 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x12100) ioctl$DRM_IOCTL_GET_MAGIC(r4, 0x80046402, &(0x7f0000000040)=0x2) 16:18:42 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f25", 0xd}], 0x1) 16:18:42 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x110, r1, 0xffffc000) ioctl$SG_NEXT_CMD_LEN(r0, 0x227b, &(0x7f0000000000)=0x43) 16:18:42 executing program 4: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r2}, 0x14) getsockname$packet(r0, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) getsockopt$inet6_dccp_buf(r0, 0x21, 0x181, &(0x7f0000000080)=""/56, &(0x7f00000000c0)=0x38) r3 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r3, 0x0) ioctl$SG_NEXT_CMD_LEN(r3, 0x2284, &(0x7f0000000000)) 16:18:42 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0xffffff6e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(0xffffffffffffffff, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r2, 0x10099b7) sendfile(r0, r2, 0x0, 0x88000fc000000) 16:18:42 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SELLOADLUT(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0xb}) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000000)="3dd2430585155a870e5bee96c291e3810a04ed7c469828dbf144aa1ebd6ff68e750d5d2077724ca617aeb31855de44b4ca1e60efd8e7eedfe59e5a023f47a3b1a4b3a600e39e83f9369854b8028e79a54cc1601e2d352b42a7c36ab2800529e6c1a3b8673c53f505182c169c98ba69810d21a4953593b8afe4b8d8e4c287755174a65a1c3295476beae97ed92f58da55bd2f5973b097f3c12908f5b2f25a42fff294bbf782d127fa02d41e5a4f8fdffdc0ae14a100e1f5ee38a7859b5614dff2579b94e998be4e794e94a9442581f93f308d9a") writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}], 0x1) 16:18:42 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f3b", 0xd}], 0x1) 16:18:42 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000080)) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x227b, &(0x7f0000000000)) timer_create(0x5, &(0x7f0000001100)={0x0, 0x3, 0xe86077a4f6641772, @thr={&(0x7f00000000c0)="f6ea51a714f5f21c105dfe", &(0x7f0000000100)="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"}}, &(0x7f0000001140)=0x0) timer_settime(r1, 0x2, &(0x7f0000001180)={{0x77359400}, {0x77359400}}, &(0x7f00000011c0)) 16:18:42 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f41", 0xd}], 0x1) 16:18:42 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}], 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x12800, 0x0) fsetxattr(r1, &(0x7f00000000c0)=@known='system.posix_acl_default\x00', &(0x7f0000000080)='\x00', 0x1, 0x2) 16:18:42 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000007000100070c10000000000000000000", 0x58}], 0x1) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="00012abd7000fcdbdf2506000000080001007063690011000200303030303a30303a31302e3000000000080003000000000006000400010000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030053f800000600040001000000"], 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r2, 0x0) ioctl$SG_NEXT_CMD_LEN(r2, 0x2284, &(0x7f0000000000)=0x87) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x8000, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r3, 0xc0045540, &(0x7f00000000c0)=0x6) 16:18:42 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0xffffff6e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(0xffffffffffffffff, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r2, 0x10099b7) sendfile(r0, r2, 0x0, 0x88000fc000000) 16:18:43 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f42", 0xd}], 0x1) 16:18:43 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) 16:18:43 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f43", 0xd}], 0x1) 16:18:43 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0xffffff6e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(0xffffffffffffffff, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r2, 0x10099b7) sendfile(r0, r2, 0x0, 0x88000fc000000) 16:18:43 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2284, &(0x7f0000000000)) r1 = socket$netlink(0x10, 0x3, 0x8000000004) socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000007000100070c10000000000000000000", 0x58}], 0x1) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000380)='/dev/sequencer2\x00', 0x0, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f00000003c0)='/dev/snd/controlC#\x00', 0xf1a3, 0x64002) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) sendmsg$NFNL_MSG_CTHELPER_GET(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000010910002dbd7000ffdbdf250300000a0800060000000001080003000000003f0c00040008000500000000020c000400080005000000b4878d525e31c24d001e09000100ff797a30000000005d2abb4466fbec267490dacd1df41e97bc"], 0x50}, 0x1, 0x0, 0x0, 0x80001}, 0x4) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x900000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r2, 0x712, 0x80000000, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_team\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x28001}, 0x800) r5 = syz_open_dev$audion(&(0x7f0000000200)='/dev/audio#\x00', 0x0, 0x800001) ioctl$VT_RESIZE(r5, 0x5609, &(0x7f0000000240)={0x5, 0x3, 0x1ff}) 16:18:43 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x46780, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) writev(r0, &(0x7f0000000540), 0x1) 16:18:43 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f44", 0xd}], 0x1) 16:18:43 executing program 2: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000007000100070c10000000000000000000", 0x58}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000007000100070c10000000000000000000", 0x58}], 0x1) r4 = socket(0x200000000000011, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r4, &(0x7f0000000240)={0x11, 0x0, r6}, 0x14) getsockname$packet(r4, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x1, 0x5, 0x47, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r7}, 0x3c) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'vxcan1\x00', r7}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'xfrm0\x00', r8}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r9}, 0x14) getsockname$packet(r0, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) getsockopt$packet_buf(r0, 0x107, 0x6, &(0x7f0000000080)=""/170, &(0x7f0000000140)=0xaa) r10 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0xfffffffffffffffc, 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x80010, r10, 0x1000000) close(r1) ioctl$SG_NEXT_CMD_LEN(r10, 0x227b, &(0x7f0000000000)) 16:18:43 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f45", 0xd}], 0x1) 16:18:43 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0xffffff6e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r2, 0x10099b7) sendfile(r0, r2, 0x0, 0x88000fc000000) 16:18:43 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000080)='/dev/vcsu#\x00', 0xfffffffffffffcfb, 0x4000) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x1a) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f00000002c0)='./bus\x00', 0x143042, 0x0) ftruncate(r3, 0x2008002) sendfile(r2, r3, 0x0, 0x200fff) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x2}) shmget$private(0x0, 0x4000, 0x200, &(0x7f0000003000/0x4000)=nil) ioctl$SG_NEXT_CMD_LEN(r0, 0x2284, &(0x7f0000000000)) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0x3) 16:18:43 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f00000002c0)='./bus\x00', 0x143042, 0x0) ftruncate(r2, 0x2008002) sendfile(r1, r2, 0x0, 0x200fff) inotify_add_watch(r2, &(0x7f0000000080)='./file0\x00', 0x8000089c) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000007000100070c10000000000000000000", 0x58}], 0x1) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xc000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x2, 0x3, 0x52724fe320aa603c, 0x70bd27, 0x25dfdbfc, {0x1}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x3, 0xdce681915fa60fc4}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0xffff}]}, 0x28}, 0x1, 0x0, 0x0, 0x8804}, 0x2000) ioctl$SG_NEXT_CMD_LEN(r0, 0x227b, &(0x7f0000000000)) 16:18:44 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f46", 0xd}], 0x1) 16:18:44 executing program 0: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x0, 0x80000001}, 0xc) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}], 0x1) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x50d000, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x141000, 0x0) renameat(r1, &(0x7f0000000080)='./file0\x00', r2, &(0x7f0000000100)='./file0\x00') getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x1000}, &(0x7f0000000180)=0x8) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000007000100070c10000000000000000000", 0x58}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380)='devlink\x00') sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)={0x3c, r5, 0x201, 0x0, 0x0, {0x9}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8110000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xc8, r5, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x80}, 0x100) 16:18:44 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2284, &(0x7f0000000000)) r1 = socket(0x200000000000011, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r4 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000001740)='/dev/video0\x00', 0x2, 0x0) ioctl$VIDIOC_G_MODULATOR(r4, 0xc0445636, &(0x7f0000001780)={0x6, "8c9a9cfb1f1ad99668e27b955d84353f203386179bdb25f6d7390cb32f142023", 0x10, 0x68, 0x1, 0xc, 0x3}) bind$packet(r1, &(0x7f0000000240)={0x11, 0x0, r3}, 0x14) getsockname$packet(r1, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) sendmsg$alg(r1, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000080)="15868e21e49fabcc9ef4688e43af0322d8357197b0f0fcd9337664b383b16ef66db3d5f6fe68059d07de49967fcecb99c1fd586c8e8452efba1514e63a9b8718a1e67fb48e1fab80981fb2e512e553e1adc216613b552eed6ddd05c1387d731218e14530", 0x64}, {&(0x7f0000000100)="ec5436b0ea64f34a3eadb62f304835bb3c8d51fcf2859abddea54a398029336392489f4d13274fe02cc0848db215f989ba263aae6338c59eb7264c4db9d7452dd6b3cef7f9c2f091b42950cf8f550bc296938c8d85754eb632d2df66d33fafc0d3418ce0deb1a06a44d8b2cdb538b13d0f8148d0fa9643b41c7dd43b7f2be7d04fc7d0a95bdb6a2cbf55e7cda49f6c2186b9de0872d63b861f7e1907cfa707437b43389bd1922202fc3854a13ad70b68acbf27f01e7ada514008ac6b465d60ec386dd50345bc525145b443364e904e8fba3bd4107820d35b5b80b51f3550c2cf05a14127828f47c37dd6b5eca1afdc709ca28d2797b36bed11c809927ea29c100271e57bd178fae24c654563c8e9b8124ed1affd61e29d364873175550401c6d7d49945832029ae6db786c6fc3d16cc32af9227e40301ae087dd72569267ccbb989f6ff3172c3b5029d76d57bffb9f77b153097ce295603174d04d6c2c1f562cdd0ed12e7511b00bcf17fdbcba480a5c48aacd046af21f0d90f02851b8a8bfefddf955bf436e554275a13ad6530245b800af96653bd89f06871e74d16bec9288c480f28e9a099387f7944068112b0d8215a6e5b41b558e0266af1d043db7ff95ab1f8c1d8b9cc9f2ae9192dd282270658499309de560001a2e9d086341452159c118cc38e67206eaead924e89b0d3097e881df31b22c37abd80365d6d0405aa90f910b1b6b46b78ec6463aa1436f9e754478d598ff83e6f150003b3c6130ef551a2d1b457d30ad37f746cc83e4d4930b28935e7a92ce89b387c2f721fde27cec5c49ab07912584fb8d4af4d392e796b92975a5302b95a04d680b1c9db323e68ccce703f4e1d6e09fdf2b007db562db93b92e0bc4b310cf8fb01a507ee5edac9ca5e8f8e12bb9d34bce147edb67b231791518a8b8f7080c0d69c1eff3ad982f1b6ccfa790282c6a532fd8ed042676ae291c500d7804e9bfc55ad6fb14a8c1ebe1c4a287c366bcc0d2db197dd23deef40e17f4ef87b4ce50e57082cc120910f2bf2d55438c78508cc06f166bad03ae66a7139f213e0e21f8266803e0f38fa351acda201db0c3d52e34e42da59faedca90768368129964697f89772b180fea35cd6e31a7c1b5451d42ca5933689ccafc0a991ef3d9366518b09b8ac6501d4a6a498ad6abbe109d991078a3cae99d0d953188fea7143bbfc1395c496dc73752ef8982a0ef076a92578edb3ad6ee5876b36345e7be565d67e0c2913f68150bed1d058dd4d863ec64ef6aa071c89134f52b1d795c766381246995a29406b1043336eca19850bc0e5335836e4d619aeef4d10e16e754b8925885ddf247c441a247da38c37ed7f8389b4f48fdc5892b55db21d348b92a6f1b685ca50c2036b357afcddd2086cb333f50911c587aa581f144ec9f26ec4bb7e65185614dee4e7d69a96362b27062dbc47a1a9f0baa96cf11f9d266653bfd5390652d795e40132e256ae715427f4540dc65f3846892950daa26f09e07014b7627b556c03caaef778cfed0981c25d2724066d3b76e2dc95010f053e8d1a8c9b6d0e41856a0aef137fda2b8262a99a06dd89728bd9dcff381fe214a43c1100a6effa8f16c8edefead01576c1506179c1629584b6036fdf7a652552ddf9ec3cc8180c50017e6dff3d86f6cb3f0e2141cef75e974226a41d14fdf8d9ed973fbeb637568581c0410174ccd2d5dadcc972692c5f05283c0b24faf97dff105cba42b232945844a5a92cd678a2094ec21c8474d2aa89d1986540dfd2e7ac76f3eab025ab3b02167a87769d06b8446935c21654e3aacf6c86eccbe90e4c49bf537c357e32a6076704c6b5bd14b30a7eea09da823bf5c624b2af61d36fd04bbd8948167b08db1645a8c8553b5aeb952e3736b3a030b20815dc19355bfb2636951c20e49b3546ff93a37ac2d025a460b118ad383d5f433c766997b08fc25b8332eb992bc49d23216b224c8e8036c33eea88578d1bfb41cfbbbc5c2479b67fd52053409f0d27b4218d6eb0d5e14e0cc9eb8a63a71dd2f19e578bbb1b980e604ae4cef892848af4712c07bd8190892cf07117a530355f5dce73346eb0e6fb38080a3857afd740ab6b2f3b338c74b9cb4d58edaa408178808a034bc2334025ca53e0e38983bc861843e4fbd8d051220656769079f6700ade9339fb51a1258d54c825d8ab0d9f7a6c08af900331e60d8befd5f641fbb907e79b96435c596a1ac6d03e0a7dafcb38c1bf16e6b61a964e6cae1ec5f5fb497111ecdccc53217550a9b4889dfbf1310548091df3c1000cf5915d61bd224ea1e2d7efef4d4ce6b4efc2cac705d7837143b11ad25a6bc992e570cdd859e0ed388afd5c67f44c9d6823a6cd1e5b9c0eef9750aed2856a539d48a48856e2b067c41395ef97704b46d6f0544a560517ff152b137708627acf9b7339e3ac8e68ff6f0efd7f4a0906f5a1729dd12d82184c202fef749760245880fc72fa596cb118126dc4626f9e1baef1990ba946442973598dc98208704b00ba37f109610125587a1a1d5b6a8918ecce49fbf3edb64e302dc6905f547bfdc56df7632ea4ef4a153aff809445bab5fd2b630d9b4c8f39f32e4d602b40407033d20d2415935b8ef18276c293587b2795ed7efbe3a209761ba6857428676443f1272d9412ea4ab350d4dcd5b48f09bfaa0e583e50b0def3a08047ea3ef4b5030afb67f941b5d0e05abf660ad5cd81bb3f3963312d5721705cf514a14205304987f754b8d404550e3d3ea19f668aebbbc54ec37e3aa576c74b9d0a12289312321b6c7a510662043d555e586889e19f120991f7f66ccf45ba2d9c933068a19797862c65b088598410344862ffaa30f3859d0f00d1924d990cbf40c68f52d02073fcfdfd63f634a9ec46454b2b200dc38ce40e1a81d6d85a94a9e36e8c4a62280aa876fa3a6d0b93e7838f8b950394c32be4c0a6006e66fc9e2256e66bafd0784629b6f7b06589f7d0ba6bafd863770373b0589d6004f91cdf4a789bbaa68e304c79b8f3d471731c00e7258519ae23b805687e7bf5baeb965853cb41e48545923ba6b899481346f1d9aca868e28081500f6e24c238384b3280ab93812620bc839b528ea61250f24c1cbace07017e0e5851bfd8a00941720046404287abbc594cecc7bbe021e0f7c8c5682e74fa0176e0f8e70a2e45180b3a87ae9810733ae44c69a5ef01c4cfc6af33f3b79af0985ced3400a9d232cfe4f593ffcb9910d1309b4722e5b4892875fd01d0d3d5b527c31c674aed5148bafb4ba8017259c234838892285748fe2e64415a04b8e0eed753681dac1b14cb68f023df07b37eff2c64b81bace032a05ada1814b0901a48da4eec2638c3c2a0f7aab26a29483531e0d4c2032de84aa7c2061e755a6595f6242fa71d1ac2b4e7c228c24c2daeb6e46d29217e7360e2a99aa936ac93524bd5293ffa906609c53595a380e407fa089323c1f283e17b49d7cb94d924032155147e9ce41988d1898ab4596867c33f422f68e2514978ec6db3f48c26511b1c183b3ac619f6fa20f930d1beea6945af18b2efb77aeaf44f046ffae9eb954615a2e640bc9f8ca308212e1bf0360b280759dcf5c8a6752c5462a73724f232d2a16bff9bbdeb6096e664ee2f9f3c499edbe5fe4839f537d3c53e57aabe39a00759dae2a3d49592231f4eb4cd741e6ef797e848906eebef4a11cb9d25ec0057286ab2293020e9552bacb2c5eef4e6d855761f6d19fbc2e8243626b8d4a196f9b07474563fa461a6114869207f1d9ac858c9f1e0594c3a509415fd21f2550f45dcb943ba793054053e1a615010974858027abdfba6a28623475eba2bbe8c743b50b6d26c0b2635a3dc7fdc4dd1e873249c9edbfba3afe85dd17ca6fbfed159508d4959f15321e8bac8f4e2279e8ae4791c5c019d80cd02bfaf94680d77c2989712ad9199343fc7e80fb6873dbb2d6a9728c83cc3a3c458f21a491b7121680df1d93008d7eb4e19654dcd5da419386b3375594c2859e7a9b31c760744e5f764a47712d6e7742932dd42020a5762e546e83918cc15c7f03d3b8125e41d7a7ca71126918780a57da3eb981c449b811a80ff23c17a845acb680b3bdf35db3aecf5b7ab2b2c463035630cd6757ee0b4204a986c0936a8d9c73789fd59469784c0779e8039b7c834c16ae76ba9e16512153517f85bb8701e324c01e671bbbb2a29acf8e91dc3984992c8bfe709feb1d671f79d8485e8b341ce29628b27269f53ef5ecd893295002b4bcd032085636823c01d87fe442ec61a749f5c1aaa9e7dd1d43678cc68322add7a5e69c975c9feb1f7a79f921b41b55a26c3a964588e53d194516db97dddba6087dee1c3a3d4d0cb8ad0d1311c5f71ba3d979152ba8051303f8987508d9587ef72dea4d316a6d802d061aa5390c5c59eee13262c467205414e7a8dfedcfe0dd2667ce144a353ff0db188d0197f6d7d484cf3cf3ffbc47bc0744d52a18ec01641462cfff19fcd647a763594939029757f266d36d215cc299fedc051f246ecda7d6f595ba84c0e140ba32f6e36698147371fb1b4f837460652126d5d81ab85e991078877ad9936a9b01101016f088adc940c7aecf50dc1d2536d6ba712f8db2757a2743babf447a6bceeb8b6967b13ee4d669b61191ea756be3306f94142fea7f76f7ade767bfaae141a2d39f28963d8cc649ea5c783a1888b2533f75664874cdb8fc9a02840a6603b45b8ee0b9579806a49e5af5d6a9ed2a125da5e1a8a0db392a2f7608634e21fdc15b9a6e3512b1554f1328e393c231d9b9b687358e529f90566d723ddb4832d33abe5a2553aa0a1d22a59962a5f1475681ba36200225759cb61b2419c9c9fddb42ba7c3acedb719feebf94876f8e3b35cdf1aaca669789d9eb104af38dc6d2f0ee6d6fa69bf5cb3cabbaadb808c698991b3b55500bee927c5da0a4ad13cd3c821d312901efc2fdfb4f913c357e3747195a5c9ac2c9b4fbb12f718516273ee76f29d05d7b149a1b4ef8f2b7295f28ccc66348d39ef4e4347b0b74d070bfa83b96cf44aff55fab21cd94370614f313725d8c0121656b622ad6a952385afc53577f982c3b77c3f18c91b04f254c74edffa5099134220a095a4cc374c0535c1d3c293beadd8a24851282831fe120a24b2b4f3128d850e167c0890b35afb03023ad515423bfa8e999a841fc80f3b7b6c0755c185189e2032f40029b00b1d39ff2fe0ff39ecd47f6093119663f304fb1deecf1d3db2f7504174a68cdd90cd5e1cd1e684bd896d3c6b2f178cb2d830f5aae2ae7e8973d4d768cc2e1a469cef7ed48c773b1a83cfd56e3b3273b8a94a4595b8933c6e25b31edf127125e0f905622548efe7ca3a5c3d5610cfe27f2dea662f9d8e64b3eff71e9d231e2448ead4bfa306987096a2c3a271957a67616c453f5200d6ccd951ccaadae3442461bb1efa86dbe737d9c1811fe192b6b9e5821893719888e5652ad5b05866706b8f409e490ff49ce80850aabd338fe20b67996523dd1891f699b8ee1aa1ef4897a30f758d05d3c6ce214b800f71ee496c2e58217fa48bc5fb4839915f16e67514e969377b22cc439b7a73233499b35f490e606987d8d1d105d997065e8c1325b48ec37939de3ccae4d7e396497c57c997be6bc90a823a6c81ec30e1526665347d63d5b5e579d71559642cc90e77099e5873dcc74e9349f592de7c84f12cc7079425f946e7e5736dbfe431d2a0d5f8115d1e296ffe46d9a5cf0177e0c5b5f3af80e62e66c7d35eac743aae58b67a50eddacf246a60282d984b26eb", 0x1000}, {&(0x7f0000001100)="985a5472ab3d82121a21a9df6970c8dab9973d382512016ff7708d0085ee1d6f9da5aed237e58c82e78a26eb3cdb1e520d56ff9702d590d5db5bd0754140f8007b3f9a586fa460a797848540980de8cdbdc98c07045fa6c42bab86e138a236311f59de8fb407e6b51c8548be00b6d177df017a073e30865b1c1cddafbc94c4c93e7f969614962b5a9b648fb3", 0x8c}, {&(0x7f00000011c0)="afb43c56b3a0ce9eeb9230dd725cf2acc584e77cf1ba6fcc455850aebce6bf7beceb85fd8c9e5121eccf999a71034cfc0377334e649016c67e74492e7fb2fbe4843e5e6a872af563d5b490aa71dc82", 0x4f}, {&(0x7f0000001240)="85eeedec888ccf2c5d62596fb44cf4cc806159172411aa81dd35e80f85c183a86a3476bea33feda068b2cef5c111bdbe0c13febcf1d23ba65790cf92884fdb4cde373d87384a5fdf3bc75dc2442e3e7f24dcbd9d784170319ee96bc179976d4cf17339e4b18e7be2a0069eaff6607e635dd70d00", 0x74}, {&(0x7f00000012c0)="11e22b4725ffe581ab628448635783c9e7d83f61a847787f3e02ea7393b00f38e74a91baa587407bf705242d5979c853ac49e72ffc387343ec91fd48a1cddb3ff84cdf65282ed371b1615129f36b649b0ef116d5133913570b5399e84e45d56262006e66c41a73ee306b130e9537e6af62c141afcd17ef974f7a23c6861188f8a9f3ec2e0163d4a09f99678e0825ff6bde13435ab7f60ac63bae49933ac21bb22949e3360efd9ee9bfdb4162b21dfccb2201dd113d0c3689e233472e52e6eed8c452320c45a3d645a8653b", 0xcb}, {&(0x7f00000013c0)="5e48edaafda1a63bce11ef2ee1b3a8237738ddbf665342857173d68585ec6e9ad4c92f4b00c354cbeaa62fb972dd16bb704ae8", 0x33}, {&(0x7f0000001400)="4420c110822742c747d51da1634f1a505a276fddf23863093780c7206e96ab764635c9600964ed264eb2021c8ee6e1948f365d1bd7c77b666d5279439246a257d45cdf0bc772d29655899a99", 0x4c}, {&(0x7f0000001480)="e4c5cff2ff1c384289cb299c83f5ed81caddfaef30dc5311999e20bdb463dc07ac974a758f0a0d1acfa25a00252ff9575545f8728bfcdf2dd501d5c13d3400a68dfc9f4f67d07d0cc480b5eb84525a05fec983", 0x53}], 0x9, &(0x7f00000015c0)=[@op={0x18, 0x117, 0x3, 0x2}, @op={0x18}, @assoc={0xffffffffffffff78, 0x117, 0x4, 0x8001}, @assoc={0x18, 0x117, 0x4, 0x7}, @assoc={0x293, 0x117, 0x4, 0xffff26c0}, @op={0x6}, @iv={0x68, 0x117, 0x2, 0x51, "875067f41843b83e187e78542ff3500c6e94712f1e7d3363c1bf6694b88b0fe288679f27782e56fbce113d165c686713f6d55096b16a7fdb8657d89271cebd2effc0cc7bae05a0937268135a5fdaab4879"}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x7}], 0x140, 0x40064841}, 0x8000) 16:18:44 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f47", 0xd}], 0x1) 16:18:44 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000000), 0x1000000000000122) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f00000002c0)='./bus\x00', 0x143042, 0x0) ftruncate(r2, 0x2008002) sendfile(r1, r2, 0x0, 0x200fff) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) setpriority(0x1, r3, 0xc5b) setrlimit(0xc, &(0x7f0000000080)={0x861, 0x81}) 16:18:44 executing program 5: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x400000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380)='l2tp\x00') sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r2, 0x1}, 0x14}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$DRM_IOCTL_ADD_CTX(r6, 0xc0086420, &(0x7f0000000340)={0x0}) ioctl$DRM_IOCTL_DMA(r4, 0xc0406429, &(0x7f00000004c0)={r7, 0x2, &(0x7f00000003c0)=[0x81, 0x4], &(0x7f0000000400)=[0x3], 0x40, 0x2, 0x1087, &(0x7f0000000440)=[0x807, 0x1], &(0x7f0000000480)=[0xc2, 0x400, 0x8000, 0x200]}) r8 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000007c0)="585ccbe4ed83b836c1a647492ada388e174bfd206895b66147b3c9e1587a050000000700000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e0000ce0637ce0000b4ec24c52b3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274e95c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f477253900000000000000005da06773ddaf4d0c0b3627c2b1bf8283a6bd4d4d55a5f3759254f6f2070e861ce6f926dfd00d8ca491", 0xe0, 0xfffffffffffffffe) r9 = add_key$user(&(0x7f0000000200)='user\x00', 0x0, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r10 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000a00)='asymmetric\x00', 0x0, &(0x7f0000000200)="3081", 0x2, r10) r11 = request_key(&(0x7f0000000a00)='user\x00', &(0x7f0000000a40)={'syz', 0x1}, &(0x7f0000000a80)='hwsim0\x00', r10) keyctl$dh_compute(0x17, &(0x7f0000000140)={r11, r8, r9}, 0x0, 0x0, 0x0) keyctl$describe(0x6, r9, &(0x7f00000002c0)=""/57, 0x39) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x64, r2, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x7}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x401}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x2}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x20050044) r12 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r13 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r13, 0x800000c004500a, &(0x7f0000000300)) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x20011, r13, 0x0) ioctl$SG_NEXT_CMD_LEN(r12, 0x5385, &(0x7f0000000000)) 16:18:44 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0xffffff6e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r2, 0x10099b7) sendfile(r0, r2, 0x0, 0x88000fc000000) 16:18:44 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f48", 0xd}], 0x1) 16:18:44 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r4 = socket(0x200000000000011, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r4, &(0x7f0000000240)={0x11, 0x0, r6}, 0x14) getsockname$packet(r4, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) bind$packet(r4, &(0x7f0000000240)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x90) getsockname$packet(r1, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) r7 = socket(0x200000000000011, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r7, &(0x7f0000000240)={0x11, 0x0, r9}, 0x14) getsockname$packet(r7, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) r10 = accept4$netrom(r7, &(0x7f0000000080)={{0x3, @null}, [@netrom, @netrom, @remote, @remote, @bcast, @netrom, @netrom, @default]}, &(0x7f0000000100)=0x1b1, 0x1800) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000140)={'xfrm0\x00', r9}) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x5385, &(0x7f0000000000)) 16:18:44 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0xffffe000) clock_gettime(0x5, &(0x7f0000000080)={0x0, 0x0}) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r3, 0x800000c004500a, &(0x7f0000000300)) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000000c0)={0x5, 0x5, 0x4, 0x400000, 0x4, {r1, r2/1000+30000}, {0x3, 0x0, 0x0, 0x9, 0x6, 0x3, "e86b5590"}, 0x0, 0x4, @userptr=0x8, 0x4, 0x0, r3}) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000040)={r6}, &(0x7f0000000140)=0x8) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000001c0)={r6, 0x74, &(0x7f0000000140)=[@in6={0xa, 0x4e23, 0x975d, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3}, @in6={0xa, 0x4e20, 0xf056, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8}, @in6={0xa, 0x4e21, 0x100, @rand_addr="76276ca7082cd3697ee4e23ace0b0c38", 0x4}, @in={0x2, 0x4e22, @local}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000200)=0x10) ioctl$SG_NEXT_CMD_LEN(r0, 0x2284, &(0x7f0000000000)) 16:18:44 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f4a", 0xd}], 0x1) 16:18:44 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0xffffff6e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r2, 0x10099b7) sendfile(r0, r2, 0x0, 0x88000fc000000) 16:18:44 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8000) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.events\x00', 0x0, 0x0) setsockopt$rose(r1, 0x104, 0x5872a3146ca8515c, &(0x7f00000000c0)=0x80000000, 0x4) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f00000002c0)='./bus\x00', 0x143042, 0x0) ftruncate(r3, 0x2008002) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000007000100070c10000000000000000000", 0x58}], 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$fou(&(0x7f00000006c0)='fou\x00') sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r6, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_DEL(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x82000001}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x64, r6, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @rand_addr=0x401}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @FOU_ATTR_PEER_V4={0x8, 0x8, @local}, @FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x1b}}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x64}, 0x1, 0x0, 0x0, 0x45050}, 0x4000) sendfile(r2, r3, 0x0, 0x200fff) ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x227b, &(0x7f0000000100)=0xac) 16:18:44 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f4b", 0xd}], 0x1) 16:18:45 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x100000a, 0x20011, r0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SG_NEXT_CMD_LEN(r3, 0x227b, &(0x7f00000000c0)=0xae) 16:18:45 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f4c", 0xd}], 0x1) 16:18:45 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyprintk\x00', 0x80080, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}], 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000080)={0x5, 0x8, 0x4, 0x800, 0x401, {}, {0x5, 0x8, 0x0, 0x0, 0x7f, 0x2, "39987102"}, 0x0, 0x2, @planes=&(0x7f0000000040)={0x7fffffff, 0x0, @fd=r2, 0x6}, 0x7, 0x0, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, r4, 0x220, 0x70bd2d, 0x25dfdbfe, {}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x1c, 0x6e, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x5cdfbaa041dfc616) 16:18:45 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0xffffff6e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ftruncate(r2, 0x10099b7) sendfile(r0, r2, 0x0, 0x88000fc000000) 16:18:45 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f00000002c0)='./bus\x00', 0x143042, 0x0) ftruncate(r2, 0x2008002) sendfile(r1, r2, 0x0, 0x200fff) ioctl$USBDEVFS_CLAIMINTERFACE(r2, 0x8004550f, &(0x7f0000000080)=0x6) ioctl$SG_NEXT_CMD_LEN(r0, 0x5385, &(0x7f0000000000)) 16:18:45 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f4d", 0xd}], 0x1) 16:18:45 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x227b, &(0x7f0000000000)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, &(0x7f0000000200)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r1, 0xc0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r2}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000100)='/dev/audio\x00', r2}, 0x30) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, 0xffffffffffffffff, &(0x7f00000001c0)={r6, r0, 0x8000800}) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r8 = socket(0x200000000000011, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r8, &(0x7f0000000240)={0x11, 0x0, r10}, 0x14) getsockname$packet(r8, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r8, 0x65, 0x4, &(0x7f00000000c0), 0x4) ioctl$int_in(r7, 0x800000c004500a, &(0x7f0000000300)) r11 = fcntl$dupfd(r7, 0x406, 0xffffffffffffffff) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r11, 0x800443d3, &(0x7f0000000080)={{0x8, 0x10, 0x8, 0x80, 0x7, 0x3}, 0x2e, 0x3f, 0xd47}) 16:18:45 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x5385, &(0x7f0000000000)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000080)=0x9) 16:18:45 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f00000002c0)='./bus\x00', 0x143042, 0x0) ftruncate(r2, 0x2008002) sendfile(r1, r2, 0x0, 0x200fff) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r3, 0x7f}}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2284, &(0x7f0000000000)) 16:18:45 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f50", 0xd}], 0x1) 16:18:45 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000000)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000040)='\x00') writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}], 0x1) 16:18:45 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x227b, &(0x7f0000000000)=0x5f) 16:18:45 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0xffffff6e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ftruncate(r2, 0x10099b7) sendfile(r0, r2, 0x0, 0x88000fc000000) 16:18:45 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r1, &(0x7f0000000240)={0x11, 0x0, r3}, 0x14) getsockname$packet(r1, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) accept4$phonet_pipe(r1, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0x81000) ioctl$SG_NEXT_CMD_LEN(r0, 0x5385, &(0x7f0000000000)) 16:18:45 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f58", 0xd}], 0x1) 16:18:45 executing program 0: writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}], 0x1) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) getpriority(0x0, r0) 16:18:45 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f5e", 0xd}], 0x1) 16:18:46 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f00000002c0)='./bus\x00', 0x143042, 0x0) ftruncate(r2, 0x2008002) sendfile(r1, r2, 0x0, 0x200fff) write$P9_RCREATE(r2, &(0x7f0000000080)={0x18, 0x73, 0x2, {{0x0, 0x2, 0x1}, 0x6}}, 0x18) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10006040}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r3, 0x2, 0x70bd26, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0xfffffffc}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40008) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1, 0x810, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x227b, &(0x7f0000000000)) 16:18:46 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x5385, &(0x7f0000000000)) r1 = socket(0x200000000000011, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r1, &(0x7f0000000240)={0x11, 0x0, r3}, 0x14) ustat(0x6, &(0x7f0000000180)) getsockname$packet(r1, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) setsockopt$inet_mreq(r1, 0x0, 0x24, &(0x7f0000000140)={@rand_addr=0xfffffff9, @multicast2}, 0x8) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000080)={0x80000000, {{0x2, 0x4e21, @remote}}}, 0x88) 16:18:46 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x4a602, 0x0) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)="7c8d800ed9912be49b0d317f679b644d2b7b6f724cc502ee2d338a75d707e82016d5d6af09cfa9806ecf1305d248e77282c165f4bb29821e600b92c6a65d0bc2df19e6c2c37c81ca650e42f31f2a3a1bcbdd324703bc4411acb21338a7f8ffffff8a86ad08a0f16bf91d062e4d5c3bcaf893000000000000b913be9721315b12756accf0286e268bb69ea7d36c41f562e3e2e2066f6b2c117265b24ac0c6eac5c17656c54b7b3a31af1971ba156853e28d3ea07285f224c13568522ac26e8c455f599fd83724c5d162f7bcad035f2b2d014daf2e850ea624e64eafe6eda966ca401d75d0546397f57f0020cf89545965dd0e291ed305e6d9f981934bb4b91ca9e6d67dc5f036043d017f46d939005721c2e7955c4e3ccd5ee165777e514a444cd1ca33f164b52f6d6bcbed9270c7cd1aae75afbdc97cb62a0ddc6fdfe32370dc8b036368e465759939f716a8518953dfead37d64a12bcf469eedf494ed862213b05285b7ee100e98de45b67978046c99e99f60073d648977c003b891612a3683dba9c3c489bfb3e59caba10ea9f36833ce9af514542acc79e85bcb33ffc031a3df17c902109cca95b712594a4a9faa63ac75a5be728f", 0x1b6}, {&(0x7f0000000280)="eaf501006dd7968e6281d9aff7481f0fb1588a14f24df2e55c83ec83df34cf3fd6b299bd4b88b1d1f25e6a086c0d6482a54f9b622ab67ed2db302b7787662aa01d28913b0001a9531393f979c60dbc089ac0ce0979a417af390c71192aa5eb13853ae3867fab63dc8807ca98b9b323e2cc75939294713a4020bb6f779cf85a3bc25388c2d20440bc03dfc446bfb2b6bebc72304daf5990", 0x97}, {&(0x7f0000000340)="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", 0xfd}], 0x3) 16:18:46 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0xfffffffffffffffd, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2284, &(0x7f0000000000)) 16:18:46 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0xffffff6e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ftruncate(r2, 0x10099b7) sendfile(r0, r2, 0x0, 0x88000fc000000) 16:18:46 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f60", 0xd}], 0x1) 16:18:46 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f61", 0xd}], 0x1) 16:18:46 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0xe, &(0x7f0000000ac0)={0x8, &(0x7f0000000880)=[{0x2, 0x9, 0x1f, 0x9}, {0x90, 0x9, 0x1f, 0x10000}, {0x5022, 0x9, 0x1, 0x4000000}, {0x200, 0x3, 0x6, 0x7fff}, {0x2, 0x7, 0x0, 0x1}, {0x6, 0x1, 0x6, 0x69}, {0x1000, 0x0, 0x5, 0x4}, {0x0, 0x5, 0x9, 0xfff}]}) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000007000100070c10000000000000000000", 0x58}], 0x1) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000dc0)=0x0, &(0x7f0000000e00)=0x4) r3 = socket(0x200000000000011, 0x3, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000c40)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x28020140}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x30, 0x0, 0x210, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}]}, 0x30}, 0x1, 0x0, 0x0, 0xf7f551dee75a448a}, 0x4040840) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r3, &(0x7f0000000240)={0x11, 0x0, r5}, 0x14) eventfd(0x81) getsockname$packet(r3, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x1, 0x5, 0x47, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r6}, 0x3c) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000ec0)={0x0, @hci={0x1f, 0x3, 0x2}, @ipx={0x4, 0x5, 0x7fe0000, "a0ddcdb7105e", 0x81}, @xdp={0x2c, 0x2, r6, 0x14}, 0xe5, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000e80)='syz_tun\x00', 0x1d94, 0x7, 0x40}) sendmmsg$inet(r1, &(0x7f00000011c0)=[{{&(0x7f0000000000)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000040)="005f1d69d631e71049b9fb4f7a768fc2f84b174551d918b1554df91de0a9bc97054898d046378ec0c5ad980ac207391a14907b8bb8d4daba12f6a1c122fecb148a370f070f520dad2d59121ba7acaa4fa6db15fd3a057dd5564226f3aab1e34d54c16fd98303c410dab7c24eb3ef4b8d9edc0700142d6efef65e3eb5c6ca38", 0x7f}], 0x1, &(0x7f0000000100)=[@ip_tos_u8={{0x11}}], 0x18}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000140)="498ca0784ce295013afc5ec11e299180c3f9b0d91786a7647c44941675b7be36ffcbe86bbbca310625a0e76a7d614cccf4a91bb638499b09c936672b6fb9e58650ccacf0a226e60bb2c27280f8d85f46adfb49dee524446aea9ebd78d1cc43", 0x5f}, {&(0x7f0000000b00)="f1b23321612186f6a374240f7ec86564efd300c4e835318b133649056e22d0d93e77bf2181f2ebb9a0b72426c13a259fbe37b0c9f4f480b51dee237126488183489ffa3febea2f74fc03ff4aed0b99f86d522a15284d3ec8183e00ace7a3befac3cfa473a539e5e32d5494aaa88ed9c2ba9b131b95fa99972e0b0cd23be9f581bc6d96cdea6ccdfdbb3ede1ded625917fdd0241d4bf7b68bc38a5a52a1", 0x9d}, {&(0x7f0000000280)="905305644862359b713f00654d447e5fe69641aef16867d27df79b001a137316018cb6dcaa1f2c3f1f25f2d950bda6190280217e49447e3d6c77a7f03937e320b7838c8ae85144188f97590619d7515e96104d927d0fe6798f641b0efc9ccca61d9c91eac3e678afee4364bc38ce52c5fab93ecc6a5b16c136b31186224e709e2732211464a9dbee7997ed77f6f185f49e251e904e3ee621de382806802362f94d6273ec1fa2367d65b16a66cd0a75f45e18c42bdb94c76b7171551228176da2802bc2062bdc687b8b63b8684b9d8c3efb23ed0d4ad620f62de650e3251f1e9bbb05b2586c6f134bec7c052ab3e5a68d860405661322fa8d", 0xf8}, {&(0x7f0000000380)="e9dff59c732c8d4bafd51fd2719dba2b1b749f701c83c8630d739a70e3c8ca521c0df9efce05c1ab3fe9f7e63c28c01d8eabccf7c16bc3fc9060aee33d1ad7e7408c3f0934b8de87229277b27d34cbb55cb6037028ff0defc6d84acc14926ed207666263f2d6e2f2e293b70b453bae8dad8ebf957d7f3522384e402a0cc663fb23f3389a3b31b58470d290fcfe2bb3155d5216f88b54607cbd1e2ddf421ae951d3fd46bd32e4404c059c010059a1d610874d2e1eacd73387b7560940f3f6377eae5cbfa766a6923a264d618b6be09680d4db8e7b5d7580", 0xd7}, {&(0x7f0000000480)="5c687bb2d468268b1b77cab6ba446e003590c1ad510d111d4bbfddd36bcfa74dec25303a0fed2c723469ee2d8144f0514396f791c3b4c5f579ee0a", 0x3b}, {&(0x7f0000000580)="74fc13e7eaaf9d6713be339a34ec273b0846597e9d375c75fbaae6bca96918dd413a838e154835935978a14db42e0190e6fc2dab9f7cf9f5d5a3e5560604dcfcd319490276078e1d5601bdfc017c057137280de63d5393d4204ce5c14a891891e34bfa8a893dd6afa8c102d5960a3612cd577b804a32b83c4be099529cbb5334cdb450ce6975d3a34e953537af0fe1ea650f62456fd973f06aaa4fa4544232d3c914", 0xa2}], 0x6}}, {{&(0x7f0000000640)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f0000000680)="b82f375af3b77caf84a220e55ea5826423c11ff11ca2224c2da29097955453174be1139f4c5e17101015f0d44b92ade6576ff9d5588e3480440c3f4758ee4a836a8be2a475ba37e729c707f1ac208519ae0768e6d6dcdc621b6e35875dcd51658f724e6806b2b04b729557d93585df674fac8487409b1ac98277af1c7149b04dcf7a914e60463f1e2ed4b93468a408f7bb6f0953e2d5cb3f5983934f8bd1f3ecba9f3132a991f672da7fc9df13e5d298f0ae08a6afe1193bb3c70b34577adb3237b3495b655b75b8c4415a06c672", 0xce}, {&(0x7f0000000780)="9a221af9c98ae9ce0a7b4375c74467cd02342b2f5a52055e37bdfea7c3afdb77d8ddac7b57cc0e427b36341566811fc8b63f4b6a74cbb89754726ba16b8bc9db7f92327ee6ef16eab657a45530357e624f75344e6eb91bd881020c54b381325965cb64724aa5d542f5563cd9e794ad3ff9450a5da6bd532d1b3fc6feaef78a7760c26152d279de4ecf594118f98111848e9ee9bbb16b58c091ef2532992ab9e04147b68e91ce271528509b4835bb6f29fdfd92985ee6daa655", 0xb9}, {&(0x7f0000000900)="bf35d57e098a7f7bd27ba80d5b56fd24b9e89eee4c32bd19d74eb9491ed935c488e5dad66a3d984568c591a6c6a604e85a3f5136280b7ea15ac7d5e51ce0e87692fd694780e9dcb5ddfcc36df242eaedc29f27db359418f09daee1efd2e677178f1147ddd591518231184e07da3d2f36d0d19518ca6bb1ccc83c8e58cb93c71860610ba8068deff42b77a14fa18a8439f8e70c140e37cf7d5e8041b3a50a8c720a8104e8d7221983e3a4f0cae763ed716316c7a133d9bbcf1d9a492984272906ee6a0f", 0xc3}, {&(0x7f0000000a00)="2b1680c0918f75845d129d7db0baaebbb618cf81fe816fb5b8e69a5da5d3a380ba8cdefd98fb5028847a85b0759bf4e09414a6a2de3d06fc9b2ef51b13de22d25620cdde2be6e69c3b6d0e42a06061aeff3ab2b9a470144d031daad297a65733089af63a69287fa6360315ed744d25d2434bf6b33726fd9fdb8ac8c18efdbbaf4b19bc23494d9539523227dfcce4d9ce4922f4fc2a972627ab8ff6ba5a97e48977edbbdc0864832272490a7bcbe60f073be379a3f2ce", 0xb6}], 0x4, &(0x7f0000000f40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @dev={0xac, 0x14, 0x14, 0x28}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @local, @dev={0xac, 0x14, 0x14, 0x28}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @local}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}], 0xc0}}, {{&(0x7f0000001000)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000001080)=[{&(0x7f0000001040)="6b45b8757148e390c02fef25960d01446c26bfebe7e9d4564d20e0c2d2a1", 0x1e}], 0x1}}, {{&(0x7f00000010c0)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000001140)=[{&(0x7f0000001100)="f81dccb3cdcf", 0x6}], 0x1, &(0x7f0000001180)=[@ip_ttl={{0x14, 0x0, 0x2, 0x143}}], 0x18}}], 0x5, 0xdd4ad6661549c1ed) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0)='NLBL_UNLBL\x00') 16:18:46 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x40000, 0x0) r2 = socket(0x200000000000011, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r2, &(0x7f0000000240)={0x11, 0x0, r4}, 0x14) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r5, 0x800000c004500a, &(0x7f0000000300)) dup(r5) getsockname$packet(r2, &(0x7f0000000280), &(0x7f0000000040)=0x14) r6 = socket(0x200000000000011, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r6, &(0x7f0000000240)={0x11, 0x0, r8}, 0x14) getsockname$packet(r6, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, &(0x7f0000000140)={0x0, 0xfffffff8}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000001c0)=@assoc_id=r9, &(0x7f0000000200)=0x4) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x6, 0x1, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x9909ca, 0xa1f4, [], @value=0x7ff}}) ioctl$SG_NEXT_CMD_LEN(r0, 0x5385, &(0x7f0000000000)) 16:18:46 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000080)) creat(&(0x7f00000001c0)='./file0\x00', 0x11) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r3, 0x800000c004500a, &(0x7f0000000300)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r4, 0x800000c004500a, &(0x7f0000000300)) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000100)={0x80, 0xb, 0x4, 0x2000000, 0xfffffffe, {0x77359400}, {0x4, 0x1, 0x1, 0x5, 0x1, 0x81, "00040600"}, 0xfff, 0x5, @userptr=0x4, 0x5, 0x0, r4}) setsockopt$RXRPC_SECURITY_KEYRING(r5, 0x110, 0x2, &(0x7f0000000180)='\x00', 0x1) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000200)) ioctl$SG_NEXT_CMD_LEN(r0, 0x2284, &(0x7f0000000000)) 16:18:46 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0xffffff6e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) ftruncate(r2, 0x10099b7) sendfile(r0, r2, 0x0, 0x88000fc000000) 16:18:46 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f63", 0xd}], 0x1) [ 492.755904][ T27] audit: type=1800 audit(1578759526.756:37): pid=14301 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=16929 res=0 16:18:46 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x227b, &(0x7f0000000000)) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video36\x00', 0x2, 0x0) 16:18:46 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) name_to_handle_at(r2, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x94, 0x5, "5ac51956a3d7f86aff12457761e22d06e05719a493fc58f74aaec080cf739ceb0b91ad277371f4fb6381df5a212a660332018670eda19b83617de3f7f0e23ffa995cc9325b612bb55a3a337bc8764151f87dd9a3dcb53eb426dc30bb3c04466ec550fb66bb1da6d000b3240f70966f9218eb726231c2ed042b3e2d3695980f7c235da4487ad419c79c32b51b"}, &(0x7f0000000180), 0x400) r3 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x10000, 0x148045) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000040)={0x7, [0x174d, 0xff, 0x5, 0x8, 0x5, 0x6, 0x4]}, 0x12) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}], 0x1) 16:18:46 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f64", 0xd}], 0x1) 16:18:46 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2284, &(0x7f0000000000)) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0)='NLBL_UNLBL\x00') r2 = socket(0x200000000000011, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r2, &(0x7f0000000240)={0x11, 0x0, r4}, 0x14) getsockname$packet(r2, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) r5 = socket(0x200000000000011, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r5, &(0x7f0000000240)={0x11, 0x0, r7}, 0x14) getsockname$packet(r5, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e22, 0x200, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xcdac}}}, &(0x7f0000000340)=0x84) r9 = openat$null(0xffffffffffffff9c, &(0x7f0000000480)='/dev/null\x00', 0x6e0b90ff56dfd8eb, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r9, 0x84, 0x20, &(0x7f00000004c0)=0x6, 0x4) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000380)={r8, @in={{0x2, 0x4e22, @local}}, 0x1f, 0x0, 0x400, 0x5, 0xbcec}, &(0x7f0000000440)=0x98) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x120000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r1, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x40010) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000240)={0x1f, 0x18, &(0x7f0000000200)="4916086627b9fae04f8546139966bcb0e43806aaac9ece48"}) 16:18:47 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}], 0x1) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x2400, 0x2, 0x47fd, 0x6, 0x10}}) 16:18:47 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f65", 0xd}], 0x1) 16:18:47 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x20011, r1, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x227b, &(0x7f0000000000)) sigaltstack(&(0x7f0000000000/0x1000)=nil, &(0x7f0000000080)) 16:18:47 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0xffffff6e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) ftruncate(r2, 0x10099b7) sendfile(r0, r2, 0x0, 0x88000fc000000) 16:18:47 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000080)) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x5385, &(0x7f0000000000)) 16:18:47 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x1, 0x222c80) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) 16:18:47 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}], 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SELLOADLUT(r1, 0x541c, &(0x7f0000000000)={0xb}) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000080)={0x1, 0x1, 0xf, 0x1d, 0xa2, &(0x7f0000000900)}) r2 = socket(0x200000000000011, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, &(0x7f0000000100)="21cff8317d45") ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r2, &(0x7f0000000240)={0x11, 0x0, r4}, 0x14) r5 = socket$inet6(0xa, 0x400000000001, 0x0) close(r5) r6 = open(&(0x7f00000002c0)='./bus\x00', 0x143042, 0x0) ftruncate(r6, 0x2008002) sendfile(r5, r6, 0x0, 0x200fff) ioctl$DRM_IOCTL_IRQ_BUSID(r6, 0xc0106403, &(0x7f00000000c0)={0x5, 0xb53, 0x9, 0x40}) getsockname$packet(r2, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) setsockopt$RXRPC_SECURITY_KEY(r2, 0x110, 0x1, &(0x7f0000000000)='\x00', 0x1) 16:18:47 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f66", 0xd}], 0x1) 16:18:47 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000007000100070c10000000000000000000", 0x58}], 0x1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000007000100070c10000000000000000000", 0x58}], 0x1) r4 = socket(0x200000000000011, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r4, &(0x7f0000000240)={0x11, 0x0, r6}, 0x14) getsockname$packet(r4, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x1, 0x5, 0x47, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r7}, 0x3c) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000100)={'team0\x00', r7}) sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x78, r2, 0xbf9dfe4f0602055d, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_STA_WME={0x3c, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x6}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x7}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x40}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x8}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x7}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x8}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x8}]}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r8}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x727}, @NL80211_ATTR_REASON_CODE={0x6}, @NL80211_ATTR_STA_FLAGS={0x10, 0x11, [@NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x4048004) ioctl$SG_NEXT_CMD_LEN(r0, 0x5385, &(0x7f0000000000)) 16:18:47 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2284, &(0x7f0000000000)=0xfffffffd) 16:18:47 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsu\x00', 0x202080, 0x0) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000040)={r3}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000000c0)={r3, 0x2ef9, 0x5654, 0x9, 0x0, 0x40}, 0x14) ioctl$SG_NEXT_CMD_LEN(r0, 0x227b, &(0x7f0000000000)) 16:18:47 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f67", 0xd}], 0x1) 16:18:47 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0xffffff6e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) ftruncate(r2, 0x10099b7) sendfile(r0, r2, 0x0, 0x88000fc000000) 16:18:48 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2284, &(0x7f0000000000)) r1 = socket(0x200000000000011, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r1, &(0x7f0000000240)={0x11, 0x0, r3}, 0x14) getsockname$packet(r1, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000040)={r5}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000080)={r5, @in6={{0xa, 0x4e24, 0x3, @loopback, 0x335c}}}, &(0x7f0000000140)=0x84) 16:18:48 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f68", 0xd}], 0x1) 16:18:48 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x5385, &(0x7f0000000000)) syz_extract_tcp_res(&(0x7f0000000080), 0x2, 0xfff) 16:18:48 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f6c", 0xd}], 0x1) [ 494.272553][ T27] audit: type=1800 audit(1578759528.266:38): pid=14412 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=16641 res=0 16:18:48 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0xffffff6e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(0xffffffffffffffff, 0x10099b7) sendfile(r0, r2, 0x0, 0x88000fc000000) 16:18:48 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x200800, 0x0) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="7c8d800ed9982be49b0d317f679b64", 0xf}], 0x1) 16:18:48 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f00000002c0)='./bus\x00', 0x143042, 0x0) ftruncate(r2, 0x2008002) sendfile(r1, r2, 0x0, 0x200fff) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r5, 0x800000c004500a, &(0x7f0000000300)) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000000c0)={0x8, 0x9, 0x4, 0x4000000, 0x1, {r3, r4/1000+10000}, {0x1, 0x0, 0x20, 0x4, 0x3f, 0x1, "4ffbf054"}, 0xa0, 0x2, @fd, 0x6, 0x0, r5}) ioctl$SNDRV_TIMER_IOCTL_START(r6, 0x54a0) ioctl$SG_NEXT_CMD_LEN(r0, 0x5385, &(0x7f0000000000)) 16:18:48 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f6d", 0xd}], 0x1) 16:18:48 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f0000000080)=0x1) ioctl$SG_NEXT_CMD_LEN(r0, 0x5385, &(0x7f0000000000)) 16:18:48 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x300000b, 0xe0209641474d457d, r0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f00000002c0)='./bus\x00', 0x143042, 0x0) ftruncate(r2, 0x2008002) sendfile(r1, r2, 0x0, 0x200fff) ioctl$DRM_IOCTL_AGP_RELEASE(r2, 0x6431) 16:18:48 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000000)={0xc386, 0xa, 0x4, 0x8, 0x80000001, {0x77359400}, {0x2, 0x0, 0x3f, 0x6, 0x50, 0x2, "78e6987b"}, 0x10000, 0x3, @offset=0x1ff, 0x3, 0x0, 0xffffffffffffffff}) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x7, 0x6, 0x4, 0x70bd28, 0x25dfdbfb, {0x7, 0x0, 0x2}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x401}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2d}]}, 0x34}, 0x1, 0x0, 0x0, 0x2404806f}, 0x4000000) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}], 0x1) 16:18:48 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0xffffff6e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(0xffffffffffffffff, 0x10099b7) sendfile(r0, r2, 0x0, 0x88000fc000000) 16:18:49 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f00000002c0)='./bus\x00', 0x143042, 0x0) ftruncate(r2, 0x2008002) sendfile(r1, r2, 0x0, 0x200fff) ioctl$USBDEVFS_CLAIMINTERFACE(r2, 0x8004550f, &(0x7f0000000080)=0x6) ioctl$SG_NEXT_CMD_LEN(r0, 0x2284, &(0x7f0000000000)) 16:18:49 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000007000100070c10000000000000000000", 0x58}], 0x1) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000040)={0x0, @ipx={0x4, 0x0, 0xc6b, "46000205f07b", 0x5}, @hci={0x1f, 0xffffffffffffffff, 0x1}, @tipc=@nameseq={0x1e, 0x1, 0x1, {0x43, 0x3, 0x2}}, 0x101, 0x0, 0x0, 0x0, 0x200, &(0x7f0000000000)='veth0\x00', 0x3ff, 0x2, 0x7}) r2 = epoll_create1(0x20fa4955401fd98f) ioctl$FICLONE(r2, 0x40049409, r1) 16:18:49 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f6e", 0xd}], 0x1) 16:18:49 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x5385, &(0x7f0000000000)) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = syz_open_procfs(r1, &(0x7f0000000080)='net/ip_tables_targets\x00') setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f00000000c0)=0x2, 0x8) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r0, 0x2) 16:18:49 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0xffffff6e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(0xffffffffffffffff, 0x10099b7) sendfile(r0, r2, 0x0, 0x88000fc000000) 16:18:49 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}], 0x1) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x800, 0x0) write$binfmt_elf64(r1, &(0x7f0000000900)={{0x7f, 0x45, 0x4c, 0x46, 0x9, 0x5, 0x3, 0x7f, 0x7121, 0x3, 0x3e, 0x800, 0xbe, 0x40, 0x9f, 0x401, 0x0, 0x38, 0x2, 0x5, 0x3}, [{0x4, 0xf6, 0xffffffffffffffe0, 0x96, 0x6, 0x7, 0x101, 0x4}], "26d878efcde1", [[], [], [], [], [], [], [], []]}, 0x87e) fgetxattr(r0, &(0x7f0000000240)=@known='com.apple.system.Security\x00', &(0x7f0000000280)=""/247, 0xffffffffffffffda) 16:18:49 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0xffffff6e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r2, 0x0) sendfile(r0, r2, 0x0, 0x88000fc000000) 16:18:49 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f71", 0xd}], 0x1) 16:18:49 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2284, &(0x7f0000000000)) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f00000000c0)=0x4) 16:18:49 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x40001, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x227b, &(0x7f0000000000)) 16:18:49 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r1 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x2c073, r1, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f00000000c0)={0x9a0000, 0x100, 0x1, r0, 0x0, &(0x7f0000000080)={0x9f0901, 0x8, [], @ptr=0x7}}) r3 = socket(0x200000000000011, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000007000100070c10000000000000000000", 0x58}], 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r5, 0x8982, &(0x7f0000000280)={0x8, 'veth0_to_bond\x00', {'syzkaller1\x00'}, 0x8}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r3, &(0x7f0000000240)={0x11, 0x0, r6}, 0x14) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x100, 0x7a, 0x9c3, 0x2}) getsockname$packet(r3, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) ioctl$SIOCNRDECOBS(r3, 0x89e2) prctl$PR_SET_KEEPCAPS(0x8, 0x1) sendmsg$nl_route(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x8050) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0x2, {0x4, 0x1, 0x8, 0x5, 0x1f, 0x4}, 0x4, 0x6}, 0xe) ioctl$SG_NEXT_CMD_LEN(r0, 0x5385, &(0x7f0000000000)) rt_sigprocmask(0x3, &(0x7f00000002c0)={0x6}, &(0x7f0000000300), 0x8) [ 495.257009][ T27] audit: type=1800 audit(1578759529.256:39): pid=14488 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=16515 res=0 16:18:49 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0xffffff6e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r2, 0x0) sendfile(r0, r2, 0x0, 0x88000fc000000) 16:18:49 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f72", 0xd}], 0x1) 16:18:49 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x100, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f0000000080)={r3, 0x20}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r4, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}], 0x1) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000000900)={{0x6, 0x0, 0x80, {0x3000, 0x100000}}, "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", "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"}) 16:18:49 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SELLOADLUT(r3, 0x541c, &(0x7f0000000000)={0xb}) ioctl$KDFONTOP_COPY(r3, 0x4b72, &(0x7f00000001c0)={0x3, 0x1, 0x8, 0x8, 0x1fc, &(0x7f0000000300)}) close(r2) r4 = open(&(0x7f00000002c0)='./bus\x00', 0x143042, 0x0) ftruncate(r4, 0x2008002) sendfile(r2, r4, 0x0, 0x200fff) ftruncate(r1, 0x0) ioctl$VIDIOC_STREAMOFF(r4, 0x40045613, &(0x7f0000000180)=0x800) write$sndseq(r1, &(0x7f00000000c0)=[{0x80, 0xfc, 0xff, 0x2, @time={0x1194000, 0x10000}, {0x20, 0x1}, {0x0, 0x81}, @connect={{0x80, 0x20}, {0xc4, 0xff}}}, {0x80, 0x56, 0x81, 0x60, @time={0x8, 0x3ff}, {0x5c, 0x80}, {0x4, 0x3f}, @result={0x3, 0xf2d}}], 0x38) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KVM_GET_API_VERSION(r6, 0xae00, 0x0) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000100)=@req={0x28, &(0x7f0000000000)={'veth1_virt_wifi\x00', @ifru_flags=0x2000}}) ioctl$SG_NEXT_CMD_LEN(r0, 0x2284, &(0x7f0000000140)) 16:18:49 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) 16:18:49 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0xffffff6e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r2, 0x0) sendfile(r0, r2, 0x0, 0x88000fc000000) 16:18:49 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x5385, &(0x7f0000000000)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000080)={0x401, 0x7, 0x4, 0x2000000, 0x20, {0x0, 0x2710}, {0x1, 0x0, 0x3, 0xf7, 0x3, 0x5a, "70ad1190"}, 0x0, 0x2, @fd=r2, 0x0, 0x0, 0xffffffffffffffff}) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r4, 0x40044620, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000140)=0x8) 16:18:49 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f73", 0xd}], 0x1) 16:18:49 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}], 0x1) socket(0x2b, 0x4, 0x0) 16:18:49 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x10, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2284, &(0x7f0000000000)) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x20000, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f00000000c0)=0x2) 16:18:50 executing program 2: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r2}, 0x14) getsockname$packet(r0, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) modify_ldt$write2(0x11, &(0x7f0000000140)={0x3ff, 0x20000800, 0x3000, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1}, 0x10) openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x800, 0x0) r3 = socket$inet_sctp(0x2, 0x7, 0x84) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) setsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f0000000080)=0x2, 0x4) r4 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r4, 0x0) ioctl$SG_NEXT_CMD_LEN(r4, 0x227b, &(0x7f0000000000)) 16:18:50 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f63", 0xd}], 0x1) 16:18:50 executing program 5: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r2}, 0x14) getsockname$packet(r0, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) ioctl$SIOCX25GCAUSEDIAG(r0, 0x89e6, &(0x7f0000000080)={0x9, 0x1f}) r3 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r3, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0x80, 0x0) ioctl$TCSETXF(r5, 0x5434, &(0x7f0000000140)={0x3, 0x401, [0xffe3, 0xfffe, 0x4, 0x7f], 0x4000}) ioctl$int_in(r4, 0x800000c004500a, &(0x7f0000000300)) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f00000000c0)) ioctl$SG_NEXT_CMD_LEN(r3, 0x5385, &(0x7f0000000000)) 16:18:50 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0xffffff6e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r2, 0x10099b7) sendfile(0xffffffffffffffff, r2, 0x0, 0x88000fc000000) 16:18:50 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f75", 0xd}], 0x1) 16:18:50 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2284, &(0x7f0000000000)) r1 = socket(0x200000000000011, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r1, &(0x7f0000000240)={0x11, 0x0, r3}, 0x14) getsockname$packet(r1, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) getsockopt$inet6_tcp_buf(r1, 0x6, 0xa432239a3d88b8af, &(0x7f0000000080)=""/4096, &(0x7f0000001080)=0x1000) 16:18:50 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f63", 0xd}], 0x1) 16:18:50 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f9b", 0xd}], 0x1) 16:18:50 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0xffffff6e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r2, 0x10099b7) sendfile(0xffffffffffffffff, r2, 0x0, 0x88000fc000000) 16:18:50 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x9, 0x20e042) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x5385, &(0x7f0000000000)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsa\x00', 0x0, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000300)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f00000000c0)=[r2, 0xffffffffffffffff, r0, r0], 0x4) 16:18:50 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000016c0)) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000007000100070c10000000000000000000", 0x58}], 0x1) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) mlock2(&(0x7f00009b5000/0x3000)=nil, 0xd5ff438933b6e90a, 0x0) r3 = socket(0x200000000000011, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x200000000000011, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r4, &(0x7f0000000240)={0x11, 0x0, r6}, 0x14) getsockname$packet(r4, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x1, 0x5, 0x47, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r7}, 0x3c) r8 = socket(0x200000000000011, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r8, &(0x7f0000000240)={0x11, 0x0, r10}, 0x14) getsockname$packet(r8, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) bind$packet(r8, &(0x7f0000000080)={0x11, 0x11, r7, 0x1, 0x3, 0x6, @broadcast}, 0xff4c) getsockname$packet(r3, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) r11 = socket(0x200000000000011, 0x3, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r11, &(0x7f0000000240)={0x11, 0x0, r13}, 0x14) getsockname$packet(r11, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) r14 = accept$ax25(r11, &(0x7f0000000300)={{0x3, @rose}, [@netrom, @remote, @null, @remote, @bcast, @rose, @default, @netrom]}, &(0x7f0000000380)=0x41d) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x14d71, r14, 0xfffff000) ioctl$SG_NEXT_CMD_LEN(r0, 0x227b, &(0x7f0000000000)) r15 = socket(0x200000000000011, 0x3, 0x0) r16 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r15, &(0x7f0000000240)={0x11, 0x0, r17}, 0x14) getsockname$packet(r15, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r15, 0x84, 0x12, &(0x7f0000000140), &(0x7f0000000180)=0x4) inotify_init() r18 = socket$inet6(0xa, 0x400000000001, 0x0) close(r18) r19 = open(&(0x7f00000002c0)='./bus\x00', 0x143042, 0x0) ftruncate(r19, 0x2008002) sendfile(r18, r19, 0x0, 0x200fff) r20 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x3a1f81, 0x0) renameat2(r19, &(0x7f00000001c0)='./file0\x00', r20, &(0x7f0000000280)='./file0\x00', 0x1) 16:18:50 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f63", 0xd}], 0x1) 16:18:50 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2284, &(0x7f0000000000)) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snapshot\x00', 0x4200, 0x0) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000007000100070c10000000000000000000", 0x58}], 0x1) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x58000000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1b8, 0x2, 0x2, 0x2, 0x70bd28, 0x25dfdbfb, {0x6038a287d4ab489}, [@CTA_EXPECT_NAT={0xd0, 0xa, [@CTA_EXPECT_NAT_TUPLE={0x44, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @rand_addr="5c73334e8a800136daec9c00cbfa1e68"}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @broadcast}}}]}, @CTA_EXPECT_NAT_TUPLE={0x70, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x34}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x2}]}, @CTA_EXPECT_NAT_TUPLE={0x10, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x3}, @CTA_EXPECT_ID={0x8, 0x5, 0xb1}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x10000}, @CTA_EXPECT_NAT={0xb4, 0xa, [@CTA_EXPECT_NAT_TUPLE={0x64, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, [], 0xa}}, {0x14, 0x4, @rand_addr="81246cfc5b460c437c8c002b47a61faf"}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5, 0x1, 0x27}}]}, @CTA_EXPECT_NAT_TUPLE={0x4c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5, 0x1, 0xa7}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x2c}}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5, 0x1, 0xf67e528d916e115b}}]}]}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x2}]}, 0x1b8}}, 0x800) 16:18:50 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317fdf", 0xd}], 0x1) 16:18:50 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0xffffff6e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r2, 0x10099b7) sendfile(0xffffffffffffffff, r2, 0x0, 0x88000fc000000) 16:18:50 executing program 0: writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f63", 0xd}], 0x1) 16:18:50 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x14400, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r1, 0xc0305616, &(0x7f00000000c0)={0x0, {0xff, 0x7}}) ioctl$SG_NEXT_CMD_LEN(r0, 0x5385, &(0x7f0000000000)) 16:18:50 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f5d", 0x2}], 0x1) 16:18:50 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x101000, 0x0) sendto$inet(r1, &(0x7f00000000c0)="d15d34c2c55c6253827fbd0e968a4be1dab29971917176b0cc6d4d024de3f74905b7e610358568fa215cb877707c14b55f60387f2b093617b48c359a8e83e967e74bf70ea89f317f264e8228a92ffefa60beb74d9fa061f3859c377020a4d405a449b8c8718d0b250fd148b7180edd6fda798de344da9e0676b7f5bf42dd51dc1dd3c1e4645f0e311b0c8605a2ba283f1d3d7865e8db5bca3a3807a1d430fda7fd6db6dcd75afb87746552f89f46fcb1323b6151c1e01c48c9492ecb6396628e64b9dc226b891bd216a901ce850a63e613e2578a0e0f3382bc5e4ea7e3ac4ee2f64393b3dc2a7cff50e69416", 0xec, 0x40080, &(0x7f00000001c0)={0x2, 0x4e23, @loopback}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) r2 = socket(0x200000000000011, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r2, &(0x7f0000000240)={0x11, 0x0, r4}, 0x14) getsockname$packet(r2, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) getpeername$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000003c0)=0x14) ioctl$SG_NEXT_CMD_LEN(r0, 0x2284, &(0x7f0000000000)) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000900}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xa0, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x14, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x401}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9ebb}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xf1}]}, @TIPC_NLA_MEDIA={0x38, 0x5, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xad}]}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x400a}, 0xf802) 16:18:51 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0xffffff6e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r2, 0x10099b7) sendfile(r0, 0xffffffffffffffff, 0x0, 0x88000fc000000) 16:18:51 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f5d", 0x3}], 0x1) 16:18:51 executing program 0: writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f63", 0xd}], 0x1) 16:18:51 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SELLOADLUT(r1, 0x541c, &(0x7f0000000000)={0xb}) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000080)={0x0, 0x2, 0x7fff}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SELLOADLUT(r2, 0x541c, &(0x7f0000000000)={0xb}) ioctl$PIO_UNIMAPCLR(r1, 0x4b68, &(0x7f0000000500)={0xa8, 0x7cd, 0x2}) socket$can_raw(0x1d, 0x3, 0x1) ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f00000004c0)={0x1, 0x0, 0x3, 0x13, 0x19b, &(0x7f00000000c0)}) ioctl$SG_NEXT_CMD_LEN(r0, 0x227b, &(0x7f0000000000)) 16:18:51 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0xffffff6e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r2, 0x10099b7) sendfile(r0, 0xffffffffffffffff, 0x0, 0x88000fc000000) 16:18:51 executing program 0: writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f63", 0xd}], 0x1) 16:18:51 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f5d", 0x4}], 0x1) 16:18:51 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0xfffffffffffff421, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2284, &(0x7f0000000000)) 16:18:51 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f63", 0xd}], 0x1) 16:18:51 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0xffffff6e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r2, 0x10099b7) sendfile(r0, 0xffffffffffffffff, 0x0, 0x88000fc000000) 16:18:51 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f5d", 0x5}], 0x1) 16:18:51 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x227b, &(0x7f0000000000)) 16:18:51 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SELLOADLUT(r1, 0x541c, &(0x7f0000000000)={0xb}) ioctl$KDGETLED(r1, 0x4b31, &(0x7f0000000080)) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2284, &(0x7f0000000000)) 16:18:51 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f63", 0xd}], 0x1) 16:18:51 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0xffffff6e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r2, 0x10099b7) sendfile(r0, r2, 0x0, 0x0) 16:18:51 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f5d", 0x6}], 0x1) 16:18:51 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x810, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x227b, &(0x7f0000000000)) 16:18:52 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000080)=ANY=[@ANYBLOB="cb08000000000000008e84898d86800c8460860a018e05830708030e090681"]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x2) keyctl$set_reqkey_keyring(0xe, 0x4) r2 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r3 = socket(0x200000000000011, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'veth1_virt_wifi\x00', 0x0}) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsu\x00', 0x880, 0x0) connect$l2tp(r6, &(0x7f0000000340)={0x2, 0x0, @empty}, 0x10) bind$packet(r3, &(0x7f0000000240)={0x11, 0x0, r5}, 0x14) getsockname$packet(r3, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r7, 0x800000c004500a, &(0x7f0000000300)) fcntl$F_GET_FILE_RW_HINT(r7, 0x40d, &(0x7f0000000380)) getsockopt$inet6_opts(r3, 0x29, 0x37, &(0x7f00000000c0)=""/28, &(0x7f0000000100)=0x1c) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r2, 0x0) r8 = accept$phonet_pipe(r1, &(0x7f00000002c0), &(0x7f0000000300)=0x10) getsockopt$IP_VS_SO_GET_DESTS(r8, 0x0, 0x484, &(0x7f0000000140)=""/236, &(0x7f0000000240)=0xec) ioctl$SG_NEXT_CMD_LEN(r2, 0x2284, &(0x7f0000000000)=0x4) 16:18:52 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f63", 0xd}], 0x1) 16:18:52 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0xffffff6e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r2, 0x10099b7) sendfile(r0, r2, 0x0, 0x0) 16:18:52 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x227b, &(0x7f0000000000)) 16:18:52 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f5d", 0x7}], 0x1) 16:18:52 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vcs\x00', 0x100d00, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000500)=0x2, 0x4) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=@random={'btrfs.', '/dev/sg#\x00'}) r1 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x400000000, 0x42700) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r1, 0x0) ioctl$SG_NEXT_CMD_LEN(r1, 0x2284, &(0x7f0000000000)) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video1\x00', 0x2, 0x0) 16:18:52 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0xffffff6e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r2, 0x10099b7) sendfile(r0, r2, 0x0, 0x0) 16:18:52 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f63", 0xd}], 0x1) 16:18:52 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000180)={0x9, 0xb, 0x4, 0x10, 0x3f, {0x0, 0x2710}, {0x5, 0xc, 0x8c, 0x8, 0xd1, 0xff, "61c054ba"}, 0x8, 0x1, @offset=0x5, 0xcfe0, 0x0, r1}) ioctl$SG_NEXT_CMD_LEN(r2, 0x227b, &(0x7f0000000140)=0x80004d) r3 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0xdea, 0x20e400) ioctl$GIO_CMAP(r3, 0x4b70, &(0x7f00000000c0)) 16:18:52 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f5d", 0x8}], 0x1) 16:18:52 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, 0x0, 0x0) 16:18:52 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080)=@gcm_128={{0x304}, "290fa080cbd3ad95", "16f02a94871aa7578e3e587fb7a39e05", "3a57f8c1", "1b77f41ab8099639"}, 0x28) socket$phonet(0x23, 0x2, 0x1) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x208200, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r2, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_SEQ={0xb, 0xa, "df3bbf1f56c3fa"}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2284, &(0x7f0000000000)) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000007000100070c10000000000000000000", 0x58}], 0x1) getpeername$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = getuid() setresuid(0xee01, r5, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)=@getpolicy={0xb4, 0x15, 0x800, 0x70bd29, 0x25dfdbfd, {{@in=@broadcast, @in6=@rand_addr="120f4127736cf70807ef5823382652ed", 0x4e21, 0x1, 0x4e22, 0x0, 0xa, 0xa0, 0x0, 0x6, r4, r5}, 0x0, 0x2}, [@replay_thresh={0x8, 0xb, 0x9}, @proto={0x5, 0x19, 0x2b}, @algo_auth_trunc={0x52, 0x14, {{'wp384-generic\x00'}, 0x30, 0x0, "3c7aaf6f4e4b"}}]}, 0xb4}, 0x1, 0x0, 0x0, 0xb348d7979f75d05b}, 0x40000) 16:18:52 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f75", 0xd}], 0x1) 16:18:52 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x200000000000011, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r2, &(0x7f0000000240)={0x11, 0x0, r4}, 0x14) socket$rxrpc(0x21, 0x2, 0xa) getsockname$packet(r2, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x1, 0x5, 0x47, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r5}, 0x3c) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f00000003c0)={0x0, @tipc=@id={0x1e, 0x3, 0xdb8c969e6908b5ce, {0x4e23, 0x4}}, @xdp={0x2c, 0x1, r5, 0x2b}, @l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, 0x7, 0x0, 0x0, 0x0, 0x7fff, &(0x7f0000000380)='syzkaller0\x00', 0x8, 0x2, 0x6}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000440)={@local, @local, @mcast2, 0x9339, 0x80, 0x1, 0x500, 0x3ff, 0x60c0004, r6}) r7 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$VIDIOC_S_EXT_CTRLS(r7, 0xc0205648, &(0x7f00000000c0)={0x9a0000, 0x1, 0x7fffffff, r0, 0x0, &(0x7f0000000080)={0x990afd, 0x36114ab9, [], @value64=0x7f}}) ioctl$SIOCX25SSUBSCRIP(r8, 0x89e1, &(0x7f0000000100)={'team0\x00', 0x3, 0x66a}) ioctl$SG_NEXT_CMD_LEN(r0, 0x227b, &(0x7f0000000000)) 16:18:52 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, 0x0, 0x0) 16:18:52 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f5d", 0x9}], 0x1) 16:18:52 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f75", 0xd}], 0x1) 16:18:53 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, 0x0, 0x0) 16:18:53 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f75", 0xd}], 0x1) 16:18:53 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f5d", 0xa}], 0x1) 16:18:53 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000040)={r2}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000080)={r2, 0x1, 0x9076, 0x4}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000100)={r3, 0x9, 0x8, [0x1, 0x4, 0x7fff, 0x7ff, 0xfe00, 0xb5, 0xdd4, 0x8]}, 0x18) r4 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x1, 0x100) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r4, 0xc05c5340, &(0x7f00000001c0)={0x1, 0x4, 0x5, {0x0, 0x7}, 0x8000000, 0x3}) ioctl$SG_NEXT_CMD_LEN(r0, 0x2284, &(0x7f0000000000)) 16:18:53 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x227b, &(0x7f0000000000)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) open$dir(&(0x7f0000000080)='./file0\x00', 0x10002, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ocfs2_control\x00', 0x82001, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x2c, r3, 0x1, 0x0, 0x0, {0xa}, [@TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000500)={&(0x7f0000000380), 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xe0, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x90, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x70}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x13e10371}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0x28, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7d}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 16:18:53 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540), 0x0) 16:18:53 executing program 3: writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f75", 0xd}], 0x1) 16:18:53 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f5d", 0xb}], 0x1) 16:18:53 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540), 0x0) 16:18:53 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x2010, r0, 0x35bf0000) ioctl$SG_NEXT_CMD_LEN(r0, 0x227b, &(0x7f0000000000)) 16:18:53 executing program 3: writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f75", 0xd}], 0x1) 16:18:53 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f5d", 0xc}], 0x1) 16:18:53 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540), 0x0) 16:18:53 executing program 3: writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f75", 0xd}], 0x1) 16:18:53 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x227b, &(0x7f0000000000)) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000100)={0x3f, 0x3, 0x1, "25339185f2c5b3f924f492aba8bfd2da25080e4be17d99adc4a6804fca7c0eb4", 0x34424752}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r3, 0xc05c5340, &(0x7f0000000080)={0x415, 0xffffffc0, 0x10000, {0x8, 0x9}, 0x800, 0x2}) 16:18:54 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f75", 0xd}], 0x1) 16:18:54 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f5d", 0xe}], 0x1) 16:18:54 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{0x0}], 0x1) 16:18:54 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x227b, &(0x7f0000000000)) ioperm(0x3027, 0x1, 0xfffffffffffffffd) 16:18:54 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x180) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x8010, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r2, 0xc0984124, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$SG_NEXT_CMD_LEN(r0, 0x2284, &(0x7f0000000000)) 16:18:54 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f75", 0xd}], 0x1) 16:18:54 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f5d", 0xf}], 0x1) 16:18:54 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{0x0}], 0x1) 16:18:54 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x8010, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x227b, &(0x7f0000000000)) 16:18:54 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SELLOADLUT(r1, 0x541c, &(0x7f0000000000)={0xb}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000080)=0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r2, 0x39d481f0, &(0x7f00000000c0)=""/194) ioctl$SG_NEXT_CMD_LEN(r0, 0x2284, &(0x7f0000000000)) 16:18:54 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f75", 0xd}], 0x1) 16:18:54 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{0x0}], 0x1) 16:18:54 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f5d", 0x10}], 0x1) 16:18:54 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x50, r0, 0x7c2f7000) ioctl$SG_NEXT_CMD_LEN(r0, 0x2284, &(0x7f0000000000)) 16:18:54 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)}], 0x1) 16:18:54 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f75", 0xd}], 0x1) 16:18:54 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f5d", 0x12}], 0x1) 16:18:55 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)}], 0x1) 16:18:55 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x1, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x227b, &(0x7f0000000000)) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f00000002c0)='./bus\x00', 0x143042, 0x0) ftruncate(r2, 0x2008002) sendfile(r1, r2, 0x0, 0x200fff) ioctl$KVM_GET_TSC_KHZ(r2, 0xaea3) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r5, 0x800000c004500a, &(0x7f0000000300)) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f00000000c0)={0x1, 0x8000, 0x2, 0x10001, 0x2}) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000080)) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r4, 0x80184153, &(0x7f0000000280)={0x0, &(0x7f0000002380)}) 16:18:55 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f5d", 0x18}], 0x1) 16:18:55 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, 0x0, 0x0) 16:18:55 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyprintk\x00', 0x1, 0x0) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f00000000c0)={0x20, 0x7, 0x6}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r4, 0x800000c004500a, &(0x7f0000000300)) stat(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000140)='9p\x00', 0x242032, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cache_none='cache=none'}, {@posixacl='posixacl'}, {@msize={'msize', 0x3d, 0x1}}, {@access_any='access=any'}, {@fscache='fscache'}, {@version_9p2000='version=9p2000'}], [{@dont_measure='dont_measure'}, {@obj_user={'obj_user', 0x3d, '/vmnet0'}}, {@context={'context', 0x3d, 'system_u'}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '+system+eth0}[eth1procvboxnet1cpusetvmnet1ppp0vmnet1\a'}}, {@uid_lt={'uid<', r5}}, {@dont_appraise='dont_appraise'}]}}) ioctl$SG_NEXT_CMD_LEN(r0, 0x2284, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x400000000001, 0x0) close(r6) r7 = open(&(0x7f00000002c0)='./bus\x00', 0x143042, 0x0) ftruncate(r7, 0x2008002) sendfile(r6, r7, 0x0, 0x200fff) ioctl$RTC_WIE_ON(r7, 0x700f) 16:18:55 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)}], 0x1) 16:18:55 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, 0x0, 0x0) 16:18:55 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f5d", 0x1a}], 0x1) 16:18:55 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982b", 0x7}], 0x1) 16:18:55 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r1, &(0x7f0000000240)={0x11, 0x0, r3}, 0x14) getsockname$packet(r1, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000080)={{{@in, @in=@dev}}, {{@in6=@empty}, 0x0, @in6=@local}}, &(0x7f0000000180)=0xe8) r4 = socket(0x200000000000011, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r4, &(0x7f0000000240)={0x11, 0x0, r6}, 0x14) getsockname$packet(r4, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f00000001c0)=@ccm_128={{0x304}, "326060a3aec0819c", "02e82b1d3367b754b46240e61f310e3f", "625529ad", "b5274438dbb25761"}, 0x28) ioctl$SG_NEXT_CMD_LEN(r0, 0x2284, &(0x7f0000000000)) 16:18:55 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, 0x0, 0x0) 16:18:55 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f5d", 0x1b}], 0x1) 16:18:55 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982b", 0x7}], 0x1) 16:18:55 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540), 0x0) 16:18:56 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f5d", 0x2a}], 0x1) 16:18:56 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982b", 0x7}], 0x1) 16:18:56 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f5d", 0x59}], 0x1) 16:18:56 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540), 0x0) 16:18:56 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) r1 = creat(&(0x7f00000011c0)='./file0\x00', 0x100) ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f0000001200)) ioctl$SG_NEXT_CMD_LEN(r0, 0x2284, &(0x7f0000000000)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000001140)=@urb_type_iso={0x0, {0x3, 0x1}, 0x3, 0x41, &(0x7f0000000080)="e5af54e725ed5b10b7133929a8337ce75243413da07c6c0efbfae9302ef52e6d9f6c7f295b499104471423ffbc580e7ebb0ff81fe27ff30c98c943fc8a0ae572ace8e470e1acdbadb544f754ab602e41fec4afb1b2bff538d2a5cc5421b7889c00c4e6919e76cc0593db35d6830312e69102c72d3989535a9db3f0778cd054cd4e63aa8a6edb43feda683186f28fbe43e0ddd5947daca67d6da02f2e8f4168c3ce0aa57eb4167ddd1c7b412dc8a4645dd742960397c4f85a0d99d256984c69494eecf5336f24a402d619a94f4e00973650b1bb7985f0eb7a850adbf55ce3805db1807615352648761e4117d4054c54bc6ac903a4202323aeca3d223548a05ba271d50d30d61c06395769cbb2afcea573e6c6583b40f4ef1105d1015524744ef0f8545df817cf1c28d58b4a3c7e5a680bfc9b04a97c7f6a065867cf8fe0c20d9f2a52e0852bf5ffe984bac18d496b9048a21bd4c77cea1c0b7941aa19c8121c7623eb61953563cdc786a88fffbf8cd6ce3ccd7b029d500004bf6faaa868adc6f17378f7f7a08de0adcdad780fa259b30895c76edfe688b7c8d303c7d3146b2d0144f3cab4e2db77460bf632760b6aacebb183eedbfdc6ef6e715ef84dce0a80978cfa38dc809b490258ed439de83452be0dbff18888e7c5307e03a0c68dee30e64492fc3a6ab88c0b001f93f227f4b056dbaec16183a2ff7567d450d639618710bfd33c3e7e99f578a89a0e827ae4ee36e4e5da40016d75d657fdd15ce51dbbbfcc444b2408ed917833c07e7d548d712c32f8658ab4780585c65c14a649e063c12ad31480e6754925595fdd2d8a4f4b7930957fb14031f40c229009767e67d875f7f703fab5d8fbd31eb36a524d44fa6fba64280212a272c8c16fd8bdf4edfa753bbcf7d64b2e544719e36e6600772b81016b97da77939a797711aa031988cb60f07a38508bc2366c0ccb58723342ad2cc6f3a47d74d71449ebd84a542e9407acb097148d52c9cb8249a6357c50e1f0129a54287265d3f5e6b64965cf6d3c01a121b74a5f64cce5a098b08992554c3111c4192679e61135faac304e233390b87f61812c7577017f1cf0a901197a9ebf5f5256d6d30377f402117af0a7cee42d3d22d9194a64a6704bef004d1f5c7c530c7187bed114f46817820fb6db60d4eb23ada80e9bb0fcee23c6dd311af29d9dce8a2e7734a30a2313627c9526cee6f2bc4e3ec556ce466a4b76ee43b84423dabe3c4f3244eea4e900a520088ec79c34f2c3175d3fd12ecb48530cac56175df8f61140657455b635adafe8724e290e1655d4e1f1c3cf777d1f33399ff36eaad06e7cc542b43ba7ceb0adb7e4208450b9d0172789dae1419f9af17ad809e10463437a2b9ab1dd52cd8bf1f44f9e2917d2638a924cc9004681c3942e58082921459769909731e71b95b9a45f839dfe834e76048ecd08555d5840f0dfa65a8ee07c6902505c293c676ff07be9f6d023fb364c5a8b32566e4c794cf05518d8dc21a23bfc1362a2312ad6ef4e90c6db0d8d63979e6ec12989a1ff69371601decf112bc6d26e0a923eb07156f816b36a7c7aad5ca1c66cf6cd9882cbad71ff100bbd1cd6a2297ec7c4431cc149474a29d500e3a70387733a32801d1dc1249d5d1c39c867eb28a211b8d7b391a468b2f5377b1f23ca25c04ce99edb8f0d8c16fc9e748747eb549231f5c383a0b03caf1d5b4720c7657fbff88c367bed63170a31657fbf7335402a9c7c5309610aca37cdf7dc7a9fff7102e6e03299e66e605b50155599d3cf226dc35d9bbff9d43e327290f5813512a1e022f41e87a184fcd2b7e0abaf146aa90b42e069a743193a33d5ee958c2d0016ddaef208eab997b06647b1130dd1a083fe982a6432309655258514ddc2c4f24773c66f17ca6fa0d8231c283e9e27b1c5e8a83bbe9bab99853a356f87908d48fee38294bdcd62fff92f2e093bda00b3779a6f6dc29a94459e18cdf438fa3fb0bb73e26e358f0cc29766a7a5290c542fc159882f9b989f2c78fffe32075c7510fac4530da6fb7a6fd582a493d449a951425a63560cb23e0ba2b3e4e39031d685b1aa60775f0ff98ff4f4f44035055c1798c4ae9c7637200d6ca5d1cd9a72828a9280fcca479c5d6db6214f2af0d38cdf65e5579c15df48cfe0af845e2cab6db4c0e63c3adbbaf2327331a11d6063fdfb54561bcac2ce3459691d57079a7bc73cf483ec837f0499bef14415d952d807599bc7bb01c093dcade64e8f5e84779863ec4cffdfac27c65fef5d4ea759752b5589785ae104d06ecf247521a076b5a3b57fce3d0693ff8b8b40e0c815ebf192dea5281fe903ae484bf5ca532a4088348ce5ce08bbe70f8ae95d76f4ef9773f752125ea50c4424de9d8973733408c1abc3f1eae2292f04cfb62d56cf0f5ecd2fe31a8c02037efcf3912340fe1f4131eb70be3928fcd9d860af0ab3bea10067d40003786fa494205940d91dcaf424dd08e48bd3f72eb993f945abcac10a96015dab2da339d37ed841c520ab58ca49139eb1a0b2cef678a5ecd5e5dd4df9e67396c147f2db00be7b6a2fe1918de83e28c97dba4ce25146af324b639b82d6c60db1086690ff408ce00e63f6bf3cf154f1d8785b81a8ed9aa6023c083664e5f75847bbd1b0a99a9fa5fc059162ed43288f87cd35ac6c7969a6556ba1db56cd4f8b1f4cc1c1aea7add619c6be15ce5da219f2a9bb531a27d4bd45f9b13d7c67381128b88a7ef96dee18a5e00ee38bd2b25c663ec5d8cdbcd7b4c5b6c0a59bb2d3307270ab9925a1c5db9e54f062c657a0eb162dc79d20c0d1e1fbedc1514a3af941e4630a2ea7ea966d1dfec8d8a8f79b40179073e5e6a434a1e3f0a780c3f301790cca3d130292c759bf7144a9fcc8670b11576f80b0dfcef9471747c43f2c14f365e00c0308dba9b6b18f89c9c1de2abdf8476ca86a3b10b70a5f23d6d2c2ed9b3f614268e9598967bd9ef134691c4849984389625b46ddea4ec48445e92cc5e0d03e5eb31ebecde375e3ec8c959091650d08a20deb845592d87037327f4ea6268bdc2350762f479dffbf88f9e2f04917c813cfae442eab46950b0bd4ef2036a9738d717655dabbb06a2c47419c00ded0751504895ea594b577943d5d8ae548deb1f0b720bad18d4683e92ce245126776e5f23fe9a0b9a15066df35b878b24833cabb55e686246e192df1b7147b8ac22ecdca3212ea8ff921577b74bdc83f6b92922aee18f22bc9123e6c631ab5cbb4ad3cfeb5203c31979610edc814b95a9696ef2ce472842fdcc18a6a5846e4805dff63231a34ffe2b30a66bb42476bc246febdfbc0db4cff5c69f7e47ceecbf6a0f67fca343997a3ec82ac6968b23f001ea6f5c5e6c236da1f1eaf6e70dc10333f639270f02daa9763bab95bc039857b04272654fa7e0ea900c0c1ba01c41abd7670a3452906a2bcdf79e9625b0bcfa9fdfa1f2fa3cfefd10fb9aa8bca47c643110f22ce0e1964ef81beed7362ac279359268c46c5ae23fd4b90ba08f72ba0b374cfabe79c239a2377e3b125c482af959e87c2a7b3ee904d90ba1725f403161acb3adc850f700e5ae1b412df2f337bb39ceae658492b7fd8a79f01665f00907a9cd1d15802bbd5c9e08ec9ff11ffcd88fc271ee798dbc2010c35eb004f8e6b5946adc4b6c904325510d8af4bbca280ddc242636d51c11f964fd1092e94eb3e07025d8e30e1a77f80a03f5a9e653fe1cd6facc1bdde37cc5efcabf4f113657ba60c2ffe644697a104d36735f733af092527a5449e74f908534e144942258218b038fc6f92fd65b91f600b1fe490d3870859b6d1e5ad125f2b249c18da97c42718f3963da992ff15ccbb5e7e2fd1b4738b24e24d80822dd731d3f7a1d900f83cb8f9662e2e54b133798f2301f13b767947d900accf371353e1c177a2391fa773f8ac679a9256f81c3b9425c522f9e4244cc33ec74dfc644bca0b4be05a20cb345a8411ffebe1a7d1148d1e333fc3e9e5d8584ec28879bd8d63106477f5e1571235fee2195dd038946352731420b9c840b38c10681a9d5028a16e3dc9665f382d420c900c95803c5018b8a74c7dec5c2aa99a95887d49d4d34993dfabbeb91a0b967aacab76de1b6863f40c99bc05ccc0123cfb5ce2d7cac67ec65ed28d3d173067258ac85ed374dbbb5eb4d08c8a91445eaff5f8306d4964158858ef9bd35bc927ffd881061f45b54baed006818dd6c546bee85c236bc8d935ea6bccee0ce2e7b3efb6523ead2cc43beb8c526212867341e01fbb29ad635a343950dd02b55634f0b77d45d5d5dad0325baadafd45ee5170f2cc973e6145c92cf53fb18f6abf28365be50dd6666154cd88f8bf4306485f8e801158c59905a41ca547272a6a639d59a804355fac13e00546c1893c7890ecb1bcc189cd4b6185241d6a980924cfe20ced6996778aacab0955811cf89adbecc92df2e855c10014f8b7b90dac7e7cd7c77b6bed8a391f9eb3d75cdebdbd87a307be98934351a01c7599df0de94b702606bf00b225e6091fd75675a98f30bef5f3a988f81a1ff20a2b8d67e36577c89846bc3e26dad7edca0554e2f755dbb42839d4c0965f3deba3b2f7a2c119e7097dd176bc4da2ba0dcdad9c1f63009e15070f583355c737b680135035cf78e42b36ac3e50b2b88e6682bb3f59356ed53c5e8da68963f3e83406f4ce748571c26c0744072f75293d7711858a736e8343dd4a4c19a9668f043e9227c42ad1bf3c430158f4af40ac76cd7f3440a63963a1e4ab775a54d36d72fff5a27ce8fba8e3eb8899185653dfc5689c1a4ae38d91ed491ca54bb5b693dbd677b65536dc3dc4cf3571db2dddcafd9215a216ebf8d09663542f153df46748c682ae174f52bf14d0bca2e9d7f6647be6036fe8ae00c6b18c23b317271a4f760faa8e151fdc09c75d000183b61d7956700bc2d2dae5cfc2a27232db44bb70afaa365ee400a0b16fe64ba3e57f37747aa64e98bf905ec6e6a71bb9ccd29e246c818b940b6fada118ce7d2d992191283b1272dec720c259092889e6a237801f02f37b0a142ff509c99f635d66279082389d80b4c5d5f5124887b3c52c6353e1f217acfcf157617a652b9139036ce714bcc8797eb4178ce445af84e177afd8ed0fd101b9851ea8eeb9d6d462f49f2aa9474331504c56e64097355c7a65af95b5258f949159fb73f7501580788b588b1df42fa3ffaf147ae286235db68233f277d0a2afbbe93e16633433bdfd344a9ca07b29ccc870a18bca4f0181786373a541c5010b21d980b724969398101cae9fa5fb2118000f321877e5b3272ef46c0bde7a6b68c27ce086634b9969ee9ec9cff4904d5e0ebbc2bd5e3812ed093b79c28814971ce878cc79aa360caedbba7ef8852d8c58e10ab5fedd5f0dc126b5923cb11b463dff45ab853922a16f4524c811580dcdf8d0ed0b84d0bef2d8381efd87cd6edc50785786eedc1bc559298279060deec0c4491c545700906d3ae96d59331fca3cdcc9b4838f700f7c5cc23129686753918c4112bb8c7e2b17647bec579312de4e3800c5d1c8a9ad9e7963aadbd9d22c37151f05c87eb7d59b629921f2e88f5c8657672a81d3b625877b5266c2df69444fd6ef6123a1b848dfaa175208b70fa070cb49b16b4a6fb5d89a9aceb7536ba9621c55056712a56db239e3c6d3417b7b72d86e37eb6fdc461b24025bd13609718f0d7fae75b11cc6a0c97f2b933117bb12fb755d0d82d22ff4b4d7e132dd3e6f1807059678932a3659c0c503d5ce6e94d81a6d01e6bec53a600f45ddd30c", 0x1000, 0x9, 0x80, 0x4, 0x4010001, 0x5, &(0x7f0000001080)="bdf4b60995bdb755710174bd750f09b54cd484377f25fb219e738f7954d0b8c9f56fcf0d9ad40bff826e313d1aa3ea76dd99999862fef9b2496a5ace9ca07107c4551d8f75caa37cdacbb05e02fdd5bbe410316064a6c7fdbcccead83306766742e4e266d565050906a458d6050b7fb6651966aa68f2023eafef3a46085c0d0a125a8e1d429fb67cb1ff53d2c118", [{0x80000001, 0x8001, 0x10001}, {0x1a00000, 0x8, 0x2}, {0x8, 0x1, 0x5b}, {0xffffffff, 0x2, 0xe4}]}) 16:18:56 executing program 2: r0 = socket(0x2, 0x2, 0x6) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000180)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000040)={r2}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={r2, 0x68, &(0x7f0000000080)=[@in={0x2, 0x4e22, @broadcast}, @in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e23, 0x93de, @remote, 0x5}, @in6={0xa, 0x4e24, 0x8, @mcast1, 0x10000}, @in={0x2, 0x4e21, @empty}]}, &(0x7f0000000140)=0x10) r3 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r3, 0x0) ioctl$SG_NEXT_CMD_LEN(r3, 0x227b, &(0x7f0000000000)) 16:18:56 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d", 0xa}], 0x1) 16:18:56 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540), 0x0) 16:18:56 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f5d", 0x5e}], 0x1) 16:18:56 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f00000002c0)='./bus\x00', 0x143042, 0x0) ftruncate(r3, 0x2008002) sendfile(r2, r3, 0x0, 0x200fff) ioctl$KVM_KVMCLOCK_CTRL(r3, 0xaead) ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f0000000100)={0xa, 0x40, 0x1}) r4 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) accept4$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000180)=0x1c, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r4, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x101000, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$cgroup_ro(r6, &(0x7f00000001c0)='pids.current\x00', 0x0, 0x0) ioctl$EVIOCSABS0(r7, 0x401845c0, &(0x7f00000000c0)={0x9, 0x0, 0x5, 0x7, 0x10000000, 0x116}) ioctl$SG_NEXT_CMD_LEN(r4, 0x2284, &(0x7f0000000000)=0x67) 16:18:56 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d", 0xa}], 0x1) 16:18:56 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{0x0}], 0x1) 16:18:56 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f5d", 0x9b}], 0x1) 16:18:56 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{0x0}], 0x1) 16:18:56 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2284, &(0x7f0000000000)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$DRM_IOCTL_GET_STATS(r2, 0x80f86406, &(0x7f0000000080)=""/166) 16:18:56 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d", 0xa}], 0x1) 16:18:56 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f5d", 0xdf}], 0x1) 16:18:57 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x5000)=nil, 0x5000, 0x2000000, 0x18b030, r0, 0x27ded000) ioctl$SG_NEXT_CMD_LEN(r0, 0x227b, &(0x7f0000000000)) 16:18:57 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{0x0}], 0x1) 16:18:57 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f", 0xc}], 0x1) 16:18:57 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x5, 0x4010, r0, 0x42463000) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x0, 0x0) setsockopt$SO_J1939_SEND_PRIO(r2, 0x6b, 0x3, &(0x7f0000000100), 0x4) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x41000, 0x0) write$UHID_INPUT2(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0c0000003bea6d21f83b0fb9cf20d93a6e341928ea021d8d57b441af8148ce6f3fe21946131f115893f852055d15a15f0e51dcb89e08b3da4e4e84aa28ca45f3bf91d72442002c7fd6cef44cbc20a74f2d872e98175df509c68baa9919fd480d07b719309bb8e6f954fcdad2307ef1f181df2b4cf4bba55c85a29093b5b3c53f92aa2f5042c358a6b93227144fbef881ada6f5733cc7c58dc0d957b3ce2fcab4bb15a402485874a06d1941b500087a2a56442b208c0e67a482e18f1d662b2c1df3c1408f92149738cf9220ca4587261382b542a389c73caead5c94020a12d4884581ea74"], 0x41) ioctl$SG_NEXT_CMD_LEN(r0, 0x2284, &(0x7f0000000000)) 16:18:57 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f5d", 0x200008cd}], 0x1) 16:18:57 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)}], 0x1) 16:18:57 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f", 0xc}], 0x1) 16:18:57 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x441800, 0x0) ioctl$PPPIOCATTACH(r2, 0x4004743d, &(0x7f0000000200)=0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r1, &(0x7f0000000240)={0x11, 0x0, r4}, 0x14) getsockname$packet(r1, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$VIDIOC_S_EXT_CTRLS(r6, 0xc0205648, &(0x7f0000000140)={0xa20000, 0x3f, 0x7, r1, 0x0, &(0x7f0000000100)={0xa20934, 0x8, [], @p_u32=&(0x7f00000000c0)=0x7fd2}}) ioctl$TUNSETVNETHDRSZ(r7, 0x400454d8, &(0x7f0000000180)=0x180000) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000080)={0x80, 0xe7, 0x40, 0x8, 0x20, 0x9, 0x7fcd}, 0xc) ioctl$SG_NEXT_CMD_LEN(r0, 0x227b, &(0x7f0000000000)) 16:18:57 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) semctl$GETVAL(0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000200)=""/171) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2284, &(0x7f0000000000)) 16:18:57 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)}], 0x1) 16:18:57 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)}], 0x1) 16:18:57 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x227b, &(0x7f0000000000)) r1 = open(&(0x7f0000000080)='./file0\x00', 0x6dab358534bbc4fe, 0x2) statx(r1, &(0x7f00000000c0)='./file0\x00', 0x400, 0x200, &(0x7f0000000100)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') 16:18:57 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x4000) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="06000000000000002902000000000000d9ffffffffffffff6a0a0000000000000200000000000000ba030000000000000700004e38119f32b81b6c0ef8b4bb6e6701eaedc6c8d85a000000000000000000010000003c0a0000000000002000000000000000ef0b0000000000000700000000000000"]) ioctl$SG_NEXT_CMD_LEN(r0, 0x2284, &(0x7f0000000000)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000300)) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r3, 0x800000c004500a, &(0x7f0000000300)) r4 = dup2(r2, r3) r5 = socket$inet6(0xa, 0x400000000001, 0x0) close(r5) r6 = open(&(0x7f00000002c0)='./bus\x00', 0x143042, 0x0) ftruncate(r6, 0x2008002) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000080)={'gretap0\x00'}) sendfile(r5, r6, 0x0, 0x200fff) ioctl$SNDRV_CTL_IOCTL_PVERSION(r6, 0x80045500, &(0x7f0000000100)) 16:18:57 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982b", 0x7}], 0x1) 16:18:57 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x2, 0x101200) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x227b, &(0x7f0000000000)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) 16:18:58 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982b", 0x7}], 0x1) 16:18:58 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f5d", 0x7ffff000}], 0x1) 16:18:58 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f", 0xc}], 0x1) 16:18:58 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x227b, &(0x7f0000000000)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SELLOADLUT(r1, 0x541c, &(0x7f0000000000)={0xb}) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000080)) 16:18:58 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982b", 0x7}], 0x1) 16:18:58 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f73", 0xd}], 0x1) [ 504.298847][ T27] audit: type=1800 audit(1578759538.296:40): pid=15033 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=17036 res=0 16:18:58 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r1, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2284, &(0x7f0000000000)) 16:18:58 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x88f80) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x227b, &(0x7f0000000000)) 16:18:58 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsa\x00', 0x80, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x50004000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r2, 0x20, 0x70bd27, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x20040002) ioctl$SG_NEXT_CMD_LEN(r0, 0x227b, &(0x7f0000000000)) 16:18:58 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_G_AUDIO(r1, 0x80345621, &(0x7f0000001100)) r2 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000010c0)={0x25, 0xf6, 0x7, "07b99d943e4ce047d79bb2c12432dd7631b9c4f1860a24ca6027dab5a3d8e266e80145b353"}) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r2, 0x0) ioctl$SG_NEXT_CMD_LEN(r2, 0x2284, &(0x7f0000000000)) ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f0000000080)={0x0, 0x1000, "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"}) 16:18:58 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80000, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SELLOADLUT(r1, 0x541c, &(0x7f0000000000)={0xb}) ioctl$PIO_UNIMAPCLR(r1, 0x4b68, &(0x7f00000010c0)={0x0, 0x3, 0x7}) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f00000000c0)=""/4096) r2 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r2, 0x0) ioctl$SG_NEXT_CMD_LEN(r2, 0x2284, &(0x7f0000000000)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) r5 = socket$inet6(0xa, 0x400000000001, 0x0) close(r5) r6 = open(&(0x7f00000002c0)='./bus\x00', 0x143042, 0x0) ftruncate(r6, 0x2008002) sendfile(r5, r6, 0x0, 0x200fff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_SET_TIMEOUT(r4, 0xab09, 0x1) 16:18:58 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x40000) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x140, 0x0) ioctl$SG_NEXT_CMD_LEN(r1, 0x227b, &(0x7f0000000000)=0x68) 16:18:59 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f73", 0xd}], 0x1) 16:18:59 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f5d", 0xd}], 0x2) 16:18:59 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d", 0xa}], 0x1) 16:18:59 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SNDCTL_DSP_SETDUPLEX(r1, 0x5016, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x2) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r3, 0x800000c004500a, &(0x7f0000000300)) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3) ioctl$SG_NEXT_CMD_LEN(r0, 0x2284, &(0x7f0000000000)) 16:18:59 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x227b, &(0x7f0000000000)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000300)) poll(&(0x7f0000000080)=[{r1, 0x400}, {r2, 0x100}], 0x2, 0x3) 16:18:59 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f73", 0xd}], 0x1) 16:18:59 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d", 0xa}], 0x1) 16:18:59 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f5d", 0xd}], 0x8) 16:18:59 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x7, 0x20011, r0, 0x100000) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f00000002c0)='./bus\x00', 0x143042, 0x0) ftruncate(r2, 0x2008002) sendfile(r1, r2, 0x0, 0x200fff) ioctl$SG_NEXT_CMD_LEN(r2, 0x2284, &(0x7f0000000000)=0xfffffffc) 16:18:59 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x227b, &(0x7f0000000000)) r1 = socket(0x200000000000011, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r1, &(0x7f0000000240)={0x11, 0x0, r3}, 0x14) socket$packet(0x11, 0x3, 0x300) r4 = socket(0x200000000000011, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r4, &(0x7f0000000240)={0x11, 0x0, r6}, 0x14) getsockname$packet(r4, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm_plock\x00', 0x82201, 0x0) getsockname$packet(r7, &(0x7f0000000180), &(0x7f00000001c0)=0x8fdebe5) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000080)={0x81, 0x17, 0xf00b, 0xdf, 0x0}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000100)={r8, 0x1000}, &(0x7f0000000140)=0x8) 16:18:59 executing program 0: writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f73", 0xd}], 0x1) 16:18:59 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f5d", 0xd}], 0x9) 16:18:59 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d", 0xa}], 0x1) 16:18:59 executing program 0: writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f73", 0xd}], 0x1) 16:18:59 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f", 0xc}], 0x1) 16:18:59 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f5d", 0xd}], 0xa) 16:19:00 executing program 0: writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f73", 0xd}], 0x1) 16:19:00 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f5d", 0xd}], 0xb) 16:19:00 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f", 0xc}], 0x1) [ 506.254408][ T27] audit: type=1800 audit(1578759540.256:41): pid=15119 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=17036 res=0 16:19:00 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f73", 0xd}], 0x1) 16:19:00 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2284, &(0x7f0000000000)) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f00000002c0)='./bus\x00', 0x143042, 0x0) ftruncate(r2, 0x2008002) sendfile(r1, r2, 0x0, 0x200fff) ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0) 16:19:00 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f5d", 0xd}], 0xc) 16:19:00 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f", 0xc}], 0x1) 16:19:00 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r1, &(0x7f0000000240)={0x11, 0x0, r3}, 0x14) getsockname$packet(r1, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) getsockname$packet(r1, &(0x7f00000021c0)={0x11, 0x0, 0x0}, &(0x7f0000002200)=0x14) recvfrom(r2, &(0x7f0000000400)=""/131, 0x83, 0x0, &(0x7f0000002240)=@ll={0x11, 0x2, r4, 0x1, 0x7f, 0x6, @random="801b308e841d"}, 0x80) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f00000000c0)=0xfffffff7, 0x4) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x191240, 0x0) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000007000100070c10000000000000000000", 0x58}], 0x1) r6 = socket(0x200000000000011, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = getpid() sched_setscheduler(r8, 0x5, &(0x7f0000000380)) prlimit64(r8, 0x8, 0x0, &(0x7f0000000300)) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r6, &(0x7f0000000240)={0x11, 0x0, r9}, 0x14) getsockname$packet(r6, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) r11 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x3, 0x321401) ioctl$KDFONTOP_SET(r11, 0x4b72, &(0x7f00000002c0)={0x0, 0x0, 0xf, 0x16, 0x1a, &(0x7f0000000540)="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"}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x1, 0x5, 0x47, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r10}, 0x3c) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80020882}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x5c, 0x66, 0x400, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x6, 0xd}, {0xfff1, 0xb}, {0xfff2, 0x1}}, [{0x8, 0xb, 0x2}, {0x8, 0xb, 0x401}, {0x8, 0xb, 0x8000}, {0x8, 0xb, 0x8000}, {0x8, 0xb, 0x1c4}, {0x8, 0xb, 0x2c64}, {0x8, 0xb, 0xcfd}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x22000080) ioctl$SG_NEXT_CMD_LEN(r0, 0x227b, &(0x7f0000000100)=0xf7) 16:19:00 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f73", 0xd}], 0x1) 16:19:00 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x80) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2284, &(0x7f0000000000)) 16:19:00 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f5d", 0xd}], 0xd) 16:19:00 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f5d", 0xd}], 0x8) 16:19:00 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f5d", 0xd}], 0xe) 16:19:00 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f73", 0xd}], 0x1) 16:19:01 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x5385, &(0x7f0000000000)) r1 = socket(0x200000000000011, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r1, &(0x7f0000000240)={0x11, 0x0, r3}, 0x14) ustat(0x6, &(0x7f0000000180)) getsockname$packet(r1, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) setsockopt$inet_mreq(r1, 0x0, 0x24, &(0x7f0000000140)={@rand_addr=0xfffffff9, @multicast2}, 0x8) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000080)={0x80000000, {{0x2, 0x4e21, @remote}}}, 0x88) 16:19:01 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f5d", 0xd}], 0xf) 16:19:01 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f73", 0xd}], 0x1) 16:19:01 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, 0x0, 0x0) 16:19:01 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f5d", 0xd}], 0x10) 16:19:01 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x24100) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x227b, &(0x7f0000000000)) r1 = socket(0x200000000000011, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r1, &(0x7f0000000240)={0x11, 0x0, r3}, 0x14) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x4000, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r4, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000540)={0x17c, 0x0, 0x9, 0x400, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x7}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x16}, @NFCTH_TUPLE={0x10, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5, 0x1, 0x2f}}]}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x58, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @mcast1}}}]}, @NFCTH_STATUS={0x8}, @NFCTH_TUPLE={0xd0, 0x2, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @ipv4={[], [], @multicast1}}, {0x14, 0x4, @ipv4={[], [], @multicast1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x1f}}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x34}}}}, @CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev={0xfe, 0x80, [], 0x26}}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x8}]}, 0x17c}, 0x1, 0x0, 0x0, 0x8000}, 0x890) getsockname$packet(r1, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000080)=0x101, 0x4) 16:19:01 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f4b", 0xd}], 0x1) 16:19:01 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, 0x0, 0x0) 16:19:01 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2284, &(0x7f0000000000)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x141402, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x39, &(0x7f00000000c0)=@fragment={0x87, 0x0, 0x3, 0x0, 0x0, 0x1, 0x65}, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap$snddsp_status(&(0x7f0000003000/0x2000)=nil, 0x1000, 0x1, 0x20010, r2, 0x82000000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000007000100070c10000000000000000000", 0x58}], 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x3c, r8, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x3c}}, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r6, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x409fc442c97c4654}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r8, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}]}, 0x30}}, 0x404) write$USERIO_CMD_SET_PORT_TYPE(r5, &(0x7f0000000100)={0x1, 0x7f}, 0x2) 16:19:01 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f5d", 0xd}], 0x2a) 16:19:01 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f4b", 0xd}], 0x1) 16:19:01 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, 0x0, 0x0) 16:19:01 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f5d", 0xd}], 0x4f) 16:19:01 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) r1 = syz_open_dev$audion(&(0x7f00000024c0)='/dev/audio#\x00', 0x1000, 0x109200) r2 = socket(0x200000000000011, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r5, 0xd40262b396ad0f57, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xe65}]}, 0x24}, 0x1, 0x0, 0x0, 0x16}, 0xe22a4aa1c686cb8c) bind$packet(r2, &(0x7f0000000240)={0x11, 0x0, r4}, 0x14) getsockname$packet(r2, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000002500)=@assoc_value={0x0}, &(0x7f0000002540)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000002580)={r6, @in={{0x2, 0x4e22, @multicast2}}, 0x0, 0x7, 0x80000001, 0x200, 0xfffffff8}, &(0x7f0000002640)=0x98) ioctl$SG_NEXT_CMD_LEN(r0, 0x2284, &(0x7f0000000000)) 16:19:01 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x20000) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f00000001c0)={0xfffffff, 0x5, 0x4, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x980001, 0xffffff47, [], @value64=0x1}}) fstat(r1, &(0x7f0000000080)) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f00000002c0)='./bus\x00', 0x143042, 0x0) ftruncate(r3, 0x2008002) sendfile(r2, r3, 0x0, 0x200fff) ioctl$BLKRESETZONE(r3, 0x40101283, &(0x7f0000000100)={0x3, 0x80}) ioctl$SG_NEXT_CMD_LEN(r0, 0x227b, &(0x7f0000000000)) 16:19:02 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f4b", 0xd}], 0x1) 16:19:02 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f5d", 0xd}], 0x59) 16:19:02 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540), 0x0) 16:19:02 executing program 3: writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f4b", 0xd}], 0x1) 16:19:02 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f5d", 0xd}], 0x5e) 16:19:02 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540), 0x0) 16:19:02 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f5d", 0xd}], 0x63) 16:19:02 executing program 3: writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f4b", 0xd}], 0x1) [ 508.620923][ T27] audit: type=1800 audit(1578759542.616:42): pid=15260 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=17036 res=0 16:19:02 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540), 0x0) 16:19:02 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f5d", 0xd}], 0xdf) 16:19:02 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0xed, 0x30002) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000180)='gtp\x00') sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xffdcfa2f1d3075a}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r1, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6, 0x6, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) r2 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x260002) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) connect$nfc_raw(r3, &(0x7f00000000c0)={0x27, 0x1, 0x8, 0x4}, 0xa0) ioctl$SG_NEXT_CMD_LEN(r2, 0x227b, &(0x7f0000000000)) socket$inet6_udp(0xa, 0x2, 0x0) 16:19:02 executing program 3: writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f4b", 0xd}], 0x1) 16:19:02 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{0x0}], 0x1) 16:19:03 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f5d", 0xd}], 0x300) 16:19:03 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f00000002c0)='./bus\x00', 0x143042, 0x0) ftruncate(r2, 0x2008002) sendfile(r1, r2, 0x0, 0x200fff) ioctl$USBDEVFS_CLEAR_HALT(r2, 0x80045515, &(0x7f0000000080)={0x5}) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r3, 0x800000c004500a, &(0x7f0000000300)) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r3, 0xc080661a, &(0x7f00000000c0)={{0x2, 0x0, @reserved="2a5e6a85c08b69daf7f2726d80cc4b5a4f1ef2a69398c42f64d9d329cfa4d1ef"}}) ioctl$SG_NEXT_CMD_LEN(r0, 0x227b, &(0x7f0000000000)) 16:19:03 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f4b", 0xd}], 0x1) 16:19:03 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{0x0}], 0x1) 16:19:03 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000b40)=0x0) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000380)) r6 = getpid() sched_setscheduler(r6, 0x5, &(0x7f0000000380)) r7 = getpid() sched_setscheduler(r7, 0x5, &(0x7f0000000380)) r8 = clone3(&(0x7f0000000e00)={0x100000, &(0x7f0000000c40), &(0x7f0000000c80), &(0x7f0000000cc0), {0x22}, &(0x7f0000000d00)=""/100, 0x64, &(0x7f0000000d80)=""/58, &(0x7f0000000dc0)=[r4, 0xffffffffffffffff, r5, 0x0, r6, r7, 0xffffffffffffffff], 0x7}, 0x50) getresuid(&(0x7f0000000e80), &(0x7f0000000ec0), &(0x7f0000000f00)=0x0) r10 = accept(0xffffffffffffffff, &(0x7f0000001240)=@isdn, &(0x7f00000012c0)=0x80) r11 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r11, 0x800000c004500a, &(0x7f0000000300)) r12 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r12, 0x800000c004500a, &(0x7f0000000300)) r13 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r13, 0x800000c004500a, &(0x7f0000000300)) r14 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r14, 0x800000c004500a, &(0x7f0000000300)) r15 = getpid() sched_setscheduler(r15, 0x5, &(0x7f0000000380)) lstat(&(0x7f0000001300)='./file0\x00', &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r17 = getpid() sched_setscheduler(r17, 0x5, &(0x7f0000000380)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000002b80)={{{@in6=@ipv4={[], [], @multicast1}, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast2}}, 0x0, @in=@empty}}, &(0x7f0000002c80)=0xe8) getresgid(&(0x7f0000002cc0)=0x0, &(0x7f0000002d00), &(0x7f0000002d40)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000002d80)=0x0) r21 = socket(0x200000000000011, 0x3, 0x0) r22 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r22, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r21, &(0x7f0000000240)={0x11, 0x0, r23}, 0x14) getsockname$packet(r21, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) getsockopt$inet6_IPV6_IPSEC_POLICY(r21, 0x29, 0x22, &(0x7f0000002dc0)={{{@in=@initdev, @in6=@ipv4={[], [], @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@mcast1}}, &(0x7f0000002ec0)=0xe8) getresgid(&(0x7f0000002f00), &(0x7f0000002f40)=0x0, &(0x7f0000002f80)) r26 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r26, 0x800000c004500a, &(0x7f0000000300)) r27 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r27, 0x800000c004500a, &(0x7f0000000300)) r28 = getpid() sched_setscheduler(r28, 0x5, &(0x7f0000000380)) newfstatat(0xffffffffffffff9c, &(0x7f0000003580)='./file0\x00', &(0x7f00000035c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) stat(&(0x7f0000003640)='./file0\x00', &(0x7f0000003680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000003700)=0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000003740)={{{@in6=@initdev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@local}}, &(0x7f0000003840)=0xe8) r33 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/icmp6\x00') fstat(r33, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r35 = socket$vsock_stream(0x28, 0x1, 0x0) fstat(r35, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r34, r36) r37 = getpid() sched_setscheduler(r37, 0x5, &(0x7f0000000380)) r38 = getuid() setresuid(0xee01, r38, 0x0) r39 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r39, 0x800000c004500a, &(0x7f0000000300)) fstat(r39, &(0x7f0000003880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r41 = getpid() sched_setscheduler(r41, 0x5, &(0x7f0000000380)) r42 = socket(0x200000000000011, 0x3, 0x0) r43 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r43, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r42, &(0x7f0000000240)={0x11, 0x0, r44}, 0x14) getsockname$packet(r42, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) getsockopt$inet6_IPV6_IPSEC_POLICY(r42, 0x29, 0x22, &(0x7f0000003a80)={{{@in6=@initdev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@remote}}, &(0x7f0000003b80)=0xe8) r46 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/icmp6\x00') fstat(r46, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r48 = socket$vsock_stream(0x28, 0x1, 0x0) fstat(r48, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r47, r49) getgroups(0x8, &(0x7f0000000100)=[0x0, 0xffffffffffffffff, 0xee01, 0xee01, 0x0, r49, 0xee00, 0x0]) r50 = getpid() sched_setscheduler(r50, 0x5, &(0x7f0000000380)) r51 = getuid() setresuid(0xee01, r51, 0x0) r52 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/icmp6\x00') fstat(r52, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r54 = socket$vsock_stream(0x28, 0x1, 0x0) fstat(r54, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r53, r55) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000004dc0)=0x0) getresuid(&(0x7f0000004e00), &(0x7f0000004e40)=0x0, &(0x7f0000004e80)) r58 = socket$inet6_tcp(0xa, 0x1, 0x0) r59 = fcntl$dupfd(r58, 0x0, r58) ioctl$PERF_EVENT_IOC_ENABLE(r59, 0x8912, 0x400200) statx(r59, &(0x7f0000004ec0)='./file0\x00', 0x100, 0x0, &(0x7f0000004f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r1, &(0x7f0000005040)=[{&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000140)="e58e662eb338878ff6dfd12c7b927cfed2d8377836cd29ff010179bb70cf6275089bd4951ca0ea7c68f24482f563f9f11ad41295c29f0367bb5635aeeb4927bff0e1015fc79325b6ccdb73a5b508ac987d935c516091f2a444d820227651eeffb390dcc0cebba0a8a607cb1d7b8643e1f4a224f2cfdc5bf7", 0x78}, {&(0x7f00000001c0)="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", 0xfa}, {&(0x7f00000002c0)="b6a67385573e629916ee08756de5f4a9bc056f9cc9a961db9c6ff70871538161ac3af27ade73346fa33f9d67d70634b268db0ab17e0240dfd233c195a964964350948349994ab9d32e834cc860a81d4216fb943e68fac7376c17db8e92edda36b9bd15095a0122356f825a5fd2e5", 0x6e}, {&(0x7f0000000340)="f58e161e142ce592f5cb4145fd62cf3e39282e8941d5c06acab334a6a2af6ac4b473c269ae8119bacbf8676725b40157a6bf921710a28febb3eaea5c4c0fdae6fd25ba3b803dc3d5590aff4225201635b1587e45dbcb7fc7218bf512ae7ddbefd6c48b62ab91527ebf35f5072d0ad120c1", 0x71}], 0x4}, {&(0x7f0000000400)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000a80)=[{&(0x7f0000000480)="f5bb1889fc87c018c3db79d8fb93a21cacf60e61fb2969e9512f7d6e2883ca15704db0fff1b35ae6f069", 0x2a}, {&(0x7f00000004c0)="cebf9c970a4d3d1fdfa7828a0cb2020091fdf9caaa798a88fe81026c02f470aef490504a0d3c4b1bb1fecfdd2cae7552761ca4bca0f73211ee46d2bcfb211521d5ca6abfe205c592dfbd00647be9e665c39bd8c63c5ea4d5fcc3b8824aa3789368d1b1ce83c04b1a2a94accf09c58a6b5d0d0e1d078a20006205265ded228be0c9651d67d28f757126ae187b89ab3a8a171cbd708d15b377d6a3d0c3e395", 0x9e}, {&(0x7f0000000580)="35ce155a297105971218c9383f3e914c3908d2e3147c85a75414be74c5a325e95a22523a0f3bbe53f3d3042e03bddd3deabe871a6de1ef0b58d03b455524b14b424f971d703f1bba83c19472b0dba47cb8e394ceac591fa61c58c304c4beb167f9fbd0c19f5958abfa8111d2e101684aa8f31898138cd80508960b15fabdf45c5dba10522d45dad05fe773aa29f2f62bb50af7b8c4e3bea1093d3276", 0x9c}, {&(0x7f0000000640)="c8e30299655cfca2adb7ef339798910c29471eec218f3fb70cbe3134d31e2983cc9ba20d78a439ae867bc6f9621cd7392811364711d354cf64c4df66a23749d734beb52c5f1d85b43ecaffee945939676e5c52f89e8b4d8a7b81af3ab0f92d94eaea01151afe0b418ef5b7fca8758abf3fe13230e4996399332054ee89a2", 0x7e}, {&(0x7f00000006c0)="f2dbb73da7c8ef48100395d72f909b8d5180d65492b6fa516a03759419b7a8c89a37cd62006a07a946d80efe1baf2eb18e6870ad53229799005f8d143ad266998f676070be821daa08c8e9168283f3a66e2706a1e161fceb27da212143c0dfc92e0ab78b7aeff6ef7cad84687820401c87527529db2acd9ae923c2ed82258599486201051abf0c288a5a6db0e46c2049dd534f4a654eb0fd93a7588554365fccc6df283a5eaf1f5e8e493ee6d61fba81c6654d86032c383089e8c8edd2cacbca795c43835cef", 0xc6}, {&(0x7f00000007c0)="a10c14188abff3d97b5624922f73fa1187fa10a97a0e31d81b35fd631d2c487be52a24965ef130c3b03e73bed40805467702a020", 0x34}, {&(0x7f0000000800)="f0b0b6f030b48d2ee0ef5eb3140e68ffd410e3425da82bf46e6df1b7630f5a01aab95265c904dca869e58c20cea4cfc4850ac4e3157841aa7a0abca3f2194c6480a3c3991f58b9aab1c997cc53cc1e9fa1614a75ec432a72bfc73dafb9a86d4ec9c16115dca0b4efbe2c0824df20feca87b624246d69fa4fc0b8f3da8c2a6b836b1f6fe669f7e4505b7e9572c827a13d", 0x90}, {&(0x7f00000008c0)="ad5f396529804e5e326e96d31945ae15eea4befaab7ea57a3a86bd8108bfdf773cc637b428f49a5e38a4cb7c173bd7b7", 0x30}, {&(0x7f0000000900)="fd9717fd92f1dfc9f581d5701507671b910f0b671750b19752a3f672e0b22134dc2bea441f93a1b6a45550c53cc53d1b2aeb7ab0b9494d1a2b8cd3d029e2ad6d5b83cb3fda1e775a3104c638c28945ff19510e479295fceb4327b5016f01c812e7f5f45c024af0ca7db753a358deb254805d57a396864e638fb9c69b25c3ee5706366276b2312eb1592e96b0885cfdb98bdafea0533ad74592117b599ef23edc8c3a76549e6c405535bfce9f16f4cbd7f11ff334c122dc87e998015418258f74124128ceb70f89bbdcfaebdbcdc2080090e5afe992cf442fc131a4dd4d", 0xdd}, {&(0x7f0000000a00)="e46ef16a64e1b5623d42404b50f64fa0a922869fc6bdfa6686b012776af22bbc2731d57902d759e4e70369b10093a59977e6bad9eb151665623ee3d6762fc673441b6a7817fcbcd1e030f645bd4601d13270d343c973c900826a3578ff9b745d79b834b8979068079cf1f120572c0fe69de56b932dace94225ab610abc", 0x7d}], 0xa, &(0x7f00000013c0)=[@cred={{0x1c, 0x1, 0x2, {r2, r3, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r8, r9}}}, @rights={{0x18, 0x1, 0x1, [r10, r11]}}, @rights={{0x30, 0x1, 0x1, [r12, 0xffffffffffffffff, r0, r0, r13, r0, r0, r14]}}, @cred={{0x1c, 0x1, 0x2, {r15, 0x0, r16}}}], 0xa8, 0x4010}, {&(0x7f0000001480)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002ac0)=[{&(0x7f0000001500)="08b8aa14be320add5e738893676ef8bc3b2c2047f18ecf2f2ca89700903e57cfe05ab10f49285f7bf7af3487e5b3d8724d08fa2e1a74a93e67966fcb3b4a0c04029efc3893e82f81472d379eae71f3f32ba0d9cb00dfe3c7c7edcab8936a138642de3ad3b2003f845c1d5358eae52846bf99340d0935cf23d0e9f77f6db263ecf631efd9b189392a46289036f7c53d4bea34be148e193a0a946d342a1ef62c2b01f18f61fb37bce09644df27bb49d3d49c635b34131de85e1104082ad1a50191011ed9840f7b6692c707c0afe971f5f5d8c60de6581bc0d3f671010a7d82c995214b4db257a0d6285cd96c6815b86334bf71cbc36f4ce30ebdf265a06bed54f1e1673a4004783a625e8f5736f9c524c166045f14095f3ca1b388bf6c782818f76fd3ba7665fad78743b453afc7af5ff2fc5efdf82e47a9da14feeccce7a381bfb8f05c398a26ea4688ce952771948302723690f7bc7ca3c6a091f710115ca4a248838e01114739fd0474bd7408afd07662c8c38c9169f3ec7855c81bdea8f021c8d48d9057e6929e9bdeb677b478c3c4620a45490b640029c4645c1405ec002a84c96844a18709c15ef451526d98a147e5bdafb8586c137326196a730831f1553673083d244182a46d0aee3a72cd1a354984d50bf15bf2640a253569a445aa622124fbda1d97a888e9e125925589fecb0cbeccf7ad9c4445298e8f8b03d1f836d7b601d358d5124d095f7334bf6f79fbfe64d6842288be0bf4a823805505b08390d2c8d29e94deb1a5a7c39a612ed6bc9d231c592c5b03dcb46d708e20c9f1ab6432157f0972e6f2e0fc146d8a02cf6938815c2244f3d0a251deb9f41ef4518cbb1c4a4e29c65a013a28245e7e0a19dfce68cb7f8fe17766a59b744db3607fb0d113d80db5f0e5eb9cacddadcfb71b3d29c203a8050024fa340ba9f2c2c17cc5635e43d9313ae54856fb020b86f8e02cca5d946924844fd0af29ace5bd801fe4251f9062b997f16f91797255583078b1ef6a811273f465528e65895cecd6b91166385d87942a85388c9b5b2c2fe1909596e03989f357a23df61d0b448982b500bc9c1fc72e697dda8a09b64bd5d7a6949a33ea14f041332451118945d9c1007b19d7e8e600881b8513b4580cf24afa884a9db820ed5f68d523a7b1401c2bc3f807ebd574f9038360b621d5864683feb01c30f685cced81a3e4459d7f5bdff4b1d173c2619a7e562e31a814b3b943b6b7911b3154ad66680d8afa959d86960189b388de307a6768bb1bf94b3cfc12527c0fcf0c07545ecbf9e98878c4515176d32d85fb8dcef046adc8c9321a8746c3eefcf3560055d40086d94d0b13682a9a28af585ea6b15d8253446c9db5958df781ade9ac22ccac8469c5599551fd485240857cfbd8f80692013044dc3dd4af9a1c1bac8269eb9553499de9af60182f0b155fff25da10fc190031487079dd2bc99abd6c55773442dda3f4f47cbe7dc72cdc08a2700f5672e5a12e404cfc12f4f649ffefe3d941f2ec25aa481efc529cac1cad4577d5b796e752b6493a07ca1bf6d0b6d4e383103d49adef45acd9583fbad6671d034e5bde3a8a0257795cefd5daf215a7f7e4e958894ad754296ab86ac7468959eecfe98c180db54d94f7cc5c529faccfe10b8b7e441d288c876c05eebeb6af254f167a3a51abf5fef603c721baaf558aa83f819f92978c81be510fd8d37f0b474280c7afd63baefdab891d820a68917ad8ee8728c328efb9ba5015153ec99586f66113b1982015a207650818867c02892501d91c00c70cda369ffe5075fd7b5e85b3a3d1dda944a0f43659f95cd572f468495f5fcdc929de2d2df9fc0fefba4ece0e0f25b26f1d674ad4eff5781b478ab4e403bbc57306b79c38d3cc055c825c767704c62b79c006754edee33242fde6cf6b2d59d3dd70c28dc48a7f1bb36dd69c12ed8d18d3b6a59182b0ffd354095132f38f8f028c9c8c9c531def50f4cafd8df86c04de9dff30611bb4b3f211e44279dc2e51613bb5678db12290545a8b8243da0e0fdefb3efe12ceef039fdbe6a5aa1b03fbde35f1927d52e3bcd28c2217eb42bdd7cec440a1357895c58f649a3c9bf0e72fbd6035449b31201f0bbdf170ab5256f0e4de213bf5b76368914e98a18d4bc0deaa81a98e6759b67fecb402fe16f3f120cac8913ff4bde6c23f71f1d25fdb88a457b6f650b45d60f3220c2ed19a19a6e1b31236c693c3bbf17ebcd966719abb948e77c8b2b8471d4236fe984363adea96bdf5b8e3f570e86de9210904c6620c5710c96270678e7ee9f8924222c1df67475a0425e03b6aef541ad91fc24dd054ca300dc832640e49dddcdcf679618866753030cce889af4713394fe3add7cfeb592a88e61e2cb3b860cf9f575c18317216a41784ef6f58cc19600b2f6e06541857bcce40ebd76b0da9d906f8e9f305f93e85e08c6aef6c27bdafe7341afbd59a4722a519690bede25c0c19be890c847cff3d73aeca3b678e73bfb88dd27b37d09b0d0c6aa9a7fba5211e4074e7b80786118aa07f9f922e7b712f423eaa3d979384b8574a50910496b9414ab93352268b5fdf06b4a1d9d2df6b5cb38607c022426a09a2cbf017a9d8faba1342cfc8844b53b4a419d018c160a3be3987bd443ccaea5dc9cfee83f4c15e6b64808eb86934ea01556957a6c087dabf6a86aa6b203f351083e2530e3467ff43d427edd05df5063a4e7412075404c1f92466ab5e64442be937e869215c7c4d70bcac5a25db9616d3eb8f5b6d0a96eba3cd8626c7458b46f415d912b3f9d8e8cccee1cc80f3e2312b7373d26d886be1fee2582bdd8394fcca226d29be0c5c77b179e5c11368da78e522d57a85bfa1d56ef05b37653bd6de3bf2db3c7b5ef7e2ce4a3ad1ad8a47af964b0b7d7896fe44fc05e51e02bc0364477b33fdf275eb4efd515929ecfb6f6148f8f87fc926ca251ddc8754243a5549c0154a4fd3faf1ea294d23325a161226492bddc1a87b126a4952b5d01b8962f6d45e338029ce404d57c1379db1365c94b2ef09c4ac69b600cf5c36df6a410e8ba1f7a51db407b4a9e6ed3c21c31102f347464a7616ca26e5bc1c3b98888bf1847e03002c5a25963abf9167c95848fa0121a11bddd909ca656f79c172bd3233a6df365bf6e9ebf48f7de5ef47062f8ce54b1af6157da34df2c1eb902f9cd5be133ef3a6d8e0b66647bdf45cb9b344f8c52d970af7d8062095c69527bc91fec20401cb41022e3d207174c54c7369d8527af5bfe24a94487758edfeb94126c6e2047dd737e3e98540d84bf5efd924fcfa8845d3e6226a19339a36316c55fe874392066262046dab83d73fdb6593d8a03992bc6edf86b7616eb1a3b6209e6a2bb22032b3d484bc4d9c30aabd396dd8a19bed9754fec5afa53f708f966b753544ba14ebfc3f9ac94222f84a89908905f5a1ee9256997fef9472105c6df5fc43067c0c9513376220efc4e0f9ffec031dd4dea62897d319edbbc85574464fac05223258cbf0909ed19a6735caef0879dcf11c34fb498d01b770c6b3f9038f5a6845649d692e6d044ae4a291c7e9d9618c92dbf861b206ad2ce4775f6c24a0ba1df870e1fc16002b535454905172f04c98271595ef9026ae0dc528c33efaeb14b9f41e468fcfd195436c304326cfca3a3408f70d77f1a9a46b54673ebba320cd5cb8f9c5abb2fda42fc690e5141bf37fbed80028b4dcdce7c30e81f1c89a13cbcfaf7e748597aa5be4ae443cfcde87cd29b1db486c3e314c1bbb92993690dc3c29db05e268ca52f03b9af33dc1e8bf5871a5a5030de47c08c1936840d5d1ddb4c35b3e6103dda66c79e17f9b5e80a04f13562cc53773d4dfdd32590e33afcf078d7fcab3045c18fde72e082016ace401e262b7e547d5b53c08889b379201cf73bbea7dbd2ca06642096b1aaca13624536c6a39abe4b4a584ce70ca5eae038261ed7d175afb62de61d2c31f37f1d3eef90318fa918318f4da351ebac30a12e4ad7ecbcdf4cc4b870f990254a5a82d42f14346da6a6085e54e39915ff22fb7fe670ff31b35011dc98a5ad19c2533185cd411557e275db5aad5ab4f5c567b3bd8847d81dd01f3f6df0b25e380f6b6150e7da3212a743467e13fa35c06323ab51fad930bb5581fa3211bd25c94dd8e2569003924644ab64fedbc096e35296f2e3ebedfb437ac656fe8e9b4446ba71c3b65b655fdedfbd0e2635dcee79222527e1f0a7ac5775f790cf8912d7a6304cb6d1ca7a8286d61080221c8a2279e97b682221a459d76a3e287707e7f2a81e5c0238ad5685dd90f14c51f56d67b7c761a96326859e877cebe1b16c5739350c35d9a079f35cc2440f1cf7bcc1c9b18947d4080f41c3671c68113b7c6759c5384b3138cc19f9a00c93e594d3e805fb54ea93888ab37a7e34398ce8a2f33db2226dc08188af9ebeb7de707cbf66ed231084ad4d37acc81377b3d5de1fd2affe0aec96b8771ac9217cc921aa4edd04da7bef0a229c771c267b94406fc25abd4a02d0104f053b68a182c4ac9488c6f3a9a4f81aff3c6b932ea0ffdb3f31c839953494562adfc97dfddec894156acf83536334230063565d47273927b3e480c12248e00da4c48bc550ee39daa59144cbf139a94a8a94683ae0ad52c5af35c639564608076da93c0eba083875e903112e86b56b79ed74e30a7bedcecba3299375517dbf7bae546bf85aeaf4292fbf4f8cda284722da2941f007f299c0acc63fb24bb2f4062426356d41bb99b3750bf4e10d4e685838648ac1c582c69a49c56aa9a0c5684cd8cf5157052c7f73e53599ffd3ad02a5e6905081145e7dfc6689eb98e0922dc38cdd693c613ba933138161ce4c3ebc1ae19063d7987e3181a293eef24f350ec33946c0e4b2cc83f295536b60ac6cfe4ff6cff46d2bf1a4a1353a35e0c5fce67dd83041b375947c4a7889e6ce0f0ce841de72a7d74e1d1e3694d7c90782bed4850adaa568f48a6da74bae1a412455f441f88df5371ae2e87bec62b70e09ca2bffea8e36be7f9c0241917fccb98bfd48ebe34b948f89805f3704845767d9087921d542d4c1ea28fbf50170181ca77695916c4600b36e527bb3b23286e5cd16ef18fd54bbc8c62872cbdd36f8a99bc72b1627d8700cd77fe400bb5d0ead0f595091058efa5852b6cf289fa73d2261126edb636e6de8d3f10e30e04c7edf0c1986b31fe9fd22d5137b75b928539d22287635c2cea0c048d95cd4af7adb36f6976fe4e6fb8a13d42c53d6558aa9ea5729c8975decb13f28fc597ca588811d931a2d8fd8a66ea324fa721150ac2758f14a9a23a58508653b297a5a5a5b39e4c8eba3a0c8e93bd944174eb87561dca37361c8f71181f6cbe498dadd79a65b54540466434723e6a6c9ef8f7cf4b35660b301d51b2c5621555f6f67418359a961fe204363bbbcc9925e522474a1c407bacb0d3b89852ba01be91350afd982314a5587843a55e80b6191a82d2144f70e781f665169bd658f9c7628ee21f1a3605effa3ce88cf53d73a050ff5dd13dc7b95526ad33e15e899664611826252232c8e90108e0d3fdf56c8c3c82a3df02fc948f7434c50dc51d9f5156ed4284be8eaaf50262eaa5bf82be28be28cc1e0a46bd8755eef984961bd4f969ac6ad9bb0244aafcf66a156af43c66ba8704ea23f8864ca95b01410292772f1a2f6d8ab3c3517fb2f1e27011ec17990d46c8ddbcc198613750685412cb0d4478598e15c54642bd88235023de266a988689b7020d51707c152445d034b9102986e80c4b72aa42c6d997fbd5", 0x1000}, {&(0x7f0000002500)="6f9dbb9efcb7a17b87ee67221e6638417bf6c88b94c6adb9a799f9246542a8494a656caac4df3d3659049d97cb85b2f26548a2409840bf508424b664bf7e413ff38887a7f91be6cfc4c389fb1d453d350ca5446fa516b44449ddb9ca880eaaa838f421683e26a4fc40525b1ea533082c51b4f7bdc707715965fd65c39b5981aa01d982ab15f349286667b4c5672dbf503526fe3481eef417b31d", 0x9a}, {&(0x7f00000025c0)="743ca100665b36644c8d2955d0e9ada1fb49817b779d9508b110e847e4158cffe1d4bfc867d18b000fed967307154d0e5b1df1a42fdb91c08b6f3101d7369ed80cb4095009b5bee7bf64ecb55a11982feff1", 0x52}, {&(0x7f0000002640)="1d53108b1f2aa21fed21d0361eec60d1a8fe170ee839576f7cd254253e344d06426143b055ee09412874b0b123cd82f0e24fe2b290e4f0c4296b3c84af6693d71243442a9582769f68d20a0aef1e905d3f718ccea7cb80a2766929219497", 0x5e}, {&(0x7f00000026c0)="9fdd94b205b2c8fac5b6e9df631a2eed8e8ce69161f51d95511c420f693a6efe1f00613a4955b896017c26ea2246d3860c0c37eff24fcb13009af353490c90bca1c64cf83922a35040bba4a060a13584d07248a74a3d6051405ddc0aa103198d80589715772a5db1bcaa9667d5befd1b7c980545a05d7baa23521d802616b6a9564a8eb9e298d6f1ba0d911945afccfbf99b0748f787f0d1bb34f4e1ad72fc738e7aea030ee8acc52603232b58d28162087608116bd4fd212e2463ad4e07903e33b2da5f68eb4852ede3403dd84193cf201d0548b62659aa7c877cbf6845dc7ff71529f44e6c13144c4963ef48ed1c8f1450959a11979be53806c31a", 0xfc}, {&(0x7f00000027c0)="6a8be436106da5189e4b210bbb0334f187f9577f0f3af319ea182bef2a5b59e2b9815439a038fbef41fb94c58c5acea618c3fe3e98934ef25061862e184f6ae8141e4dcc887417052fd27fdc3346d19438b5bdac1bbdfdab9e6d86f8daad06e5a52ae6268df128f72bd94e088443952481cba7fd9356ca867b", 0x79}, {&(0x7f0000002840)="c3b889b5bbe284095eab9dc33f457cd4c782009861be4994b6204a4d9b59e7cde14f6cad017ce7901efc15e6ee242f7195e214ce32d8db081359dfd25966224ca5a7cf70176aba87f1594fe98a2010f92376b5d91b3f429f71d26f019560480131e1071c2590ab8d36498e5cf783893b860f71fa9b66b77a15a9a87dac433c3b7ce9a60b6f9fa06fc03c3184bdb56e24b07bea4e788199cd6f67dc21ebf3715f3f080a7753cba9ad6e187c1c8d9bca4fbdad4b", 0xb3}, {&(0x7f0000002900)="34e41e90fc245a7d80442c1f32e0e95ded93c10e33b6c45a6b764da9adaa5aa0ecf49709178d6f59f41373692fce34164970b2ce85f7715457655bf5dbf37331117888830ebe49481b5e71beb19344822de146e80e6087f87ddad60a8c10c2c71a74fcae76b1c4d939cf1dd413bc39270a42cdd9c39a8d56fe882d8284f17e73c58fdb5c5d66264c00391299fba14f8b70f07f3eb6918e04fd8921", 0x9b}, {&(0x7f00000029c0)="edaf70ff274ed4fa0cdd3d9120392c5f2f66cefc810aa960bba3f26146e1ae0216c098f484be3960182c786be9f80ce5891551bb88fd566ea4af6767934f6b0914e6a7b1da943a52b3e2181c73b70c29812a5cf8355baf2e0fce34ae37819cda9871d1f26394722799141889b70289ca3448c428338ba41171a3e16f8c193bc1f539f388a559aa19efca1e868ff32317363fd6fd613c22b5d99064b017a85bb7c78b9558aaa5e770109c4382c1b5d89475c86bb1b083724fb9dd0da8b93f64ca5742c0c57594db5fc20e26962941f3a02e0f93a2e813b4a68343b66c16ef684b72f7d426ffca85610813", 0xea}], 0x9, &(0x7f0000002fc0)=[@cred={{0x1c, 0x1, 0x2, {r17, r18, r19}}}, @cred={{0x1c, 0x1, 0x2, {r20, r24, r25}}}, @rights={{0x1c, 0x1, 0x1, [r0, r26, r27]}}], 0x60, 0x8000080}, {&(0x7f0000003040)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003500)=[{&(0x7f00000030c0)="042914dd9b880b0efb904c42be2afa3fc68726e99ff405df3e51b3faa7bfc461d7ccfadab3bc3b75ca92bf9d296f6b2f844d8948d03ac54ce58a8ac85f80b6fd5661a576b46a11f0d79edd9f763b36183714ee52a1e44acae1ff5f39b2d92f2a7edbb023a52a9df9abd440aef70a97a8380d615a342a191457618744732adba9746c017bee633da057cc2225dd77ad46aa5c5eb504abb19d37f2c2ef5e0494d73ac27214e5893c2f32a623c55be5caab6d8d4c236c2d7a58811b90d12fa6d37059febb36281f2b27400862d40c24cb2578cd50589774757054412564ef41", 0xde}, {&(0x7f00000031c0)="301910a577f81a960d2d", 0xa}, {&(0x7f0000003200)="a55ba9050b288e2a0d8958af62e11de5631e492f2746255fbee36e3b3ae4dcba640b67b6cf3a66065558652977ec8ba742be0d1204884f006781d0e5", 0x3c}, {&(0x7f0000003240)="6154bd98aeb202863a844aee89036d84322ec9295fe538f963b47f224928b8c8c22e920639afdccfdec54ba4d73ae2986ac630d19b3c6012899b6a82941fa6a0a604e16a8f7264926e3e90602dd3fa8a7b78bde0868c3127addd57c5049e1610e7d7613ffddd1f0a584ede24a95af4f38f4ac9147b320198bec2f8", 0x7b}, {&(0x7f00000032c0)="187cd36b4eed1317f88e15d15b76012ffc7a508a0d9c9b124699343bfb4d441dd66e8aed05f4dfd9cdc3123276b670076d67de8c6efca629816225bb94e70de8951aaa010f193d702deb64e2a681b90cc70460c7d57c5279cb79f759c561b6441f5678457777d7864d2e73a575db9913c63d627075f813e4810509a503c3ed9abb76e3f6b39ee50e9b86ed4f3057301371870be93a9de16358a811dab425870beaf357074ec80fcb27b95edc4503a72fb65e20a132bc1b174b65daedc1dcf01af90d92aa8db8f884dc551769dabb368fc7666507dcae646a2621cee408221fcafc69f5", 0xe3}, {&(0x7f00000033c0)="69cf5d6becf9c3e150cdfd", 0xb}, {&(0x7f0000003400)="2ec2e47492891c48257d0148d02f29a881dd02cdd3e5e389a4f7beca96f2acfeea2a9d36bc232b0e7c30b7b0260711f8c21bfef54671b348925cd588900049336271f55bc73001b38a42d896e5e5152437ca5a5b2e2d13c3f387aafc4799ae823cd18b5156b62894144da47f67adce0c3563c975e6f9f450dbe1f28873c629e89f75330eae6d599ae67e3d6e1fea0888e942496c7bf67b7af945e95289fd264e01e3b7f5b3127e07e53d852727ad2d669240a909f183b69b3364876928cf5676517df056f18678414b813e8b0c71c32c08e88b557e51ba3352ea53dca5a14f50b79fbd80d4", 0xe5}], 0x7, &(0x7f0000003900)=[@rights={{0x1c, 0x1, 0x1, [r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r28, r29, r30}}}, @cred={{0x1c, 0x1, 0x2, {r31, r32, r34}}}, @cred={{0x1c, 0x1, 0x2, {r37, r38, r40}}}], 0x80, 0x20000000}, {&(0x7f0000003980)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003a40)=[{&(0x7f0000003a00)="a0cb1d50fcb02f5c41c73611bd5164d255e605a710cb87f060f2954989dfb79e65b08a8c90018145523b8ee93bdd", 0x2e}], 0x1, &(0x7f0000003bc0)=[@cred={{0x1c, 0x1, 0x2, {r41, r45, r49}}}, @cred={{0x1c, 0x1, 0x2, {r50, r51, r53}}}], 0x40, 0x4000800}, {&(0x7f0000003c00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000004d80)=[{&(0x7f0000003c80)="27f276f4eb9817067ed264b763bce6", 0xf}, {&(0x7f0000003cc0)="536f9d5dec0c1d30e8677dc8e5e300203d942e5d39af", 0x16}, {&(0x7f0000003d00)="86194048b4e2e87bf719fc3ecdd420deca83a48452242271ad895d93df81e22859af8bebf87ab1bba8a1323d39357d0a3b4fc6259e4918059123b5892965cd440bb9b5af7971066d2739e9141d9206", 0x4f}, {&(0x7f0000003d80)="b99c3f1ea7f9c7ba100c5491bc31efb935e7ebf7be663dc3cfd279b0c32ad85fe4453ecc0f2af9f4e6556f20eff858a91f7dda299dc9c23b3daf14780f8f7b37cd66e659074dda34440c77eb03634ac3e7ac033eba050784b4ecddece4c4a318aa07ad505ca9c1eb0ad5592527263f20d7114f212db5a869cb858516e7671316c47772cf69a0591cca22d1453147fcdfea0ea8d7c76c22bad393277db1c635d91373d6fdc407f2480cda6ff976c593243549a5f2a9dc91a5f36c6bbfe79bf1c320c9019f5d7264b1cbf51ac97efb1934ce1ed992bec0c717c88273a02bad24e7a999802f47456b383ae2af84197a73507c004f0c5d98a12b384dc212cc39eb49ccb9b9d55390c18b1857f3e8495218f5242ee45c2a4cf22d494dccac26a588df2b902e50503e1c59f1a70adac93e0114bd7fcb2f47fbe1e649116dd5a9e4583ce4c78218736c8c689deef2d1040dd9217fc28b59d5f9a9b688deb3eb33f733b6e92ec8aef6d5a5252075b5d641b51f72b68a52f2fa6cd3f089e0ffed260a6d12af4f850699afe4399c9e4155fa4b4ceb6ad73473bf22416c4f52c7bcc203baaeca37f6aa45df11240d3288b1c382d128a6c96c2769983ce6548895763d2c85a74818c6abe41d845aa37d01ce3b370cf9d1b81b047f5a4e67f6d19bc6e8ef476866de46cb08b2ac5f2ece014604e211e0ce1a559683b6e2c82447ffe06c81f83b365f01704af2c7ff65e8bd146152532b91819ca1514ba9bec9e62c14c613d6bd7a765206cdd7d650c028cfaed5805414cb230bdf0bf8df4f962add87e4058dc73a5cc9e335d81f967072773b19b49e0dec5e3888859ba5767dbb81f812613993bdbfe133529db3bac2dd706f1d22b0699ed4268614349974f79a2678001a1404b7f457621df360ba45f901eee57fb38d90897922d05beb22e9b11651e476821a5150303cc199578579c73eca200dc7a25bce75b0b04c64c511ea1f6c76679a7c2f541ac9d12b8447bcadadbc9c7c4c5db8983af4608c8650e02993e9364e4ed070448885a4d9761989c717cd0ee5cf31760fb60e382b6d7ff3564bb20d3abc2554a518199e76ffefa3934175a5ffa62e84db51aa4ddc97ba6cd1a7a4b0531573f59320f913b5fc74b3e4afaa0fdf48a4db530811c794ef9ed234c8fa5cfa68fdae4b52522577301a3146aef702575609c88969267cd60457e43284437504fe6bc6a5338c184726bece70a3ca4b2b565dc1a11b0b7f45cafd078e8a9614a602dbf9cc2476c4318d8a1b0175efb6022ed28382249e5effd9a9cbb3ceabd33dbc985412a2ec8e5dc48811db821b5fbe9702dcddaa06356b4fdf642db371c153c3b0d0237c6b865571843bc6c0602295da500782471435a51b0d28bb9ad4c7098ffcad3d9fd3a445c522ee227f8e35833ab8a7a5b847a7e546c66c5184dad0c8939a686cbafbed4a507ab27b080f34de6363efc1cd82b2db5c537739097ea22ba6ee474b8735c7d2363b376e9fe2dcbc4ce72c10979f53621df3464eab989a5747af82211f11c373f41d6cd37acddd6edb371803e2d6090840546230261b78fa938c68c9fab31843d6693fa246e695c82f8fec624784d7c205f0a4fa846ade21e8d0d314a8e8e355968b25d73d5f1769bacdfe05ac306ea48023b5f88959f544c9682e4c6659777d964a1c43eee860724ba8f68d9a278834d4414492d4957c985154c1be10fca4e92512bdd49cd09471bc6185f7a991a01fc9691f613ec17a369991455ee56408965f610629aa80537b971f86265f702f8f68afd405736404b79d8b08d8e17ae1fe6bbf8daa1ba4e7986aef68de1d6a47510f6164d1e87e77ce5b92b7098b9ead3622180125f6a5fbef885f878140e7c24e221665cb57d6312a8cbc2cb5953c78c97ca7ba5e1cb97d6a88bebe382f573c30f3e774b88688079a932fdc301d804c08f7e4e8a3a6cc1b1e281768ba744790b0fe423be747f739ab3b24220d5c5a3ad437b9d554a5944a27c6c324dc256f7dd2f369c0eed29a597f6769185157d1a89fbfb16a63ef8cb14b4d92f29773e2307cd47a7ca18663ec5edd114e2919b36eaef2a2b2e75c1fc0d3f513f5ddc98f426fe72da1476ab176974db62eaa6d6ec22daae46b9451f5c4a9091d1469fd4364e2402b14d5d57dbe1013eb322813eecdf418798a5620d2229bb97a69b2df17e530decfec401bddf8ab493b12e54aa3bfb9d64b2725320a13511f6215ff1ec043c9444ad49cfabdaf8beb369c2755e42d88711138e45a8d596ce23462e4fc3d21be90e8f83f38ed811004f12a78341da18caba5627cc8ba666afd82f0a9b2cf5ba95c6f1df22249f8c10d7062eff03c19c6eb36b0daca23b386926735baadb0bd58c77e0880ec40eb92d648e543ede9e371f0603d3bbcb00834b67f6cfa2761d9e8f321e2917f688644d8b65bec4b8b2606e6141cc3871c2b1cedca7495aef076749f979d37523b40a8a4c9279ec5ace5d9fb0d04dea6821b31644bbbdadadc1343515fddf4ee463a8e1137697ac375c0fa2c5d6e03bd35ef09b90978cd4f9b22a1355c0b5eeb9d6b73f07b3879af84010a439ca38910b04fb40cce32bc76eac38822f5ac66e7ad40ade364c1fb642657a22a4b747e1c4e3947aa715cfc97857496374516ac485e44f6f7eb0d435edd3c8d7e1d9214e32085ec006dd047e37c6fb1ee10774bfa4089c1fdb58c7c4860057ec25d9514981e38802095f1a2d7b28a3bdd500108b1fc4e4042be1ccbf6257a39ff82dc243969aa74509581159b2a1ad6586419c3c3c44a9c6493af897b746ad1ccdcc4885d9a86af5c4171d033db3c244821fc63bac1c8674110d7d1f0e8c4ad2d74eb42cb9c62066bc9a54d0d437fd942bbfbd7780001829a7d9d13ac837bd2f4bcc3cc809f91882003cfdd5df3f19575a9fef467aa93cd1b07339280be4a1544e844687eab716187e6580109f2f3e837e4e30e3b87479c6b3b789f2a39186d6d8e8afe5cab564acaf8cebe3ec80898ce3f2049fcdb5e4c32dc9a70eb65798c0fc29c377f6afafe70619eec5b430e1b5c6b5daef1dccbce2712521aeba23546fc1536a9550e91a82413b4aa3c8b2949c896fa8fd248a924b7bdbc4687053afb4d16355b950b683174a5a3190918e40a22f8c11511bb7aae667a0eb6323db7c57cbbe0e27e2a2e481f553d6259d61dc640eacee7d1555b941fbf31610c4da2275af8fcc7876e475acf76cb8481ae418b2b36f5d883b72e394f510d9337f0b46f3a7ff7b8878134b8010778c574866b6ff3d64d423407e4693e7bef1b6884fad7aa926c851192c681978f9de182f633eaade11f96a4be54152aaf841eaeefcbeef53cc2899056b9ace82616537c3e7c6acc4a8278449639688234739134ffc335f53c42de7fece51755aba9ea0b0d07afe91b2188d4eadeeb79a9db4e705d4e51b700f56e5f4090d89d59cec905ae2a583ba97c1d5796bc750ce50e19d1942e53943d1517dd0b8f539613b954cbfc9b724063c37dbada01601d81e801f745a56327b40ca53596a87a1b36c2f132a2eea5d6f306db2207ec2cfdabd185c25e55e024d5fe66050ad67c2911610813968980785c01adc3d5ae8a19ec42c1aafbe7400d085a2f422d2c7fcfd166a8bd51c70dd35343ba7cd11d994bb191f439de57384bb85faadcbbb741abaf4c23f7a4a842f9a6f62747d9fa07916f608eca47a4615e9924eb3307c5c0dfd0fc91612dc80daaf1133b8a92d8532a8539c2d6f71071268f160317d61e5a6b5111d185269439def331a98812b9001f893d2aa856234b972d849f34454b66d1d2aae440644685359a0f30f6a6ddfb1315f9f9021d1b97e6c6a7d8c9ade0866ddba44de1d92cfd92b58712f23b57c1303083a4b94589ab34dd9a42e8b5d872c1bb6e4445066102cf8563fe810165d08d6e50ad9467e8ebbb0c9d5beab3b01040b2550e11eba81e771e64d1afae2f8d3ae658e90e4e92d697adb896b82c07222fbd054bda8f060939cf1d6bebbcdb92f9de8799e5751744c8b435c1e4ab1a3cee8913eacb57a597221a9f3100384fd700dc1158709acc033bf56d7e958e34c97e5cf3e23c0bd3d0975471a7a362411411ec633382159c028da1aa9abcbf4ada5ba34aad484267044873d14b0bfc405dd55b6d7a557ffd3ecb4b79433c4e935190bc6ac021dc40d02db6c4285d885b761555f059d40b523cc1f8249f86af53c5222a6975387f87e8e2693eec6f031562bbe06cd94ca50e2139d59306ffd753ad6dda1b8fb2c1f472c755656f2dc7a0521b9c0adfa293571803c4f4c23f12d902295c37555bbfc024953729f4f2a629bdf64fcb26a2403e3c5b8c3642dc3e02c6a1f33a24e6aac0d3395a2b7370ba8c24a418bffd917ff32ebe467453029337f7c8bbd0b93bd41bed37ce8f57c9d1d817e7bf0ed5492037c96d2181a53bd7b579e862e424eff91a45603ca3315443184eb5c11e9ede244ce0d8f183b3d5cfe111e6779421854a227056d15b266cd958968bec97848c9f7ab3bda71eae06c33deb0c227f641ffec2f7e4c272c01c375625c0f14a3507c53e9f6952a2f72f23483a4611e752879c19fc2dd533ae315f037e4a5bec406d48f0ae77f86d56c28d5d81b4cdb2f1ffe0deed156b7f1b19b9d87236aa04c4e5d60d8ba04bf499b4782d7124c6814a43e8198db312f4eb681c0eed1823563a737757a7ea3c10f3a2d22d97989b9cad00cf3dd1f1e39f287d330033f72598f4696f55f5b0d49d1428492d4ee0125d0503f282c2b32145f5546863c4651969652124bfd6fad52a790b7ae118ca3dce20c1f13eaee8d1f230536b64ef60404bf37381cfb2f318d35c5d5b66480bbb0cf82de42d85b0f65d6e70b062daef6d107a979d8eeb248b9340d28615461f9fd762db31379ccd5cd81ee6569a3dc71d7aeffeeb01feec5240084f5101d582b4d38641da96d5f3dbfa455971385927aa456967239fa79dd770ef6d7c3a5e2195093582d54d38214944795202eb33dd21470771fd1eaa388eaebc6aad0a682ea16a25a025a73b426474522110ee42c6152055569524db85d8b27b9bbce2301781998ebafb5f391128297ff6b835e8780574e8520ff077a785ea9e00d0e16d0d12b44bb65ee11c4a1543cadcc99b49ebeaf1ff985b0b8586a8e384082e6a8d219d6fc424e248540e24c91c203437d86796647061002e993b1e14cf6e563106e39a65319d3455090c1f8b4316ea7f0b60cbb99d782112eccc24496002a7a82a96c0274c4eb28bc6bab4e35c11aa9efd062e75208313fba4be4f0214f59cd082a0ac426ae91931613a8f83944c689fb696a153b1aa8dbb6fc7778ecf153a821ed1bbcbcbb48a93f578f9fedcc8c512c64bb91995d4fc880ae03ff84a3c90eef8555c86670533f4036caa4fcaf3c1d3cb5a79d772ebdec5118de55ca476694b3554ad67a7f2709252b0b886e4db9e3a2c8c04c207d7aaa9d7317e7eeb0d533ae9b62af673c831fc05e226a00357d942181711d69921c3e982683faef843093ac0106d3534e7b2e8be987b944ca1161c83b177d8e23b7b8933911f176cef4dccd0730344653f9ed21f7ddb4791036f89292b7b8fcea1f22905ddaa33b48c4439601ebdd0bc90fbe3c60e111a9ec9656c0e44ff2548700e89859be52defd7f3c3693bd44e3611c1c2e376b180567f5a8b30c3eb9fb6ecb9cb247a0eebe0efb3b0ab72a3998195d8136b6525e5fe807715718be23563684376b8810b3ad063de0c3265231cf5c70c995667b95edfa1d6ceb515d0", 0x1000}], 0x4, &(0x7f0000005000)=[@cred={{0x1c, 0x1, 0x2, {r56, r57, r60}}}], 0x20, 0x4004040}], 0x6, 0x20000000) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2284, &(0x7f0000000000)) 16:19:03 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f5d", 0xd}], 0x7ffffff2) 16:19:03 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{0x0}], 0x1) 16:19:03 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f4b", 0xd}], 0x1) 16:19:03 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f5d", 0xd}], 0x7ffffff8) 16:19:03 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)}], 0x1) 16:19:03 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f5d", 0xd}], 0x7ffffff9) 16:19:03 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f4b", 0xd}], 0x1) 16:19:03 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)}], 0x1) 16:19:03 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f4b", 0xd}], 0x1) 16:19:03 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f5d", 0xd}], 0xffffff1f) 16:19:03 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2284, &(0x7f0000000000)) 16:19:04 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, 0x0, 0x0) 16:19:04 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)}], 0x1) 16:19:04 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, 0x0, 0x0) 16:19:04 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982b", 0x7}], 0x1) 16:19:04 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, 0x0, 0x0) 16:19:04 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982b", 0x7}], 0x1) 16:19:04 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540), 0x0) 16:19:04 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982b", 0x7}], 0x1) 16:19:04 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540), 0x0) 16:19:04 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d", 0xa}], 0x1) 16:19:04 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540), 0x0) 16:19:05 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{0x0}], 0x1) 16:19:05 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d", 0xa}], 0x1) 16:19:05 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{0x0}], 0x1) 16:19:05 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d", 0xa}], 0x1) 16:19:05 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{0x0}], 0x1) 16:19:05 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f", 0xc}], 0x1) 16:19:05 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)}], 0x1) 16:19:05 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f", 0xc}], 0x1) 16:19:05 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)}], 0x1) 16:19:05 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f", 0xc}], 0x1) 16:19:05 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)}], 0x1) 16:19:05 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f5d", 0xd}], 0x1) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r3, 0x800000c004500a, &(0x7f0000000300)) r4 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000840)=@name, &(0x7f0000000880)=0x10, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r5, 0x800000c004500a, &(0x7f0000000300)) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r6, 0x800000c004500a, &(0x7f0000000300)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000a00)={0x0}, &(0x7f0000000a40)=0xc) r8 = socket(0x200000000000011, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r8, &(0x7f0000000240)={0x11, 0x0, r10}, 0x14) getsockname$packet(r8, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000000a80)={{{@in=@multicast2, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000b80)=0xe8) r12 = socket$inet6(0xa, 0x400000000001, 0x0) close(r12) r13 = open(&(0x7f00000002c0)='./bus\x00', 0x143042, 0x0) ftruncate(r13, 0x2008002) sendfile(r12, r13, 0x0, 0x200fff) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r13, 0xc0502100, &(0x7f0000000bc0)={0x0, 0x0}) r15 = getuid() setresuid(0xee01, r15, 0x0) r16 = getegid() r17 = syz_open_dev$vbi(&(0x7f0000000c40)='/dev/vbi#\x00', 0x0, 0x2) openat$cgroup(r1, &(0x7f0000000c80)='syz0\x00', 0x200002, 0x0) r18 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r18, 0x800000c004500a, &(0x7f0000000300)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000cc0)={0x0, 0x0}) r20 = socket$inet6(0xa, 0x400000000001, 0x0) close(r20) r21 = open(&(0x7f00000002c0)='./bus\x00', 0x143042, 0x0) ftruncate(r21, 0x2008002) sendfile(r20, r21, 0x0, 0x200fff) ioctl$NS_GET_OWNER_UID(r21, 0xb704, &(0x7f0000000d00)=0x0) r23 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/icmp6\x00') fstat(r23, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r25 = socket$vsock_stream(0x28, 0x1, 0x0) fstat(r25, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r24, r26) getgroups(0x8, &(0x7f0000000100)=[0x0, 0xffffffffffffffff, 0xee01, 0xee01, 0x0, r26, 0xee00, 0x0]) r27 = syz_open_dev$amidi(&(0x7f0000000d40)='/dev/amidi#\x00', 0x9, 0x400) r28 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000d80)='/dev/hwrng\x00', 0x16640, 0x0) r29 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r29, 0x800000c004500a, &(0x7f0000000300)) r30 = getpid() sched_setscheduler(r30, 0x5, &(0x7f0000000380)) r31 = geteuid() r32 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r32, 0x800000c004500a, &(0x7f0000000300)) fstat(r32, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r34 = getpid() sched_setscheduler(r34, 0x5, &(0x7f0000000380)) statx(r1, &(0x7f0000000e40)='./file0\x00', 0x2000, 0x100, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000f80)=0x0, &(0x7f0000000fc0), &(0x7f0000001000)) r37 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r37, 0x800000c004500a, &(0x7f0000000300)) r38 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r38, 0x800000c004500a, &(0x7f0000000300)) r39 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r39, 0x800000c004500a, &(0x7f0000000300)) r40 = openat$audio(0xffffffffffffff9c, &(0x7f0000001240)='/dev/audio\x00', 0x5df3e46503ea6621, 0x0) ioctl$int_in(r40, 0x800000c004500a, &(0x7f0000000300)) r41 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r41, 0x800000c004500a, &(0x7f0000000300)) r42 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r42, 0x800000c004500a, &(0x7f0000000300)) r43 = socket(0x200000000000011, 0x3, 0x0) r44 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r44, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r43, &(0x7f0000000240)={0x11, 0x0, r45}, 0x14) getsockname$packet(r43, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) r46 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r46, 0x800000c004500a, &(0x7f0000000300)) r47 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x20504, 0x0) ioctl$int_in(r47, 0x800000c004500a, &(0x7f0000000300)) sendmsg$unix(r43, &(0x7f00000011c0)={&(0x7f0000000680)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000800)=[{&(0x7f0000000700)="d859d66b9e7506a2839e7416997598717d17b3c00942c776123d17f03fa4638f95f8a851ee7dc67fd83a3982e986e4069091e626138a63f22aa1c08ee47e295f47ce5654c23c0ed64c78d8b37167ceadceb93af4ae285501a4ccc82dc2234e31fd2b1c82c7483bd92dbefbbb7f382cbcabc8a108121db479dfa93131863769b7da2729f2baa0eb25a75348ed21107942f181daa9104861565bc04e403fcb3d94ae96b4cc51d5a22233911e4ab224b7896bb706b85c4af32d96e573ad41a0081581a2994c60cbd2", 0xc7}, {&(0x7f0000000900)="46ec26bf689b47ffce3521476957534a78b0dd62cde568d723d0776a3f75383765737683731c530000f341c637ded7bef85aca3a34098fcb8bd30a7b69934728411839d06805f8a8d244e1f8eea23c73aa6cbeccb29bb525900cb230c05068eaad3a33b462404ec140ddfbe66a46be59f33890cadd3f90738735b01c0bc3eaba4cfc35cccd3360c1ee9ef708753d725d5d7f031d1a81ca4c136c67151856a5294fa55f768f459727f6ee471b8ec946ae3284ba57e375c3ffe7fc4b913cbc6a91e69372cf351ea3cc2064198002ade5be228b4a018d251aa9b721e8", 0xdb}], 0x2, &(0x7f0000001a80)=ANY=[@ANYBLOB="28000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r7, @ANYRES32=r11, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r14, @ANYRES32=r15, @ANYRES32=r16, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r17, @ANYRES32=r0, @ANYRESOCT=r42, @ANYRES32=r4, @ANYRES32=r0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r18, @ANYBLOB="000001001c0000000000e49ed9510000020000004fe8b5b9b8056d73daa6466724dd1082dcf866ac07522288dee02b3bd3561fbce4", @ANYRES32=r19, @ANYRES32=r22, @ANYRES32=r26, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r27, @ANYRES32=r28, @ANYRES32=r29, @ANYRES32=r1, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r30, @ANYRES32=r31, @ANYRES32=r33, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r34, @ANYRES32=r35, @ANYRES32=r36, @ANYBLOB="0000000038000000000000000100000001000000", @ANYPTR64=&(0x7f0000001040)=ANY=[@ANYRESHEX=r47, @ANYPTR64, @ANYRES16=r46], @ANYBLOB="1a572aa19d62f30143ed9bb021714887b1cbd7ac5c3b25e01cc9840a65444838b8f87e3bbabfd3cdd9a7d4b86edcdc1416682365e2c982bcc4482ad2c1d87ad0d3472ebb512f870e8d1ac51afe55368c9e2e595e38f82f2a108a9f5c10c7da691ff7074fb9b70425929ed1f1adee523f2cb4dcdba6e51f4008d34d73af28de853daaa24b5d55cfd2b7e36b", @ANYRES32=r1, @ANYRES32=r39, @ANYRES32, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32, @ANYRES32=r40, @ANYRES32=r41], 0x21f, 0x4000}, 0x80) getsockopt$inet_tcp_buf(r1, 0x6, 0x0, &(0x7f0000000580)=""/214, &(0x7f0000000480)=0x19f) r48 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SELLOADLUT(r0, 0x541c, &(0x7f0000000500)={0xb, 0x7, 0x0, 0x3ffffffffffffffc}) connect$netlink(r1, &(0x7f00000004c0)=@unspec, 0xc) ioctl$GIO_FONTX(r48, 0x4b6b, &(0x7f0000000400)={0x3, 0x1b}) 16:19:06 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x210501, 0x0) ioctl$TIOCMGET(r1, 0x5415, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) r2 = socket(0x200000000000011, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r2, &(0x7f0000000240)={0x11, 0x0, r4}, 0x14) r5 = socket(0x200000000000011, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000001c00)={@ipv4={[], [], @broadcast}, 0x0}, &(0x7f0000001c40)=0x14) r9 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r9, 0x800000c004500a, &(0x7f0000000300)) sendmsg$nl_route_sched(r1, &(0x7f0000001f40)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001f00)={&(0x7f0000001c80)=@delchain={0x26c, 0x65, 0x2ce66560930bbcb0, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0xffff, 0x7ff8}, {0xb, 0xc}, {0x4, 0x7}}, [@TCA_CHAIN={0x8, 0xb, 0x3}, @TCA_RATE={0x6, 0x5, {0x6, 0x3}}, @TCA_RATE={0x6, 0x5, {0x1f, 0x81}}, @TCA_RATE={0x6, 0x5, {0x2, 0x7f}}, @filter_kind_options=@f_matchall={{0xd, 0x1, 'matchall\x00'}, {0xf4, 0x2, [@TCA_MATCHALL_ACT={0xe8, 0x2, @m_bpf={0xe4, 0xe, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x84, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0x6, 0x6, '.\x00'}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x4d13, 0x7, 0x55, 0x3}, {0x400, 0x80, 0x1, 0x6}, {0x1f, 0x7, 0x0, 0x9}, {0x7, 0x81, 0x20, 0x945}, {0x8, 0xe3, 0x3}, {0x1ae, 0x0, 0x7, 0x3}, {0x6a, 0x5, 0x4, 0x26c}]}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x5}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x2, 0x1, 0x20000000, 0x65, 0xeed}}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8, 0x5, r9}]}, {0x54, 0x6, "42dd0dfc7944d20d41b581bc818dc0e894f6d81780277767db378e8ec8671bdce4551eb81eee0b8c22663fd70cb9b11e9d0ab1b40c1a5af34552b95e179355231de5ddeba4c0b68e252d64629d6c3685"}}}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x3ff}]}}, @TCA_CHAIN={0x8, 0xb, 0x3f}, @filter_kind_options=@f_flow={{0x9, 0x1, 'flow\x00'}, {0x108, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0x4, 0x4}}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x54e3ae23}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_MASK={0x8, 0x6, 0x4}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_EMATCHES={0xcc, 0xb, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4aee}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4f54}}, @TCA_EMATCH_TREE_LIST={0x90, 0x2, @TCF_EM_META={0x8c, 0x2, 0x0, 0x0, {{0x16c0, 0x4, 0xffff}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x89}, {0x8, 0x7, 0x2}}}, @TCA_EM_META_LVALUE={0x1c, 0x2, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="ec", @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="a77450d074ded2e4d1", @TCF_META_TYPE_VAR="2a5204cc0d17"]}, @TCA_EM_META_LVALUE={0x24, 0x2, [@TCF_META_TYPE_VAR="9ed6", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="716064d1", @TCF_META_TYPE_VAR="86c3e0900aa2", @TCF_META_TYPE_VAR="dad7812afee80b21", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xffff, 0x91}, {0x7, 0x2}}}, @TCA_EM_META_LVALUE={0x26, 0x2, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="8fbe", @TCF_META_TYPE_VAR="1de6edfa", @TCF_META_TYPE_VAR="e27b8594dbc1b5c6"]}]}}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x5fe, 0x7, 0x5}, {{0x2, 0x1}, {0x4}}}}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}]}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x6}]}}, @TCA_CHAIN={0x8, 0xb, 0x3}]}, 0x26c}, 0x1, 0x0, 0x0, 0x4020094}, 0x40880) bind$packet(r5, &(0x7f0000000240)={0x11, 0x0, r7}, 0x14) getsockname$packet(r5, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) getsockopt$bt_BT_RCVMTU(r5, 0x112, 0xd, &(0x7f0000000300)=0x7b, &(0x7f0000001b40)=0x2) getsockname$packet(r2, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) sendmsg$rds(r2, &(0x7f0000001b00)={&(0x7f0000000100)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000001440)=[{&(0x7f0000000140)=""/221, 0xdd}, {&(0x7f0000000240)=""/158, 0x9e}, {&(0x7f0000000300)}, {&(0x7f0000000340)=""/223, 0xdf}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x5, &(0x7f00000018c0)=[@mask_fadd={0x58, 0x114, 0x8, {{0x2, 0x5}, &(0x7f00000014c0)=0x10000, &(0x7f0000001500)=0x4731, 0xd37, 0xffffffffffffffe0, 0x5, 0x6, 0x2, 0x9d}}, @cswp={0x58, 0x114, 0x7, {{0x8, 0x9}, &(0x7f0000001540)=0x8, &(0x7f0000001580)=0xffffffff00000001, 0x87, 0xd179, 0x100, 0x3, 0x1}}, @mask_cswp={0x58, 0x114, 0x9, {{0xfd3, 0xfffffe9c}, &(0x7f00000015c0)=0x151, &(0x7f0000001600), 0x4, 0x11d4, 0x2f, 0x47, 0x20, 0x3}}, @mask_fadd={0x58, 0x114, 0x8, {{0x5}, &(0x7f0000001640)=0xe6df, &(0x7f0000001680)=0x20, 0x2, 0xb5, 0x3ff, 0x2, 0x0, 0xffff}}, @rdma_dest={0x18, 0x114, 0x2, {0x2, 0x6}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f00000016c0)=""/1, 0x1}, &(0x7f0000001700), 0x2e}}, @mask_cswp={0x58, 0x114, 0x9, {{0x1ff, 0x3}, &(0x7f0000001740)=0x4, &(0x7f0000001780)=0x1, 0x0, 0x7, 0xc6c, 0x7ff, 0x42, 0x1}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f00000017c0)=""/147, 0x93}, &(0x7f0000001880), 0x10}}], 0x230, 0x20000080}, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2284, &(0x7f0000000000)) r10 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r10, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000007000100070c10000000000000000000", 0x58}], 0x1) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00') sendmsg$L2TP_CMD_NOOP(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r12, 0x1}, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r10, &(0x7f0000002040)={&(0x7f0000001bc0), 0xc, &(0x7f0000002000)={&(0x7f0000001f80)={0x64, r12, 0x111, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xde2}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r2}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x3d2f}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}]}, 0x64}, 0x1, 0x0, 0x0, 0x45}, 0x0) modify_ldt$read_default(0x2, &(0x7f0000002080)=""/252, 0xfc) 16:19:06 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982b", 0x7}], 0x1) 16:19:06 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f47", 0xd}], 0x1) 16:19:06 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f47", 0xd}], 0x1) 16:19:06 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982b", 0x7}], 0x1) 16:19:06 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f47", 0xd}], 0x1) 16:19:06 executing program 0: writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f47", 0xd}], 0x1) 16:19:06 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982b", 0x7}], 0x1) 16:19:06 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x107083, 0x0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0xc7fd104469a7c331}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, '/dev/sg#\x00'}, @NLBL_MGMT_A_DOMAIN={0xc, 0x1, '&vmnet1\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}]}, 0x60}, 0x1, 0x0, 0x0, 0x155}, 0x4010010) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x8, 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r1, 0x0) ioctl$SG_NEXT_CMD_LEN(r1, 0x2284, &(0x7f0000000000)) 16:19:06 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d", 0xa}], 0x1) 16:19:06 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000300)) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f0000000080)=@v1={0x0, @aes256, 0x1, "796242137f86a8d8"}) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2, 0x4010, r0, 0x2000) ioctl$SG_NEXT_CMD_LEN(r0, 0x2284, &(0x7f0000000000)) r3 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x4001) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r3, 0x40184152, &(0x7f0000001680)={0x0, &(0x7f0000001600)=[&(0x7f0000000100)="b5750183285cae6746294a3d7eb6232cec37e2312c4741f250b66c", &(0x7f0000000340)="9563316c4b48b7730030051f5d60c89292e21c8cadd16b5fd9cdcfbbf901e71429da0e443190f746a253b056468936cd540f97a247341006059a5450aa38974f77305e2a513149d4dc517b2d18d6920939176b96bd9e95ac7117358004d7d3efdf2a34f16907ec7dfcb1b58b19dd207ae49f39f7998172506400a276a88832985872b8ac5270a3f90bd037e24dc7bd6fec56213105d95fc40f4553a16205e125cdea45019b47ad9fcf3c9b350ea4ad693c316ac4f364a0844d6daf9feb007b058f93a7cfc6d7ea28a4b48ffd891219ef398cfad6a168222027aa2212d70cc46f84a3fb77af798c8f58e26b6ca3f4bc081fbd072e415523f35e58a75e9e54713f7a677c02f8e7816ef210b94940b96c96be61d55ce99419b5a12f4e7a5efbdea08d20b6c235d4dad13b793f3d0fcb67cafca8a1890e48c6c0535b468ffd5c25f8039d203a93176f622e1b09348df422f492a1cfac47b4840198eaaaaa123daf29ce71999488b5b5a0aa87e25768a31f56fa4a1511691c3bb08a30a26096f4f2adff962f24eb1bbda9ca9562715b01050c1faf922502ff9d2178236db2ead1a3c2d6cbcf18c2d4df498823d71dc8d69a3f6c0536b52bf6f775fd2e7da4e093e2b458f0b164d4f672fecec48372b3f275cfc66d605a88a0f37f94e7de6e35a95a526344cfecffbcb36a82301bf5472a57d07fd3f0f539af9b604a6dcb1172d7f2b8c34588c9b0d22472ffbc9ec1aadaf5df68826f40dd1dfa25eaa8891c8c5438d03f96ad5d024328b331c698d5264f3cd3902084809b34990f8db40f7b77a4734de6b21da30d37a475289a8590cc7c124924f0d4026bbf5fb0557ed176fce46fb858c30e1af4ff2885319d09080bdbd0410cebfd4766f3148f6e7942dc594fb74930088e47a16063de033b86e8e9ccc246bd96397659fb21c2441ee60da9f3517d3c7ed9e3574bd47a73f35185887cdbdcd942618cb757805160bda3dcf49cc67969a0f6a0bd1773f326b3ba9782000dc75492e74ae64646d6fe703b2cfae68acd427f1ab3ca2c99ff50ccca2c35f21947a88576d4c55e80c2afd5d17efb295024bbc5d48b3ce74f6a9ce5a3d9b51f402eea2d0a7c2d515772e0af5c89c126df85730f523517c8469fda79a5122ea543715c3a6d4fc624644f5e54d870e1eabec0768b9734f927c3f1f1f921b37033ac930aeee05ff8302a03cdcff824e53dbb8db0a0f2cdeaed2e52c00fc7112f687b2d192e1ff8ae0eb4c9b57f186803e97c5d61c3ad331b41c45009adb752a7c119b4f1d2929d906821b63a4aca84440fc4c5e4ddd1cc8ec85e4fdd4e537301cce8e31f0b2a2198db4c6c641e9e64c337a6a94e73d7e9426cf72bd842150c7f13f2c1c37fb25fbdf9c8fd24c913508b74ad0c5d83b6d365a3f0106b60e2972d00f2aa7cd4a51cb3684d1223bd7eb4fed9b5f012779e38a8a4a709e687f39a559568bc29f27b0082345c4d991a8a836c97d4991f9b92df739f4f253763210f7c37f5a6f3d46adbd60b48da86b9e7dabc88f7a7b62b266c0c798fe67f7a49209a38bb3e946681d0e494870d5fbd0a938a62ec6fd993b790321da22abf6b91a2ffda1c24101fe0d0eae51218fa4a2b53656739bac4c78b213cd6c1e68f4d553fb83fbd0c7de5434867b450510418292ef61b0e00660f759fd435dd4951bfdb96015758e9b5b9e03c8cee79b4ceaec44f57718441a62e261f20c0617e0a6e26aa3f9378b2944bbb3ddd56fb65a51b1e6e5b375c23c951c654bf20d7cc38abb1fd1d4dbb6aa396fa10cf8666342f526d8b8b7f7e2e2856b8fc6887e2c10675430631dab68e327404558f29f507c78a63e8361b0ed15d20923817f628830053b10c847a5e282b07e57826b9764e96728f1cf5060437260d873507700b98a750e61ccdd6d0a02c2cffebca8d3b3ebc51f8444aeb5d760368f2beb733fe24f30296bfb3cb91d69de30fe4e2898f83d91bf553c8df6090336255f8983084ed91a05c59f9a9d995f431165245a0261f3a68bd362a76003398151a3c6f2aa6424b25cb9962a2ae18ee466f6ed0ff38aa1849e4c0d3bce50989a886ca29ba403ac395c0f4b8d29e9e6fc526d52dd48917fe23d72993bcf1da75427fd77ea2a704135c6dc52f75ec4ef65bee56bce1d711160230f60ce2139f48746389d92dd6448282c56f5874629d3a527750d8b5f447dfa4d9063ed88304020a5e46c28754cd4add96e3fb29dcd251107f4f32dff34d4c14a43d813186bcace2da4b1c16cae2ae780abd1de7b0810ccc2a3b9d55822e552505e4f683c6e217cb65a78f729722c6afeb4ddab2a887687e6874f31381973e7d8603578764b0722fc3838432afc6e6fb2b718abe8653649e3d2b04e10b0ba7787b19e2f15090c01a9e23cbd587a69a8389586fe5b5949a19e5fed1f73805ff55b956fc4e1287aba5d7a18b7329f716aaece39bf0e1f5296a7870af3cd23b84eee9255cf18d6365fbe762acefbb19645362906950c86fc0b88ae68bcff4ab1d3d8a64e03d75525e6bfbc38c9a2a28d1f299314e65cbc95828b0ef7752e1a4f347d21ce0ddb509cb617298103a33feb6054e199ab68a1850bd473b9dbdedf9e9684bf11b584da62417653f700aab2cf8fd12c28a3c9c2a53a7f3aad2824afa341c04953c9b16d9d8c4c992c2801689a3982c37beac12f9561c20f5d0847a5eac29972269e98406a7fbb7806a1b9682ebf0890a7eb6b090b857a7e93cfa804639761721788ff6ad61ecd3449b0f79b25c8d9549efb3917dbdbf0568b0071344f792c8d343cc5bb9fd8cd79d31d01b2b0896156c228e25af6bbb8aba2b1bf603130bfdb5c2fc8014577e6311a1342a64dbe148e2cf358681957c4d2d03d20ff581228a8c066a846084daf5fa1132113fd1e9d6ec078f566499cddacbc2c4454372b5b26ded336f5571def3daa9b88da53ab33b8aef7f7b24cff2369f6d9a5131218e2fe2d58b90005acf94c6dd44c20155562e7b6607a74301126e2121481bc22f28f41ea59edce49eb630ccd7a9c7cd7df98b5c099f39512c5015a247b6c7f52e7d9f6a0f42b11403b562e27c2552c43b420d934b46bbd516274be9605e68e296902d0b3c05725d7392a3c4ff07dd2fbe43343409291102798b2770991e3ecfd762728cccb695a948226795db4729daf3e2e0a285ec54c4376600cab1b3685aa98e9a6cf4873f97de2e3e0fecdbe2ddfe3e7d8873494fe5b395a967f2ac40d1dd57fa2bd420c5469c339f18028a78a9790a7af971bcff1e7a6ad8c7f14a3811948a3fd33b19170209716f663fecbb5bed5e994d5dce2898c0ea4fa3167cf3119323d9977b7ce2e120b654e28e28b4b685831e99339efb51b9e5b52096d1efdf3edfba0fb9dc5a05affdd6fabc4b70edb4c85943847167340d4fa5a81fb94dba144f166b39bfa804b29ee826dd7bb57efb7d963920995b01d24bf0ffa06a1e3b2d873328ec99ecdfed7b67bbf40c8b61e0a852b847d82fc604663d76474a02114cc3d970d02002e9c7431ee9f1b0a8e26803993139deafecc56917381955a6d5038b054a8c0af2fcc0efe66be64835534b33981823a417f7ef86177b0a6c211b53165ff51769f6b1d186da45776b5f9d5e72a0eade659d8206a29c501f16ce6f3c42ddbec6cd75fcaa52080a970d7641a7a9f6626160c882bd942b9a8135efce67eb135c49dee3801623fcf0d741e0cff2dc06a8cd02fe785e6de358b49e1d35d80f102504b8fe7f2bafdfc753a810c0c815ccc19e0f40f3d389c998be018fe2a367364776f3c6d91300294f60ac5f876d50d905eab5e378f7e93d55c02eadd60c2b5f6bc5b19ab6d16712ce43636b74915c039a3094dceef25c9d880310ceba8ad5c7f75623bdcd7d3432151f0e177f0ad71fe31009712e39dde566a0b9a6d65f076ea873eaf3b2a1284c945d6b19e218111f519047df08230bd946ca4f2bcbe4783ed51e96018b8a924a1783e79ce05f874b681e286c703cf8f77464b53b36ffd0ff6ca0740fe6a46d37779749f0c2521ce563aa1b92ad63ab1db9bd00671fcf4116ebe9a0f8a7b1fca317766312ee0de47387a599c39716c08bee9d1812be26ed07dac893489babfe86e6e22d479740530881e103d679ea0376d1118cb9a54b08e807dbb6114a6442ef08857a5c7c413cb594169f8c87c463a440cb54bdf2ab46e85582cd97042e4ccbcc7e74e5325a2bc59309c003539b8788a99f3342aa544c6bbc778a9a8becc85659d474fd8383e3184c69be58cb1d22dd52cf6cc82ccf214359a2b90e24cc2203c2e15537a253f5418f42cfecc5fe9227ecfe7ca7476a4b390cea7d27cd848bc7cd5355b00c74363186ad4d5c06f1c708926186f8e8a338f81b88211134b35ae1e8240c97a33a9801384a4f60d550bca551cc3e1ef44e5766716d9d17529c49170401f253b252685a3a8f0197e72dc978ae84977f66046cda8af09b4a941df006025afcb57030c6d7e54066154f3d484ea6fcb19d83d91e12cf4f570081cbf20d0ede87cd614f426b4a68a338cfdf90dd713d7449c4675498ff72fa20a2abc0537c81ac24b0ceb1efb5578145f67112a47f6a9caabe416a50c94b08402e037b4edb51b0f40bbf200e0acbb77d6d15b561155a6357a0ebb92b8e402f986bcc46723dfe2ef4367ca8262e0f8631050d0a78c4f18e2c44cdb2610741dc85be2c10606b4f6af038a36de669a0c66c19292214cbdd210f3ae13c2e88a96b1bd93b24dc28a0780503c0c31b0824fa4f4b1198c082a1cae2f7aba84075223d0202fd9c5002bce62036056da8f7b84da63b5d7690e1532dbe372b913d78d0918c227a78e0fc952077deee4fd5f9b25d0b878c15646bb89533b44030337759504cbabc75bfe6efec74efa0be82bdeae104632ce9abcb0e45a69ca2652d54ea604beacc83a853d5506256a9dadb3d993691366336aff194936a4a9dd68cb848a01cf1f4f8f887adb133eb114aec32cd21822a31794c5f670b553f14a728e9c0dd02e2b005bde690b7e099dda14d412eccb75cce70873e92bc209f7d64fea9fca78a5f51d8d6f639d6c0866f92466bc844302045b5ba009f921444850e295ef43a5258e2807be93fdba5931efa889746013738fc1876ab9469a4d424031dbec2321e1c6d155ba2d7d96d35edec3783440f03009525894f7e642e8b823f799374e01a2ac62444e3360439336e5c17ebc62d977ee9830b41828d091b16e66a5e1ac492bee16efe897750396e4d42687ec7ba259d7762c68c250ee0c347072ff05a0234a1ad44edadbd62f8f905fda0bd55824879b345312cea54b667c38365ccd9e4cbaf26693909ed49049b1175bbcd1e5eef5a39439ef5394a350c0a241a3c89cda34e1c3f882be6356ca4827ff1908df9ade1738d76fa5bda7c48ed75a0c03b4e6f621d22ec09ebb66cef516c1a552a419dfc72f5584192e39402f1c05c91740872339b93900bb0939ed3659419f51672a8670d4496d64c977b914d4a88c9c7df6d037f6f5574d9899f217d4b322d44f3372c26e5d94d30041e3ae84ef47860c9cd3011f590d9ba6f9dd1f869a81a59e0fa444cdbf02105463f1a6f9de4c157e207d2a2c5ababb98791c9df32ef8e586910a357a2f0a0545a47e4168eb78bbbc9bd2239c76583734645e531f0fee83e003d91173e2541da7c9a238b4376704ee2a4c3f19341c64d6232a5b6997c182ae56b58c48bd4f19f21fe45cb45ec141d6b19accff92a8ee1ad39d5cb8ce1041e8e30cf37c80b96708dd10f0aafd3dcf1d8e379", &(0x7f00000001c0)="4c4bbd312523c9b339f7cd84d299cc14819c56010ac5de2463f5473392f46b7d06f3c5cfa64cdef329b3f633a4ade8f3f81705d3b27b8d7edad31855586dca2a268e2d3059329a8bb7957e3c3b7307ade830fa291c867bf42ed4ce538905fddb1224f18a8dcd2fbabcbd90ea13e5cbf52f6bcfb322e022c79d55ac39dcc4c8c430fdabda5e14f8342bc28e1a03ea197040145e5cb5cdfcf0b1c177867db8b344c879c19034d04e11fc9bbfca5247c217e4e7a1d1c824ab8373c9592b04b65b225c4513b00880a22f3c9de6608d46fdd4c354577e498c21f797ddbca44dc6c3144c", &(0x7f0000001340)="4b8734c3b4cf4208900e96854f9dc27181ddfb7d3b07522fde142576c9f96987d70caa6c295f395297bf9648cba00224f4a988968d1ec27cab3bd2d602caa0f2127f81ab43c1e5a16cd69360b65028d2d9ca661b7cf6564550e43513da2d83aa55326d1e0bd380fac8e6e4c585000a751ecfd25bc70504e1595e6010999e9dea7b88a1d11f7072cac57f5e3e6ef6b9", &(0x7f0000001400)="2ac12fc52fc386a776d7a6c30aa319b7f917dd0ffd1346205a9f10c7793c27a89dc1fc0a30929a73408e4acab380da01ff2935a5f9a3ac62920175cc97fb7983c4c771c568efdb48d89cd1538473", &(0x7f0000001480)="c5dd54c39d77dfa67d27a3852e20a56563861ea5b90253f2a88e4be5205d7c7cb04f00ed60fcefb76368a689bca6d93fbf7f7d8c654258741af995e2a7a271dbe4bb3c44e3471c3a665045938d121a831bbb0b03fc442a005c962ed3a7db8d26a1c072891a413610c47523c9e5be576c96c8aedb917165002241648afe9e66ab6b390a27267c18efcc8467ff92b40406490fe4b7fa5ee3c7301043313099e8820c52958ad67a2672e1adef9fa7b059ad04c766a305bf30fc643134c65f405b41537425f8d3716e9a6eeeab96bd", &(0x7f0000000140)="d3ebf6645680104b802e3ef8d26fc23455577b466c06a12129bf45f3d00756f62dfe03f882a9aa3ea525675725c9a83e818401b07c", &(0x7f00000002c0)="0808a007a753ecf96a1a898da06140a3d67ad37de34318da90261539a8a41cc433bdeda89bed5a6d2e71c6866a19af3480dd2937bd8df4eb3b5a3e47deac", &(0x7f0000001580)="019a66aacc4df54fad1467489aa33e96ab64f59c0db549bfb9a26b914341ffc4b0edad1d33fc85bd7e7d16d6e1044a5d064eb2146df21b20650ab76b9f07eb4fbf03d50bdb99e3e7728b39053ba18fb8c5edefd79f5f712f"], 0x101}) [ 513.011522][ T27] audit: type=1800 audit(1578759547.006:43): pid=15428 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=17070 res=0 16:19:07 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d", 0xa}], 0x1) 16:19:07 executing program 0: writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f47", 0xd}], 0x1) 16:19:07 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r1, 0x4605, &(0x7f00000001c0)={0x6ac, 0x4, &(0x7f00000000c0)=[0xca, 0x4, 0x40, 0x0], &(0x7f0000000100)=[0x5, 0x1, 0x3f, 0x8, 0x2], &(0x7f0000000140)=[0x8001, 0xfffc, 0x400, 0x5, 0x7fff, 0x7fff, 0x1, 0x3], &(0x7f0000000180)=[0x4, 0x4, 0x0, 0x4, 0x7]}) ioctl$SG_NEXT_CMD_LEN(r0, 0x2284, &(0x7f0000000000)) 16:19:07 executing program 0: writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f47", 0xd}], 0x1) 16:19:07 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d", 0xa}], 0x1) 16:19:07 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f", 0xc}], 0x1) 16:19:07 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f47", 0xd}], 0x1) 16:19:07 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000007000100070c10000000000000000000", 0x58}], 0x1) recvmmsg(r2, &(0x7f0000007540)=[{{&(0x7f0000000080)=@nl=@proc, 0x80, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/228, 0xe4}, {&(0x7f0000000100)=""/126, 0x7e}, {&(0x7f0000001340)=""/91, 0x5b}, {&(0x7f00000002c0)=""/58, 0x3a}], 0x5, &(0x7f0000001440)=""/231, 0xe7}, 0x4}, {{&(0x7f0000001540)=@rc, 0x80, &(0x7f0000001a80)=[{&(0x7f00000015c0)=""/146, 0x92}, {&(0x7f0000001680)=""/119, 0x77}, {&(0x7f0000001700)=""/213, 0xd5}, {&(0x7f0000001800)=""/34, 0x22}, {&(0x7f0000001840)=""/28, 0x1c}, {&(0x7f0000001880)=""/146, 0x92}, {&(0x7f0000001940)=""/86, 0x56}, {&(0x7f00000019c0)=""/173, 0xad}], 0x8, &(0x7f0000001b00)=""/201, 0xc9}, 0x8}, {{&(0x7f0000001c00)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000004000)=[{&(0x7f0000001c80)=""/113, 0x71}, {&(0x7f0000001d00)=""/4096, 0x1000}, {&(0x7f0000002d00)=""/221, 0xdd}, {&(0x7f0000002e00)=""/190, 0xbe}, {&(0x7f0000002ec0)=""/4096, 0x1000}, {&(0x7f0000003ec0)=""/70, 0x46}, {&(0x7f0000003f40)=""/91, 0x5b}, {&(0x7f0000003fc0)=""/12, 0xc}], 0x8}, 0x400}, {{0x0, 0x0, &(0x7f00000042c0)=[{&(0x7f0000004080)=""/13, 0xd}, {&(0x7f00000040c0)=""/231, 0xe7}, {&(0x7f00000041c0)=""/28, 0x1c}, {&(0x7f0000004200)=""/93, 0x5d}, {&(0x7f0000004280)=""/4, 0x4}], 0x5, &(0x7f0000004340)=""/179, 0xb3}, 0x101}, {{&(0x7f0000004400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000004600)=[{&(0x7f0000004480)=""/248, 0xf8}, {&(0x7f0000004580)=""/69, 0x45}], 0x2, &(0x7f0000004640)=""/19, 0x13}, 0x4}, {{&(0x7f0000004680)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000004800)=[{&(0x7f0000004700)=""/71, 0x47}, {&(0x7f0000004780)=""/122, 0x7a}], 0x2, &(0x7f0000004840)=""/153, 0x99}, 0x8}, {{&(0x7f0000004900)=@ipx, 0x80, &(0x7f0000005a40)=[{&(0x7f0000004980)=""/12, 0xc}, {&(0x7f00000049c0)=""/36, 0x24}, {&(0x7f0000004a00)=""/4096, 0x1000}, {&(0x7f0000005a00)=""/18, 0x12}], 0x4, &(0x7f0000005a80)=""/28, 0x1c}, 0x3}, {{&(0x7f0000005ac0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000005e00)=[{&(0x7f0000005b40)=""/185, 0xb9}, {&(0x7f0000005c00)=""/252, 0xfc}, {&(0x7f0000005d00)=""/251, 0xfb}], 0x3, &(0x7f0000005e40)=""/168, 0xa8}, 0x7}, {{&(0x7f0000005f00)=@l2, 0x80, &(0x7f0000007480)=[{&(0x7f0000005f80)=""/101, 0x65}, {&(0x7f0000006000)=""/4096, 0x1000}, {&(0x7f0000007000)=""/191, 0xbf}, {&(0x7f00000070c0)=""/63, 0x3f}, {&(0x7f0000007100)=""/215, 0xd7}, {&(0x7f0000007200)=""/213, 0xd5}, {&(0x7f0000007300)=""/178, 0xb2}, {&(0x7f00000073c0)=""/150, 0x96}], 0x8, &(0x7f0000007500)=""/43, 0x2b}, 0xffffffc1}], 0x9, 0x40, &(0x7f0000007780)={0x77359400}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000007800)='nl80211\x00') sendmsg$NL80211_CMD_START_SCHED_SCAN(r3, &(0x7f0000007900)={&(0x7f00000077c0)={0x10, 0x0, 0x0, 0xa400010}, 0xc, &(0x7f00000078c0)={&(0x7f0000007840)={0x64, r4, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x4c, 0x2c, [{0x8, 0x0, 0xfffffffe}, {0x8, 0x0, 0x7dd8}, {0x8}, {0x8, 0x0, 0x9}, {0x8, 0x0, 0x7}, {0x8, 0x0, 0x7fffffff}, {0x8}, {0x8, 0x0, 0x80}, {0x8, 0x0, 0x5}]}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x80) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x9, 0x20011, r1, 0x2000) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SELLOADLUT(r5, 0x541c, &(0x7f0000000000)={0xb}) ioctl$KDSKBMODE(r5, 0x4b45, &(0x7f0000007940)=0x3) ioctl$SG_NEXT_CMD_LEN(r0, 0x2284, &(0x7f0000000000)) 16:19:07 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f", 0xc}], 0x1) 16:19:07 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f47", 0xd}], 0x1) 16:19:07 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f47", 0xd}], 0x1) 16:19:07 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2284, &(0x7f0000000000)) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000080)={0x0, 0x71, "e738e24ab0019624be8e68819426b9aa0203fc5db2d0994dd40b83d90230aaf2b1ae83c05ac1a59a5a8dda1441ecbe0e238091427b84be3f5c58299863e128d7d97f403077b9333d703c2ae6c9610f3fac856a04277948bb8fb51ac383fd78326390965e72ea1925b090c2bbfa265c073d"}) 16:19:07 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f", 0xc}], 0x1) 16:19:08 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f47", 0xd}], 0x1) 16:19:08 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f5d", 0xd}], 0x1) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r3, 0x800000c004500a, &(0x7f0000000300)) r4 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000840)=@name, &(0x7f0000000880)=0x10, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r5, 0x800000c004500a, &(0x7f0000000300)) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r6, 0x800000c004500a, &(0x7f0000000300)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000a00)={0x0}, &(0x7f0000000a40)=0xc) r8 = socket(0x200000000000011, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r8, &(0x7f0000000240)={0x11, 0x0, r10}, 0x14) getsockname$packet(r8, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000000a80)={{{@in=@multicast2, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000b80)=0xe8) r12 = socket$inet6(0xa, 0x400000000001, 0x0) close(r12) r13 = open(&(0x7f00000002c0)='./bus\x00', 0x143042, 0x0) ftruncate(r13, 0x2008002) sendfile(r12, r13, 0x0, 0x200fff) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r13, 0xc0502100, &(0x7f0000000bc0)={0x0, 0x0}) r15 = getuid() setresuid(0xee01, r15, 0x0) r16 = getegid() r17 = syz_open_dev$vbi(&(0x7f0000000c40)='/dev/vbi#\x00', 0x0, 0x2) openat$cgroup(r1, &(0x7f0000000c80)='syz0\x00', 0x200002, 0x0) r18 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r18, 0x800000c004500a, &(0x7f0000000300)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000cc0)={0x0, 0x0}) r20 = socket$inet6(0xa, 0x400000000001, 0x0) close(r20) r21 = open(&(0x7f00000002c0)='./bus\x00', 0x143042, 0x0) ftruncate(r21, 0x2008002) sendfile(r20, r21, 0x0, 0x200fff) ioctl$NS_GET_OWNER_UID(r21, 0xb704, &(0x7f0000000d00)=0x0) r23 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/icmp6\x00') fstat(r23, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r25 = socket$vsock_stream(0x28, 0x1, 0x0) fstat(r25, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r24, r26) getgroups(0x8, &(0x7f0000000100)=[0x0, 0xffffffffffffffff, 0xee01, 0xee01, 0x0, r26, 0xee00, 0x0]) r27 = syz_open_dev$amidi(&(0x7f0000000d40)='/dev/amidi#\x00', 0x9, 0x400) r28 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000d80)='/dev/hwrng\x00', 0x16640, 0x0) r29 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r29, 0x800000c004500a, &(0x7f0000000300)) r30 = getpid() sched_setscheduler(r30, 0x5, &(0x7f0000000380)) r31 = geteuid() r32 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r32, 0x800000c004500a, &(0x7f0000000300)) fstat(r32, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r34 = getpid() sched_setscheduler(r34, 0x5, &(0x7f0000000380)) statx(r1, &(0x7f0000000e40)='./file0\x00', 0x2000, 0x100, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000f80)=0x0, &(0x7f0000000fc0), &(0x7f0000001000)) r37 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r37, 0x800000c004500a, &(0x7f0000000300)) r38 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r38, 0x800000c004500a, &(0x7f0000000300)) r39 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r39, 0x800000c004500a, &(0x7f0000000300)) r40 = openat$audio(0xffffffffffffff9c, &(0x7f0000001240)='/dev/audio\x00', 0x5df3e46503ea6621, 0x0) ioctl$int_in(r40, 0x800000c004500a, &(0x7f0000000300)) r41 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r41, 0x800000c004500a, &(0x7f0000000300)) r42 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r42, 0x800000c004500a, &(0x7f0000000300)) r43 = socket(0x200000000000011, 0x3, 0x0) r44 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r44, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r43, &(0x7f0000000240)={0x11, 0x0, r45}, 0x14) getsockname$packet(r43, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) r46 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r46, 0x800000c004500a, &(0x7f0000000300)) r47 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x20504, 0x0) ioctl$int_in(r47, 0x800000c004500a, &(0x7f0000000300)) sendmsg$unix(r43, &(0x7f00000011c0)={&(0x7f0000000680)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000800)=[{&(0x7f0000000700)="d859d66b9e7506a2839e7416997598717d17b3c00942c776123d17f03fa4638f95f8a851ee7dc67fd83a3982e986e4069091e626138a63f22aa1c08ee47e295f47ce5654c23c0ed64c78d8b37167ceadceb93af4ae285501a4ccc82dc2234e31fd2b1c82c7483bd92dbefbbb7f382cbcabc8a108121db479dfa93131863769b7da2729f2baa0eb25a75348ed21107942f181daa9104861565bc04e403fcb3d94ae96b4cc51d5a22233911e4ab224b7896bb706b85c4af32d96e573ad41a0081581a2994c60cbd2", 0xc7}, {&(0x7f0000000900)="46ec26bf689b47ffce3521476957534a78b0dd62cde568d723d0776a3f75383765737683731c530000f341c637ded7bef85aca3a34098fcb8bd30a7b69934728411839d06805f8a8d244e1f8eea23c73aa6cbeccb29bb525900cb230c05068eaad3a33b462404ec140ddfbe66a46be59f33890cadd3f90738735b01c0bc3eaba4cfc35cccd3360c1ee9ef708753d725d5d7f031d1a81ca4c136c67151856a5294fa55f768f459727f6ee471b8ec946ae3284ba57e375c3ffe7fc4b913cbc6a91e69372cf351ea3cc2064198002ade5be228b4a018d251aa9b721e8", 0xdb}], 0x2, &(0x7f0000001a80)=ANY=[@ANYBLOB="28000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r7, @ANYRES32=r11, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r14, @ANYRES32=r15, @ANYRES32=r16, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r17, @ANYRES32=r0, @ANYRESOCT=r42, @ANYRES32=r4, @ANYRES32=r0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r18, @ANYBLOB="000001001c0000000000e49ed9510000020000004fe8b5b9b8056d73daa6466724dd1082dcf866ac07522288dee02b3bd3561fbce4", @ANYRES32=r19, @ANYRES32=r22, @ANYRES32=r26, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r27, @ANYRES32=r28, @ANYRES32=r29, @ANYRES32=r1, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r30, @ANYRES32=r31, @ANYRES32=r33, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r34, @ANYRES32=r35, @ANYRES32=r36, @ANYBLOB="0000000038000000000000000100000001000000", @ANYPTR64=&(0x7f0000001040)=ANY=[@ANYRESHEX=r47, @ANYPTR64, @ANYRES16=r46], @ANYBLOB="1a572aa19d62f30143ed9bb021714887b1cbd7ac5c3b25e01cc9840a65444838b8f87e3bbabfd3cdd9a7d4b86edcdc1416682365e2c982bcc4482ad2c1d87ad0d3472ebb512f870e8d1ac51afe55368c9e2e595e38f82f2a108a9f5c10c7da691ff7074fb9b70425929ed1f1adee523f2cb4dcdba6e51f4008d34d73af28de853daaa24b5d55cfd2b7e36b", @ANYRES32=r1, @ANYRES32=r39, @ANYRES32, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32, @ANYRES32=r40, @ANYRES32=r41], 0x21f, 0x4000}, 0x80) getsockopt$inet_tcp_buf(r1, 0x6, 0x0, &(0x7f0000000580)=""/214, &(0x7f0000000480)=0x19f) r48 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SELLOADLUT(r0, 0x541c, &(0x7f0000000500)={0xb, 0x7, 0x0, 0x3ffffffffffffffc}) connect$netlink(r1, &(0x7f00000004c0)=@unspec, 0xc) ioctl$GIO_FONTX(r48, 0x4b6b, &(0x7f0000000400)={0x3, 0x1b}) 16:19:08 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, 0x0, 0x0) 16:19:08 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2284, &(0x7f0000000000)) r1 = socket(0x200000000000011, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r1, &(0x7f0000000240)={0x11, 0x0, r3}, 0x14) getsockname$packet(r1, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000040)={r5}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000080)={r5, 0x8}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={r6, 0x1ff}, 0x8) 16:19:08 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, 0x0, 0x0) 16:19:08 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, 0x0, 0x0) 16:19:08 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540), 0x0) 16:19:08 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540), 0x0) 16:19:09 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540), 0x0) 16:19:09 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{0x0}], 0x1) 16:19:09 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xf, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2284, &(0x7f0000000000)) 16:19:09 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{0x0}], 0x1) 16:19:09 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r2}, 0x14) getsockname$packet(r0, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000040)={r4}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_id=r4, &(0x7f0000000040)=0x4) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000007000100070c10000000000000000000", 0x58}], 0x1) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_LISTDEF(r7, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1080480}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r8], 0x2}, 0x1, 0x0, 0x0, 0x814}, 0x10) sendmsg$NLBL_MGMT_C_LISTDEF(r6, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x70, r8, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x5bbab98222d8278a}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x4000) ioctl$int_in(r5, 0x800000c004500a, &(0x7f0000000300)) writev(r5, &(0x7f0000000180)=[{&(0x7f00000008c0)="7c8d800ed9052be49b0d317f5d", 0xd}, {&(0x7f0000000100)="699cb40c065808e82d047eefdf87522c0655dc7841d67d2130a430a53d168ac672e41a8b46a47b02c3104ff1e854b0356f05e42ab61de6d30c4d87", 0x3b}], 0x2) 16:19:09 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0xffffff6e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(0xffffffffffffffff, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r2, 0x10099b7) sendfile(r0, r2, 0x0, 0x88000fc000000) 16:19:09 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{0x0}], 0x1) 16:19:09 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000300)) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0xf, 0x4010, r2, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2284, &(0x7f0000000000)) 16:19:09 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)}], 0x1) 16:19:10 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)}], 0x1) 16:19:10 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f00000002c0)='./bus\x00', 0x143042, 0x0) ftruncate(r2, 0x2008002) sendfile(r1, r2, 0x0, 0x200fff) ioctl$SG_NEXT_CMD_LEN(r2, 0x2284, &(0x7f0000000100)=0x58) fcntl$getown(0xffffffffffffffff, 0x9) r3 = socket(0x200000000000011, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r6 = socket(0x200000000000011, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r6, &(0x7f0000000240)={0x11, 0x0, r8}, 0x14) getsockname$packet(r6, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) r9 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r9, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x66, &(0x7f0000000040)={r10}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f00000000c0)={r10, 0x9, 0x47, 0x6, 0x80000001, 0x8c9}, 0x14) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) bind$packet(r3, &(0x7f0000000240)={0x11, 0x0, r5}, 0x14) getsockname$packet(r3, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) accept$netrom(r3, 0x0, &(0x7f0000000080)) 16:19:10 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f3b", 0xd}], 0x1) 16:19:10 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)}], 0x1) 16:19:10 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f3b", 0xd}], 0x1) 16:19:10 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982b", 0x7}], 0x1) 16:19:10 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f5d", 0xd}], 0x1) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = getuid() setresuid(0xee01, r3, 0x0) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f00000003c0)=0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x8, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x7ff}}, {@max_read={'max_read', 0x3d, 0x5}}, {@default_permissions='default_permissions'}], [{@uid_eq={'uid', 0x3d, r2}}, {@obj_user={'obj_user', 0x3d, '\'nodevcgroup$vboxnet1\\keyring}posix_acl_accesswlan1})'}}, {@uid_lt={'uid<', r3}}, {@fsuuid={'fsuuid', 0x3d, {[0x61, 0xb4, 0x51, 0x36, 0x1c, 0x64, 0x64, 0x37], 0x2d, [0x35, 0x61, 0x34, 0x33], 0x2d, [0x29, 0x51, 0x62, 0x38], 0x2d, [0x9d, 0x62, 0x66, 0x31], 0x2d, [0x64, 0x39, 0x51, 0x49, 0x64, 0xf3, 0x62]}}}, {@smackfshat={'smackfshat', 0x3d, 'md5sum'}}, {@dont_measure='dont_measure'}]}}) 16:19:10 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982b", 0x7}], 0x1) 16:19:10 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000040)={0xa30000, 0xe8, 0x3, r1, 0x0, &(0x7f0000000000)={0x98090d, 0xffffffff, [], @ptr=0x5}}) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r2, 0xc1004110, &(0x7f0000000080)={0x178d, [0x8, 0x40, 0x9], [{0x3, 0xfb, 0x0, 0x0, 0x1, 0x1}, {0x8, 0x1, 0x0, 0x0, 0x1, 0x1}, {0x100, 0x80000002, 0x0, 0x1, 0x1, 0x1}, {0xfffffffd, 0x8}, {0x8, 0x5, 0x0, 0x1, 0x1}, {0xae, 0x7, 0x0, 0x0, 0x1, 0x1}, {0x2, 0x5, 0x1, 0x1, 0x1, 0x1}, {0x4, 0x3, 0x1, 0x0, 0x0, 0x1}, {0x20, 0xffffffff, 0x0, 0x0, 0x0, 0x1}, {0x5, 0xffffffff, 0x1, 0x0, 0x1, 0x1}, {0x4, 0x1, 0x0, 0x1}, {0xf, 0x4, 0x0, 0x1, 0x1, 0x1}], 0x7fffffff}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x109001, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@ipv4={[], [], @multicast2}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@local}}, &(0x7f0000000240)=0xe8) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r2, 0x4038ae7a, &(0x7f0000000500)={0x80, 0x92e, &(0x7f0000000200)="922c6f8929", &(0x7f0000000440)="e84f6917165283f74f9d81f14289b4255437f052f8f408d167fc1107811ef9663dd1c50233d01c791756da62e429ff419c31505caafec576c700b1704303cd2742e3898c6e855ae97122d0dc38f484ba1e7724c06515f92cca93f4342bcb50b9a19100254dd6858ab0da6f93b803297d6ff54d45950a6458991cce2691ee923481ae282b8efb71df37c8145f2f8ea0c810d9e3", 0x5, 0x93}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet6(0xa, 0x400000000001, 0x0) close(r7) r8 = open(&(0x7f00000002c0)='./bus\x00', 0x143042, 0x0) ftruncate(r8, 0x2008002) sendfile(r7, r8, 0x0, 0x200fff) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)={0x3, 0x7, 0x400, 0x1, 0x961c478a5808704a, r3, 0x4, [], r4, r8, 0x4, 0x3}, 0x3c) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f5d", 0xd}], 0x1) 16:19:10 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982b", 0x7}], 0x1) 16:19:10 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f3b", 0xd}], 0x1) 16:19:11 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d", 0xa}], 0x1) 16:19:11 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d", 0xa}], 0x1) 16:19:11 executing program 4: close(0xffffffffffffffff) r0 = open(&(0x7f00000002c0)='./bus\x00', 0x143042, 0x0) ftruncate(r0, 0x2008002) sendfile(0xffffffffffffffff, r0, 0x0, 0x200fff) ioctl$KVM_DIRTY_TLB(r0, 0x4010aeaa, &(0x7f0000000080)={0x800, 0x80000000}) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000007000100070c10000000000000000000", 0x58}], 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4) r4 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2, 0x100010, r4, 0x86910000) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r5, 0x800000c004500a, &(0x7f0000000300)) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r5) ioctl$SG_NEXT_CMD_LEN(r4, 0x2284, &(0x7f0000000000)) 16:19:11 executing program 3: writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f3b", 0xd}], 0x1) 16:19:11 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d", 0xa}], 0x1) [ 517.430483][ T27] audit: type=1800 audit(1578759551.426:44): pid=15622 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=17081 res=0 16:19:11 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000040), 0x0) 16:19:11 executing program 3: writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f3b", 0xd}], 0x1) 16:19:11 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f", 0xc}], 0x1) 16:19:11 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000100)=0x1, 0x4) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000000c0)=0x100, 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2284, &(0x7f0000000000)) 16:19:11 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SELLOADLUT(r1, 0x541c, &(0x7f0000000000)={0xb}) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000000)) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x5d) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f5d", 0xd}], 0x1) 16:19:11 executing program 3: writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f3b", 0xd}], 0x1) 16:19:11 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f", 0xc}], 0x1) 16:19:11 executing program 4: mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, 0xffffffffffffffff, 0x0) r0 = mq_open(&(0x7f0000000040)='[:proc\x00', 0x80, 0x10, &(0x7f0000000080)={0x4573, 0x81, 0xffff, 0x8}) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x8, 0x4080013, r0, 0x8b12d000) ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2284, &(0x7f0000000000)) 16:19:12 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f3b", 0xd}], 0x1) 16:19:12 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f", 0xc}], 0x1) 16:19:12 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f5d", 0xd}], 0x1) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) write$binfmt_script(r1, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'bdev)^.vboxnet1'}, {0x20, 'wlan1\x9alo'}, {0x20, '*\x93'}, {0x20, 'eth1GPLnodev-}(}'}, {}, {0x20, 'em0&vboxnet0'}, {0x20, 'nodevselinux^$:wlan1$/lovmnet0security!'}, {0x20, 'em0eth0'}, {0x20, '}'}, {0x20, '+'}], 0xa, "2fbd3fb365565bdf651fcb7f696559d8f115603ba653d8586c12dade3d770bbd7ce9cb1d45e3f47b497603ff7b2ddf44dc28f82da53df2b29816f1a609e9a72a9d5f54e822fc46c394387724dea92025adc191e8154d8330a3ce4edce731675d37f04827025e3752240f6fbecccd061c2fde62cb0af0e5dd71374588e8e91945483992906f8f9fac8ef3952e9a7d258c2a2499fe6f96301b6c7eba85d04e38bd74485a2f10bf343c15af394509a31128ea2364802ecef82aa5792846b7a6e497"}, 0x13a) 16:19:12 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f3b", 0xd}], 0x1) 16:19:12 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x829, 0x40000) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2284, &(0x7f0000000000)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) ioctl$SNDCTL_DSP_GETOPTR(r1, 0x800c5012, &(0x7f0000000100)) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000007000100070c10000000000000000000", 0x58}], 0x1) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f0000000240)=0x22, 0x4) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$EVIOCRMFF(r3, 0x40044581, &(0x7f0000000200)=0xfffffffe) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0xaa6800, 0x0) ioctl$EVIOCRMFF(r4, 0x40044581, &(0x7f00000000c0)=0xffffff80) 16:19:12 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000007000100070c10000000000000000000", 0x58}], 0x1) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000000)={0x0, 0x75128991, 0x9c, 0x4}, 0x10) 16:19:12 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f3b", 0xd}], 0x1) 16:19:12 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2284, &(0x7f0000000000)=0x8000) 16:19:12 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d3e7f5d", 0xd}], 0x1) 16:19:12 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f3b", 0xd}], 0x1) 16:19:12 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x1, 0x1d9133dda1ab3995) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x10, r1, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2284, &(0x7f0000000000)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000300)) fcntl$setflags(r2, 0x2, 0x0) 16:19:12 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, 0x0, 0x0) 16:19:13 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d3e7f5d", 0xd}], 0x1) 16:19:13 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, 0x0, 0x0) 16:19:13 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d3e7f5d", 0xd}], 0x1) 16:19:13 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttynull\x00', 0x210002, 0x0) ioctl$PIO_UNISCRNMAP(r2, 0x4b6a, &(0x7f00000000c0)="f6adf326fb7fce6ee1e44695f663669c35d99b8f4ee6796d91dcf1f6db9722f9da5fc27484cdd386ebc22e457e3fdd71400f1f0351bae6b982ac1461fb54d959cdfffb054af9847aec3350f91d55652acf848fe1a9d412bb2715f3f6ac86abed4c241afef03b6c18443989ae27756412ea63680b8f3302d29b") getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001a40)={{{@in6=@mcast2, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@empty}}, &(0x7f0000001b40)=0xe8) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000001b80)={@mcast1, r3}, 0x14) syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x400, 0x20000) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r1, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2284, &(0x7f0000000000)) 16:19:13 executing program 0: writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d3e7f5d", 0xd}], 0x1) 16:19:13 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, 0x0, 0x0) 16:19:13 executing program 0: writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d3e7f5d", 0xd}], 0x1) 16:19:13 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540), 0x0) 16:19:13 executing program 0: writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d3e7f5d", 0xd}], 0x1) 16:19:13 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540), 0x0) 16:19:13 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d3e7f5d", 0xd}], 0x1) 16:19:13 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540), 0x0) 16:19:14 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{0x0}], 0x1) 16:19:14 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2284, &(0x7f0000000000)) r1 = socket(0x200000000000011, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r1, &(0x7f0000000240)={0x11, 0x0, r3}, 0x14) getsockname$packet(r1, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000040)={r5}, &(0x7f0000000140)=0x8) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f0000000040)={r7}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000080)={r7, @in6={{0xa, 0x4e20, 0x8, @local, 0xff}}, 0x20, 0x4, 0xbb1, 0x20, 0x7}, &(0x7f0000000140)=0x98) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000180)={r5, 0x0, 0xff, 0x5, 0x5, 0x1000, 0x3, 0x54a, {r8, @in={{0x2, 0x4e21, @rand_addr=0x1}}, 0x7f, 0xffff, 0x40, 0x7, 0x1}}, &(0x7f0000000240)=0xb0) 16:19:14 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d3e7f5d", 0xd}], 0x1) 16:19:14 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{0x0}], 0x1) 16:19:14 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d3e7f5d", 0xd}], 0x1) 16:19:14 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{0x0}], 0x1) 16:19:14 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d3e7f5d", 0xd}], 0x1) 16:19:14 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)}], 0x1) 16:19:14 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, 0x0, 0x0) 16:19:14 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)}], 0x1) 16:19:14 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)}], 0x1) 16:19:14 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, 0x0, 0x0) 16:19:14 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982b", 0x7}], 0x1) 16:19:14 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, 0x0, 0x0) 16:19:15 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x8004, 0x8800) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2284, &(0x7f0000000000)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r2, 0xc0305616, &(0x7f0000000080)={0x0, {0x9, 0x6}}) 16:19:15 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982b", 0x7}], 0x1) 16:19:15 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540), 0x0) 16:19:15 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982b", 0x7}], 0x1) 16:19:15 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f00000002c0)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2008002) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000440)=0x5, 0x4) sendfile(r0, r1, 0x0, 0x200fff) execveat(r1, &(0x7f0000000080)='./file0\x00', &(0x7f0000000300)=[&(0x7f00000000c0)='trustedwlan0eth1eth1*\x00', &(0x7f0000000100)='\x00', &(0x7f0000000140)='eth1ppp0mime_type.cgroup\x00', &(0x7f0000000180)='trusted.keyringposix_acl_access\x00', &(0x7f00000001c0)=')\x00', &(0x7f0000000200)='-[\x00', &(0x7f0000000240)='\x00', &(0x7f0000000280)='/dev/sg#\x00', &(0x7f00000002c0)='/dev/sg#\x00'], &(0x7f0000000400)=[&(0x7f0000000380)=')\x00', &(0x7f00000003c0)='\x00'], 0x1000) r2 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r2, 0x0) ioctl$SG_NEXT_CMD_LEN(r2, 0x2284, &(0x7f0000000000)) 16:19:15 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540), 0x0) 16:19:15 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d", 0xa}], 0x1) 16:19:15 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540), 0x0) 16:19:15 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d", 0xa}], 0x1) 16:19:15 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{0x0}], 0x1) 16:19:15 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d", 0xa}], 0x1) 16:19:15 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{0x0}], 0x1) 16:19:16 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2284, &(0x7f0000000000)) socket$phonet(0x23, 0x2, 0x1) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) r3 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x180800) kcmp(r1, r2, 0x0, r3, 0xffffffffffffffff) 16:19:16 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f", 0xc}], 0x1) 16:19:16 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{0x0}], 0x1) 16:19:16 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f", 0xc}], 0x1) 16:19:16 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)}], 0x1) 16:19:16 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f", 0xc}], 0x1) 16:19:16 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)}], 0x1) 16:19:16 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PPPIOCSMRU1(r1, 0x40047452, &(0x7f0000000100)) r2 = syz_open_dev$vcsu(&(0x7f0000000080)='/dev/vcsu#\x00', 0x3, 0x400400) ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, &(0x7f00000000c0)=0x3) r3 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r3, 0x0) ioctl$SG_NEXT_CMD_LEN(r3, 0x2284, &(0x7f0000000000)) 16:19:16 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d3d7f5d", 0xd}], 0x1) 16:19:16 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x80000, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f00000000c0)={'TPROXY\x00'}, &(0x7f0000000100)=0x1e) ioctl$SG_NEXT_CMD_LEN(r0, 0x2284, &(0x7f0000000000)) 16:19:16 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d3d7f5d", 0xd}], 0x1) 16:19:16 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)}], 0x1) 16:19:16 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d3d7f5d", 0xd}], 0x1) 16:19:16 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982b", 0x7}], 0x1) 16:19:17 executing program 3: writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d3d7f5d", 0xd}], 0x1) 16:19:17 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r1, &(0x7f0000000240)={0x11, 0x0, r3}, 0x14) getsockname$packet(r1, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) setsockopt$TIPC_MCAST_BROADCAST(r1, 0x10f, 0x85) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xd675ce2f2bc0fc4d, 0x80010, r0, 0x462ce000) ioctl$SG_NEXT_CMD_LEN(r0, 0x2284, &(0x7f0000000000)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x2865) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r5, 0x3) r6 = socket$inet6(0xa, 0x400000000001, 0x0) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r7, 0x800000c004500a, &(0x7f0000000300)) ioctl$SNDCTL_DSP_SUBDIVIDE(r7, 0xc0045009, &(0x7f00000000c0)=0x7668) close(r6) r8 = open(&(0x7f00000002c0)='./bus\x00', 0x143042, 0x0) ftruncate(r8, 0x2008002) sendfile(r6, r8, 0x0, 0x200fff) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = fcntl$dupfd(r9, 0x0, r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$RTC_WKALM_RD(r10, 0x80287010, &(0x7f0000000100)) 16:19:17 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982b", 0x7}], 0x1) 16:19:17 executing program 3: writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d3d7f5d", 0xd}], 0x1) 16:19:17 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982b", 0x7}], 0x1) 16:19:17 executing program 3: writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d3d7f5d", 0xd}], 0x1) 16:19:17 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d", 0xa}], 0x1) 16:19:17 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2284, &(0x7f0000000000)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) r2 = accept(0xffffffffffffffff, &(0x7f0000000080)=@ipx, &(0x7f0000000100)=0x80) r3 = socket(0x200000000000011, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r3, &(0x7f0000000240)={0x11, 0x0, r5}, 0x14) getsockname$packet(r3, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000500)={@remote, @dev, 0x0}, &(0x7f0000000540)=0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000580)={'vcan0\x00', r6}) readv(r1, &(0x7f0000000080), 0x0) 16:19:17 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d3d7f5d", 0xd}], 0x1) 16:19:17 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d3d7f5d", 0xd}], 0x1) 16:19:17 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d", 0xa}], 0x1) 16:19:17 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d3d7f5d", 0xd}], 0x1) 16:19:17 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d", 0xa}], 0x1) 16:19:18 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d3e7f", 0xc}], 0x1) 16:19:18 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x3b0d7000) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio1\x00', 0x208000, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r3 = syz_open_procfs(r2, &(0x7f0000000100)='smaps\x00') setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000340)={0xcf, {{0x2, 0x4e22, @broadcast}}, 0x1}, 0x90) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x20000, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r4, 0x800000c004500a, &(0x7f0000000300)) ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, &(0x7f00000001c0)) ioctl$SG_NEXT_CMD_LEN(r0, 0x2284, &(0x7f0000000000)) 16:19:18 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d3d7f5d", 0xd}], 0x1) 16:19:18 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2284, &(0x7f0000000080)=0xc1) 16:19:18 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d3e7f", 0xc}], 0x1) 16:19:18 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, 0x0, 0x0) 16:19:18 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1147326ffc79f75d, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2284, &(0x7f0000000000)=0xcf) 16:19:18 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d3e", 0xb}], 0x1) 16:19:18 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, 0x0, 0x0) 16:19:18 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) utimensat(r2, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={{r3, r4/1000+10000}}, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x13, r0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000140)={0x2, 0x17, 0x1, "3f635125fccd4f9347ee78b201c143dcc2ac0ca7b6a1d6cd4cdaeec656d7c39e", 0x47314356}) ioctl$SG_NEXT_CMD_LEN(r0, 0x2284, &(0x7f0000000000)) 16:19:18 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d", 0xa}], 0x1) 16:19:18 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, 0x0, 0x0) 16:19:18 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540), 0x0) 16:19:18 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x13, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2284, &(0x7f0000000000)) 16:19:18 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d", 0xa}], 0x1) 16:19:19 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540), 0x0) 16:19:19 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540), 0x0) 16:19:19 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x30300, 0x0) ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f00000000c0)=0x4) ioctl$SG_NEXT_CMD_LEN(r0, 0x2284, &(0x7f0000000000)) 16:19:19 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d", 0xa}], 0x1) 16:19:19 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{0x0}], 0x1) 16:19:19 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SELLOADLUT(r2, 0x541c, &(0x7f0000000000)={0xb}) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f00000001c0)={0x4, 0xff7e, 0x3, r1, 0x0, &(0x7f0000000180)={0xa30904, 0x20, [], @value=0x3}}) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000780)={0x5c, r4, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xce}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x40}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x40}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4044880}, 0x4000) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000080)=""/223) r5 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x434580) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000007000100070c10000000000000000000", 0x58}], 0x1) sendmsg$IPVS_CMD_GET_CONFIG(r6, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2010}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="6800000097bc1b64f36b0945c6faf869b1581c1a74cafef62b6cec55", @ANYRES16=r4, @ANYBLOB="00002bbd7000fedbdf250d0000009eff0200000007000600000005000d0001000000080005000400000008000900c0ff1f00210306000900000004000300000008000300000008fa050081000000"], 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x4004080) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r5, 0x0) ioctl$SG_NEXT_CMD_LEN(r5, 0x2284, &(0x7f0000000000)) r7 = accept4$alg(r1, 0x0, 0x0, 0x80000) r8 = socket$inet6(0xa, 0x400000000001, 0x0) close(r8) r9 = open(&(0x7f00000002c0)='./bus\x00', 0x143042, 0x0) ftruncate(r9, 0x2008002) sendfile(r8, r9, 0x0, 0x200fff) ioctl$KVM_GET_SREGS(r9, 0x8138ae83, &(0x7f0000000580)) fsync(r7) 16:19:19 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{0x0}], 0x1) 16:19:19 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x80000, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f00000000c0)={'TPROXY\x00'}, &(0x7f0000000100)=0x1e) ioctl$SG_NEXT_CMD_LEN(r0, 0x2284, &(0x7f0000000000)) 16:19:19 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{0x0}], 0x1) 16:19:19 executing program 4: mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, 0xffffffffffffffff, 0x0) ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2284, &(0x7f0000000000)) 16:19:19 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2284, &(0x7f0000000000)=0x600) 16:19:19 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2, 0x20011, r0, 0x3000) r1 = socket(0x200000000000011, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r1, &(0x7f0000000240)={0x11, 0x0, r3}, 0x14) getsockname$packet(r1, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) r4 = socket(0x200000000000011, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r4, &(0x7f0000000240)={0x11, 0x0, r6}, 0x14) getsockname$packet(r4, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000000080)={0x0, 0x97, "9b834542bb9e4deb2f22802674a44e6b943226758446b05bf1ede7bed8d96663a21f0b7ddef5f587bbe166cfe5aebfb86404fc4c17600f4de8a6af7f81c563043cc5a820446bade2e88c1eceffc72fb688a9c3e30016f20cac6a384f7ae79e2590e48c6635d970ef0a8d5985f3ff7bce34f2fc8d6ffacd1b6b65780635ee65ddaa570f618fd5ee30b6ec86f0c6d39c3db55bd53e91912f"}, &(0x7f0000000140)=0x9f) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000180)={r7, 0xffffffff}, &(0x7f00000001c0)=0x8) ioctl$SG_NEXT_CMD_LEN(r0, 0x2284, &(0x7f0000000000)) 16:19:19 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)}], 0x1) 16:19:20 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d077f5d", 0xd}], 0x1) 16:19:20 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)}], 0x1) 16:19:20 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d077f5d", 0xd}], 0x1) 16:19:20 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)}], 0x1) 16:19:20 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2284, &(0x7f0000000000)) r1 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x9f, 0x101000) mkdirat(r1, &(0x7f00000000c0)='./file0\x00', 0x4) 16:19:20 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d077f5d", 0xd}], 0x1) 16:19:20 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982b", 0x7}], 0x1) 16:19:20 executing program 0: writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d077f5d", 0xd}], 0x1) 16:19:20 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x1b, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2284, &(0x7f0000000000)) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x2, 0x3f}, 0xc) r1 = socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f00000000c0)={0x2, 'dummy0\x00', {0x30}, 0x1}) 16:19:20 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982b", 0x7}], 0x1) 16:19:20 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982b", 0x7}], 0x1) 16:19:20 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2284, &(0x7f0000000080)=0xf3) 16:19:20 executing program 0: writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d077f5d", 0xd}], 0x1) 16:19:21 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d", 0xa}], 0x1) 16:19:21 executing program 0: writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d077f5d", 0xd}], 0x1) 16:19:21 executing program 4: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r2}, 0x14) getsockname$packet(r0, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) getsockopt$inet_int(r0, 0x0, 0x9, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r3 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r3, 0x0) ioctl$SG_NEXT_CMD_LEN(r3, 0x2284, &(0x7f0000000000)) 16:19:21 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d077f5d", 0xd}], 0x1) 16:19:21 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d", 0xa}], 0x1) 16:19:21 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d077f5d", 0xd}], 0x1) 16:19:21 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d", 0xa}], 0x1) 16:19:21 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000000c0)={0xb, {'syz1\x00', 'syz0\x00', 'syz0\x00', 0x22, 0x80, 0x4, 0x9, 0x3, 0xbcd, "d8f45bc9f16bc42b3cfbf1e5e49632d24a46ce6536f4c8000c1137e22e5736fa7e14"}}, 0x13a) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000000080)) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2284, &(0x7f0000000000)) 16:19:21 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d077f5d", 0xd}], 0x1) 16:19:21 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d3d7f", 0xc}], 0x1) 16:19:21 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d077f5d", 0xd}], 0x1) 16:19:21 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d3d7f", 0xc}], 0x1) 16:19:21 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x40010, r1, 0xaef78000) r2 = semget(0xffffffffffffffff, 0x0, 0x1) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)) semctl$GETPID(r2, 0x0, 0xb, &(0x7f0000000540)=""/229) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) semtimedop(r2, &(0x7f0000000080)=[{0x4, 0x0, 0x800}, {0x0, 0x1, 0x800}, {0x2, 0x7}, {0x1, 0x626, 0x800}, {0x3, 0x5, 0x800}, {0x1, 0x1, 0x2000}], 0x6, &(0x7f0000000100)={r3, r4+30000000}) ioctl$SG_NEXT_CMD_LEN(r0, 0x2284, &(0x7f0000000000)) 16:19:21 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, 0x0, 0x0) 16:19:21 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d3d", 0xb}], 0x1) 16:19:22 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, 0x0, 0x0) 16:19:22 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d", 0xa}], 0x1) 16:19:22 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000007000100070c10000000000000000000", 0x58}], 0x1) recvmmsg(r1, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)=""/190, 0xbe}, {&(0x7f0000000180)=""/201, 0xc9}, {&(0x7f0000000280)=""/243, 0xf3}, {&(0x7f0000000380)=""/173, 0xad}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/182, 0xb6}], 0x6, &(0x7f0000000600)=""/25, 0x19}, 0xfffffff7}, {{&(0x7f0000000640)=@llc, 0x80, &(0x7f0000000800)=[{&(0x7f0000001980)=""/251, 0xfb}, {&(0x7f0000000b40)=""/33, 0x21}], 0x2, &(0x7f0000000840)=""/75, 0x4b}, 0x5}, {{&(0x7f00000008c0)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000000940)=""/219, 0xdb}, {&(0x7f0000000a40)=""/176, 0xb0}, {&(0x7f0000000b00)=""/48, 0x30}, {&(0x7f0000000b40)}, {&(0x7f0000000b80)=""/26, 0x1a}, {&(0x7f0000000bc0)=""/113, 0x71}, {&(0x7f0000000c40)=""/76, 0x4c}, {&(0x7f0000000e00)=""/60}, {&(0x7f0000001a80)=""/221}], 0x7, &(0x7f0000000d40)=""/49, 0x31}, 0x972d}, {{&(0x7f0000000d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}}, 0x80, &(0x7f0000000e00), 0x0, &(0x7f0000000e40)=""/161, 0xa1}, 0x2}, {{&(0x7f0000001c40)=@generic, 0x80, &(0x7f0000001500)=[{&(0x7f0000000f80)=""/185, 0xb9}, {&(0x7f0000001040)=""/144, 0x90}, {&(0x7f0000001100)=""/22, 0x16}, {&(0x7f0000001140)=""/169, 0xa9}, {&(0x7f0000001200)=""/229, 0xe5}, {&(0x7f0000001300)=""/202, 0xca}, {&(0x7f0000001400)=""/252, 0xfc}], 0x7, &(0x7f0000001580)=""/14, 0xe}, 0xffff}], 0x4000000000000d8, 0x20, &(0x7f0000001700)={0x0, 0x1c9c380}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, r3, 0xf33b16c3b39c603f, 0x0, 0x0, {{}, {}, {0xfffffffffffffe37}}, ["", "", "", "", "", ""]}, 0x15d}}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000001800)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, r3, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x9, 0x1000, 0x9, 0x8c}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4008906) ioctl$SG_NEXT_CMD_LEN(r0, 0x2284, &(0x7f0000000000)) 16:19:22 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, 0x0, 0x0) 16:19:22 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d", 0xa}], 0x1) 16:19:22 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540), 0x0) 16:19:22 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d", 0xa}], 0x1) 16:19:22 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540), 0x0) 16:19:22 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b2a317f5d", 0xd}], 0x1) 16:19:22 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540), 0x0) 16:19:22 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{0x0}], 0x1) 16:19:22 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b2a317f5d", 0xd}], 0x1) 16:19:23 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{0x0}], 0x1) 16:19:23 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b2a317f5d", 0xd}], 0x1) 16:19:23 executing program 4: clock_settime(0x1, &(0x7f0000000000)) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x80000) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x9, 0x3, 0x8, 0x4, "f0e17a66fe2c717ab3c0c0682380c05cb79cffded34713f08ab6d6c129c1a3d6e32c58a308fc5d3231e34b2bf5e090cc8f629d1c5036f4f61d5f52f019cc6420", "b5d89220ecabf6a56a44469ec00d2929934dbc02e89abcc7ab3953fa2bde0764", [0xffff, 0x5]}) 16:19:23 executing program 3: writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b2a317f5d", 0xd}], 0x1) 16:19:23 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{0x0}], 0x1) 16:19:23 executing program 4: times(&(0x7f0000000080)) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) r1 = socket$isdn(0x22, 0x3, 0x22) ioctl$IMCLEAR_L2(r1, 0x80044946, &(0x7f00000000c0)=0x4) ioctl$SG_NEXT_CMD_LEN(r0, 0x2284, &(0x7f0000000000)) 16:19:23 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)}], 0x1) 16:19:23 executing program 3: writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b2a317f5d", 0xd}], 0x1) 16:19:23 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)}], 0x1) 16:19:23 executing program 3: writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b2a317f5d", 0xd}], 0x1) 16:19:23 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b2a317f5d", 0xd}], 0x1) 16:19:23 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)}], 0x1) 16:19:23 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982b", 0x7}], 0x1) 16:19:23 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b2a317f5d", 0xd}], 0x1) 16:19:23 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x8092051, r0, 0x0) ioctl(0xffffffffffffffff, 0x45e8, &(0x7f0000000180)="897e992d79b51da7b3ffe85df984fa3f4db549b67975e587e05ef144f52b242ca7") ioctl$SG_NEXT_CMD_LEN(r0, 0x2284, &(0x7f0000000000)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = socket(0x200000000000011, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r3, &(0x7f0000000240)={0x11, 0x0, r5}, 0x14) getsockname$packet(r3, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB='\x009(9', @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f0000000040)={r7}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000000c0)={r7, 0x81}, &(0x7f0000000100)=0x8) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SG_SET_COMMAND_Q(r2, 0x2271, &(0x7f0000000080)=0x1) 16:19:24 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982b", 0x7}], 0x1) 16:19:24 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b2a317f5d", 0xd}], 0x1) 16:19:24 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982b", 0x7}], 0x1) 16:19:24 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b2a317f5d", 0xd}], 0x1) 16:19:24 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d", 0xa}], 0x1) 16:19:24 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, 0x0, 0x0) 16:19:24 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d", 0xa}], 0x1) 16:19:24 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, 0x0, 0x0) 16:19:24 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, 0x0, 0x0) 16:19:24 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d", 0xa}], 0x1) 16:19:24 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540), 0x0) 16:19:24 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) prctl$PR_GET_TSC(0x19, &(0x7f0000000080)) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2284, &(0x7f0000000000)) 16:19:24 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d077f", 0xc}], 0x1) 16:19:25 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540), 0x0) 16:19:25 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d077f", 0xc}], 0x1) 16:19:25 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2284, &(0x7f0000000000)=0x2) 16:19:25 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540), 0x0) 16:19:25 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x5385, &(0x7f0000000000)) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f00000002c0)='./bus\x00', 0x143042, 0x0) ftruncate(r2, 0x2008002) sendfile(r1, r2, 0x0, 0x200fff) r3 = socket$inet6(0xa, 0x400000000001, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000040)={r6}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000100)={r6, 0x5}, &(0x7f0000000140)=0x8) close(r3) r7 = open(&(0x7f00000002c0)='./bus\x00', 0x143042, 0x0) ftruncate(r7, 0x2008002) sendfile(r3, r7, 0x0, 0x200fff) ioctl$DRM_IOCTL_GEM_FLINK(r7, 0xc008640a, &(0x7f0000000080)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f00000000c0)={r8, 0x0, 0x100000001}) 16:19:25 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d077f", 0xc}], 0x1) 16:19:25 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0xffffff6e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r2, 0x10099b7) sendfile(r0, r2, 0x0, 0x88000fc000000) 16:19:25 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{0x0}], 0x1) 16:19:25 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_open_procfs(r0, &(0x7f0000000100)='net/bnep\x00') ioctl$NBD_CLEAR_QUE(r1, 0xab05) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = getuid() setresuid(0xee01, r5, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, &(0x7f00000004c0)={0xffffffff, 0x8368, {r0}, {r5}, 0xe8, 0x7}) writev(r2, &(0x7f00000000c0)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}, {&(0x7f0000000000)="c5e138cea8943f0266bf87a9edf33d30379fa87913e797fcfe7f0f007c9423a75283989aea1e62fbc8dc69eb84d70e2ce7350bd316629c8ff367b36e93239587628c766fb81b2a2881284a33e92e87ed02d5de5159c3a409ba19bbf3088e2b08a2feb396a80f62d87913d05c04a43553a2be8c3b4067d1b507414edda7bd79f4a451a4e04998", 0x86}], 0x2) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r6, 0x800000c004500a, &(0x7f0000000300)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) write$cgroup_subtree(r8, &(0x7f0000000440)={[{0x7d, 'cpu'}, {0x2b, 'pids'}, {0x2d, 'io'}, {0x2d, 'cpu'}]}, 0x14) pwritev(r6, &(0x7f00000003c0)=[{&(0x7f0000000140)="30433f9990f44a6e20866b7ad450efd4130ff0c8d84c989e5c45bda92f821d7ba984441dfc2476704fefa1674406e226137fbfa51af895584b324448b4ca445e3b48e430de2266364111b3882bc6ea7201505b", 0x53}, {&(0x7f00000001c0)="9812da8387d329deb7084637e440370f26042dcd7dbe950cfdce6c012e4afc9a6cb08f7bbf6c2d8006501365dc11b9189123d531f030fe713041c3b846bdc4ce56d2e639c1ad4c6f4ad4c51ddcb91393443574071e7f9c2773d719174906c96800599f3fd4ac00028d79522c97488feca1b5851ba5e3b850769e081b90486c0f3412063e4c7b5ad542f1f6f83c9d4f9ced3e6356dc727af4d7be27761d28f56629ace06d856f1223abb9702206c2f54bd7b7e16772399d8963ef3ef3c3c5eb565b43db87af6bac", 0xc7}, {&(0x7f00000002c0)="7475d047f2e76dacfb5ebd4c85805e14d825e621d677fe5501e7ea70b8387a1896b27bb3c9b5cfbd1e88264e9e66e30cb33e38a2f7e2fcb0d052d155c0", 0x3d}, {&(0x7f0000000300)="82e6ca29f64a8e424f5628e512d1708e72b646a3b0cc65123ca423676a529f12562689d08ab50c7869a729b2ff3a8f8352812f058156ae0a8cdf464e10ceb52a4d27cc84f3049f9341094b1bb1c3d2f5b7fa73c77966825a276135afc13fb24dd6a7ac175b63627f5eade9a4d5daefcfd2a884c673b89a72c2fc", 0x7a}, {&(0x7f0000000900)="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", 0x1000}], 0x5, 0xfffffffffffffffa) r9 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r9, 0x800c6613, &(0x7f0000000480)=@v2={0x2, @aes128, 0x2, [], "6ec23e3a3c69057ddcd6959073da7035"}) 16:19:25 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{0x0}], 0x1) 16:19:25 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2275, &(0x7f0000000000)) 16:19:25 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{0x0}], 0x1) 16:19:25 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_open_procfs(r0, &(0x7f0000000100)='net/bnep\x00') ioctl$NBD_CLEAR_QUE(r1, 0xab05) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = getuid() setresuid(0xee01, r5, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, &(0x7f00000004c0)={0xffffffff, 0x8368, {r0}, {r5}, 0xe8, 0x7}) writev(r2, &(0x7f00000000c0)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}, {&(0x7f0000000000)="c5e138cea8943f0266bf87a9edf33d30379fa87913e797fcfe7f0f007c9423a75283989aea1e62fbc8dc69eb84d70e2ce7350bd316629c8ff367b36e93239587628c766fb81b2a2881284a33e92e87ed02d5de5159c3a409ba19bbf3088e2b08a2feb396a80f62d87913d05c04a43553a2be8c3b4067d1b507414edda7bd79f4a451a4e04998", 0x86}], 0x2) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r6, 0x800000c004500a, &(0x7f0000000300)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) write$cgroup_subtree(r8, &(0x7f0000000440)={[{0x7d, 'cpu'}, {0x2b, 'pids'}, {0x2d, 'io'}, {0x2d, 'cpu'}]}, 0x14) pwritev(r6, &(0x7f00000003c0)=[{&(0x7f0000000140)="30433f9990f44a6e20866b7ad450efd4130ff0c8d84c989e5c45bda92f821d7ba984441dfc2476704fefa1674406e226137fbfa51af895584b324448b4ca445e3b48e430de2266364111b3882bc6ea7201505b", 0x53}, {&(0x7f00000001c0)="9812da8387d329deb7084637e440370f26042dcd7dbe950cfdce6c012e4afc9a6cb08f7bbf6c2d8006501365dc11b9189123d531f030fe713041c3b846bdc4ce56d2e639c1ad4c6f4ad4c51ddcb91393443574071e7f9c2773d719174906c96800599f3fd4ac00028d79522c97488feca1b5851ba5e3b850769e081b90486c0f3412063e4c7b5ad542f1f6f83c9d4f9ced3e6356dc727af4d7be27761d28f56629ace06d856f1223abb9702206c2f54bd7b7e16772399d8963ef3ef3c3c5eb565b43db87af6bac", 0xc7}, {&(0x7f00000002c0)="7475d047f2e76dacfb5ebd4c85805e14d825e621d677fe5501e7ea70b8387a1896b27bb3c9b5cfbd1e88264e9e66e30cb33e38a2f7e2fcb0d052d155c0", 0x3d}, {&(0x7f0000000300)="82e6ca29f64a8e424f5628e512d1708e72b646a3b0cc65123ca423676a529f12562689d08ab50c7869a729b2ff3a8f8352812f058156ae0a8cdf464e10ceb52a4d27cc84f3049f9341094b1bb1c3d2f5b7fa73c77966825a276135afc13fb24dd6a7ac175b63627f5eade9a4d5daefcfd2a884c673b89a72c2fc", 0x7a}, {&(0x7f0000000900)="30e97463e65531232887581bf32224b96f467dfe9e129006ca765daff1aa6a74da925ed939cf0f5dfdbbe405d85a578f4a77d88c30b1b59d86269de1408fbc39887a7dad09f47629d99303fba581431e3b3f8c2d38e01181863ccbfa55f11c4d10e4d1dfd0be5abe43083cd8c01327b75d472f8bcec9268398434f6af5608d320ab91350f3d7c89741511d373ccda5a5b075008973afa2768fe9eb880c005867304c1a13b7d443c8273cb501dd0b676e4c78b29116cba4c91f0d58aaadf0dd7d4499cacb36b20d28e78df01c40687115fb40b67aa831a74b8c167917c9dc75f968cc182d9b3baad69f6bb027a520cabbbf0d1e4f04f2a8b2c813f1fb1d191724db2b0335afba3ede04dc6fa3b22c0d887172ac2daaa319ff7afa6e92dda16f9404440b9adb5725244affea64ce704792e7b2ac76233f99785d575b24da845a5a1dc4ca04247941a13f3cacb88723470cb02783983e5160865deb9a424821db18602d36846ad62fae6fc4a021d7c76b1024ce0b47fcf9b3c0e7efe9a95d30254b6216b7529291bf725a4f25b7dd2ffe1796faf80713b8c31ef3852ca5e6a77a2c88ede97559baa18ae33ce44a455985d8c6442440f9d9aabac67d3e9ceb4dc4a0e9650e650cc9945998dd2ce1d0fc8e4461504c0803d8a9f024975d43ee9528120175c39d44d227f2dacf66d03fafef466af73fce733fec773cb2a7544a0c8b1c5ad16445d8d47c5ebf407c9925d01951b35f7d8464b53b948d0f694eea013ddb3d9cbfd3f92f971e9f0d3b78def8523266f9fb060ea2d08ca6a4264c9a7e328644348853223b9bfcdaddb5090d7e593549ec967289eaecfa3cb1ffa8c79d6578f5258b69ee7075890db6078d646ddb4b5fdd2bd497fadcf924cc7492cc423b46a283a844170c56b17cccf5c104b5c06fc23aa3e803472e4699f83165469969879213a701fb8ae19cb2f680d1262ac5b56c151b22556b3c28c7af373a3c62a696bd9823f5fe5397edc30356feb0130421e718f1dd2e334c2c9de84821425e2e99fd75a040e0cc6feb4142cf9a10933bd88702fe364ce748b7dbc65773d098171f92850af6a2b60714b3f2b38460b27bd7950d637a107d9d9c6c18eb2989034e5eea7e2bb43672dd22227d2ca9b75b16381bf3166704a17a24341925055553f2bbff7e279741b97970f857cccc6d6539f29463838d45cbed6310ccd9d32224a335604d22462dc8c9f1d6ab55b1d5d426d7eaa152350c0870ef837c49e52ed401df8f6b78062bbc1e27f90f31430313d422f84ffacb84b085b408d8f0d0465e0fdd338c3fc76145e96d8345b0b8898ea619ae15ace6535c103f884d38c9f3024326e3a29985f88519abed67d00e01a772cb65c8df20eeb2147fddadadb42fd55e67389f6a836eeda5a77cc39f25514076c593f67db4f8a3eb62706de7b5428ac0c4c5707758f0ed712cf4bf109dcc5670dd63b6c503cf4d71ce91f18e9fd22452643da3726f44a4d7367998f9bc261747b0ae37872f8cdf6202ba7fc01a3fdf6e18aede905a392c9354f39be965b4449a5db23e4d9ad62e30b6229fab16d8f88294c3f9a85c61c229ada48d65fea43c765795ded186fb685d57013ffa3fb313af6373a9754c64a4260ffdbff428de810668d98b7187a9fc49c5cc205bccc1359a195781a21c071fac5f91bee1fe4f9f9458cacaffc9b24e3f251f82ee7756ee069b3f3a7f9a56c8e51ef58fda9d36ce4da2030e773180d47e3e7861f99d513dee154f0e0df62c4563914bd36eb169ef4521a2db876dcb9c343e9fae29e5bfbac809d83bf7793eda409e59f03f0edf07402cd9e192cdc42c1538db2bf94cff73ec2e7587acc357673b35d1e8f03fb3d7453a7c2e81a0a290d1751ec2ba3b1b55b145254f7768fbfccaa3448a1ad1ae7ab8f51aad14dd4182e46f1a4b0ebafdcc642ce2bd35ef51de42e4a8d6240bc854d017a12674b9d9ff5e96c590b7ef02f29a60d6c09208f9d98b7fd52ee9b19bc94ccb5789107aeedfc85b2922c4497bd03c06e70022b340236c411c98ecc831fb272f7dda0ee8e8f482bd2c6a910423f3d4f5a5ec112c917b4015d07534c44b7cc5f03d916f8ca2c6b8699a3f74097138aedd0d7b15a3ee9ffb784daaa5fcb1255fe76449da92a7b1f96b693ba3b41078cd79aee2a3e8b3b50ab7835066b37465d4761f84214ad64e19c8eb91ba3211232e23cf73668b52ddd803a0ac3afbf4723f51f755a79b766ce618e27f9c2015113e7dd9e6b2ef8e48384e39bde80b7c921a443ba303700ce65f3b112c3f5c5c6f3e7d66920605cbb3aed82e2be8da116ea9c8e3a7c0053dc2acd4d63776f6301bb80dbb1496b85eb135d82ebf4cdd074aa349985def1fe85bdb46ff9649289109e2faa9e8e44aa78234bcf61287798e152def45349bf8e171da8fe1c8aec5c1b38feb28263670aa11a2264a91693540994a6ad377730d94efd34155cbb5e7d7fbe0389ab3ddd430c8d6b6288f67538b78a187687e02bf9f3764c898a97666324c3fb7680766e1b154118b294b39f354a4d09744adab5537f2da2a3a72c8bda27a0114b09e1e7813bc6c0f58c62ef0005fc5313246a4e760d11b50659a498b38e2878f60044cd4e0d9fe32eb513005105a32e05960547e8cc386d7fc63a3a7c6449bf27f331c414a4c84b82c503b1f649c9b175ef960ca32e0ec89042877e84efd9c1f4f8f6b186c78f87ebcc77629ce7556343c3cb539493026549ae9fb6832b890c8980fc6eb1cb3ff1fd01967f7a249fffda8bec526cc8cf14f0704cd8545f3420fac7a24ecd62455836505d4771991ca31129cdf107008a867b601816b28dbfa212a667f6ce6206ea86f3e7c51b124c637c2aa2dccb4f824ffd8ecd8e323c77e88888a3243e30c7981608472a7625a7bbc9177ef4ed534113df5bb4f5ce62999768455da3dd17708ab9f6e36133a676b3ea5202ac13fcb25074fcdcfa029ae3cd2ad48e992865c4968fa0a97fbb198caecd83a97f385da44676d8f05407dddd4e0c2fd490733977a0a276316170d9bbbba76a07ef29064157049e6824c4292c06b8ac584b2a70ae48c363f246c5a8d4f9375f72ae1855390dafd58e78b3a0cf32f1bef2b4482817e601182f477fa4cfccc6c9b80d2d27bee104c1075c367e1c76590aec490d97a64207af0dfdef3efbb25b76d7f61af83f82cbbdbfc0493d19f8646a8553ec1a6e0d62603de88b6cb24927f1a8567c8c1666d3eb8670e5b941e7020a6f5d54ee8b41a12606667f851b6c3bd238314b4bd9b5a4a0f49335bf145a4e2c8e79960785b5bcf5ef190f631936dedf7636f2da4b95d7755560d0f1aa005f183f55a8a15814d96b6205a18ca36a451b00889caeb24e1117171c947f04f32f33f1b484797656eb2a7825ae54e75188e6e5280f90ec2b47cef21b8920eaf6c58951891aefd746d3678d783ab08c3f2b12eace483c35b492780cb5d4fe21caf98c1cb0bbb83867c2b2e5df8e66ded4d90706db80708587bc3b42abbbc963e7bff88ddcb1e56341a608730da6002f8265ef078f671c6046949f2d82ddc8f0f0bb42385ecdaa701b5f33204cb79e906dbc2fbe29e6ee8fa7bbf216c10404694bda24505a21bc7e13786a6b009575a91c72fe6cdc1613f37bc1ee0e5ab5a3b61633ee21059380a4100601e8663c426235841c2d858a208df125d50ca196bf052bdd36d64498f9b4c289cf3a60831d55263b01f4faa53ae145a396f9944229753be2f84f3eb95436d84668318d323c2ade1aae38df17d58d55a29020468837fc5fa6e68ac23f802b96223b3035b20fd4c558d8356575cd404c33b06180032e7db713b9bc13340cc2b5653be7b7cf619cef5e92fb451e5ffeaf30b316fdbd6bb4eb04ada77a04f811380ded9cb37577850b51c7d7b6d3034c67e00e3d3736c206e83ebe3a2200156533ba86d5e33bb2c228402df040a3f6a81ff0ddbbd3fd76d1921cbee3f641fec480bfeb499675d3d1200592317d71e09d72e47fc6a17ea1ebf2175f377a63cc65fb2acfebed89b166018d0bd44bfdd3136fcdc5d221a3463ac690196009afe83df06163bd881e59083d1d759d52c0bf6088be10302019c5045730aa5f59d9207c827bb9fd69295d95a10e2b298a8a9309eb793b0b774c5696790a9927dee69d8b4a4b91a92fa9916ecb3f2d2d7d9c8b15f30b77ac01276c1033ed883dde06dde219b7a5b6130ca688c2c2143248b1e65ae3dc7c487c36d454bc2340478fce84b6e9d9b8d8b542a4cd4dc1f9c5b71ae1136906fff925e4506e4a94b350e2a6ba4a1fdf7d7667f7b30131fb198c726e35d9f7abb73cbad15d8dbba46cdeabf8ec5e7ad2d6bd3a4acc5baaa9138a6466d77680bc0286f56fd9bb8128936ee362e522438b577d7ca1ae3451e12eeeae96d4130a8a4852b9b68aa22153b56aa1e67dee6292ee0289c033a3f6f65e3346e82f8fe9e28824c19c77a4e2616ddfbf0f3ed2d8f31920d595b2e177459d76756dccac4e707a04b31cdf63c99f2f20cd1b2eb31fed51a137b9ae8c1a85281ea1ff649ea11f58434fdebebd4c020561b677514dafc245d82f2e8c825b45e282d308f82395a0a139f83c81e27bbb0152fb9ce8be914c1e098ab851b27f6a5c2f5f555bda6979f9ff60ed3ef464245ccc0537368735a43735bb35b925c722ca28d6bfe6f68dc030fd8986656a14eba72cb08f30fb3f33837f0c1c6e4cdc5e9fb1ed0bf78b9f2de9d47aa5ffa75058409d9f6c881f747e58c60c7ce4d51d58f05a41e6af5d0241b89ea43eb88663001b50eeb3fc07cd81602b9e6c78a2f24f44061ea89e8def405ec1f00091d5c0a5da448535bcb04fc53c2e9a956da7ba7492db41afacb1b748c9caaf7781b508d68d07ea41d3c7c71e5c679e7482e0f0d5637b2e902e9e70d5cf83448df4752c23e521ce8a2d54f014dce05198e6fbdac19f682275d7ea0bcff265f1f432d3b2f5953c6bf3858a9f4fae1a5355c222e0a6d49bdd9ea6c437cc578545d15ecabd08822b05fce09625fb2329a8f25c0a338151ca58804d3992bd40486d1755fd134f50983fa4a1f0be2386440a301f383c392dffdea6da24c7bb8c0fa5e0712a602ca61f7071b2e1655806af171f633d794a2df7a8708ff11674778eaa5cdb2f69c0a9e300fc30cf2c7fc82086674ffa818c9c9dbf148de3a384ce1b0cebea34575f2df00efaf70960c5fd991ccc5c4c7ee4204ebb5cbc3d7c425c318e6450fec05dd3864e36c1e04d0ec6367c5dbbd3a627b52b9ebe54de420f61161e1926a434b63005519c8e91315ee849437821eb6b7a673c19ee0a17478839ae7cc94dc95d38915e776148a0dd14f0c80ba4e5ba29506c1a9a38afc40b1954612722c99bc21fc791a70c41b6b1896d8f4ef46d795fd527242a6a8b91b57e4e62f867bf980c48f31831b9ddecfbd8857f76e9a9a132f5d223a127d837a15f5d7e708c128ae34d8c198cc7657b70e5b506c80792e084bc5c0574dc5c1c5b6f57678c5613d761c616232eef07b5955dba22b46382924233e970a2f7f2be9f5d7d51a6ebc164e638a95d2cf01fcd1736f3da277b38c682e7111afc068696375a9a783f0c63bc94bf71bfab436c30abd50858ae63496e47c0a8256ced93d432059d7a7524e41ee3b188a3df8ab6225fa23aff8286cc18e388cc4eade02a6dd18020d859e55df28135ceec61c6ae49dc73b6c433ea70f83df013e2fe1412fff9a6df904f9d69fe80a658465c6df066d25780e2d5aa13ca61358af631d59ab29c710ca20d336989ad3", 0x1000}], 0x5, 0xfffffffffffffffa) r9 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r9, 0x800c6613, &(0x7f0000000480)=@v2={0x2, @aes128, 0x2, [], "6ec23e3a3c69057ddcd6959073da7035"}) 16:19:25 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2275, &(0x7f0000000000)) 16:19:26 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)}], 0x1) 16:19:26 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_open_procfs(r0, &(0x7f0000000100)='net/bnep\x00') ioctl$NBD_CLEAR_QUE(r1, 0xab05) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = getuid() setresuid(0xee01, r5, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, &(0x7f00000004c0)={0xffffffff, 0x8368, {r0}, {r5}, 0xe8, 0x7}) writev(r2, &(0x7f00000000c0)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}, {&(0x7f0000000000)="c5e138cea8943f0266bf87a9edf33d30379fa87913e797fcfe7f0f007c9423a75283989aea1e62fbc8dc69eb84d70e2ce7350bd316629c8ff367b36e93239587628c766fb81b2a2881284a33e92e87ed02d5de5159c3a409ba19bbf3088e2b08a2feb396a80f62d87913d05c04a43553a2be8c3b4067d1b507414edda7bd79f4a451a4e04998", 0x86}], 0x2) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r6, 0x800000c004500a, &(0x7f0000000300)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) write$cgroup_subtree(r8, &(0x7f0000000440)={[{0x7d, 'cpu'}, {0x2b, 'pids'}, {0x2d, 'io'}, {0x2d, 'cpu'}]}, 0x14) pwritev(r6, &(0x7f00000003c0)=[{&(0x7f0000000140)="30433f9990f44a6e20866b7ad450efd4130ff0c8d84c989e5c45bda92f821d7ba984441dfc2476704fefa1674406e226137fbfa51af895584b324448b4ca445e3b48e430de2266364111b3882bc6ea7201505b", 0x53}, {&(0x7f00000001c0)="9812da8387d329deb7084637e440370f26042dcd7dbe950cfdce6c012e4afc9a6cb08f7bbf6c2d8006501365dc11b9189123d531f030fe713041c3b846bdc4ce56d2e639c1ad4c6f4ad4c51ddcb91393443574071e7f9c2773d719174906c96800599f3fd4ac00028d79522c97488feca1b5851ba5e3b850769e081b90486c0f3412063e4c7b5ad542f1f6f83c9d4f9ced3e6356dc727af4d7be27761d28f56629ace06d856f1223abb9702206c2f54bd7b7e16772399d8963ef3ef3c3c5eb565b43db87af6bac", 0xc7}, {&(0x7f00000002c0)="7475d047f2e76dacfb5ebd4c85805e14d825e621d677fe5501e7ea70b8387a1896b27bb3c9b5cfbd1e88264e9e66e30cb33e38a2f7e2fcb0d052d155c0", 0x3d}, {&(0x7f0000000300)="82e6ca29f64a8e424f5628e512d1708e72b646a3b0cc65123ca423676a529f12562689d08ab50c7869a729b2ff3a8f8352812f058156ae0a8cdf464e10ceb52a4d27cc84f3049f9341094b1bb1c3d2f5b7fa73c77966825a276135afc13fb24dd6a7ac175b63627f5eade9a4d5daefcfd2a884c673b89a72c2fc", 0x7a}, {&(0x7f0000000900)="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", 0x1000}], 0x5, 0xfffffffffffffffa) r9 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r9, 0x800c6613, &(0x7f0000000480)=@v2={0x2, @aes128, 0x2, [], "6ec23e3a3c69057ddcd6959073da7035"}) 16:19:26 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x108240) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x5385, &(0x7f0000000000)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_PPC_GET_PVINFO(r3, 0x4080aea1, &(0x7f0000000080)=""/251) r4 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x10000) ioctl$RTC_UIE_ON(r4, 0x7003) 16:19:26 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)}], 0x1) 16:19:26 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2275, &(0x7f0000000000)) 16:19:26 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_open_procfs(r0, &(0x7f0000000100)='net/bnep\x00') ioctl$NBD_CLEAR_QUE(r1, 0xab05) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = getuid() setresuid(0xee01, r5, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, &(0x7f00000004c0)={0xffffffff, 0x8368, {r0}, {r5}, 0xe8, 0x7}) writev(r2, &(0x7f00000000c0)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}, {&(0x7f0000000000)="c5e138cea8943f0266bf87a9edf33d30379fa87913e797fcfe7f0f007c9423a75283989aea1e62fbc8dc69eb84d70e2ce7350bd316629c8ff367b36e93239587628c766fb81b2a2881284a33e92e87ed02d5de5159c3a409ba19bbf3088e2b08a2feb396a80f62d87913d05c04a43553a2be8c3b4067d1b507414edda7bd79f4a451a4e04998", 0x86}], 0x2) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r6, 0x800000c004500a, &(0x7f0000000300)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) write$cgroup_subtree(r8, &(0x7f0000000440)={[{0x7d, 'cpu'}, {0x2b, 'pids'}, {0x2d, 'io'}, {0x2d, 'cpu'}]}, 0x14) pwritev(r6, &(0x7f00000003c0)=[{&(0x7f0000000140)="30433f9990f44a6e20866b7ad450efd4130ff0c8d84c989e5c45bda92f821d7ba984441dfc2476704fefa1674406e226137fbfa51af895584b324448b4ca445e3b48e430de2266364111b3882bc6ea7201505b", 0x53}, {&(0x7f00000001c0)="9812da8387d329deb7084637e440370f26042dcd7dbe950cfdce6c012e4afc9a6cb08f7bbf6c2d8006501365dc11b9189123d531f030fe713041c3b846bdc4ce56d2e639c1ad4c6f4ad4c51ddcb91393443574071e7f9c2773d719174906c96800599f3fd4ac00028d79522c97488feca1b5851ba5e3b850769e081b90486c0f3412063e4c7b5ad542f1f6f83c9d4f9ced3e6356dc727af4d7be27761d28f56629ace06d856f1223abb9702206c2f54bd7b7e16772399d8963ef3ef3c3c5eb565b43db87af6bac", 0xc7}, {&(0x7f00000002c0)="7475d047f2e76dacfb5ebd4c85805e14d825e621d677fe5501e7ea70b8387a1896b27bb3c9b5cfbd1e88264e9e66e30cb33e38a2f7e2fcb0d052d155c0", 0x3d}, {&(0x7f0000000300)="82e6ca29f64a8e424f5628e512d1708e72b646a3b0cc65123ca423676a529f12562689d08ab50c7869a729b2ff3a8f8352812f058156ae0a8cdf464e10ceb52a4d27cc84f3049f9341094b1bb1c3d2f5b7fa73c77966825a276135afc13fb24dd6a7ac175b63627f5eade9a4d5daefcfd2a884c673b89a72c2fc", 0x7a}, {&(0x7f0000000900)="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", 0x1000}], 0x5, 0xfffffffffffffffa) socket$inet_smc(0x2b, 0x1, 0x0) 16:19:26 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)}], 0x1) 16:19:26 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000100)={0x7bba4cdccab48b8c, 0x9, 0x7fff, r1, 0x0, &(0x7f00000000c0)={0x4e9a0fb1e4dea948, 0x347, [], @p_u8=&(0x7f0000000080)=0x4}}) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000340)={0x1, 0x5, 0x4, 0x280000, 0x3, {0x77359400}, {0x1, 0x1, 0x3, 0x0, 0x20, 0x5, "b0f2520c"}, 0x3, 0x28d7146330d2c92d, @offset=0x20ad, 0x7ff, 0x0, 0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, &(0x7f0000000200)=0x1429f, 0xfffffffffffffebf) ioctl$SG_NEXT_CMD_LEN(r0, 0x5385, &(0x7f0000000000)) 16:19:26 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2275, &(0x7f0000000000)) 16:19:26 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_open_procfs(r0, &(0x7f0000000100)='net/bnep\x00') ioctl$NBD_CLEAR_QUE(r1, 0xab05) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = getuid() setresuid(0xee01, r5, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, &(0x7f00000004c0)={0xffffffff, 0x8368, {r0}, {r5}, 0xe8, 0x7}) writev(r2, &(0x7f00000000c0)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}, {&(0x7f0000000000)="c5e138cea8943f0266bf87a9edf33d30379fa87913e797fcfe7f0f007c9423a75283989aea1e62fbc8dc69eb84d70e2ce7350bd316629c8ff367b36e93239587628c766fb81b2a2881284a33e92e87ed02d5de5159c3a409ba19bbf3088e2b08a2feb396a80f62d87913d05c04a43553a2be8c3b4067d1b507414edda7bd79f4a451a4e04998", 0x86}], 0x2) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r6, 0x800000c004500a, &(0x7f0000000300)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) write$cgroup_subtree(r8, &(0x7f0000000440)={[{0x7d, 'cpu'}, {0x2b, 'pids'}, {0x2d, 'io'}, {0x2d, 'cpu'}]}, 0x14) pwritev(r6, &(0x7f00000003c0)=[{&(0x7f0000000140)="30433f9990f44a6e20866b7ad450efd4130ff0c8d84c989e5c45bda92f821d7ba984441dfc2476704fefa1674406e226137fbfa51af895584b324448b4ca445e3b48e430de2266364111b3882bc6ea7201505b", 0x53}, {&(0x7f00000001c0)="9812da8387d329deb7084637e440370f26042dcd7dbe950cfdce6c012e4afc9a6cb08f7bbf6c2d8006501365dc11b9189123d531f030fe713041c3b846bdc4ce56d2e639c1ad4c6f4ad4c51ddcb91393443574071e7f9c2773d719174906c96800599f3fd4ac00028d79522c97488feca1b5851ba5e3b850769e081b90486c0f3412063e4c7b5ad542f1f6f83c9d4f9ced3e6356dc727af4d7be27761d28f56629ace06d856f1223abb9702206c2f54bd7b7e16772399d8963ef3ef3c3c5eb565b43db87af6bac", 0xc7}, {&(0x7f00000002c0)="7475d047f2e76dacfb5ebd4c85805e14d825e621d677fe5501e7ea70b8387a1896b27bb3c9b5cfbd1e88264e9e66e30cb33e38a2f7e2fcb0d052d155c0", 0x3d}, {&(0x7f0000000300)="82e6ca29f64a8e424f5628e512d1708e72b646a3b0cc65123ca423676a529f12562689d08ab50c7869a729b2ff3a8f8352812f058156ae0a8cdf464e10ceb52a4d27cc84f3049f9341094b1bb1c3d2f5b7fa73c77966825a276135afc13fb24dd6a7ac175b63627f5eade9a4d5daefcfd2a884c673b89a72c2fc", 0x7a}, {&(0x7f0000000900)="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", 0x1000}], 0x5, 0xfffffffffffffffa) 16:19:26 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982b", 0x7}], 0x1) 16:19:26 executing program 5: mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, 0xffffffffffffffff, 0x0) ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x5385, &(0x7f0000000000)) 16:19:26 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2275, &(0x7f0000000000)) 16:19:27 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982b", 0x7}], 0x1) 16:19:27 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2275, &(0x7f0000000000)) 16:19:27 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_open_procfs(r0, &(0x7f0000000100)='net/bnep\x00') ioctl$NBD_CLEAR_QUE(r1, 0xab05) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = getuid() setresuid(0xee01, r5, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, &(0x7f00000004c0)={0xffffffff, 0x8368, {r0}, {r5}, 0xe8, 0x7}) writev(r2, &(0x7f00000000c0)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}, {&(0x7f0000000000)="c5e138cea8943f0266bf87a9edf33d30379fa87913e797fcfe7f0f007c9423a75283989aea1e62fbc8dc69eb84d70e2ce7350bd316629c8ff367b36e93239587628c766fb81b2a2881284a33e92e87ed02d5de5159c3a409ba19bbf3088e2b08a2feb396a80f62d87913d05c04a43553a2be8c3b4067d1b507414edda7bd79f4a451a4e04998", 0x86}], 0x2) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r6, 0x800000c004500a, &(0x7f0000000300)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) write$cgroup_subtree(r8, &(0x7f0000000440)={[{0x7d, 'cpu'}, {0x2b, 'pids'}, {0x2d, 'io'}, {0x2d, 'cpu'}]}, 0x14) 16:19:27 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f00000002c0)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2008002) getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000300), 0x2) sendfile(r0, r1, 0x0, 0x200fff) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000100)={0x9a0000, 0x3, 0x8, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x9a0909, 0x2, [], @string=&(0x7f0000000080)}}) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) r4 = open(&(0x7f00000002c0)='./bus\x00', 0x143042, 0x0) ftruncate(r4, 0x2008002) sendfile(r3, r4, 0x0, 0x200fff) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, &(0x7f0000000340)={0x0, 0x0, 0x103, 0x1, {0x4, 0x8002, 0x7, 0x6}}) preadv(r2, &(0x7f0000000280)=[{&(0x7f0000000140)=""/150, 0x96}, {&(0x7f0000000200)=""/85, 0x55}], 0x2, 0x6) r5 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r5, 0x0) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r6, 0x800000c004500a, &(0x7f0000000300)) fsetxattr$trusted_overlay_nlink(r6, &(0x7f0000000380)='trusted.overlay.nlink\x00', &(0x7f00000003c0)={'U-', 0x7fff}, 0x16, 0x1) ioctl$SG_NEXT_CMD_LEN(r5, 0x5385, &(0x7f0000000000)) 16:19:27 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982b", 0x7}], 0x1) 16:19:27 executing program 4: mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, 0xffffffffffffffff, 0x0) ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2275, &(0x7f0000000000)) 16:19:27 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_open_procfs(r0, &(0x7f0000000100)='net/bnep\x00') ioctl$NBD_CLEAR_QUE(r1, 0xab05) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = getuid() setresuid(0xee01, r5, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, &(0x7f00000004c0)={0xffffffff, 0x8368, {r0}, {r5}, 0xe8, 0x7}) writev(r2, &(0x7f00000000c0)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}, {&(0x7f0000000000)="c5e138cea8943f0266bf87a9edf33d30379fa87913e797fcfe7f0f007c9423a75283989aea1e62fbc8dc69eb84d70e2ce7350bd316629c8ff367b36e93239587628c766fb81b2a2881284a33e92e87ed02d5de5159c3a409ba19bbf3088e2b08a2feb396a80f62d87913d05c04a43553a2be8c3b4067d1b507414edda7bd79f4a451a4e04998", 0x86}], 0x2) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r6, 0x800000c004500a, &(0x7f0000000300)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) 16:19:27 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b2a", 0xa}], 0x1) 16:19:27 executing program 4: mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, 0xffffffffffffffff, 0x0) ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2275, &(0x7f0000000000)) 16:19:27 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b2a", 0xa}], 0x1) 16:19:27 executing program 4: mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, 0xffffffffffffffff, 0x0) ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2275, &(0x7f0000000000)) 16:19:27 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b2a", 0xa}], 0x1) 16:19:27 executing program 4: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2275, &(0x7f0000000000)) 16:19:27 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_open_procfs(r0, &(0x7f0000000100)='net/bnep\x00') ioctl$NBD_CLEAR_QUE(r1, 0xab05) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = getuid() setresuid(0xee01, r5, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, &(0x7f00000004c0)={0xffffffff, 0x8368, {r0}, {r5}, 0xe8, 0x7}) writev(r2, &(0x7f00000000c0)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}, {&(0x7f0000000000)="c5e138cea8943f0266bf87a9edf33d30379fa87913e797fcfe7f0f007c9423a75283989aea1e62fbc8dc69eb84d70e2ce7350bd316629c8ff367b36e93239587628c766fb81b2a2881284a33e92e87ed02d5de5159c3a409ba19bbf3088e2b08a2feb396a80f62d87913d05c04a43553a2be8c3b4067d1b507414edda7bd79f4a451a4e04998", 0x86}], 0x2) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r6, 0x800000c004500a, &(0x7f0000000300)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r7, 0x0, r7) 16:19:28 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b2a317f", 0xc}], 0x1) 16:19:28 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x8, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000080)=ANY=[@ANYBLOB="020072005616435ba221b5ab51d970310976a75208523335cdd78fb736473c053b1601d26fcd8151cf1eb9190a0e7e78334ca5187cd3b19f1ad1dfdbc60ecc9bee7d67716d741ac9936306f4a5476f409cb9318a1a67beb6bae99a7a505f624da4c436a46c11053521cef781b91c7353e756e292d0c1"]) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x208400, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000240)={0x9c, 0x3, 0xffffffffffffff6d, 0xc918e64cc7fa4c3f, 0x1, {0x0, 0x2710}, {0x3, 0x2, 0x7, 0x5, 0x9, 0xff, "010100"}, 0x7, 0x1, @planes=&(0x7f0000000400)={0x5, 0xffff, @fd=r1, 0xd8bde624}, 0x7, 0x0, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e23, 0x3f, @dev={0xfe, 0x80, [], 0x1d}, 0x6}}, 0x101, 0x1, 0x4, 0x0, 0x80, 0x0, 0xce}, &(0x7f0000000380)=0x9c) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000007000100070c10000000000000000000", 0x58}], 0x1) sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x64, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}, @FOU_ATTR_PEER_V6={0x14, 0x9, @empty}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast1}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @empty}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x1d}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x28000001) ioctl$SG_NEXT_CMD_LEN(r0, 0x5385, &(0x7f0000000000)) 16:19:28 executing program 4: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2275, &(0x7f0000000000)) 16:19:28 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b2a31", 0xb}], 0x1) 16:19:28 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_open_procfs(r0, &(0x7f0000000100)='net/bnep\x00') ioctl$NBD_CLEAR_QUE(r1, 0xab05) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = getuid() setresuid(0xee01, r5, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, &(0x7f00000004c0)={0xffffffff, 0x8368, {r0}, {r5}, 0xe8, 0x7}) writev(r2, &(0x7f00000000c0)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}, {&(0x7f0000000000)="c5e138cea8943f0266bf87a9edf33d30379fa87913e797fcfe7f0f007c9423a75283989aea1e62fbc8dc69eb84d70e2ce7350bd316629c8ff367b36e93239587628c766fb81b2a2881284a33e92e87ed02d5de5159c3a409ba19bbf3088e2b08a2feb396a80f62d87913d05c04a43553a2be8c3b4067d1b507414edda7bd79f4a451a4e04998", 0x86}], 0x2) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r6, 0x800000c004500a, &(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) 16:19:28 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2, 0x20011, r0, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0xbaec81f10fe046f7, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000000), 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SG_NEXT_CMD_LEN(r5, 0x5385, &(0x7f0000000180)=0xfffffffb) r6 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ocfs2_control\x00', 0x101000, 0x0) getsockopt$PNPIPE_IFINDEX(r6, 0x113, 0x2, &(0x7f00000000c0), &(0x7f00000001c0)=0xfffffffffffffe65) 16:19:28 executing program 4: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2275, &(0x7f0000000000)) 16:19:28 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b2a", 0xa}], 0x1) 16:19:28 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_open_procfs(r0, &(0x7f0000000100)='net/bnep\x00') ioctl$NBD_CLEAR_QUE(r1, 0xab05) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = getuid() setresuid(0xee01, r5, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, &(0x7f00000004c0)={0xffffffff, 0x8368, {r0}, {r5}, 0xe8, 0x7}) writev(r2, &(0x7f00000000c0)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}, {&(0x7f0000000000)="c5e138cea8943f0266bf87a9edf33d30379fa87913e797fcfe7f0f007c9423a75283989aea1e62fbc8dc69eb84d70e2ce7350bd316629c8ff367b36e93239587628c766fb81b2a2881284a33e92e87ed02d5de5159c3a409ba19bbf3088e2b08a2feb396a80f62d87913d05c04a43553a2be8c3b4067d1b507414edda7bd79f4a451a4e04998", 0x86}], 0x2) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r6, 0x800000c004500a, &(0x7f0000000300)) 16:19:28 executing program 5: write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x15, 0x2}, 0x7) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket(0x200000000000011, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r1, &(0x7f0000000240)={0x11, 0x0, r3}, 0x14) getsockname$packet(r1, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) bind$alg(r1, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x58) r4 = open(&(0x7f00000002c0)='./bus\x00', 0x143042, 0x0) ftruncate(r4, 0x2008002) sendfile(r0, r4, 0x0, 0x200fff) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f00000000c0)={0x0, &(0x7f0000000080)}) r5 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x3, 0x102004) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r5, 0x9550e000) ioctl$SG_NEXT_CMD_LEN(r5, 0x5385, &(0x7f0000000000)) 16:19:28 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2275, &(0x7f0000000000)) 16:19:28 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b2a", 0xa}], 0x1) 16:19:28 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2275, &(0x7f0000000000)) 16:19:28 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b2a", 0xa}], 0x1) 16:19:28 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_open_procfs(r0, &(0x7f0000000100)='net/bnep\x00') ioctl$NBD_CLEAR_QUE(r1, 0xab05) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = getuid() setresuid(0xee01, r5, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, &(0x7f00000004c0)={0xffffffff, 0x8368, {r0}, {r5}, 0xe8, 0x7}) writev(r2, &(0x7f00000000c0)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}, {&(0x7f0000000000)="c5e138cea8943f0266bf87a9edf33d30379fa87913e797fcfe7f0f007c9423a75283989aea1e62fbc8dc69eb84d70e2ce7350bd316629c8ff367b36e93239587628c766fb81b2a2881284a33e92e87ed02d5de5159c3a409ba19bbf3088e2b08a2feb396a80f62d87913d05c04a43553a2be8c3b4067d1b507414edda7bd79f4a451a4e04998", 0x86}], 0x2) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) [ 534.991169][ T27] audit: type=1800 audit(1578759568.986:45): pid=16412 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=17148 res=0 16:19:29 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r1, &(0x7f0000000240)={0x11, 0x0, r3}, 0x14) r4 = socket(0x200000000000011, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r4, &(0x7f0000000240)={0x11, 0x0, r6}, 0x14) getsockname$packet(r4, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) getsockname$packet(r4, &(0x7f0000000500), &(0x7f0000000140)=0x14) getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x63, &(0x7f0000000080)={'icmp\x00'}, &(0x7f00000000c0)=0x1e) ioctl$SG_NEXT_CMD_LEN(r0, 0x5385, &(0x7f0000000000)) socket$nl_xfrm(0x10, 0x3, 0x6) 16:19:29 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2275, &(0x7f0000000000)) 16:19:29 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x1267, &(0x7f0000000000)) 16:19:29 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_open_procfs(r0, &(0x7f0000000100)='net/bnep\x00') ioctl$NBD_CLEAR_QUE(r1, 0xab05) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = getuid() setresuid(0xee01, r5, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, &(0x7f00000004c0)={0xffffffff, 0x8368, {r0}, {r5}, 0xe8, 0x7}) writev(r2, &(0x7f00000000c0)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}, {&(0x7f0000000000)="c5e138cea8943f0266bf87a9edf33d30379fa87913e797fcfe7f0f007c9423a75283989aea1e62fbc8dc69eb84d70e2ce7350bd316629c8ff367b36e93239587628c766fb81b2a2881284a33e92e87ed02d5de5159c3a409ba19bbf3088e2b08a2feb396a80f62d87913d05c04a43553a2be8c3b4067d1b507414edda7bd79f4a451a4e04998", 0x86}], 0x2) 16:19:29 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2275, &(0x7f0000000000)) 16:19:29 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x1267, &(0x7f0000000000)) 16:19:29 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_open_procfs(r0, &(0x7f0000000100)='net/bnep\x00') ioctl$NBD_CLEAR_QUE(r1, 0xab05) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = getuid() setresuid(0xee01, r5, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}, {&(0x7f0000000000)="c5e138cea8943f0266bf87a9edf33d30379fa87913e797fcfe7f0f007c9423a75283989aea1e62fbc8dc69eb84d70e2ce7350bd316629c8ff367b36e93239587628c766fb81b2a2881284a33e92e87ed02d5de5159c3a409ba19bbf3088e2b08a2feb396a80f62d87913d05c04a43553a2be8c3b4067d1b507414edda7bd79f4a451a4e04998", 0x86}], 0x2) 16:19:29 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x1267, &(0x7f0000000000)) 16:19:29 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x480000) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x5385, &(0x7f0000000000)) r1 = socket(0x200000000000011, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r1, &(0x7f0000000240)={0x11, 0x0, r3}, 0x14) getsockname$packet(r1, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) r4 = socket(0x200000000000011, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r4, &(0x7f0000000240)={0x11, 0x0, r6}, 0x14) getsockname$packet(r4, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) bind$ax25(r4, &(0x7f0000000080)={{0x3, @null, 0x7}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x252) accept4$llc(r1, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000140)=0x10, 0x80000) 16:19:29 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2275, &(0x7f0000000000)) 16:19:29 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2275, &(0x7f0000000000)) 16:19:29 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_open_procfs(r0, &(0x7f0000000100)='net/bnep\x00') ioctl$NBD_CLEAR_QUE(r1, 0xab05) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getuid() writev(r2, &(0x7f00000000c0)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}, {&(0x7f0000000000)="c5e138cea8943f0266bf87a9edf33d30379fa87913e797fcfe7f0f007c9423a75283989aea1e62fbc8dc69eb84d70e2ce7350bd316629c8ff367b36e93239587628c766fb81b2a2881284a33e92e87ed02d5de5159c3a409ba19bbf3088e2b08a2feb396a80f62d87913d05c04a43553a2be8c3b4067d1b507414edda7bd79f4a451a4e04998", 0x86}], 0x2) 16:19:29 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x1267, &(0x7f0000000000)) 16:19:30 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, 0xffffffffffffffff, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2275, &(0x7f0000000000)) 16:19:30 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_open_procfs(r0, &(0x7f0000000100)='net/bnep\x00') ioctl$NBD_CLEAR_QUE(r1, 0xab05) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) writev(r2, &(0x7f00000000c0)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}, {&(0x7f0000000000)="c5e138cea8943f0266bf87a9edf33d30379fa87913e797fcfe7f0f007c9423a75283989aea1e62fbc8dc69eb84d70e2ce7350bd316629c8ff367b36e93239587628c766fb81b2a2881284a33e92e87ed02d5de5159c3a409ba19bbf3088e2b08a2feb396a80f62d87913d05c04a43553a2be8c3b4067d1b507414edda7bd79f4a451a4e04998", 0x86}], 0x2) 16:19:30 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$char_usb(r3, &(0x7f0000000140)="e9df25208e880a2ab5fc758f2c39e7c81e4f5e2180900c0e7be85ae6a8e752ec3484273b499ff2311d025843a462e26ecebe01b09efc04c7f3fc600b52ed0c945f37eab471ecd263cc8966768c9a44e0ceb9a6547aab822327842bb1f49aa37284380e373a88dd69c7dfd206d8", 0x6d) r4 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r4, 0xc0945662, &(0x7f0000000080)={0xfff, 0x0, [], {0x0, @bt={0x3, 0x3, 0x0, 0x1, 0x10000, 0x3b9, 0xb5, 0x6, 0x0, 0xc1c, 0xfffffffd, 0x7fffffff, 0x1, 0x3, 0x8, 0x10, {0x8, 0x5}, 0x80, 0x5}}}) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x5385, &(0x7f0000000000)) 16:19:30 executing program 3: ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x1267, &(0x7f0000000000)) 16:19:30 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, 0xffffffffffffffff, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2275, &(0x7f0000000000)) 16:19:30 executing program 5: getresuid(&(0x7f0000000080), 0xfffffffffffffffe, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000001, 0x20011, r0, 0xffffc000) ioctl$SG_NEXT_CMD_LEN(r0, 0x5385, &(0x7f0000000000)) 16:19:30 executing program 3: ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x1267, &(0x7f0000000000)) 16:19:30 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, 0xffffffffffffffff, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2275, &(0x7f0000000000)) 16:19:30 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_open_procfs(r0, &(0x7f0000000100)='net/bnep\x00') ioctl$NBD_CLEAR_QUE(r1, 0xab05) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r3, 0x0, r3) writev(r2, &(0x7f00000000c0)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}, {&(0x7f0000000000)="c5e138cea8943f0266bf87a9edf33d30379fa87913e797fcfe7f0f007c9423a75283989aea1e62fbc8dc69eb84d70e2ce7350bd316629c8ff367b36e93239587628c766fb81b2a2881284a33e92e87ed02d5de5159c3a409ba19bbf3088e2b08a2feb396a80f62d87913d05c04a43553a2be8c3b4067d1b507414edda7bd79f4a451a4e04998", 0x86}], 0x2) 16:19:30 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f00000002c0)='./bus\x00', 0x143042, 0x0) ftruncate(r2, 0x2008002) sendfile(r1, r2, 0x0, 0x200fff) write$P9_RLERROR(r2, &(0x7f0000000080)={0x12, 0x7, 0x2, {0x9, '/dev/sg#\x00'}}, 0x12) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x5385, &(0x7f0000000000)) 16:19:30 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_open_procfs(r0, &(0x7f0000000100)='net/bnep\x00') ioctl$NBD_CLEAR_QUE(r1, 0xab05) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r3, 0x0, r3) writev(r2, &(0x7f00000000c0)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}, {&(0x7f0000000000)="c5e138cea8943f0266bf87a9edf33d30379fa87913e797fcfe7f0f007c9423a75283989aea1e62fbc8dc69eb84d70e2ce7350bd316629c8ff367b36e93239587628c766fb81b2a2881284a33e92e87ed02d5de5159c3a409ba19bbf3088e2b08a2feb396a80f62d87913d05c04a43553a2be8c3b4067d1b507414edda7bd79f4a451a4e04998", 0x86}], 0x2) 16:19:30 executing program 3: ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x1267, &(0x7f0000000000)) 16:19:30 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2275, &(0x7f0000000000)) 16:19:31 executing program 3: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x1267, &(0x7f0000000000)) 16:19:31 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2275, &(0x7f0000000000)) 16:19:31 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_open_procfs(r0, &(0x7f0000000100)='net/bnep\x00') ioctl$NBD_CLEAR_QUE(r1, 0xab05) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r3, 0x0, r3) writev(r2, &(0x7f00000000c0)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}, {&(0x7f0000000000)="c5e138cea8943f0266bf87a9edf33d30379fa87913e797fcfe7f0f007c9423a75283989aea1e62fbc8dc69eb84d70e2ce7350bd316629c8ff367b36e93239587628c766fb81b2a2881284a33e92e87ed02d5de5159c3a409ba19bbf3088e2b08a2feb396a80f62d87913d05c04a43553a2be8c3b4067d1b507414edda7bd79f4a451a4e04998", 0x86}], 0x2) 16:19:31 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) ioctl$SG_NEXT_CMD_LEN(r0, 0x5385, &(0x7f0000000000)) 16:19:31 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2275, &(0x7f0000000000)) 16:19:31 executing program 3: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x1267, &(0x7f0000000000)) 16:19:31 executing program 3: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x1267, &(0x7f0000000000)) 16:19:31 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2275, 0x0) 16:19:31 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x5385, &(0x7f0000000000)) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x400100, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x70}) r2 = socket(0x200000000000011, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r2, &(0x7f0000000240)={0x11, 0x0, r4}, 0x14) getsockname$packet(r2, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) ioctl$sock_x25_SIOCDELRT(r2, 0x890c, &(0x7f0000000100)={@remote={[], 0x2}, 0xd, 'bond0\x00'}) 16:19:31 executing program 3: syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x1267, &(0x7f0000000000)) 16:19:31 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2275, 0x0) 16:19:31 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_open_procfs(r0, &(0x7f0000000100)='net/bnep\x00') ioctl$NBD_CLEAR_QUE(r1, 0xab05) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) writev(r2, &(0x7f00000000c0)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}, {&(0x7f0000000000)="c5e138cea8943f0266bf87a9edf33d30379fa87913e797fcfe7f0f007c9423a75283989aea1e62fbc8dc69eb84d70e2ce7350bd316629c8ff367b36e93239587628c766fb81b2a2881284a33e92e87ed02d5de5159c3a409ba19bbf3088e2b08a2feb396a80f62d87913d05c04a43553a2be8c3b4067d1b507414edda7bd79f4a451a4e04998", 0x86}], 0x2) 16:19:31 executing program 3: syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x1267, &(0x7f0000000000)) 16:19:32 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2275, 0x0) 16:19:32 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_open_procfs(r0, &(0x7f0000000100)='net/bnep\x00') ioctl$NBD_CLEAR_QUE(r1, 0xab05) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) writev(r2, &(0x7f00000000c0)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}, {&(0x7f0000000000)="c5e138cea8943f0266bf87a9edf33d30379fa87913e797fcfe7f0f007c9423a75283989aea1e62fbc8dc69eb84d70e2ce7350bd316629c8ff367b36e93239587628c766fb81b2a2881284a33e92e87ed02d5de5159c3a409ba19bbf3088e2b08a2feb396a80f62d87913d05c04a43553a2be8c3b4067d1b507414edda7bd79f4a451a4e04998", 0x86}], 0x2) 16:19:32 executing program 3: syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x1267, &(0x7f0000000000)) 16:19:32 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x1267, 0x0) 16:19:32 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000400)='/dev/sg#\x00', 0x8, 0x200000) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x8010, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x5385, &(0x7f0000000000)) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000080)) r1 = socket(0x200000000000011, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r1, &(0x7f0000000240)={0x11, 0x0, r3}, 0x14) r4 = socket$inet6(0xa, 0x400000000001, 0x0) close(r4) r5 = open(&(0x7f00000002c0)='./bus\x00', 0x143042, 0x0) ftruncate(r5, 0x2008002) sendfile(r4, r5, 0x0, 0x200fff) ioctl$SG_GET_SCSI_ID(r5, 0x2276, &(0x7f0000000300)) getsockname$packet(r1, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) r6 = socket(0x200000000000011, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r6, &(0x7f0000000240)={0x11, 0x1d403f89825007c2, r8}, 0x14) getsockname$packet(r6, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) r9 = socket$pppoe(0x18, 0x1, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000180)={0x7, 0x5, 0x1, 0xffff, 0xe1, 0x5, 0x1ff, 0x10000, 0x0}, &(0x7f00000001c0)=0x20) r11 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r11, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB='\t\x00\x00\x00', @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r11, 0x84, 0x66, &(0x7f0000000040)={r12}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f0000000340)={r12, 0x1a73, 0x8}, 0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000200)={r10, 0xaa3}, &(0x7f0000000280)=0x8) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000002c0)={'veth0_virt_wifi\x00'}) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f00000000c0)=""/115, &(0x7f0000000140)=0x73) 16:19:32 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_open_procfs(r0, &(0x7f0000000100)='net/bnep\x00') ioctl$NBD_CLEAR_QUE(r1, 0xab05) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) writev(r2, &(0x7f00000000c0)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}, {&(0x7f0000000000)="c5e138cea8943f0266bf87a9edf33d30379fa87913e797fcfe7f0f007c9423a75283989aea1e62fbc8dc69eb84d70e2ce7350bd316629c8ff367b36e93239587628c766fb81b2a2881284a33e92e87ed02d5de5159c3a409ba19bbf3088e2b08a2feb396a80f62d87913d05c04a43553a2be8c3b4067d1b507414edda7bd79f4a451a4e04998", 0x86}], 0x2) 16:19:32 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x1267, &(0x7f0000000000)) 16:19:32 executing program 3 (fault-call:1 fault-nth:0): r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x1267, 0x0) 16:19:32 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_open_procfs(r0, &(0x7f0000000100)='net/bnep\x00') ioctl$NBD_CLEAR_QUE(r1, 0xab05) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) writev(r2, &(0x7f00000000c0)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}, {&(0x7f0000000000)="c5e138cea8943f0266bf87a9edf33d30379fa87913e797fcfe7f0f007c9423a75283989aea1e62fbc8dc69eb84d70e2ce7350bd316629c8ff367b36e93239587628c766fb81b2a2881284a33e92e87ed02d5de5159c3a409ba19bbf3088e2b08a2feb396a80f62d87913d05c04a43553a2be8c3b4067d1b507414edda7bd79f4a451a4e04998", 0x86}], 0x2) 16:19:32 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x1267, &(0x7f0000000000)) [ 538.637412][T16605] FAULT_INJECTION: forcing a failure. [ 538.637412][T16605] name failslab, interval 1, probability 0, space 0, times 0 [ 538.699743][T16605] CPU: 1 PID: 16605 Comm: syz-executor.3 Not tainted 5.5.0-rc5-syzkaller #0 [ 538.708467][T16605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 538.718557][T16605] Call Trace: [ 538.718586][T16605] dump_stack+0x197/0x210 [ 538.718616][T16605] should_fail.cold+0xa/0x15 [ 538.718634][T16605] ? fault_create_debugfs_attr+0x180/0x180 [ 538.718653][T16605] ? ___might_sleep+0x163/0x2c0 [ 538.718675][T16605] __should_failslab+0x121/0x190 [ 538.718693][T16605] should_failslab+0x9/0x14 [ 538.718705][T16605] __kmalloc+0x2e0/0x770 16:19:32 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x1267, &(0x7f0000000000)) [ 538.718718][T16605] ? mark_held_locks+0xf0/0xf0 [ 538.718730][T16605] ? mark_lock+0xc2/0x1220 [ 538.718746][T16605] ? _parse_integer+0x190/0x190 [ 538.718766][T16605] ? tomoyo_realpath_from_path+0xc5/0x660 [ 538.718786][T16605] tomoyo_realpath_from_path+0xc5/0x660 [ 538.718801][T16605] ? tomoyo_path_number_perm+0x193/0x520 [ 538.718824][T16605] tomoyo_path_number_perm+0x1dd/0x520 [ 538.718838][T16605] ? tomoyo_path_number_perm+0x193/0x520 [ 538.718858][T16605] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 538.718872][T16605] ? __f_unlock_pos+0x19/0x20 [ 538.718915][T16605] ? __fget+0x37f/0x550 [ 538.718935][T16605] ? ksys_dup3+0x3e0/0x3e0 [ 538.718951][T16605] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 538.718967][T16605] ? fput_many+0x12c/0x1a0 [ 538.718988][T16605] tomoyo_file_ioctl+0x23/0x30 [ 538.719005][T16605] security_file_ioctl+0x77/0xc0 [ 538.719022][T16605] ksys_ioctl+0x57/0xd0 [ 538.719040][T16605] __x64_sys_ioctl+0x73/0xb0 [ 538.719058][T16605] do_syscall_64+0xfa/0x790 [ 538.719078][T16605] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 538.719090][T16605] RIP: 0033:0x45af49 [ 538.719106][T16605] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 538.719114][T16605] RSP: 002b:00007f651253ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 538.719128][T16605] RAX: ffffffffffffffda RBX: 00007f651253ac90 RCX: 000000000045af49 [ 538.719137][T16605] RDX: 0000000000000000 RSI: 0000000000001267 RDI: 0000000000000003 [ 538.719146][T16605] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 538.719155][T16605] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f651253b6d4 16:19:33 executing program 3 (fault-call:1 fault-nth:1): r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x1267, 0x0) 16:19:33 executing program 4: ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x1267, &(0x7f0000000000)) [ 538.719164][T16605] R13: 00000000004c5835 R14: 00000000004dc4f8 R15: 0000000000000004 [ 538.735519][T16605] ERROR: Out of memory at tomoyo_realpath_from_path. [ 539.166485][T16616] FAULT_INJECTION: forcing a failure. [ 539.166485][T16616] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 539.179733][T16616] CPU: 0 PID: 16616 Comm: syz-executor.3 Not tainted 5.5.0-rc5-syzkaller #0 [ 539.188412][T16616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 539.198481][T16616] Call Trace: [ 539.201788][T16616] dump_stack+0x197/0x210 [ 539.206139][T16616] should_fail.cold+0xa/0x15 [ 539.210754][T16616] ? fault_create_debugfs_attr+0x180/0x180 [ 539.216586][T16616] ? __kasan_check_read+0x11/0x20 [ 539.221624][T16616] ? mark_lock+0xc2/0x1220 [ 539.226064][T16616] should_fail_alloc_page+0x50/0x60 [ 539.231337][T16616] __alloc_pages_nodemask+0x1a1/0x910 [ 539.236736][T16616] ? __alloc_pages_slowpath+0x2920/0x2920 [ 539.242909][T16616] ? __kasan_check_read+0x11/0x20 [ 539.247962][T16616] ? fault_create_debugfs_attr+0x180/0x180 [ 539.253790][T16616] cache_grow_begin+0x90/0xc60 [ 539.258603][T16616] ? tomoyo_realpath_from_path+0xc5/0x660 [ 539.264337][T16616] ? trace_hardirqs_off+0x62/0x240 [ 539.269465][T16616] __kmalloc+0x6b2/0x770 [ 539.273724][T16616] ? mark_held_locks+0xf0/0xf0 [ 539.278500][T16616] ? mark_lock+0xc2/0x1220 [ 539.282936][T16616] ? tomoyo_realpath_from_path+0xc5/0x660 [ 539.288682][T16616] tomoyo_realpath_from_path+0xc5/0x660 [ 539.294246][T16616] ? tomoyo_path_number_perm+0x193/0x520 [ 539.299905][T16616] tomoyo_path_number_perm+0x1dd/0x520 [ 539.305375][T16616] ? tomoyo_path_number_perm+0x193/0x520 [ 539.311037][T16616] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 539.316856][T16616] ? __f_unlock_pos+0x19/0x20 [ 539.321586][T16616] ? __fget+0x37f/0x550 [ 539.325765][T16616] ? ksys_dup3+0x3e0/0x3e0 [ 539.330194][T16616] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 539.336448][T16616] ? fput_many+0x12c/0x1a0 [ 539.340882][T16616] tomoyo_file_ioctl+0x23/0x30 [ 539.345658][T16616] security_file_ioctl+0x77/0xc0 [ 539.350612][T16616] ksys_ioctl+0x57/0xd0 [ 539.354790][T16616] __x64_sys_ioctl+0x73/0xb0 [ 539.359396][T16616] do_syscall_64+0xfa/0x790 [ 539.363906][T16616] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 539.363918][T16616] RIP: 0033:0x45af49 [ 539.363934][T16616] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 539.363941][T16616] RSP: 002b:00007f651253ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 539.363954][T16616] RAX: ffffffffffffffda RBX: 00007f651253ac90 RCX: 000000000045af49 16:19:33 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_open_procfs(r0, &(0x7f0000000100)='net/bnep\x00') ioctl$NBD_CLEAR_QUE(r1, 0xab05) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) writev(r2, &(0x7f00000000c0)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}, {&(0x7f0000000000)="c5e138cea8943f0266bf87a9edf33d30379fa87913e797fcfe7f0f007c9423a75283989aea1e62fbc8dc69eb84d70e2ce7350bd316629c8ff367b36e93239587628c766fb81b2a2881284a33e92e87ed02d5de5159c3a409ba19bbf3088e2b08a2feb396a80f62d87913d05c04a43553a2be8c3b4067d1b507414edda7bd79f4a451a4e04998", 0x86}], 0x2) 16:19:33 executing program 4: ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x1267, &(0x7f0000000000)) [ 539.363963][T16616] RDX: 0000000000000000 RSI: 0000000000001267 RDI: 0000000000000003 [ 539.363971][T16616] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 539.363985][T16616] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f651253b6d4 [ 539.393372][T16616] R13: 00000000004c5835 R14: 00000000004dc4f8 R15: 0000000000000004 16:19:33 executing program 3 (fault-call:1 fault-nth:2): r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x1267, 0x0) [ 539.773515][T16634] FAULT_INJECTION: forcing a failure. [ 539.773515][T16634] name failslab, interval 1, probability 0, space 0, times 0 [ 539.824458][ T27] audit: type=1800 audit(1578759573.826:46): pid=16601 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=17180 res=0 [ 539.836312][T16634] CPU: 1 PID: 16634 Comm: syz-executor.3 Not tainted 5.5.0-rc5-syzkaller #0 [ 539.852478][T16634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 539.862545][T16634] Call Trace: [ 539.865849][T16634] dump_stack+0x197/0x210 [ 539.870197][T16634] should_fail.cold+0xa/0x15 [ 539.874807][T16634] ? fault_create_debugfs_attr+0x180/0x180 [ 539.880745][T16634] ? ___might_sleep+0x163/0x2c0 [ 539.885610][T16634] __should_failslab+0x121/0x190 [ 539.890560][T16634] should_failslab+0x9/0x14 [ 539.895085][T16634] __kmalloc+0x2e0/0x770 [ 539.899344][T16634] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 539.905593][T16634] ? d_absolute_path+0x11b/0x170 [ 539.910543][T16634] ? __d_path+0x140/0x140 [ 539.914966][T16634] ? tomoyo_encode2.part.0+0xf5/0x400 [ 539.914987][T16634] tomoyo_encode2.part.0+0xf5/0x400 [ 539.915007][T16634] tomoyo_encode+0x2b/0x50 [ 539.915034][T16634] tomoyo_realpath_from_path+0x19c/0x660 [ 539.925719][T16634] tomoyo_path_number_perm+0x1dd/0x520 [ 539.925736][T16634] ? tomoyo_path_number_perm+0x193/0x520 [ 539.925755][T16634] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 539.925776][T16634] ? __f_unlock_pos+0x19/0x20 [ 539.958097][T16634] ? __fget+0x37f/0x550 [ 539.962278][T16634] ? ksys_dup3+0x3e0/0x3e0 [ 539.966709][T16634] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 539.972962][T16634] ? fput_many+0x12c/0x1a0 [ 539.977415][T16634] tomoyo_file_ioctl+0x23/0x30 [ 539.982197][T16634] security_file_ioctl+0x77/0xc0 [ 539.987156][T16634] ksys_ioctl+0x57/0xd0 [ 539.991331][T16634] __x64_sys_ioctl+0x73/0xb0 [ 539.995941][T16634] do_syscall_64+0xfa/0x790 [ 540.000470][T16634] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 540.006372][T16634] RIP: 0033:0x45af49 16:19:33 executing program 4: ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x1267, &(0x7f0000000000)) 16:19:33 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_open_procfs(r0, &(0x7f0000000100)='net/bnep\x00') ioctl$NBD_CLEAR_QUE(r1, 0xab05) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) writev(r2, &(0x7f00000000c0)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}, {&(0x7f0000000000)="c5e138cea8943f0266bf87a9edf33d30379fa87913e797fcfe7f0f007c9423a75283989aea1e62fbc8dc69eb84d70e2ce7350bd316629c8ff367b36e93239587628c766fb81b2a2881284a33e92e87ed02d5de5159c3a409ba19bbf3088e2b08a2feb396a80f62d87913d05c04a43553a2be8c3b4067d1b507414edda7bd79f4a451a4e04998", 0x86}], 0x2) 16:19:33 executing program 5: iopl(0x7) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000007000100070c10000000000000000000", 0x58}], 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'veth0_to_team\x00'}) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r1, 0x5385, &(0x7f0000000000)) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000100)={0x288, 0xc, 0x4, 0x400000, 0x1, {0x0, 0x2710}, {0x4, 0xff9cf56909ae2ef4, 0x8d, 0x1f, 0xf7, 0x27, "c27a38d7"}, 0x5, 0x4, @offset=0x3, 0x8000, 0x0, 0xffffffffffffffff}) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=@gettaction={0xc0, 0x32, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@action_gd=@TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6c}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @action_gd=@TCA_ACT_TAB={0x68, 0x1, [{0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb28}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x14, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) r3 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r3, 0xc0305616, &(0x7f00000000c0)={0x0, {0x0, 0x8}}) 16:19:34 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0xffffc000) ioctl$SG_NEXT_CMD_LEN(r0, 0x5385, &(0x7f0000000000)) [ 540.010291][T16634] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 540.030050][T16634] RSP: 002b:00007f651253ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 540.038497][T16634] RAX: ffffffffffffffda RBX: 00007f651253ac90 RCX: 000000000045af49 [ 540.046483][T16634] RDX: 0000000000000000 RSI: 0000000000001267 RDI: 0000000000000003 [ 540.054466][T16634] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 540.062454][T16634] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f651253b6d4 [ 540.070427][T16634] R13: 00000000004c5835 R14: 00000000004dc4f8 R15: 0000000000000004 [ 540.080017][T16634] ERROR: Out of memory at tomoyo_realpath_from_path. 16:19:34 executing program 4: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x1267, &(0x7f0000000000)) 16:19:34 executing program 3 (fault-call:1 fault-nth:3): r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x1267, 0x0) 16:19:34 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000040)="b44ba1659293286dedbc1769979ffff25954e6fafea43860c5399502cb279c6635db2527d09dd68d65f4e5084486cdc875754ac35c3b81c4c626720196fd6fbd0bd512511729e60d59ec4667db16cb0e9ef20093886c62ce66dc76d3a5981311b1bfe6b6fdfcbd2e49ca2f0321d189f667223a6417da20972b4249d47a8e61427c059ea4cd8084ed2fbb417fc96d0251cc6f36758c259b"}, {&(0x7f0000000100)="54c8347c111445376803d16f6cb8446d9939c84ecbfd3c8367ba5b8e64e288885d339a1ba148fc21347c67c5ff87fc62d45d894ffe5aa42eb9804e30eff7c8115f3646b7f13605b928dcded8ee297e2cac374d879c418fd73172bdba0bf7d115a63c315e92124c4eaeec85ce5f5af2d55c74c659813547c4e8f8"}, {&(0x7f0000000180)="113d7a1ca6b9cc301961d09369f29a9fa228bfdfd15ed386b065a130b26924de10e67b5ac40cbfdff1b1c1b73385eb65bc8f5d0fbc340423a87bae6bfa596b1e53fbf63c8aa4f4ce16c5e8495d3cab77f056af023cf84c8066faa1b92b27608c774f8357fcd932029a9596ef93ca051b9872faed3781af478ffffe6c70f4cd4d71e176935c7b77e2092d01562045e61745ece8af92d50b54389c79be427fe318d65a"}], 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f00000002c0)={0x0}) r4 = syz_open_dev$vcsu(&(0x7f0000000300)='/dev/vcsu#\x00', 0x9, 0x40040) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000340)={r3, 0x1c0000, r4}) splice(r0, &(0x7f0000000000)=0x6, r0, &(0x7f0000000280), 0x9, 0x0) 16:19:34 executing program 4: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x1267, &(0x7f0000000000)) 16:19:34 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x200000, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') r3 = socket(0x200000000000011, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r3, &(0x7f0000000240)={0x11, 0x0, r5}, 0x14) getsockname$packet(r3, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x1, 0x5, 0x47, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r6}, 0x3c) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x7c, r2, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_MAC={0xa, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @remote}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x81, 0x4}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x81, 0x2}}, @NL80211_ATTR_MAC={0xa, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x60881}, 0x8000) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x5385, &(0x7f0000000000)) 16:19:34 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_open_procfs(r0, &(0x7f0000000100)='net/bnep\x00') ioctl$NBD_CLEAR_QUE(r1, 0xab05) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}, {&(0x7f0000000000)="c5e138cea8943f0266bf87a9edf33d30379fa87913e797fcfe7f0f007c9423a75283989aea1e62fbc8dc69eb84d70e2ce7350bd316629c8ff367b36e93239587628c766fb81b2a2881284a33e92e87ed02d5de5159c3a409ba19bbf3088e2b08a2feb396a80f62d87913d05c04a43553a2be8c3b4067d1b507414edda7bd79f4a451a4e04998", 0x86}], 0x2) 16:19:34 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x1267, 0x0) 16:19:34 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f5d", 0xd}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000007000100070c10000000000000000000", 0x58}], 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x400, 0x1b, 0x6, 0x2}, {0x1f, 0x9, 0x50, 0x1bd4}, {0x8000, 0x2, 0x1, 0x4}]}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_ENCODER_CMD(r3, 0xc028564d, &(0x7f0000000000)={0x0, 0x1, [0xff, 0x4, 0x0, 0x400, 0x8001, 0x3, 0x9]}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SELLOADLUT(r4, 0x541c, &(0x7f0000000000)={0xb}) ioctl$TIOCL_GETKMSGREDIRECT(r4, 0x541c, &(0x7f0000000100)) 16:19:34 executing program 4: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x1267, &(0x7f0000000000)) 16:19:34 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_open_procfs(r0, &(0x7f0000000100)='net/bnep\x00') ioctl$NBD_CLEAR_QUE(r1, 0xab05) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}, {&(0x7f0000000000)="c5e138cea8943f0266bf87a9edf33d30379fa87913e797fcfe7f0f007c9423a75283989aea1e62fbc8dc69eb84d70e2ce7350bd316629c8ff367b36e93239587628c766fb81b2a2881284a33e92e87ed02d5de5159c3a409ba19bbf3088e2b08a2feb396a80f62d87913d05c04a43553a2be8c3b4067d1b507414edda7bd79f4a451a4e04998", 0x86}], 0x2) 16:19:34 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2, 0x0) 16:19:34 executing program 4: syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x1267, &(0x7f0000000000)) 16:19:34 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f00000002c0)='./bus\x00', 0x143042, 0x0) ftruncate(r2, 0x2008002) sendfile(r1, r2, 0x0, 0x200fff) ioctl$SG_GET_KEEP_ORPHAN(r2, 0x2288, &(0x7f0000000100)) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0xf12f5000) ioctl$SG_NEXT_CMD_LEN(r0, 0x5385, &(0x7f0000000080)) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x8000, 0x0) bind$phonet(r3, &(0x7f00000000c0)={0x23, 0x89, 0x7, 0x9e}, 0x10) 16:19:34 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$BLKALIGNOFF(0xffffffffffffffff, 0x127a, &(0x7f0000000000)) openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r0 = userfaultfd(0x180800) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000100)="0e813b7c090adf5bb7774dba06a4cfac077209fe82646e8fb6c76243519d6dde4291c206e6e2ee4774ac1782bdef2c827fb5181ad4076a561255f0c1bb8edb3d8d06e1b167c77c0b338077ba5e06f8171e1cb802716e89dbe4bf06538bf5fdfb7fa6c9178ded448c3a6075e9f36721d56848dd470bbcd18424ea8c5f4cb1137626044e441f6f6b5a842312ebfda1f3914e797714c74cdf3f4e3903a406df3461dfa00bd53daea723b72d0ec8a955a1143616dcd50ab1b4b1a6c9a9a4a53f2ba75ea9f3fc9a9036a0b25049678bf2fe582c3c42739369af921e7a509b9b48e0ae4904db5e6c9ebd0874d0027572856ac3722d20a32562f9"}, {&(0x7f0000000900)="04829a8e44ac3bac3aec1e1a9de7bd102b56fe7860045460fd20e4a7976830aefbc130bf40c2ea3d767b8d4c1e3162197af25db9705602405350d8c1c5a20746ab02f32eec46b1ce891e71da068def1bbfe696d993cf3b0a98af2f5b010fae81e34c309e72921fe2a177ccdbfa40ca5c859ca03d13c553b31bff9f1d2f9d682b80bd312f77278d8dd2808664c9f6ee0cf038ff61807183fa7913da10bd42108dbb0be7c721396a4cd93ac931bd90d312da75e95be705536ef0b446d5f8fa210b421c4eda8b9fd1ea39e192ee30ac0cb05f76d85323cbd3b07308d8171ebe80cd176d9c52589530514f8065aedccf84e0ad7c60a1abf34ebf8d4c301e56dcb9810ac2c5d2a2a13326ba82baf7b1e184980612ba464322c05d3dff6f237a0447e43e9c023b6bf3d281487d75ba45c83e2ef580e6399970caa75269017f79c996751d04ad86749cbc8e32c8bf46ab018195388a4493cb52fc3f432b2a0c9864b81217f68b00d0a2517787a1ba0eb6b986fc3be9f0ff4a790428e024db3a6ab0072d9fd6390d1b555616b902e18d65a34a80ad3dac5eb2f6dda6a7a788f1bbdc4bdeceabc7db9f0e7864abe1db561cf0c287481912e0de4056234f4ba9530da24fd965666ae65667ac1d857ea18a62335b97f436846fb0f4e7af31449e63735496980fac27ecca49cf22f593784471a2e192b8140f8fe4a70fa86516cc44ee2b098885b45c95028a945a94cbfbd7410d0ac749b41866e7d8b810fbc4336fa957ab2e3dab52e6eda2cbb459d88fa6c32c55914bc98f0093982f14f4dbe6244d64428fc991c8c7e8e275a505bf08bf87ee9a98eb8f8a184ae6cadc31572ab9ce98268517d219893f06fe362b6246c7f45574e369156eeb0425034e976c495276e76782be6ba931c135b77ba46e71f96bcdca811ffd90aa631e96aa6692c3a7306deaf682a16c99a464c566c419818f7eaaf80bc465845baada191014da3cdd66cb71a6d378b88472fe22f89a1b26a393d7fed47505a47dacaa1ac71c259bd028cb5edc542566fc973d81ba30b7a96859616187d10f0da85e4d444836cfa3358681309d9e9fdc30c94ef3e8e22f488ad4c13de3fe6f0f449a56f9850edaa0f4d263194ce4988ea306b9c2f1f28db2631bb5080aa416ff75b1c1523fbc31f0ad6444f96cfee71ce795c4e97f945a8ac3f4d245f00b2a3274ba36a102f235dd5e9c416fa45bb0622cb97e0c845fec4edc9a53312c98d2195cab00633c359b85c0cb3b3ab3806b50daded7a64bcc0d278f1ab5155c02a4a543a28bdc09e5a6edeac30143e786cd84044620acc87226d86ea9b1022280c73538eba0a30892ee251af337bd0f014f6555fdfc52a0b2cee8f396ecc7ad8fc47702fe7726021c765590539b059eabaf13bfd303c1d4cafeb30174734b0c1a008419f374e32862b8a96444a53f2f3299eaacb6d7b1ef2a1126c026490978b6b080bb701f7143338b82552c239aa34a695666ab46737f03af6502272dfb0d8368083f97ee69f43590f125b8b24e18b7cc02c9bf80e447d23475615046d7b2800d77008fa46c4e96619e78eefd5bcba468bf35fe4e9036cdee0c1f6ca608b95873174905728e0849935bf73446816ed7eab807fe77b4bd15c44149ed20cc867d0f6be4730eeb9a27b33274f35d44dfeecb6b8d251731e2c8ed6675d95d9a2f7710e6ceeb11fdde1f9ddfa707cf3719f59a50753fead6cf6bd8b61970681b2724703b6a7a004aea0cfb205fdafd6e851939f53937b5f2cb718d6fc15e1e1c249c3b5976de69ad27668da6e36e5e69cdad8699287db8daa841e348270e3db00494b7f49587cfe7c5ca67ee8c8b98efddf16e35f2b992180c5e5a2e162d2bf810a9eee70210c60e90a49f808ecd850a4f33e9659f7c19a999acdef94b871a391f27c574611703c91a177669fce381e376525d3e414e828d4e7edeeb73392ce1593ab3ac598bf8d39f106ee2df8385f3ec51e7171e02c8638196fcf777ac3c512684d7606ac851b671ef0572a68ee78dcb6e99f701a85d8d80f4b1762647384e5009213f26c4c71a2317a64b02b64802f6dfd93da04df8965cca6d7a7afa39fccfec0ef7fc75a2260c6af1998154ab1b9b92754a1941214c17f7338a3b15f05a712abe7c98c514bfd8725f7833c3a105a2f22040a0978b31204e3ffc4f947081ea95e3bf85c821c16d9667fe3b5fcc4cb254fa0df191da709994b25a847953457fa16971346ae0953482b4ea82b132caa3c0bcaeba06d19ad88e57a0f40119912450b703581360410b5255433ef0c6496cb812712b38c8f3f32c3e368f45edf99a27d218ae61c0c6c1da00331797d3cf2bc2901a579fff77d74f7671090d7e9376555a26ae0d6bbc99128722af2afb5408f287a020eaad9988a56567c3ed65990ed9e69986a514ac23e193296523a203f2b8c8563e7455fde81124c5b8a9bf025b6af7234312dc00dfef2665aec07ca7d4baa515f5732a603bd1ac3b86a2213198abfe59be272dbc74ca29a87e985ad0483c954ca2aff6f688c5d8d451905ed07db3d9ef2bb1946951be2ee6041fcb8a7684e658fe6f9ff02d454c806fa37af371238f6487f2dcc47c95b5123582e8d95fb897a2a9ea5dac06c2f17649a0ce5766df19338d24b3f90166343b0e536ae73fabeae08010ee0983ef9a7d517ba1cbde24ada8f9fa208ebd5b1acbc22735caeb095cc5d14179cc241b0916614390e4781aa9932a1dae8f1c76cf043f8f17cec760baf9a3c8b60569780bd2a9c9631b7ccd66e8b724b4c7b1fe0f614b44d1dcec6b1727e80933632a02cc07639105fb3ea66522e23648f40e56f304483d9cac54438116250b765d96dbe69d12eb11a22cab1a0fde47299b4f414353ca6d30ed9f31a3ff011bb5adb026414fefb6e6abd9697bbb1069ca190e2e11db8a9a9354b056f1793c2447f133bf38a9e13d1b9b76857be2cda195ac5b1fdfced51abe1686e66ea8a6a83ff3bbb01ff02826dc5a031d342f68bda9351e653a2439eaa67149871fbaca1856d448406284cf7ed4557c226a6fa9a2d25b9feaedd5dc1ec7541fd8319f39d36ab92370b59f45156db46c547b9030b2d6ad4ed9068bc8930d33a434c86499fcb8871d7417c40658213b1e7f63120d0409c158bebb49c36f13d0d38f3f91218018a8f3f0359ea7383e6b03be84c688a9cff43d2a35e49f376031becec0bcc1e2ae204484c7fd11c6d01301ae69302391c80f6f1efd96c80d401a94b34b3bf98be1b240b5a8074030073ec785cb2aa515c7d88e4450a67391bad964a2c0ba306567b22b33f4c9844a9ceebea77a348c182527e15a24e76a5ee5ef551b9b7155f701d17d075a6671f74b57c284402cd0d364b3bde5589d8982f624969969d7df5eb431faf63a8cb598ba242423764b6c5f82a792762767a39b094bd9627a68de4992ffa1ec6a5c7957113977ae3cb9911698e74ed883eb222defcc6d03f7247b8d5edd70404f4f2c96ea7412be6756884df6b9ed52af2617703f60e6095fe423fb0d8db0f33c0dc4653af1f48137398c410fd5030ebbf7c6dc0329745f8455070175f410474197272f1bd94b6862ebda7071ca961389078c28959873bba80df8d99731887af1a7602b28bce7fb9c035fae5392b14f16f34b110cf3aadeacb333d879f2da5b4cb338788df980c9c4a3f0795a76091e373d0620f6f13140be9f400276bc03c8f736d27b00119b6f2a79b87f935113c15a24d3a1e4eb8965844148858115d9fe344754702ecf8e12557a40a978c3600cd2c52649ed6a7a159db370b450b666ca2009a5bf367fd05544480974f5ed1e80bb4077386d971fe657e362d00953976ec8ab11fe87f2eaa2335fe224c27c43aa658939d30734fb3278326fde213efa4fd67ea4ebc5bc8350780986f556ad779ec9192b8cba5ac92620710df7fb3246b9ae000d33906f7eeff0b407ddafc4ce16d30a2a3563c00d14cdfbe893f78f3eaed88f5fae63b317d7ceb511029beff043c4b51673fcfc4b278dbd8477564682e6eebe2c897c0fb22ea4355d03cdb71d103fecea99a94bc8418586859f999efad11b4804d734f7a09b70e1310812e5da015ec043129695c5e7aa24059931d406bbc89b54dbe0ab71548f2957105e0f5a29a5a8d80f4992714fcc86e0a85ba3f655d5560fc337ab12f54929cc95db31108bb18a678aaf8b9b6cc69a400a4672f579e62d37c28f301c5f1228b7c783c738ef0c522e07231e8c537912be9656bd737d371b21f4f72c57727ee491f186b3b521b77a1aae369f1efeb9575219f5f899e2fb42703dc5320906e0b187a5de4a0bc9a4d02efcfffd7376146b4266bb1f041d65ffa015aa767e756a5548df4ce4e1eed4ef009f0e4abc77bbf2b01f8f4ce22d51891a5165f17d83601aff934d59553edeb49a2fb3f16f3684ab36d2f8ddfe5ea7671c0672f5b42a2d60f6f76930b284d8a8719970a8b348a869bbc83a9a60cba8bfeb6bcf7d9162ea0ad2582ce2241daf14ac60ce8a8a1d08c302d102396aa7dddd216609ca5b35f3bdff3a1e65c12e92dc7705b569ecd095892c4251defa08c18406689c4afbc6e67f19d35c5934509dbacf1cae1895a0a15aad38dd5dc56d3661c25cd7b231e1ceb9bc3659b7c945435d640e5f7241f426ee98e2a8ed7ed52b5c39502d07f46346c2cc480713785522727aded5e51860ea438291f975b9d475b5cfb6efe9a0a7d5f69004e2feca6aa69fd3a849a6a8f7a8d934691d4734b86d79dbc65b929b358042e807cc07eaab467c15d5ab2f189df46d11fac69313043eece82b9f32e15feb8b89e697c6f3d168d29d7fc67f0a812516f3ee86a8de8a133756d54c877f82fdba6b56b82bde2580bf33e8681ba51e206e81299faec912dbdc9d297080b82f5365c7cf881f4aaa93c776cab2d10be1bb795c98d81936dd7696b3acfd55045cb2c6923e282cdf59c805969cfd6231a6eaeb194aa76315fcebf295afc81f6c25c9f96a0c4838876b150f710bee4801fe67ae6217da500c9f9c52219cba71678b1ef3837414b978305f92e6e8dbc973bbfd86cd13bafc8c5f825a35090ef1452b88a10a06583264c526a4bdf2d57c3d19ba948de7c2557c0185c894cbd4a11927db39cbbb1dd368eb33872712657a90548dd35bddff66eae6eeb6badb07b535f84f7b12ef44d15db7d56de8e82913a8f6cb2df244059ce459d109e747f545f574d76ef540d26896b27913d7651f09fe3b74aed9fba29b582fae9b1098d9e59e05381f02cf83f5eca7c7760b511bdfb73cda8938bfad867df211b0cee8c066fb3941b270c6c98a9d0e86e82f2354b09dadc56d8fcdd989f78818b470661a8ec41bb0bd44452dcb80c5109753643a523d75e9ccca6d45b3df644836757ad64a7ef5bb67e8807d9c7e9e7b1458d605a642fc154a36d5530ec13ab565fb8332d78f593a175a296dee4d2a1a5276e322a491e68636d9e8631e9f9b27e80094a5065d0bd376cbe79e8c9bbf5fead7f33e16963f15741c74a89ca994486cd755195addd617591b62f178bb0d5868958fc020151f3bd20c0b64fda5d36da423d8d1c9ba7dec5c32d443cf068bf9a5b231ee9e3c9d4e0bd813870721032c54da32f7ba3f7f7e5cb5a6038d469eacc470bcc8f18392734a1ac86296f92b93afa1ab83fc3fa2c8646fcf86a158e6c4af2f9568cae7214f35a0f76fa715b146ddbd7cabd4339b6831c447f9b7ae78474c9dd981bfade48a32e6e3f4f6de5ca1aec1c3e5f38190dab09c528c905d732cbf01274ce22b"}, {&(0x7f0000000200)="ffc19ab37af5352ec0552c0a03f5c3a8895e0133678a3f4c"}, {&(0x7f0000000240)="637d79455462028d83eb381db0013f028fca5bdff1432220ea89b5aa99f4efdda604c5ba358ea537ab2b381181869165a5a2b53399e8302d21cd09272e55b31e8d16db5de46dd55f7dd73e678d72a381054b9ec146d8653dc9c3cb772a97f9550fe274127a43f52abfd18c538d7087d307c518d71ac7f6e6f0f3548a536740ac870fcc52d93ab40ced733555679f7871feead30e86395f9ac04dcf987c97cabe2bf20bd0baa8756b6afa2af0acf625da5e3fbf9044757360065a8ec51d43dc86a910a749412c67e251e75d1458e576bf1fc4e6048d0169d8e19ea5d2adffdca39d2f5c1a12"}, {&(0x7f0000000340)="0a826f24faa8c28e481b6decdedfc84c37c100dd65521406cab8c963527662e8f9bb803fb0b21c87a97f2e3789998fce0d48fbd070143c914004b327a95e89d5004fd2ec2014ca395c9cc02ca2b60b41b64aa64c6a588b38a8a2b8ff696e3b3fef5b826e22b2888aaee751f2b70edac4aca8f290de71944813ebd1d59a2e3c83dd64ebb477bf3cffb31bb5eadd61e281c67e30762a81ae9e6a47db8cf38e6f928f843bc162a9819b8a5e26266d3c2b2dc8fbcc9deaf65f98871e26a51b929e5d3f93ba73bc55699378a9df67028feb4571f5f4cfa2dde5c317"}], 0x1000000000000128) 16:19:34 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_open_procfs(r0, &(0x7f0000000100)='net/bnep\x00') ioctl$NBD_CLEAR_QUE(r1, 0xab05) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}, {&(0x7f0000000000)="c5e138cea8943f0266bf87a9edf33d30379fa87913e797fcfe7f0f007c9423a75283989aea1e62fbc8dc69eb84d70e2ce7350bd316629c8ff367b36e93239587628c766fb81b2a2881284a33e92e87ed02d5de5159c3a409ba19bbf3088e2b08a2feb396a80f62d87913d05c04a43553a2be8c3b4067d1b507414edda7bd79f4a451a4e04998", 0x86}], 0x2) 16:19:35 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x10, 0x0) 16:19:35 executing program 4: syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x1267, &(0x7f0000000000)) 16:19:35 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="7c8d800ed916", 0x6}, {&(0x7f0000000000)="55735983d8e240f8c08ae2f6ea32f1471e538f108d76696aa28dd64f7061e808de9ae2fee8396520fa279a6f19967202cc", 0x31}, {&(0x7f0000000040)="db358e0a601d6d8d86ac69eaaa9134fa2f13d0df63c4fcea1933747b91ee4860ac65970ad82c6450bebbab7fd50cbf84963b9d", 0x33}, {&(0x7f0000000080)="c8706fa6799ace701b97ec08282da554b99b5db0e5c5a2921d7423126ecbc218bc4e270d930f84a8679de30378d5eb7882998dadfe90b1fcbce654401f7a757524bc916098ab6a1715c70eb166bb0a93429ba90407635a108e7865e426df6c7e80d067200b0ae50bb5aa7975edbb59abf7b9ab16fe48823f2ab1ec892fd3a8925e3eed6dd695da4a", 0x88}, {&(0x7f0000000900)="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", 0x1000}, {&(0x7f0000000140)="14f134e7e561491d7e149c283ef4d9208074578399057df2", 0x18}, {&(0x7f0000000180)="c30d3416eaa258c30199926b41c7e39bde9f2dbbe24937998bdf67f65b1615c994bc8cc704e5e5ecce6bdb597e4ff7c9d22a9ec423ac341028c03f8c1a5cd79b7ce266703cdc47a8571b688f33061eaa14c145eff6e08450f1c45e8bc3432f15a3de95677b943bd6376b4591d737785c2c00125699bcd89287fe0c2b0420618ef5c35c8a54406ea97aa1fe7c0e443919217fbcb18a00000000000000", 0x9c}], 0x7) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/hwrng\x00', 0x40000, 0x0) writev(r1, &(0x7f0000000540)=[{&(0x7f0000000400)="2dab278b38ac01acc51a6d0f26fb94cdb6db3f781c1d4c048bcdb9eb16e9c591801f11d417723a3b2da578297a58be3e5d8bd41073bd48b282e016b8651c70cb32e117a68215c90615b06239bf3d40c4233f52815328de042b8b098e9412503a87095b94a0f44653244740b50517c0aa254016ecc2c132a7ab18b52c060e748639cddbb5b3e51082e0e2b9402583e03fbacdc62268e61d05294a02e66ceee2958793c58225f574cfa040b13406b14e5b1f1ca3623c7c43fcc147f50a7fae75539fe811cee88c27928df6326787e3ca4cfe0c87bcfa4e6ba79f9862c2afbed6a9db", 0xe1}, {&(0x7f0000000500)="cc560129de16e186b9857acbb7c2e2", 0xf}], 0x2) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dlm-control\x00', 0x200, 0x0) ioctl$sock_inet_SIOCGARP(r2, 0x8954, &(0x7f0000000340)={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x1, @local}, 0x2, {0x2, 0x4e24, @multicast2}, 'dummy0\x00'}) 16:19:35 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x125c, 0x0) 16:19:35 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) syz_open_procfs(r0, &(0x7f0000000100)='net/bnep\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}, {&(0x7f0000000000)="c5e138cea8943f0266bf87a9edf33d30379fa87913e797fcfe7f0f007c9423a75283989aea1e62fbc8dc69eb84d70e2ce7350bd316629c8ff367b36e93239587628c766fb81b2a2881284a33e92e87ed02d5de5159c3a409ba19bbf3088e2b08a2feb396a80f62d87913d05c04a43553a2be8c3b4067d1b507414edda7bd79f4a451a4e04998", 0x86}], 0x2) 16:19:35 executing program 4: syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x1267, &(0x7f0000000000)) 16:19:35 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x1274, 0x0) 16:19:35 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x1267, 0x0) 16:19:35 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x1267, 0x0) 16:19:35 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x268002, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={r1, 0xc0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=0x10, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x1}, 0x0, 0x0, &(0x7f0000000140)={0x3, 0x6, 0x7}, &(0x7f0000000180)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=0x9}}, 0x10) ioctl$SG_NEXT_CMD_LEN(r0, 0x5385, &(0x7f0000000000)) 16:19:35 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x1275, 0x0) 16:19:35 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x1267, 0x0) 16:19:35 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x1276, 0x0) 16:19:35 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SELLOADLUT(r1, 0x541c, &(0x7f0000000000)={0xb}) ioctl$TIOCCBRK(r1, 0x5428) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x7, 0x100010, r0, 0x3e08d000) ioctl$SG_NEXT_CMD_LEN(r0, 0x5385, &(0x7f0000000000)) 16:19:36 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) r2 = dup3(0xffffffffffffffff, r1, 0x80000) ioctl$TIOCGSERIAL(r2, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/246}) syz_open_dev$tty1(0xc, 0x4, 0x3) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f5d", 0xd}], 0x1) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-monitor\x00', 0x400000, 0x0) setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000200)={0x81, 0x4}, 0x2) 16:19:36 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x5385, &(0x7f0000000000)) r1 = socket(0x200000000000011, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f0000000380)=0x1) bind$packet(r1, &(0x7f0000000240)={0x11, 0x0, r3}, 0x14) getsockname$packet(r1, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) ioctl$SIOCX25GFACILITIES(r1, 0x89e2, &(0x7f0000000300)) r4 = mq_open(&(0x7f0000000080)='/dev/sg#\x00', 0x80, 0x31c, &(0x7f00000000c0)={0x7, 0x4, 0x19bb, 0x7}) r5 = socket(0x200000000000011, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r5, &(0x7f0000000240)={0x11, 0x0, r7}, 0x14) getsockname$packet(r5, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) accept$netrom(r5, &(0x7f0000001640)={{0x3, @bcast}, [@rose, @null, @default, @netrom, @remote, @netrom, @netrom]}, 0xfffffffffffffffe) mq_notify(r4, &(0x7f00000002c0)={0x0, 0x20000022, 0x4, @thr={&(0x7f0000000100)="08f8f1e05f8cf94070258f77a7c0f5d382725e18270b54654340773daa01b8e8d966bdf1172572d12ff16681f2417e38b7912e4df05545b02ebaa0e5b3b6d3a92600006c06537016cbda30d39209a9207347201a667b081ac7ba495ee516fdc84e9a9e39ba50d7dea046c390863bb80d644773b89fa5821e3a06d62aeeee2ce302001d9476ced4b0342fc8b5af45e3dc34958aa7243da070e1a48a7a7d6c82cc3fc3e1eb6abf5a4f49dc032e7fd4603727693280e507f2c38152566038af49f706bc4e77bd1bb83820d173eb0c2d7b6ac1a4c138aa1a41a7d8d3ad070adcb22b3a23c5c3d42ec61be64eb7d800d893823c9b00"/253, &(0x7f0000000200)="bf27b35e899be6f4f407b8fe729a04fe40050f98194e25d6510d8830a040c2111f4d89c911f3ee9e8f6dc02a220469272593c2d4de1eb675cc0ce438654cdeffb16d0c5332b0c0579014b208612ddb11cb0910eb057c575fb9bd25e289d353a7f6f69c837e45bdf8bb5ade9a8f2b0cec3d0f8d6e0deb8cea9ed07429a914bc5dcbcaa98f3dae87ce42c13670605ef5f67f3311a63cf4e717adbc684f55876ddd466639e66172afc5cd4c2dbaa2bb487ca0c756d5c20b2c9cb67934e1"}}) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r8, 0x800000c004500a, &(0x7f0000000300)) writev(r8, &(0x7f0000000340)=[{&(0x7f0000000400)="4fdac9583f8926f474fc3ee11e23aac6929b2d40636741357bb9bfe4e051e317ec79630ac3adc3d6373b4a477710e1249e4b1663dcf50d90b7823c0751b78fe5b9bd19d9d6aaa36ac222be101d9363b36c682a7f0f1dd0d58b1be227387bf12e5d712027ace83d0bca4dcf01a013234d1e0ae5138c34b669cdb942ce1ccbdfbcb459", 0x82}, {&(0x7f0000000540)="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", 0x1000}, {&(0x7f0000001540)="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", 0xfc}], 0x3) 16:19:36 executing program 4 (fault-call:1 fault-nth:0): r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x1267, &(0x7f0000000000)) 16:19:36 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2201, 0x0) 16:19:36 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) syz_open_procfs(r0, &(0x7f0000000100)='net/bnep\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}, {&(0x7f0000000000)="c5e138cea8943f0266bf87a9edf33d30379fa87913e797fcfe7f0f007c9423a75283989aea1e62fbc8dc69eb84d70e2ce7350bd316629c8ff367b36e93239587628c766fb81b2a2881284a33e92e87ed02d5de5159c3a409ba19bbf3088e2b08a2feb396a80f62d87913d05c04a43553a2be8c3b4067d1b507414edda7bd79f4a451a4e04998", 0x86}], 0x2) 16:19:37 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2202, 0x0) [ 543.057055][T16767] FAULT_INJECTION: forcing a failure. [ 543.057055][T16767] name failslab, interval 1, probability 0, space 0, times 0 16:19:37 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540), 0x2f2) 16:19:37 executing program 4 (fault-call:1 fault-nth:1): r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x1267, &(0x7f0000000000)) [ 543.057076][T16767] CPU: 1 PID: 16767 Comm: syz-executor.4 Not tainted 5.5.0-rc5-syzkaller #0 16:19:37 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x8d4, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x101000) getsockopt$inet_buf(r1, 0x0, 0x10, &(0x7f00000000c0)=""/218, &(0x7f00000001c0)=0xda) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x40010, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x5385, &(0x7f0000000200)=0x69) [ 543.057087][T16767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 543.057094][T16767] Call Trace: 16:19:37 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2203, 0x0) [ 543.057115][T16767] dump_stack+0x197/0x210 [ 543.057137][T16767] should_fail.cold+0xa/0x15 16:19:37 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SELLOADLUT(r1, 0x541c, &(0x7f0000000000)={0xb}) r2 = syz_open_pts(r1, 0x244000) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000280)=0x0) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x1) r6 = socket$inet_tcp(0x2, 0x1, 0x0) kcmp(r3, r4, 0x3, r5, r6) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000140)=0x4000) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0xd00800, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r8, 0x40405514, &(0x7f00000001c0)={0x0, 0x1, 0xfff, 0x2, 'syz1\x00', 0x100}) r9 = getpid() sched_setscheduler(r9, 0x5, &(0x7f0000000380)) r10 = epoll_create1(0x80000) r11 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f00000000c0)={'xfrm0\x00', {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x35}}}) close(r11) r12 = open(&(0x7f00000002c0)='./bus\x00', 0x143042, 0x0) ftruncate(r12, 0x2008002) sendfile(r11, r12, 0x0, 0x200fff) r13 = openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x8000, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x2010, r13, 0x29000) kcmp$KCMP_EPOLL_TFD(0x0, r9, 0x7, r10, &(0x7f0000000080)={r12, r6, 0x1}) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f5d", 0xd}], 0x1) 16:19:37 executing program 4 (fault-call:1 fault-nth:2): r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x1267, &(0x7f0000000000)) [ 543.057158][T16767] ? fault_create_debugfs_attr+0x180/0x180 [ 543.057181][T16767] ? ___might_sleep+0x163/0x2c0 [ 543.057205][T16767] __should_failslab+0x121/0x190 [ 543.057225][T16767] should_failslab+0x9/0x14 [ 543.057239][T16767] __kmalloc+0x2e0/0x770 16:19:37 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2205, 0x0) [ 543.057254][T16767] ? mark_held_locks+0xf0/0xf0 [ 543.057267][T16767] ? mark_lock+0xc2/0x1220 [ 543.057284][T16767] ? _parse_integer+0x190/0x190 [ 543.057304][T16767] ? tomoyo_realpath_from_path+0xc5/0x660 [ 543.057326][T16767] tomoyo_realpath_from_path+0xc5/0x660 [ 543.057343][T16767] ? tomoyo_path_number_perm+0x193/0x520 [ 543.057368][T16767] tomoyo_path_number_perm+0x1dd/0x520 [ 543.057384][T16767] ? tomoyo_path_number_perm+0x193/0x520 [ 543.057405][T16767] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 543.057420][T16767] ? __f_unlock_pos+0x19/0x20 [ 543.057465][T16767] ? __fget+0x37f/0x550 [ 543.057486][T16767] ? ksys_dup3+0x3e0/0x3e0 [ 543.057510][T16767] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 543.057527][T16767] ? fput_many+0x12c/0x1a0 [ 543.057551][T16767] tomoyo_file_ioctl+0x23/0x30 [ 543.057567][T16767] security_file_ioctl+0x77/0xc0 [ 543.057585][T16767] ksys_ioctl+0x57/0xd0 [ 543.057605][T16767] __x64_sys_ioctl+0x73/0xb0 [ 543.057625][T16767] do_syscall_64+0xfa/0x790 [ 543.057645][T16767] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 543.057657][T16767] RIP: 0033:0x45af49 [ 543.057673][T16767] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 543.057681][T16767] RSP: 002b:00007f24af580c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 543.057696][T16767] RAX: ffffffffffffffda RBX: 00007f24af580c90 RCX: 000000000045af49 [ 543.057705][T16767] RDX: 0000000020000000 RSI: 0000000000001267 RDI: 0000000000000003 [ 543.057715][T16767] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 543.057724][T16767] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f24af5816d4 [ 543.057732][T16767] R13: 00000000004c5835 R14: 00000000004dc4f8 R15: 0000000000000004 [ 543.074890][T16767] ERROR: Out of memory at tomoyo_realpath_from_path. [ 543.298335][T16786] FAULT_INJECTION: forcing a failure. [ 543.298335][T16786] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 543.298356][T16786] CPU: 1 PID: 16786 Comm: syz-executor.4 Not tainted 5.5.0-rc5-syzkaller #0 [ 543.298366][T16786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 543.298372][T16786] Call Trace: [ 543.298394][T16786] dump_stack+0x197/0x210 [ 543.298418][T16786] should_fail.cold+0xa/0x15 [ 543.298439][T16786] ? fault_create_debugfs_attr+0x180/0x180 [ 543.298458][T16786] ? __kasan_check_read+0x11/0x20 [ 543.298472][T16786] ? mark_lock+0xc2/0x1220 [ 543.298497][T16786] should_fail_alloc_page+0x50/0x60 [ 543.298510][T16786] __alloc_pages_nodemask+0x1a1/0x910 [ 543.298524][T16786] ? __alloc_pages_slowpath+0x2920/0x2920 [ 543.298536][T16786] ? __kasan_check_read+0x11/0x20 [ 543.298559][T16786] ? fault_create_debugfs_attr+0x180/0x180 [ 543.298580][T16786] cache_grow_begin+0x90/0xc60 [ 543.298600][T16786] ? tomoyo_realpath_from_path+0xc5/0x660 [ 543.298617][T16786] ? trace_hardirqs_off+0x62/0x240 [ 543.298635][T16786] __kmalloc+0x6b2/0x770 [ 543.298649][T16786] ? mark_held_locks+0xf0/0xf0 [ 543.298662][T16786] ? mark_lock+0xc2/0x1220 [ 543.298682][T16786] ? tomoyo_realpath_from_path+0xc5/0x660 [ 543.298704][T16786] tomoyo_realpath_from_path+0xc5/0x660 [ 543.298721][T16786] ? tomoyo_path_number_perm+0x193/0x520 [ 543.298754][T16786] tomoyo_path_number_perm+0x1dd/0x520 [ 543.298770][T16786] ? tomoyo_path_number_perm+0x193/0x520 [ 543.298791][T16786] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 543.298805][T16786] ? __f_unlock_pos+0x19/0x20 [ 543.298859][T16786] ? __fget+0x37f/0x550 [ 543.298881][T16786] ? ksys_dup3+0x3e0/0x3e0 [ 543.298899][T16786] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 543.298915][T16786] ? fput_many+0x12c/0x1a0 [ 543.298938][T16786] tomoyo_file_ioctl+0x23/0x30 [ 543.298958][T16786] security_file_ioctl+0x77/0xc0 [ 543.298978][T16786] ksys_ioctl+0x57/0xd0 [ 543.298999][T16786] __x64_sys_ioctl+0x73/0xb0 [ 543.299020][T16786] do_syscall_64+0xfa/0x790 [ 543.299041][T16786] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 543.299053][T16786] RIP: 0033:0x45af49 [ 543.299069][T16786] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 543.299077][T16786] RSP: 002b:00007f24af580c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 543.299093][T16786] RAX: ffffffffffffffda RBX: 00007f24af580c90 RCX: 000000000045af49 [ 543.299102][T16786] RDX: 0000000020000000 RSI: 0000000000001267 RDI: 0000000000000003 [ 543.299111][T16786] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 543.299120][T16786] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f24af5816d4 [ 543.299130][T16786] R13: 00000000004c5835 R14: 00000000004dc4f8 R15: 0000000000000004 [ 543.576703][T16799] FAULT_INJECTION: forcing a failure. [ 543.576703][T16799] name failslab, interval 1, probability 0, space 0, times 0 [ 543.576722][T16799] CPU: 1 PID: 16799 Comm: syz-executor.4 Not tainted 5.5.0-rc5-syzkaller #0 [ 543.576732][T16799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 543.576737][T16799] Call Trace: [ 543.576762][T16799] dump_stack+0x197/0x210 [ 543.576784][T16799] should_fail.cold+0xa/0x15 [ 543.576805][T16799] ? fault_create_debugfs_attr+0x180/0x180 [ 543.576825][T16799] ? ___might_sleep+0x163/0x2c0 [ 543.576846][T16799] __should_failslab+0x121/0x190 [ 543.576865][T16799] should_failslab+0x9/0x14 [ 543.576877][T16799] __kmalloc+0x2e0/0x770 [ 543.576895][T16799] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 543.576911][T16799] ? d_absolute_path+0x11b/0x170 [ 543.576925][T16799] ? __d_path+0x140/0x140 [ 543.576942][T16799] ? tomoyo_encode2.part.0+0xf5/0x400 [ 543.576962][T16799] tomoyo_encode2.part.0+0xf5/0x400 [ 543.576983][T16799] tomoyo_encode+0x2b/0x50 [ 543.577001][T16799] tomoyo_realpath_from_path+0x19c/0x660 16:19:37 executing program 4 (fault-call:1 fault-nth:3): r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x1267, &(0x7f0000000000)) 16:19:37 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) modify_ldt$read(0x0, &(0x7f00000001c0)=""/143, 0x8f) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f00000000c0)) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x6) ioctl$SG_NEXT_CMD_LEN(r0, 0x5385, &(0x7f0000000000)) 16:19:37 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2270, 0x0) [ 543.577026][T16799] tomoyo_path_number_perm+0x1dd/0x520 [ 543.577041][T16799] ? tomoyo_path_number_perm+0x193/0x520 [ 543.577060][T16799] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 543.577073][T16799] ? __f_unlock_pos+0x19/0x20 [ 543.577115][T16799] ? __fget+0x37f/0x550 [ 543.577135][T16799] ? ksys_dup3+0x3e0/0x3e0 [ 543.577151][T16799] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 543.577165][T16799] ? fput_many+0x12c/0x1a0 [ 543.577187][T16799] tomoyo_file_ioctl+0x23/0x30 [ 543.577204][T16799] security_file_ioctl+0x77/0xc0 [ 543.577221][T16799] ksys_ioctl+0x57/0xd0 [ 543.577238][T16799] __x64_sys_ioctl+0x73/0xb0 [ 543.577255][T16799] do_syscall_64+0xfa/0x790 [ 543.577273][T16799] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 543.577285][T16799] RIP: 0033:0x45af49 [ 543.577301][T16799] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 543.577309][T16799] RSP: 002b:00007f24af580c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 543.577324][T16799] RAX: ffffffffffffffda RBX: 00007f24af580c90 RCX: 000000000045af49 [ 543.577333][T16799] RDX: 0000000020000000 RSI: 0000000000001267 RDI: 0000000000000003 [ 543.577342][T16799] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 543.577352][T16799] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f24af5816d4 [ 543.577362][T16799] R13: 00000000004c5835 R14: 00000000004dc4f8 R15: 0000000000000004 [ 543.579809][T16799] ERROR: Out of memory at tomoyo_realpath_from_path. 16:19:38 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) syz_open_procfs(r0, &(0x7f0000000100)='net/bnep\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}, {&(0x7f0000000000)="c5e138cea8943f0266bf87a9edf33d30379fa87913e797fcfe7f0f007c9423a75283989aea1e62fbc8dc69eb84d70e2ce7350bd316629c8ff367b36e93239587628c766fb81b2a2881284a33e92e87ed02d5de5159c3a409ba19bbf3088e2b08a2feb396a80f62d87913d05c04a43553a2be8c3b4067d1b507414edda7bd79f4a451a4e04998", 0x86}], 0x2) 16:19:38 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x1267, &(0x7f0000000000)) 16:19:38 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2271, 0x0) 16:19:38 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x598001) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x5385, &(0x7f0000000000)) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) 16:19:38 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2272, 0x0) 16:19:38 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000001c0)='/dev/sg#\x00', 0x100000000, 0x100001) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x210082, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f00000002c0)='./bus\x00', 0x143042, 0x0) ftruncate(r3, 0x2008002) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000007000100070c10000000000000000000", 0x58}], 0x1) ioctl$SIOCGSTAMP(r4, 0x8906, &(0x7f00000000c0)) sendfile(r2, r3, 0x0, 0x200fff) r5 = socket$inet6(0xa, 0x400000000001, 0x0) close(r5) r6 = open(&(0x7f00000002c0)='./bus\x00', 0x143042, 0x0) ftruncate(r6, 0x2008002) sendfile(r5, r6, 0x0, 0x200fff) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000000)={0x0, 0x80000, r6}) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000140)={r7}) ioctl$SG_NEXT_CMD_LEN(r0, 0x227b, &(0x7f0000000100)=0xb5) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) 16:19:38 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f5d", 0xd}], 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SELLOADLUT(r1, 0x541c, &(0x7f0000000000)={0xb}) ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f0000000340)) r2 = socket(0x200000000000011, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x200000000000011, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r4, &(0x7f0000000240)={0x11, 0x0, r6}, 0x14) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$NBD_CLEAR_SOCK(r7, 0xab04) getsockname$packet(r4, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x3, 0x5, 0x47, 0xfffffffe, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r8}, 0x3c) r9 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r9, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000007000100070c10000000000000000000", 0x58}], 0x1) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r2, 0x800448d3, &(0x7f0000000280)={{0x0, 0x20, 0x1f, 0x1, 0x40, 0x1}, 0x101, 0x4, 0x3, 0x426, 0x3, "133a7b9cf2d22500693c4ca2dbebdc064d40292e065f7c5cf59f140ce75e5d76fb3c9bc541964e1be234520474901e60c195a182e947bbf0b3b8947e74ce6afb4e09930663af7cf4d6c837c935708c19e91413fe38353cb5c05159240dfd0c24c2b3f61845588892deedf68e8b466d4de8dcdbdf2fbb9908c31f8ea3f39c411f"}) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'netdevsim0\x00', r10}) bind$packet(r2, &(0x7f0000000240)={0x11, 0x0, r11}, 0x14) getsockname$packet(r2, &(0x7f0000000500), &(0x7f0000000140)=0x27a) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="fddfa601cdd310d2ad0954f24b375cd3f58b8473a8ba652cb678b7890a63bdf8ba000650604901c0a9913e6f9ce24d44460486e572eb9cfa9739c78124570f6e8bb364b9e0f3507ae61d8468c39be82e048bc95116fee71ca34ebf902603094c15b06fee5dac221ffb565c98bc5be062d29b3e18686d6baee688b081bc3dc2010fdc1a2520fcf78b133776bc4abe7e4b47f7db73d3c86fe9f7bb3914ffa4cc156446dc", 0xa3}], 0x1}, 0x1) 16:19:38 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}, {&(0x7f0000000000)="c5e138cea8943f0266bf87a9edf33d30379fa87913e797fcfe7f0f007c9423a75283989aea1e62fbc8dc69eb84d70e2ce7350bd316629c8ff367b36e93239587628c766fb81b2a2881284a33e92e87ed02d5de5159c3a409ba19bbf3088e2b08a2feb396a80f62d87913d05c04a43553a2be8c3b4067d1b507414edda7bd79f4a451a4e04998", 0x86}], 0x2) 16:19:38 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x4140, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, r4, 0x0, 0x9, &(0x7f0000000100)='/dev/sg#\x00', 0xffffffffffffffff}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r1, r2, 0x0, 0xb, &(0x7f00000000c0)='#@[vmnet1]\x00', r5}, 0x30) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000000, 0x810, 0xffffffffffffffff, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x5385, &(0x7f0000000000)) 16:19:38 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2, &(0x7f0000000000)) 16:19:38 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2275, 0x0) 16:19:39 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x10, &(0x7f0000000000)) 16:19:39 executing program 0: getpid() r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}, {&(0x7f0000000000)="c5e138cea8943f0266bf87a9edf33d30379fa87913e797fcfe7f0f007c9423a75283989aea1e62fbc8dc69eb84d70e2ce7350bd316629c8ff367b36e93239587628c766fb81b2a2881284a33e92e87ed02d5de5159c3a409ba19bbf3088e2b08a2feb396a80f62d87913d05c04a43553a2be8c3b4067d1b507414edda7bd79f4a451a4e04998", 0x86}], 0x2) 16:19:39 executing program 5: mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, 0xffffffffffffffff, 0x0) ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x5385, &(0x7f0000000000)) 16:19:39 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f5d", 0xd}], 0x1) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r1, 0xc0044dff, &(0x7f0000000040)=0x101) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, &(0x7f0000000080)) 16:19:39 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2276, 0x0) 16:19:39 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2279, 0x0) 16:19:39 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x125c, &(0x7f0000000000)) 16:19:39 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SELLOADLUT(r0, 0x541c, &(0x7f0000000000)={0xb}) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r1, &(0x7f0000000540)=[{&(0x7f0000000100)="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", 0x137}], 0x1) r2 = socket(0x200000000000011, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r2, &(0x7f0000000240)={0x11, 0x0, r4}, 0x14) getsockname$packet(r2, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) getsockname$llc(r2, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000080)=0x10) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) 16:19:39 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x227a, 0x0) 16:19:39 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x449dfcf1d5ee020a, 0x0) ioctl$SG_NEXT_CMD_LEN(r1, 0x227b, &(0x7f0000000000)=0x1000d3) 16:19:39 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x101400, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$SG_NEXT_CMD_LEN(r0, 0x5385, &(0x7f0000000000)) 16:19:39 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}, {&(0x7f0000000000)="c5e138cea8943f0266bf87a9edf33d30379fa87913e797fcfe7f0f007c9423a75283989aea1e62fbc8dc69eb84d70e2ce7350bd316629c8ff367b36e93239587628c766fb81b2a2881284a33e92e87ed02d5de5159c3a409ba19bbf3088e2b08a2feb396a80f62d87913d05c04a43553a2be8c3b4067d1b507414edda7bd79f4a451a4e04998", 0x86}], 0x2) 16:19:39 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x1274, &(0x7f0000000000)) 16:19:39 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000004, 0x20010, r0, 0xd00b3000) ioctl$SG_NEXT_CMD_LEN(r0, 0x5385, &(0x7f0000000000)) 16:19:39 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}, {&(0x7f0000000000)="c5e138cea8943f0266bf87a9edf33d30379fa87913e797fcfe7f0f007c9423a75283989aea1e62fbc8dc69eb84d70e2ce7350bd316629c8ff367b36e93239587628c766fb81b2a2881284a33e92e87ed02d5de5159c3a409ba19bbf3088e2b08a2feb396a80f62d87913d05c04a43553a2be8c3b4067d1b507414edda7bd79f4a451a4e04998", 0x86}], 0x2) 16:19:39 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x227b, 0x0) 16:19:40 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f00000002c0)='./bus\x00', 0x143042, 0x0) ftruncate(r2, 0x2008002) sendfile(r1, r2, 0x0, 0x200fff) ioctl$SG_NEXT_CMD_LEN(r2, 0x227b, &(0x7f0000000080)=0xfffffffd) 16:19:40 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f5d", 0xd}], 0x10000000000001d2) ioctl$KDSKBLED(r0, 0x4b65, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp1\x00', 0x101000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffe000/0x1000)=nil, 0x7fffffff, 0x5, 0x485d04d5e1b52331, &(0x7f0000ffe000/0x2000)=nil, 0x4}) 16:19:40 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x1275, &(0x7f0000000000)) 16:19:40 executing program 5: mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, 0xffffffffffffffff, 0x0) ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x5385, &(0x7f0000000000)) 16:19:40 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x227c, 0x0) 16:19:40 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}, {&(0x7f0000000000)="c5e138cea8943f0266bf87a9edf33d30379fa87913e797fcfe7f0f007c9423a75283989aea1e62fbc8dc69eb84d70e2ce7350bd316629c8ff367b36e93239587628c766fb81b2a2881284a33e92e87ed02d5de5159c3a409ba19bbf3088e2b08a2feb396a80f62d87913d05c04a43553a2be8c3b4067d1b507414edda7bd79f4a451a4e04998", 0x86}], 0x2) 16:19:40 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x102010, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x227b, &(0x7f0000000000)) 16:19:40 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x1276, &(0x7f0000000000)) 16:19:40 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x227d, 0x0) 16:19:40 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x5385, &(0x7f0000000000)) r1 = socket(0x200000000000011, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r1, &(0x7f0000000240)={0x11, 0x0, r3}, 0x14) getsockname$packet(r1, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) 16:19:40 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) ioctl$SOUND_MIXER_READ_VOLUME(r1, 0x80044d10, &(0x7f0000000440)) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SELLOADLUT(r2, 0x541c, &(0x7f0000000000)={0xb}) ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000000400)={0xb, 0x20}) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f5d", 0xd}], 0x1) 16:19:40 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}, {&(0x7f0000000000)="c5e138cea8943f0266bf87a9edf33d30379fa87913e797fcfe7f0f007c9423a75283989aea1e62fbc8dc69eb84d70e2ce7350bd316629c8ff367b36e93239587628c766fb81b2a2881284a33e92e87ed02d5de5159c3a409ba19bbf3088e2b08a2feb396a80f62d87913d05c04a43553a2be8c3b4067d1b507414edda7bd79f4a451a4e04998", 0x86}], 0x2) 16:19:40 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r1 = semget(0xffffffffffffffff, 0x0, 0x0) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)) semctl$GETPID(r1, 0x0, 0xb, &(0x7f0000000540)=""/229) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000007000100070c10000000000000000000", 0x58}], 0x1) r3 = socket(0x200000000000011, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r3, &(0x7f0000000240)={0x11, 0x0, r5}, 0x14) getsockname$packet(r3, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x1, 0x5, 0x47, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r6}, 0x3c) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xa0, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x10001, 0x2}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7fffffff, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xff}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x1}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_SCAN_SSIDS={0x38, 0x2d, [{0x6, 0x0, [0x15, 0x7]}, {0x6, 0x0, [0x2, 0x14]}, {0xa, 0x0, [0x2, 0x14, 0x13, 0x19, 0x12, 0x1d]}, {0x6, 0x0, [0xe, 0x5]}, {0xe, 0x0, [0x13, 0xc, 0x1d, 0x19, 0x1d, 0x1e, 0x1d, 0x15, 0x9, 0x1a]}]}, @NL80211_ATTR_MAC={0xa, 0x6, @random="45e04e17fc1d"}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x401}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x2000040) semctl$IPC_RMID(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) semctl$GETPID(0xffffffffffffffff, 0x2, 0xb, &(0x7f0000000080)=""/166) ioctl$SG_NEXT_CMD_LEN(r0, 0x227b, &(0x7f0000000000)) 16:19:40 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2201, &(0x7f0000000000)) 16:19:40 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x227e, 0x0) 16:19:40 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}, {&(0x7f0000000000)="c5e138cea8943f0266bf87a9edf33d30379fa87913e797fcfe7f0f007c9423a75283989aea1e62fbc8dc69eb84d70e2ce7350bd316629c8ff367b36e93239587628c766fb81b2a2881284a33e92e87ed02d5de5159c3a409ba19bbf3088e2b08a2feb396a80f62d87913d05c04a43553a2be8c3b4067d1b507414edda7bd79f4a451a4e04998", 0x86}], 0x2) 16:19:41 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x2, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xd4}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x5385, &(0x7f0000000080)) 16:19:41 executing program 2: mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, 0xffffffffffffffff, 0x0) ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x227b, &(0x7f0000000000)) 16:19:41 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2202, &(0x7f0000000000)) 16:19:41 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x227f, 0x0) 16:19:41 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}, {&(0x7f0000000000)="c5e138cea8943f0266bf87a9edf33d30379fa87913e797fcfe7f0f007c9423a75283989aea1e62fbc8dc69eb84d70e2ce7350bd316629c8ff367b36e93239587628c766fb81b2a2881284a33e92e87ed02d5de5159c3a409ba19bbf3088e2b08a2feb396a80f62d87913d05c04a43553a2be8c3b4067d1b507414edda7bd79f4a451a4e04998", 0x86}], 0x2) 16:19:41 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x200000000000011, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r2, &(0x7f0000000240)={0x11, 0x0, r4}, 0x14) getsockname$packet(r2, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000100)={0x0, 0x4e, "1b17c96b6b5ebe68d5c8ceb8ae8bb881a3f2a5109fc048794447892324b19227832cd1732c4f71afbc32db42e500fb09c0da1824a90ddc8a2cef2ed01ab3142e47085c69a62a0378312865d2ec45"}, &(0x7f0000000180)=0x56) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000001c0)={r5, 0x1ff}, 0x8) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f00000002c0)={0xa20000, 0x80000001, 0xfff, 0xffffffffffffffff, 0x0, &(0x7f0000000280)={0x60012, 0xcd5, [], @p_u32=&(0x7f0000000200)=0x5}}) ioctl$RTC_RD_TIME(r7, 0x80247009, &(0x7f0000000300)) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r6, 0x1, 0x0, 0x0, {0x1a}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'bb\x00'}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000401}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r6, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f5d", 0xd}], 0x1) 16:19:41 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x105011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x227b, &(0x7f0000000000)) 16:19:41 executing program 5: r0 = request_key(&(0x7f0000000080)='blacklist\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)='\x00', 0xfffffffffffffff9) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000a00)='asymmetric\x00', 0x0, &(0x7f0000000200)="3081", 0x2, r1) request_key(&(0x7f0000000a00)='user\x00', &(0x7f0000000a40)={'syz', 0x1}, &(0x7f0000000a80)='hwsim0\x00', r1) keyctl$reject(0x13, r0, 0x2, 0x9, r1) r2 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r2, 0x0) ioctl$SG_NEXT_CMD_LEN(r2, 0x5385, &(0x7f0000000000)) 16:19:41 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2203, &(0x7f0000000000)) 16:19:41 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2282, 0x0) 16:19:41 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}, {&(0x7f0000000000)="c5e138cea8943f0266bf87a9edf33d30379fa87913e797fcfe7f0f007c9423a75283989aea1e62fbc8dc69eb84d70e2ce7350bd316629c8ff367b36e93239587628c766fb81b2a2881284a33e92e87ed02d5de5159c3a409ba19bbf3088e2b08a2feb396a80f62d87913d05c04a43553a2be8c3b4067d1b507414edda7bd79f4a451a4e04998", 0x86}], 0x2) 16:19:41 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x208000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="83fe0400000000000000b5000000", @ANYRES16=r2, @ANYBLOB="1bd62dbd7000fbdbdf25140000000500130101000000050019000000000004007400020000000800a400010000000c00990001000100000000000600ed007c03000006001000aa0700000e001300f7f26334a8ad6eccd1d600007900ac00cb937f90654425ee7233e007bca5b92330d6628cee55a6cae111f036d35bf674db410599da2f355942923172cff1f19f034d88b19b9c75c16fde388b9a54c6281ef562ca95debade08ddec9b2c5a823fff505419d594f48f299ad59ea739d4db0dadbbeac2b6c9370000000500e4000100"/218], 0xe4}, 0x1, 0x0, 0x0, 0xc800}, 0x8000000) r3 = socket$inet6(0xa, 0x800, 0x4) close(r3) r4 = open(&(0x7f00000002c0)='./bus\x00', 0x143042, 0x0) ftruncate(r4, 0x2008002) sendfile(r3, r4, 0x0, 0x200fff) getsockname$tipc(r4, &(0x7f0000000100)=@id, &(0x7f0000000140)=0x10) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r5, 0x800000c004500a, &(0x7f0000000300)) ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000000180)={0x8, 0x1, 0x4, 0x200000, 0x1, {}, {0x2, 0x1, 0x7, 0x4, 0x3, 0x2, "6921945a"}, 0x6, 0x2, @offset=0x1, 0x100, 0x0, r5}) ioctl$SG_NEXT_CMD_LEN(r0, 0x227b, &(0x7f0000000080)=0x1c) 16:19:41 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f5d", 0xd}], 0x1) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2) ioctl$VIDIOC_S_MODULATOR(r1, 0x40445637, &(0x7f0000000040)={0x9, "7c555377cd93a7dd4ad51dff4f953b4a0ecb3b5c779af89bd25aa0218b6198f9", 0x200, 0x0, 0x180, 0x8, 0x2}) r2 = socket(0x200000000000011, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$fou(&(0x7f00000006c0)='fou\x00') sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r6, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000003ec0)={{{@in6=@empty, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@initdev}}, &(0x7f0000003fc0)=0xe8) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000004080)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000004040)={&(0x7f0000004000)={0x30, r6, 0x0, 0x70bd2c, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @mcast2}, @FOU_ATTR_IFINDEX={0x8, 0xb, r7}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8000) bind$packet(r2, &(0x7f0000000240)={0x11, 0x8, r4, 0x1, 0x0, 0x6, @random="ebaf8fd2bd04"}, 0x0) getsockname$packet(r2, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) r8 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000440)='/dev/btrfs-control\x00', 0x100, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r8, 0x84, 0x1e, &(0x7f0000000480)=0x7ff, 0x4) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000380)=@filter={'filter\x00', 0xe, 0x2, 0x274, [0x0, 0x20000100, 0x200001ce, 0x20000344], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0x8000000000000001, 0x1, [{0x12, 0x44, 0x8811, 'veth1_to_bond\x00', 'veth0\x00', 'caif0\x00', 'veth0_to_bond\x00', @broadcast, [0x0, 0x0, 0xff, 0x0, 0x0, 0x1fe], @dev={[], 0x17}, [0xf00d735b164f3899, 0x0, 0x0, 0x0, 0x979def238b9d3d41, 0x101], 0x6e, 0x6e, 0x9e, [], [], @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x4}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffc, 0x1, [{0x3, 0x59, 0x16, 'gre0\x00', 'dummy0\x00', 'vxcan1\x00', 'veth1\x00', @dev={[], 0x26}, [0x5a4fdf1ede085ec6, 0xff, 0x1fe, 0x0, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, [0x1fe, 0x7f, 0xff, 0x0, 0x0, 0xe1b45f4668912c40], 0xe6, 0x116, 0x146, [@connbytes={{'connbytes\x00', 0x0, 0x18}, {{[{0x3}, {0xfffffffffffffffa}], 0x3}}}, @cluster={{'cluster\x00', 0x0, 0x10}, {{0x5b4a, 0x9, 0xacc}}}], [@common=@AUDIT={'AUDIT\x00', 0x8}], @common=@STANDARD={'\x00', 0x8, {0xffffffffffffffff}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x2ec) 16:19:41 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2205, &(0x7f0000000000)) 16:19:41 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, 0x0) 16:19:41 executing program 5: epoll_create1(0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r3, 0x800000c004500a, &(0x7f0000000300)) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, &(0x7f0000000200)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r4, 0xc0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r5}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000500)='/dev/sg#\x00', r5}, 0x30) fcntl$lock(r3, 0x25, &(0x7f0000000580)={0x0, 0x4, 0x0, 0x9, r6}) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000140), 0x0) sendmsg$IPSET_CMD_RENAME(r7, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x60, 0x5, 0x6, 0x400, 0x70bd2b, 0x25dfdbff, {0x3, 0x0, 0x8}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x2}, 0x40000) r8 = syz_open_dev$mice(&(0x7f00000004c0)='/dev/input/mice\x00', 0x0, 0x40) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r8, 0x54a3) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000140)={0x404f, 0x3, 0x4, 0x80000, 0x9, {}, {0x5, 0x8, 0x2, 0x4e, 0x3, 0x9, "484b44db"}, 0xfffffffc, 0x1, @offset=0xffffffff, 0x3, 0x0, 0xffffffffffffffff}) r10 = getuid() r11 = getuid() setresuid(0xee01, r11, 0x0) r12 = getuid() setresuid(0xee01, r12, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x82800, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno'}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'vmnet1&'}}, {@cachetag={'cachetag', 0x3d, '/dev/sg#\x00'}}, {@fscache='fscache'}, {@dfltuid={'dfltuid', 0x3d, r10}}, {@access_uid={'access', 0x3d, r11}}, {@dfltuid={'dfltuid', 0x3d, 0xee00}}, {@noextend='noextend'}, {@noextend='noextend'}, {@access_any='access=any'}], [{@fowner_lt={'fowner<', r12}}, {@smackfsdef={'smackfsdef', 0x3d, '+^mime_type:eth0]*cgroup'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '/dev/sg#\x00'}}]}}) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) signalfd4(r8, &(0x7f00000005c0)={0x14}, 0x8, 0x800) openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x4, 0x0) r13 = syz_open_dev$vcsn(&(0x7f0000000300)='/dev/vcs#\x00', 0x100000000, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r13, 0x110, 0x4, &(0x7f0000000340)=0x1, 0x4) ioctl$SG_NEXT_CMD_LEN(r0, 0x5385, &(0x7f0000000000)) 16:19:41 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}, {&(0x7f0000000000)="c5e138cea8943f0266bf87a9edf33d30379fa87913e797fcfe7f0f007c9423a75283989aea1e62fbc8dc69eb84d70e2ce7350bd316629c8ff367b36e93239587628c766fb81b2a2881284a33e92e87ed02d5de5159c3a409ba19bbf3088e2b08a2feb396a80f62d87913d05c04a43553a2be8c3b4067d1b507414edda7bd79f4a451a4e04998", 0x86}], 0x2) [ 547.851539][T17008] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 16:19:41 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2270, &(0x7f0000000000)) [ 548.021267][T17008] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 16:19:42 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2284, 0x0) 16:19:42 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={0xffffffffffffffff}) accept4$unix(r1, &(0x7f0000000140), &(0x7f00000001c0)=0x6e, 0x80000) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x227b, &(0x7f0000000000)) r2 = syz_open_dev$vcsn(&(0x7f0000000240)='/dev/vcs#\x00', 0x100000000, 0x2c000) ioctl$VIDIOC_G_AUDOUT(r2, 0x80345631, &(0x7f00000000c0)) 16:19:42 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) read$midi(r0, &(0x7f0000000080)=""/96, 0x60) ioctl$SG_NEXT_CMD_LEN(r0, 0x5385, &(0x7f0000000000)) 16:19:42 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2271, &(0x7f0000000000)) 16:19:42 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}, {&(0x7f0000000000)="c5e138cea8943f0266bf87a9edf33d30379fa87913e797fcfe7f0f007c9423a75283989aea1e62fbc8dc69eb84d70e2ce7350bd316629c8ff367b36e93239587628c766fb81b2a2881284a33e92e87ed02d5de5159c3a409ba19bbf3088e2b08a2feb396a80f62d87913d05c04a43553a2be8c3b4067d1b507414edda7bd79f4a451a4e04998", 0x86}], 0x2) 16:19:42 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r2}, 0x14) getsockname$packet(r0, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) r3 = socket(0x200000000000011, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r3, &(0x7f0000000240)={0x11, 0x0, r5}, 0x14) getsockname$packet(r3, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x8001}, &(0x7f0000000040)=0x8) r7 = socket(0x200000000000011, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r7, &(0x7f0000000240)={0x11, 0x0, r9}, 0x14) getsockname$packet(r7, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x66, &(0x7f0000000080)={0x0, 0x401}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={r6, 0x705c, 0xcc8, 0xf6d, 0x38d, 0x3f, 0x0, 0x4, {r10, @in6={{0xa, 0x4e20, 0x5, @rand_addr="824bcfb499a506c2c58614728eb5aff2", 0x5}}, 0x6, 0xa88a, 0x2, 0x4, 0x3}}, &(0x7f00000001c0)=0xb0) r11 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r11, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f5d", 0xd}], 0x1) 16:19:42 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2285, 0x0) 16:19:42 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x1, 0x80000) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r1, 0x0) ioctl$SG_NEXT_CMD_LEN(r1, 0x227b, &(0x7f0000000000)) 16:19:42 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2272, &(0x7f0000000000)) 16:19:42 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}, {&(0x7f0000000000)="c5e138cea8943f0266bf87a9edf33d30379fa87913e797fcfe7f0f007c9423a75283989aea1e62fbc8dc69eb84d70e2ce7350bd316629c8ff367b36e93239587628c766fb81b2a2881284a33e92e87ed02d5de5159c3a409ba19bbf3088e2b08a2feb396a80f62d87913d05c04a43553a2be8c3b4067d1b507414edda7bd79f4a451a4e04998", 0x86}], 0x2) 16:19:42 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x227b, &(0x7f0000000080)=0x94) 16:19:42 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2286, 0x0) 16:19:42 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}, {&(0x7f0000000000)="c5e138cea8943f0266bf87a9edf33d30379fa87913e797fcfe7f0f007c9423a75283989aea1e62fbc8dc69eb84d70e2ce7350bd316629c8ff367b36e93239587628c766fb81b2a2881284a33e92e87ed02d5de5159c3a409ba19bbf3088e2b08a2feb396a80f62d87913d05c04a43553a2be8c3b4067d1b507414edda7bd79f4a451a4e04998", 0x86}], 0x2) 16:19:42 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2275, &(0x7f0000000000)) 16:19:43 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x200) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x5385, &(0x7f0000000100)=0x10002) r1 = getuid() setresuid(0xee01, r1, 0x0) setfsuid(r1) 16:19:43 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000040)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@multicast1}}, &(0x7f0000000140)=0xe8) r2 = getuid() setresuid(0xee01, r2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000180)={{{@in=@multicast2, @in6=@remote, 0x4e20, 0x7ea, 0x4e21, 0xfffe, 0xc, 0x80, 0x20, 0x32, r1, r2}, {0x4, 0x2, 0x40, 0xe76e, 0x8000, 0x1f, 0x4, 0x3}, {0x20, 0x7, 0x8, 0x40}, 0x1, 0x6e6bb5, 0x1, 0x0, 0x2, 0x2}, {{@in=@broadcast, 0x4d6, 0xff}, 0x2, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 0x1, 0xfa, 0x7fffffff, 0x0, 0x5}}, 0xe8) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r3, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f5d", 0xd}], 0x1) 16:19:43 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2287, 0x0) 16:19:43 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2276, &(0x7f0000000000)) 16:19:43 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x224040) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$KVM_SET_XSAVE(0xffffffffffffffff, 0x5000aea5, &(0x7f0000000300)={[0x6, 0x9, 0x6, 0x7fffffff, 0x9a9, 0x697, 0xff, 0x2, 0x3, 0x1, 0x4, 0xffffffe2, 0xffff0000, 0x10000, 0x400, 0x4, 0x80000000, 0x40, 0x1, 0x1, 0x0, 0x5, 0x5, 0x88, 0x0, 0xfffffff9, 0x5, 0x6, 0x5, 0x2, 0x7, 0x7, 0x4, 0x8001, 0x9, 0x3, 0x36ecf76e, 0xfc8, 0x9, 0x5f, 0x1000, 0xf06f, 0x1, 0xa0, 0xae, 0x20, 0xce, 0x4, 0x7, 0x3f, 0x1f, 0x3ff, 0x4, 0x1f6, 0xae, 0x8, 0x26c, 0x80000000, 0x2e, 0x8000, 0x7, 0x6, 0xc1, 0x1, 0xffff7fff, 0x9, 0x2, 0x3ff, 0x7, 0x28d1, 0xfff, 0x30b, 0x4, 0x5, 0xfff, 0xffffffff, 0x8, 0x80000000, 0xaa7, 0x1000, 0x9, 0x4c5, 0x101, 0x2, 0x0, 0x61, 0x1f, 0x6, 0xffffffff, 0x305, 0x9, 0x8, 0x6, 0x5, 0x8001, 0x40, 0x1, 0x1000, 0x4, 0xf3d4, 0xffffffff, 0x4, 0x0, 0x7, 0x9, 0x3, 0x6, 0xa13e, 0x8, 0xffffff64, 0xf1, 0x80000001, 0xc96, 0xca, 0x8, 0x9, 0xe98, 0x6, 0x80, 0xffff19f2, 0x6b, 0x2, 0x1, 0x727, 0x80000000, 0x9, 0x80000000, 0x3ff, 0xfffffff7, 0x3, 0xfffffff7, 0x4, 0x2b5, 0x7fffffff, 0x8001, 0x10001, 0x1, 0x80000001, 0x1, 0x377, 0x80, 0x8, 0x800, 0x4, 0x9a, 0x7, 0xfffffffa, 0x4, 0x4, 0x7fffffff, 0x67200, 0x4, 0x8000, 0xcf, 0x1bb, 0x80000000, 0xffffffff, 0x7, 0x4, 0x7, 0x4, 0x9, 0x0, 0xfff, 0x2, 0x100, 0x5, 0x0, 0x52a, 0x2000, 0x0, 0x1000, 0x2, 0x4, 0x10000, 0x8b35, 0x0, 0x100, 0x7, 0x401, 0xff, 0x1, 0x1, 0x2, 0x3, 0xffffffff, 0x0, 0x3, 0xfffffe00, 0x408, 0x5, 0xbfba, 0x0, 0x6, 0x3, 0x3, 0x4ae, 0x0, 0x8001, 0x6, 0x1, 0x8325, 0x0, 0x0, 0x7, 0x5, 0x5, 0x80000000, 0xffff1d26, 0xd9, 0x81, 0x81, 0x3, 0x4, 0x773, 0x8, 0x6, 0x8000, 0xfffffff8, 0xb3, 0xedd7, 0x4, 0x7ff, 0x9, 0x2, 0xffffff68, 0x2, 0x6, 0x80, 0x9, 0x6ce41e6a, 0x5, 0xfff, 0x40, 0x8, 0x6de3, 0xc7e, 0x9, 0x5, 0x7f, 0x4, 0x1ff, 0x9, 0x6, 0x10001, 0x2, 0x1, 0x3, 0x401, 0x0, 0x1, 0x10001, 0x5, 0x9, 0x7, 0x200, 0x0, 0x80000000, 0x6, 0x4, 0x2, 0xfffffff7, 0xa77, 0xfffffffa, 0x22c, 0xf, 0x400000, 0x8, 0x3, 0x2, 0x6, 0xb0, 0x5, 0x0, 0x7fffffff, 0x6, 0x3, 0x400, 0x100, 0x8, 0x0, 0x20, 0x100, 0xcf16, 0x2, 0x2, 0x57, 0x5, 0x5, 0x5, 0x20, 0x7, 0x4b, 0x1, 0x3, 0xffffff01, 0x120000, 0x400, 0x8000, 0x9a45, 0x2, 0x3, 0x5, 0x20, 0x4, 0x81, 0xfffffffe, 0x9, 0x80000000, 0x1, 0x55e, 0x81, 0x101, 0x4, 0x800, 0x2, 0x5, 0x94e4, 0x8ea, 0x3, 0x3, 0x6, 0xffff, 0x7fff, 0x0, 0xffffffff, 0x0, 0x8, 0x2, 0x800, 0x7fff, 0x9, 0x1ff, 0x4, 0x10000, 0x1, 0x4, 0x1000, 0x80000001, 0x3, 0x5, 0x6, 0x2, 0x3ff, 0xca, 0x5, 0x4, 0xba, 0x1, 0x6, 0x2, 0xfffffffe, 0x10001, 0x1, 0x121b, 0x8000, 0x8, 0x1, 0x5, 0xfffffffd, 0xff, 0x4, 0x4, 0x2e7, 0x1000, 0x0, 0x4, 0x9, 0x1, 0x5f8b, 0xa2, 0x7, 0x1, 0x0, 0x1, 0x1, 0x76, 0xfffffff8, 0x632b, 0xa1b3, 0xffffffff, 0x40, 0x7, 0x3f, 0x8, 0x94c3, 0x0, 0x3, 0x81, 0x7, 0xb8, 0x7fffffff, 0x3f, 0x5e66, 0xfffffc01, 0x6, 0x8, 0x7, 0x8, 0x5, 0x4, 0x6, 0x6, 0x0, 0x7232, 0x40, 0xffff9231, 0x5, 0x7, 0x10001, 0x7f, 0x5a, 0x1, 0x3, 0x1, 0x20, 0x4, 0x7, 0x2, 0xcc81, 0x9, 0x1c2, 0x8, 0x1, 0x2, 0x4, 0x2, 0x8, 0xe, 0x9, 0xffffffff, 0x7, 0x6, 0x400, 0xba2, 0x50000000, 0x0, 0x3, 0xff, 0x4, 0x7, 0x6b3, 0x8d, 0x2, 0x54d32eb6, 0x100, 0x20000000, 0x9ca0, 0x8, 0x10000, 0x81, 0x8, 0x3, 0xffff, 0xf9, 0x7, 0x6, 0xfffffac1, 0x400, 0x8, 0x1ff, 0x6, 0x1d, 0x101, 0x0, 0x6, 0xff, 0x4, 0xba, 0x80, 0x8, 0x3079, 0x8, 0x9, 0xfffffc01, 0x8001, 0x3, 0x20, 0x4, 0x7fff, 0x8, 0x83, 0xe280, 0x80000000, 0x10000, 0x1, 0x8, 0x1, 0x1, 0x8783, 0x9, 0x4, 0x10001, 0x77, 0xeb, 0x100, 0x80, 0xa6, 0x101, 0xac23, 0x8001, 0x81, 0x7fffffff, 0x4, 0x8001, 0x1, 0x9, 0xe6, 0xffffffff, 0x8, 0x4, 0x6, 0xce, 0x6, 0x20, 0x57, 0x9, 0x3ff, 0x500, 0x8001, 0x0, 0x1, 0x4, 0x3f, 0x797, 0x5, 0x171, 0x6, 0xffffffff, 0x6, 0xff, 0x5, 0x2, 0x1, 0x8, 0x651, 0x9, 0x0, 0x0, 0x20, 0x7fff, 0x4, 0x7, 0x4, 0x4, 0xfffffff9, 0x0, 0xf54, 0x8, 0x4, 0x348, 0x6, 0x101, 0x5, 0x10001, 0x100, 0x1, 0x2d, 0x10001, 0x8, 0x2, 0x7, 0x0, 0x1ff, 0x62c, 0x10000, 0x9, 0x10000, 0x7fff, 0x33, 0x2, 0x8, 0x5a000, 0xc00000, 0xa007, 0x4, 0x4, 0xc9f7, 0x9, 0x5, 0x2, 0xb71, 0x3, 0x20000, 0x9, 0x3, 0xfff, 0x7, 0x9, 0x476, 0x9, 0x5, 0xa491, 0xa86, 0x1, 0x4, 0x0, 0xba2, 0x3, 0x3, 0x7ff, 0x9e, 0x0, 0x3f, 0x1, 0x6158, 0x3, 0x0, 0x80, 0x9, 0x80000001, 0x6, 0x2, 0x3, 0x5, 0x7, 0x0, 0x5, 0x6, 0x80000000, 0x6, 0x3, 0x2, 0x8, 0x15, 0x0, 0xda, 0x3, 0x8, 0xadf, 0x4, 0x8, 0x7fffffff, 0x8, 0x8, 0x1f, 0x1f, 0x3f, 0x5, 0x9, 0x1, 0x400, 0x1, 0xfffffff8, 0x1000, 0x400, 0x0, 0x1, 0x30c1, 0x81, 0x8c, 0x8, 0x7fffffff, 0x2, 0x20, 0x8001, 0x0, 0x9, 0x1000, 0x80000001, 0x1, 0x4, 0x3ff, 0xffff, 0x10001, 0x9, 0xa9, 0x10000, 0x4d3, 0xaa0d, 0x5, 0x400, 0x10001, 0x9, 0x10000, 0xfffffff9, 0x8, 0x5, 0x1, 0x0, 0x1ff, 0x1000, 0x7, 0x7, 0x5f, 0x3, 0xfcf, 0x20, 0x9, 0x8, 0x10001, 0x7, 0x0, 0x400, 0x9, 0x7fffffff, 0x81, 0x2, 0x7596, 0x3, 0x0, 0x2, 0xfffffffc, 0x9, 0x1ff, 0x40, 0x9, 0x10000, 0xdbe1, 0x6c48, 0xfff, 0x3, 0xbb7, 0x100, 0x8, 0x4, 0x6, 0x1ff, 0x2, 0x1, 0x7fffffff, 0x10001, 0x1ff, 0x4, 0x2, 0x401, 0x10000, 0x4, 0x2, 0x2, 0x7ff, 0x0, 0x0, 0x8, 0x3, 0xffff, 0x6fd, 0x7ff, 0x8000, 0x80000001, 0x3cd, 0x0, 0x1daec, 0xaf3, 0x39e, 0x9, 0xffff0000, 0x24, 0x2, 0x5, 0x0, 0x1, 0x8, 0xd91b, 0x5, 0x80000001, 0x9, 0x7, 0x8, 0x81, 0xcd62, 0x5, 0x10000, 0xf0000000, 0x7, 0x7, 0x8, 0x8001, 0x715, 0x3f, 0xc6, 0x8, 0x3, 0x1, 0x80000001, 0x5, 0x6937, 0x9, 0x851, 0x6d8, 0x5, 0x100, 0xff, 0x4c362670, 0xffff7fff, 0x0, 0x1, 0x1f, 0x8, 0xfae0, 0x8000, 0x1, 0x80, 0x5, 0x9, 0x800, 0xffffffff, 0x8, 0x5, 0x2, 0xf3b, 0x0, 0x80000001, 0x6, 0x6, 0x703, 0x5, 0xffffffff, 0x81, 0x2f, 0x80, 0x2, 0xff, 0x8, 0x1, 0x9, 0x0, 0x8, 0x80000001, 0x4, 0x8, 0x6, 0x4, 0x4, 0x9, 0x1ff, 0x10001, 0xccd, 0x1, 0x10000, 0x4, 0x5, 0x1f, 0x0, 0x3, 0x74c, 0x36, 0x401, 0xff, 0x80000001, 0x3f6, 0x2, 0x5, 0x5, 0x0, 0xfff, 0x6, 0x8, 0x5, 0x0, 0x1, 0xfffffffc, 0x3, 0x1, 0x1, 0x10001, 0x8, 0x2, 0x0, 0x6, 0x200, 0x2, 0x0, 0xeb1, 0x80000000, 0x3, 0x8, 0x8, 0x9, 0x86, 0xfff, 0x4, 0x0, 0xfe8, 0x7fffffff, 0x7, 0x9, 0x56, 0xfffffff8, 0x9, 0xffffffff, 0x29, 0x7, 0x9, 0x9, 0xac, 0x7, 0xffffffff, 0x6, 0x2, 0x80000001, 0x401, 0xe4bc, 0x5, 0x1, 0x7, 0x1f, 0x0, 0x0, 0x4, 0x4, 0x1, 0x0, 0x1f, 0x8, 0x2, 0x80000000, 0xff, 0x0, 0x26, 0xb5, 0x8, 0x81, 0x9, 0x2, 0x800, 0xdc, 0x7, 0x314, 0x7, 0x7, 0x81, 0x6, 0x10000, 0x7, 0x4985, 0xfffffffe, 0x6, 0x0, 0x6, 0x2, 0xfffffff8, 0x7fff, 0x5dd833f7, 0xfb, 0x800, 0x0, 0x7, 0x1ff, 0x5, 0xfffffff7, 0x29ec, 0x1fffe0, 0x5d4a, 0x34, 0xc8, 0x7606, 0x4, 0xfffffff7, 0x1, 0x5, 0x3f, 0x7f, 0x7, 0x0, 0x5, 0x8001, 0x5, 0x3a95, 0x8, 0x8, 0x9, 0x4, 0x6, 0x9, 0x1, 0x40, 0x8, 0x3, 0x5, 0x2, 0x9, 0x4, 0x400, 0x100, 0x5, 0x8, 0x3, 0x6, 0x9, 0x9b7, 0x0, 0x6, 0x3, 0xd2, 0xfffffffb, 0x5, 0x2, 0x0, 0x501, 0x7, 0x7, 0x79ab, 0x3, 0x5, 0x20d, 0x4, 0x80000001, 0x20000, 0xb3, 0x7fffffff, 0x9, 0xde, 0x6b97, 0x9, 0x10000, 0x9, 0x24de, 0x1, 0x5, 0x7ff, 0x0, 0x9, 0x1000, 0x1, 0x1, 0x0, 0x0, 0x101, 0x100, 0xffffffff, 0x0, 0x1, 0x4]}) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f00000002c0)='./bus\x00', 0x143042, 0x0) ftruncate(r2, 0x2008002) sendfile(r1, r2, 0x0, 0x200fff) mq_getsetattr(r2, &(0x7f0000000100)={0x5, 0x4, 0x1, 0x400}, &(0x7f0000000140)) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000001300)={0x1, 0xfffff800, 0x3, 0x81}) ioctl$SG_NEXT_CMD_LEN(r0, 0x227b, &(0x7f0000000080)=0xf2) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x40, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r3) ioctl$TCSETS(r3, 0x5402, &(0x7f00000000c0)={0x100003ff, 0xff, 0x9, 0x200, 0x9, "aee276a7488993c2a4ef5b8241efae6490c133"}) r4 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$restrict_keyring(0x1d, r4, &(0x7f0000000200)='trusted\x00', &(0x7f0000000240)='/dev/dlm-control\x00') write$vhci(0xffffffffffffffff, &(0x7f0000001340)=@HCI_ACLDATA_PKT, 0x1) syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0xff, 0xc0) 16:19:43 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}, {&(0x7f0000000000)="c5e138cea8943f0266bf87a9edf33d30379fa87913e797fcfe7f0f007c9423a75283989aea1e62fbc8dc69eb84d70e2ce7350bd316629c8ff367b36e93239587628c766fb81b2a2881284a33e92e87ed02d5de5159c3a409ba19bbf3088e2b08a2feb396a80f62d87913d05c04a43553a2be8c3b4067d1b507414edda7bd79f4a451a4e04998", 0x86}], 0x2) 16:19:43 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2288, 0x0) 16:19:43 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f00000002c0)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2008002) sendfile(r0, r1, 0x0, 0x200fff) ioctl$ASHMEM_GET_SIZE(r1, 0x7704, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket(0x29, 0x3, 0xfe) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ocfs2_control\x00', 0x2, 0x0) sendto$unix(r4, &(0x7f0000000400)="a88e2c02d1472bb69913a25ba6fc96d97f2a2876ba9e19d2b05ec075bc0cb1580ef9d69827cde57a625900da9863e8cbe972b3632e8276cd9e5254af15bb99204fa097e43b3f0d6e5474dd630cd7715e8c0706ec56c355c47f07f1ae490fb2de27c9f4be13fba419adf209c88be1fa7182975516bb1702222ce70a759d24fad2230f9e36a167ae9f08ed5c433182103fd8e1b514e80fbb2aa44a1d54072d7f167ea72719b585e135325657cb8663c2ec96f407f07fa1a6b4144fddb6c5116ced7485452909ffb7a5b506f9bf6be61d96a919b4f9d742b1c623af3541fdc7afad7a9c7cdc4aa3767fcc5e38fc87f20c", 0xef, 0x10, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e23}, 0x6e) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r3, &(0x7f0000000240)={0x11, 0x0, r6}, 0x14) write$binfmt_script(r5, &(0x7f0000000100)={'#! ', './bus', [{0x20, 'netdevsim0\x00'}, {0x20, 'netdevsim0\x00'}, {0x20, '/dev/qat_adf_ctl\x00'}], 0xa, "2b75bf8e20b49287a878116c209d9eff6cf0174572ad1bee4d4740d036359018f67d5631c83a10a148088bdd62f1d03a8a3f21d142d74df273f77be3c1e3687ec22c363996c736be61b5830d2fef1a79d9d1877a5adb778fd82694d2db2c3370a48e33c80f9c35b3e75a505c8c0493ed0c0dba658aa2148ca2548b00cd85ec1f2a387c68ffb3f380a9d2242f37b330c51586ba2dccfd697d13d7a05b77fd4c8c2c4c0fe5fbac22537daa68931ab13761b66a7735c6f3586b68a6b967f958ced89c124e209e6c51c7b4ba9f4ae666"}, 0x101) accept4$bt_l2cap(r4, &(0x7f0000000380), &(0x7f0000000580)=0xe, 0x80000) r7 = socket(0x200000000000011, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket(0x200000000000011, 0x3, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r9, &(0x7f0000000240)={0x11, 0x0, r11}, 0x14) getsockname$packet(r9, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r9, 0x84, 0x6b, &(0x7f0000000680)=[@in6={0xa, 0x4e21, 0x9, @mcast1, 0x6}, @in6={0xa, 0x4e24, 0x7, @empty, 0x8}, @in6={0xa, 0x4e20, 0x3, @mcast1, 0x3}, @in6={0xa, 0x4e23, 0x7fff, @dev={0xfe, 0x80, [], 0x32}, 0x7}, @in6={0xa, 0x4e21, 0x5, @remote, 0xf}, @in={0x2, 0x4e24, @remote}], 0x9c) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r7, &(0x7f0000000240)={0x11, 0x0, r12}, 0x14) getsockname$packet(r7, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) getpeername$tipc(r7, &(0x7f0000000600)=@name, &(0x7f0000000640)=0x10) ioctl$TIOCSIG(r2, 0x40045436, 0x32) getsockname$packet(r3, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) ioctl$sock_bt_cmtp_CMTPCONNDEL(r3, 0x400443c9, &(0x7f00000000c0)={{0x7f, 0xff, 0x3f, 0x1, 0x9, 0x5}, 0x6}) writev(r2, &(0x7f0000000540)=[{&(0x7f0000000080)="7c8d800ed9982be49b0d317f5d", 0xd}], 0x1) r13 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x200400, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r2, 0xc0406619, &(0x7f00000005c0)={{0x3, 0x0, @identifier="1a467ba7605e7f2fe3fd22c0353e4a6f"}}) ioctl$PPPIOCSMAXCID(r13, 0x40047451, &(0x7f0000000040)=0x5) 16:19:43 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2279, &(0x7f0000000000)) 16:19:43 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}, {&(0x7f0000000000)="c5e138cea8943f0266bf87a9edf33d30379fa87913e797fcfe7f0f007c9423a75283989aea1e62fbc8dc69eb84d70e2ce7350bd316629c8ff367b36e93239587628c766fb81b2a2881284a33e92e87ed02d5de5159c3a409ba19bbf3088e2b08a2feb396a80f62d87913d05c04a43553a2be8c3b4067d1b507414edda7bd79f4a451a4e04998", 0x86}], 0x2) 16:19:43 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @gretap={{0xb, 0x1, 'gretap\x00'}, {0x18, 0x2, [@gre_common_policy, @gre_common_policy=[@IFLA_GRE_COLLECT_METADATA={0x4}], @IFLA_GRE_LOCAL={0x8, 0x6, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IFLA_GRE_LOCAL={0x8, 0x6, @broadcast}]}}}]}, 0x48}}, 0x0) ioctl$SG_GET_VERSION_NUM(r0, 0x2282, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40100084}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x7, 0x1, 0x200, 0x70bd25, 0x25dfdbfd, {0x3, 0x0, 0x2}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000045}, 0x8040010) ioctl$KVM_X86_SET_MCE(r3, 0x4040ae9e, &(0x7f0000000080)={0x2080000000000000, 0x3000, 0x1, 0x4, 0x10}) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000100)) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x5385, &(0x7f0000000000)) 16:19:43 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2289, 0x0) 16:19:43 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x227a, &(0x7f0000000000)) 16:19:43 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}, {&(0x7f0000000000)="c5e138cea8943f0266bf87a9edf33d30379fa87913e797fcfe7f0f007c9423a75283989aea1e62fbc8dc69eb84d70e2ce7350bd316629c8ff367b36e93239587628c766fb81b2a2881284a33e92e87ed02d5de5159c3a409ba19bbf3088e2b08a2feb396a80f62d87913d05c04a43553a2be8c3b4067d1b507414edda7bd79f4a451a4e04998", 0x86}], 0x2) 16:19:43 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x4c00, 0x0) [ 549.657265][ T27] audit: type=1800 audit(1578759583.656:47): pid=17104 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=17227 res=0 16:19:43 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind(r2, &(0x7f00000000c0)=@ipx={0x4, 0x1, 0xe2, "f0d930a60904", 0x7f}, 0x80) bind$packet(r1, &(0x7f0000000240)={0x11, 0x0, r3}, 0x14) getsockname$packet(r1, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x1, @dev={[], 0x36}, 'syzkaller1\x00'}}, 0x1e) ioctl$SG_NEXT_CMD_LEN(r0, 0x5385, &(0x7f0000000000)) 16:19:43 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0xa05200, 0x0) setsockopt$ax25_int(r1, 0x101, 0xbfb1ecd08c8350ea, &(0x7f0000000140)=0x8, 0x4) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SELLOADLUT(r2, 0x541c, &(0x7f0000000000)={0xb}) ioctl$VT_SETMODE(r2, 0x5602, &(0x7f0000000180)={0x5, 0x7, 0x1, 0x8, 0x40}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_G_SELECTION(r4, 0xc040565e, &(0x7f0000000080)={0xc, 0x102, 0x2, {0x100, 0x5, 0x4, 0xfffffb36}}) ioctl$SG_NEXT_CMD_LEN(r0, 0x227b, &(0x7f0000000000)) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f00000000c0)) 16:19:43 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x227b, &(0x7f0000000000)) 16:19:43 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}, {&(0x7f0000000000)="c5e138cea8943f0266bf87a9edf33d30379fa87913e797fcfe7f0f007c9423a75283989aea1e62fbc8dc69eb84d70e2ce7350bd316629c8ff367b36e93239587628c766fb81b2a2881284a33e92e87ed02d5de5159c3a409ba19bbf3088e2b08a2feb396a80f62d87913d05c04a43553a2be8c3b4067d1b507414edda7bd79f4a451a4e04998", 0x86}], 0x2) 16:19:44 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x5385, &(0x7f0000000000)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) r2 = msgget$private(0x0, 0x0) msgrcv(r2, &(0x7f0000000580)={0x0, ""/224}, 0x1ef, 0x0, 0x0) msgsnd(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="03"], 0x1, 0x0) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvme-fabrics\x00', 0x40, 0x0) accept$alg(r3, 0x0, 0x0) r4 = dup3(r1, 0xffffffffffffffff, 0x80000) symlinkat(&(0x7f0000000080)='./file0\x00', r4, &(0x7f00000000c0)='./file0\x00') 16:19:44 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000000, 0x810, r1, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x227b, &(0x7f0000000000)) 16:19:44 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x4c01, 0x0) 16:19:44 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x227c, &(0x7f0000000000)) 16:19:44 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}, {&(0x7f0000000000)="c5e138cea8943f0266bf87a9edf33d30379fa87913e797fcfe7f0f007c9423a75283989aea1e62fbc8dc69eb84d70e2ce7350bd316629c8ff367b36e93239587628c766fb81b2a2881284a33e92e87ed02d5de5159c3a409ba19bbf3088e2b08a2feb396a80f62d87913d05c04a43553a2be8c3b4067d1b507414edda7bd79f4a451a4e04998", 0x86}], 0x2) [ 550.153488][ T27] audit: type=1800 audit(1578759584.146:48): pid=17121 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=17226 res=0 16:19:44 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f5d", 0xd}], 0x1) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x429c0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0xbac, 0x0) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r2, &(0x7f0000000240)={0x11, 0x0, r3}, 0x14) getsockname$packet(r2, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) getsockname$netrom(r1, &(0x7f00000001c0)={{}, [@rose, @remote, @default, @rose, @bcast, @rose, @rose, @bcast]}, &(0x7f0000000280)=0x48) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000040)={r5}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000000c0)={r5, 0x5}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000140)={r6, 0x81}, &(0x7f0000000180)=0x8) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000900)=""/4096) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, &(0x7f0000000000)={0x6, 0x7}) 16:19:44 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x5382, 0x0) 16:19:44 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}, {&(0x7f0000000000)="c5e138cea8943f0266bf87a9edf33d30379fa87913e797fcfe7f0f007c9423a75283989aea1e62fbc8dc69eb84d70e2ce7350bd316629c8ff367b36e93239587628c766fb81b2a2881284a33e92e87ed02d5de5159c3a409ba19bbf3088e2b08a2feb396a80f62d87913d05c04a43553a2be8c3b4067d1b507414edda7bd79f4a451a4e04998", 0x86}], 0x2) 16:19:44 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x227d, &(0x7f0000000000)) 16:19:44 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) r2 = socket(0x27, 0x33e440a30f13b0c, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r2, &(0x7f0000000240)={0x11, 0x0, r4}, 0x14) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) preadv(r5, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000400)=""/176, 0xb0}, {&(0x7f0000000340)=""/65, 0x41}, {&(0x7f0000000540)=""/204, 0xcc}, {&(0x7f0000000640)=""/75, 0x4b}], 0x5, 0x1) getsockname$packet(r2, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) ioctl$IMGETVERSION(r1, 0x80044942, &(0x7f0000000200)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f0000000040)={r7}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f00000000c0)={r7, 0x7fffffff}, &(0x7f0000000100)=0x8) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740)='nl80211\x00') r10 = socket(0x200000000000011, 0x3, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r10, &(0x7f0000000240)={0x11, 0x0, r12}, 0x14) getsockname$packet(r10, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x1, 0x5, 0x47, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r13}, 0x3c) sendmsg$NL80211_CMD_NEW_MPATH(r3, &(0x7f0000000800)={&(0x7f00000004c0), 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x30, r9, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r13}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x56b6fd66d8ff7f0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000140)={r8, 0x6, 0x10}, &(0x7f0000000180)=0xc) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x227b, &(0x7f0000000000)) 16:19:44 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, 0x0, 0x0) 16:19:44 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x5385, 0x0) 16:19:45 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x227e, &(0x7f0000000000)) 16:19:45 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x5386, 0x0) 16:19:45 executing program 5: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x82a41, 0x0) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000040)={r2}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000180)={r2, 0xa0}, 0x8) r3 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10, r3, 0x0) r4 = socket$netlink(0x10, 0x3, 0xa) writev(r4, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000007000100070c10000000000000000000", 0x58}], 0x1) getsockopt$IP_VS_SO_GET_VERSION(r4, 0x0, 0x480, &(0x7f0000000080), &(0x7f00000000c0)=0x40) ioctl$SG_NEXT_CMD_LEN(r3, 0x5385, &(0x7f0000000000)=0xfffffffe) 16:19:45 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, 0x0, 0x0) 16:19:45 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x227f, &(0x7f0000000000)) 16:19:45 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x5421, 0x0) 16:19:45 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, 0x0, 0x0) 16:19:45 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2282, &(0x7f0000000000)) 16:19:45 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket(0x200000000000011, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r1, &(0x7f0000000240)={0x11, 0x0, r3}, 0x14) getsockname$packet(r1, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000100), &(0x7f00000000c0)=0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000040), &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x1}, &(0x7f0000000040)=0x8) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f5d", 0xd}], 0x1) 16:19:45 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x800, 0x110240) ioctl$SG_NEXT_CMD_LEN(r0, 0x227b, &(0x7f0000000000)) 16:19:45 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}], 0x1) 16:19:45 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x5450, 0x0) 16:19:45 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000000)) 16:19:45 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}], 0x1) 16:19:46 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x5385, &(0x7f0000000000)) signalfd(r0, &(0x7f0000000080)={0x8001}, 0x8) 16:19:46 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x3ff, 0x101000) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f00000000c0)=0x1, 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x227b, &(0x7f0000000000)) 16:19:46 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x5451, 0x0) 16:19:46 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}], 0x1) 16:19:46 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2284, &(0x7f0000000000)) 16:19:46 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}, {0x0}], 0x2) 16:19:46 executing program 1: openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f5d", 0xd}], 0x1) 16:19:46 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2285, &(0x7f0000000000)) 16:19:46 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10, r0, 0x66b79000) ioctl$SG_NEXT_CMD_LEN(r0, 0x227b, &(0x7f0000000000)) 16:19:46 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x5452, 0x0) 16:19:46 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}, {0x0}], 0x2) 16:19:46 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x99f9a000) ioctl$SG_NEXT_CMD_LEN(r0, 0x5385, &(0x7f0000000000)) 16:19:46 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}, {0x0}], 0x2) 16:19:46 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x5460, 0x0) 16:19:46 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x7f0, 0x927cf03030a4769, 0x4, 0x400, 0x7, {0x77359400}, {0x3, 0x0, 0x29, 0x0, 0xcd, 0x8, "5b707bfd"}, 0x0, 0x1, @fd, 0x6, 0x0, r0}) getpeername$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x5385, &(0x7f0000000000)) 16:19:46 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2286, &(0x7f0000000000)) 16:19:46 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x300000) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x227b, &(0x7f0000000000)) r1 = socket(0x200000000000011, 0x3, 0x0) r2 = socket(0x200000000000011, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r2, &(0x7f0000000240)={0x11, 0x0, r4}, 0x14) getsockname$packet(r2, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x1, 0x5, 0x47, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r5}, 0x3c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000004640)={{{@in6=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6}}, &(0x7f0000001d40)=0xffffffffffffff03) r7 = socket(0x200000000000011, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r7, &(0x7f0000000240)={0x11, 0x0, r9}, 0x14) getsockname$packet(r7, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f0000004fc0)={0x0, @loopback, @local}, &(0x7f0000005000)=0xc) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005680)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000100)}, {&(0x7f00000001c0)="d529441feef3486e4a1c8aedaba236a11f40b20a1969a99db5ea2aa1a327575d4b862382e6e0d48fee3f0bd9e3a0d06bfc5fab6831efed4f06a5151178ed563794727aa4d4782837f01e43e978f04f9f44437aaab74a6a79e9040685ea11494d63096f230fb5e984244c16d7", 0x6c}, {&(0x7f0000000400)="529abc43fc90ca59c8c587a24e7f8312a29fd9ded0ace73a2c1eb0ef58bd40f87fc1a46981bee4296889945868f68a42c202dbd62ac345671637119c148acbe9d51685863a17407e671976e99f92b69fc508628c64df87ff49e2c8e22062911a659689bccd0ce4f474f46f0591d8f7acb0802989b77e3800c4998c6d27b7caf22f1fa1d20a401434b1b1f283f49b56702d79c1f212cd4dea7734a2b02162d8f11ba9c4e563f7603dd05cfa4981e05f1e485df65305e3abeb549132102ef26bc8783f692f4c2f3e497cd575326c75adba8c3275323f70ccc7645d09f36b29d4653d8b0fa912", 0xe5}, {&(0x7f0000000540)="e9a68c9a4a0d524d4ccba3d23a7d856599b4480eb5c5f58f93ee953752af555110fabc8e32d7c53da6744d116391bacc2f4675672d3fa8a813f2bc6f6cfb0b236e456aeec5362053533d991029d8ff29a8774dbaf59702a3d669873790dcc09b71764aa965ef07a36fce99edbe690e8a73a778d267aee8f352747d49b98195e760b3f69dd48ffae6c9504f83f117d467d85ff4d365eb383ff8c4bd8b9a85c164d7ff1147f4f960b8ccfe19ad3c8cef9e31a2eef8acb74fdc093f676400e5", 0xbe}, {&(0x7f0000000140)="ff2d8b4762bddc2c4148f5e07704ea9fe14e48feba157d5bb5992ee8e713f8317168880409d86aa4486f4b76658934242d1f61ae", 0x34}, {&(0x7f0000000600)="4f52c80ae79ffa1fe0b2cb2ec1f2f9403b67d02e9806e7700806317945ed43f46c8c7dadeca426221a84dfe9b2dd1c53db1a11181d3384e4404f069672d2a7303a061fb542527f09d3d45b86e01b96e03c856d6043e42442138d895366b586c09896b843c874427812ad7ed3a407e05007dfd9ab4745c644c0bd8c22e7ecd4593e2b11957d88c3d74ffb4ac651", 0x8d}], 0x6, &(0x7f00000006c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_retopts={{0x2c, 0x0, 0x7, {[@generic={0x83, 0x11, "01a52acc22e888e964a7c32bf4d0b6"}, @ra={0x94, 0x4, 0x1}, @generic={0x83, 0x2}, @end, @end]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @local, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @rand_addr=0x2e, @remote}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @multicast2, @loopback}}}], 0xa8}}, {{&(0x7f0000005100)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000005140), 0x0, &(0x7f0000005180)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1000}}, @ip_retopts={{0x14, 0x0, 0x7, {[@noop]}}}, @ip_ttl={{0x7, 0x0, 0x2, 0x4}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4800000}}, @ip_ttl={{0x14, 0x0, 0x2, 0xd5}}], 0xa8}}, {{&(0x7f0000005240)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000005600)=[{&(0x7f0000005280)="e6530e84bbe4c252ad3a2e068c1a1082b6d8ee535192cb9d2ddfc117b3f53b335d8fbb2e11baa5", 0x27}, {&(0x7f00000052c0)="e285d88b36f7e13740147a78b30b05b77ba0d50c40101736c72679bcc3df581db90c94febd057b226ba92805084658ab08a0de3ce2f3819386f05c88ab5384c718f14043a0311e085248a2c0bd496b1943ca6a3a242e0a8a7196a4bf8cc4a39a567fd544f14018f5cb0cd96242333a56ae09d9fc1e547903490788c08076b736bcaaee40563672cef2eacf8fc3e4163e961362a1ed8de0b19d4afbed", 0x9c}, {&(0x7f0000005380)="5ff24d869a552b9e4586859ffce11cbd6cf817565196af8e4b8347fff0482bad05e362c68f7b8a3e97ae4cddc2ba5bb08e2deb05086a7fb10f9e9e91782a57aec6fbde18f657855fe772eaa4523205fc7852b4f49a767c66b1d1e46843fa36c9c4b95623841c2b9a7a750f1fdb4a198e91bd5887af7ab30312469afea402b867a64e27c07342cf678e9ff1839cebd732a0d12501270580e519b847fdac28333e4c93df", 0xa3}, {&(0x7f0000005440)="0e0e60a747d8cc13f74154c2a472f11743c4652f723966277d0048304bd5adf20f40b3e23b970b0dc789e674c9595e04567004015bcad6946bf5be74217c5c33d5ead17f105d06b71206fb4724eb308c25a8076cbbb15c7c941d59fbaab2f1ed1ce1fc73513c9004d874903f0efa14f85cad500330383eb08799850e560aa6738abec817f63add5262aa0ec8d2be56a931065a939615074643e5ff4c1b5d8d69c1b8b626a41aed06fffce2b055261c3e8d6bf4b65180b4ef6c644a159fe82fbcb53640c98666c87c079922103b80f5ba", 0xd0}, {&(0x7f0000005540)="b5f31d0e521515f2a436391bc282908cce3d5409c9d8dfd72ecc1bf19a292375125bd646ef991260a75e4012a9bc59d46c09dac8495513006446d5b79d2e9ec98eb8017d7b569324da9a30a8e9f87b047aaaeaed712d347ce9055816bd0a4608da5bf85aeb65e443f309c717648078dcad2a61d21ced16fd5f535e5e4fb56871c1db9808593cda1fed88688b61ab2dfb4f0f7c6fa6e8ad612366e5d61ff7a752921811c855a772cb101453eb541151785ddc927a72eade488ee75329fbec8d", 0xbf}], 0x5}}], 0x3, 0x8080) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r11 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r11, 0x800000c004500a, &(0x7f0000000300)) write$binfmt_elf32(r11, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"/6266], 0x1878) r12 = socket(0x200000000000011, 0x3, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r12, &(0x7f0000000240)={0x11, 0x0, r14}, 0x14) getsockname$packet(r12, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) r15 = accept$unix(r12, &(0x7f0000000340), &(0x7f0000000100)=0x6e) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f00000003c0)={'macvlan0\x00', 0x0}) bind$packet(r1, &(0x7f0000000240)={0x11, 0x0, r16}, 0x14) getsockname$packet(r1, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f0000000080), 0x4) 16:19:46 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}, {}], 0x2) 16:19:46 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x6364, 0x0) 16:19:46 executing program 5: setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x5385, &(0x7f0000000000)) 16:19:46 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2287, &(0x7f0000000000)) 16:19:46 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x8912, 0x0) 16:19:47 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}, {}], 0x2) 16:19:47 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0xfffffffffffffffc, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x24, r3, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r4 = syz_open_dev$rtc(&(0x7f0000000200)='/dev/rtc#\x00', 0xfffffffffffffff7, 0x480102) ioctl$RTC_PIE_ON(r4, 0x7005) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f00000001c0)=0x2, 0x4) ioctl$int_in(r5, 0x800000c004500a, &(0x7f0000000300)) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f00000000c0)={0x5, 0xc, 0x4, 0x4, 0x7, {0x77359400}, {0x4, 0x1, 0x40, 0x80, 0x6, 0x4, "97892cee"}, 0x8000, 0x1e1750e97c2d7a57, @planes=&(0x7f0000000080)={0x1b, 0x770, @userptr=0x80000000, 0x2}, 0x279a, 0x0, r5}) ioctl$EVIOCGREP(r6, 0x80084503, &(0x7f0000000140)=""/91) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x5385, &(0x7f0000000000)) 16:19:47 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2288, &(0x7f0000000000)) 16:19:47 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x8933, 0x0) 16:19:47 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x8, 0x18bbc1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x227b, &(0x7f0000000000)=0x2) 16:19:47 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}, {}], 0x2) 16:19:47 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x5385, &(0x7f0000000000)=0x1000) 16:19:47 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2289, &(0x7f0000000000)) 16:19:47 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0xae01, 0x0) 16:19:47 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000a40)='/dev/loop#\x00', 0x0, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xfd08283856736a22) ioctl$IOC_PR_PREEMPT(r0, 0x1269, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f00000002c0)='./bus\x00', 0x143042, 0x0) ftruncate(r3, 0x2008002) sendfile(r2, r3, 0x0, 0x200fff) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, 0xffffffffffffffff, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/udmabuf\x00', 0x2) ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x227b, &(0x7f0000000000)) socket$inet_sctp(0x2, 0x1, 0x84) 16:19:47 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}, {&(0x7f0000000000)="c5e138cea8943f0266bf87a9edf33d30379fa87913e797fcfe7f0f007c9423a75283989aea1e62fbc8dc69eb84d70e2ce7350bd316629c8ff367b36e93239587628c76", 0x43}], 0x2) 16:19:47 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f0000000400)=""/163) socket$key(0xf, 0x3, 0x2) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r2, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f5d", 0xd}], 0x1) r3 = accept(0xffffffffffffffff, &(0x7f0000000000)=@ax25={{}, [@null, @null, @rose, @bcast, @null, @rose, @netrom, @bcast]}, &(0x7f0000000080)=0x80) r4 = socket(0x200000000000011, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r4, &(0x7f0000000240)={0x11, 0x0, r6}, 0x14) getsockname$packet(r4, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) r7 = accept4$llc(r4, &(0x7f0000000680)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f00000006c0)=0x10, 0x400) sendmmsg(r7, &(0x7f0000004600)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000700)="4b058340afd8d694ff9af7e854135b415059294c8a30e44bed4b18a65b379838829173c2a18e6bf8591aa9094534a6aec20615e20d3d4e9dc7390bbdcb68bd9d9ead89d14ac28e61de8ed0a5e74347eadb3ef71631471a117463b7b4bbf241ab9035e48aa02cd0ff0b4e9e7ed53386946709d3", 0x2fb2}], 0x1, &(0x7f0000000900)=[{0x98, 0x116, 0x10001, "c92f05fb05d0944b87536b66695d1969dee730a954124fad66d19451ab21b61183892cd8742b48fc6ccc10ceacc0e1da58ddb5908d4066f426f05c1760bd40e01f543d3ef21374d3e9ffcd4430d44cbe61d4b1d5fa83b2c049ad4baa64bc4fde8e9818a88cb3e2b2cf6fdc76e49b3ecba194da770242ab52b4c1eeae9234fa0bcd"}, {0x108, 0x75fd7d6cbd363449, 0x1ff, "04e34c4d73268230f889eebfee5f718000f97b09addae64a9cbe2ca660e4efce957cdc6a78104ef3cb7b8a412d525325c3c49d7116d71f730097c43eb5e752ef9bb61b51b0ea67ba496dfc09571fd172a0cc6bae1e6bd0953a82d82eba06aba6a358bf623d8b23a9d797582988ade425b68f4177bd7cd2d7255c1e2b3bece35167c8bd71f3bcb3a84941acd4699f4f5e12522103a27010c801868a3f3dbfaf8a21e4a57b54de3028ce0fa92b7f8c3f6f292f866025b8359b29486bd186823ffcd45cf97b1857390bebfd22290639fbe08fe0022c63571dadb3c6e0abccb48e058c505f6eb99cbcf0cfa54a009a9f2fc1067953"}, {0x60, 0x116, 0x4, "cd02216fb2c2008c72f2dbc0b66da62c683be4250068c860639941e3c05c1d823e6dbe3b29bbe594d0651a6cee69eef035da9f56f50a699fcdc17dfa57f7c7b697934186ea85910bfcdb7de37e2be6"}], 0x200}}, {{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000800)="19bae5f04d735a4122c1880df8d41d73f74eeef8d4ccd6d9ac11a49de05c45cd477842a5201be21fb93e43a0dbd48c80e035d0fb675b7e8b4aa7c8df875e56057539bb53e5db05b545f24cc1cd13fae95407f37c4e2b2478ec57a73689375d754dfd7093487d927e5a5d062b4b7b8828de1f599d474d6e29bb6459ff74b85e3de6"}, {&(0x7f0000000b00)="894f622d6e907655c15fca72d6c69343de198c085296abb4ef3186a4af84a43f6abb118a6b75fe63c0a10de66fba1a479ef7ebde88f29ec4ad83de287d46b7e4a3e99ce4f150928b7fabed6e4d6c867379c2b8116a2e11601e92ce0a1da43b591f961d1e70356aec9a8635fe0eb42cbc6df707f83f5c18cbd9461670c3b3030d77f7e4f978775b5d5e641219e664d554aa69d61fc562bd7c495db12cd932cc933de3d88039069c34c10edcf6819c13e6059c9eacf5f28cb753d193904b8fe41b"}, {&(0x7f0000000bc0)="4a01536a99021b7c31e612a2f422b99316a07c9e4c0501c2a4fd18e2c21715b7b7af42239580da3e52f7ec2afafc878010c42e5a20eb487101092d3243be0d6f56d74cdf6160a454a647a7c598a074c5b59c610803c8023fa9b7d3bfd7d77a3b98f93678c933235eebb301bde4f35690a2893cc0268dd228d8c18d0aef"}, {&(0x7f0000000c40)="2ef7213cceb59fa2860cac13fc80b9f74f80c687ab42c2c06c80c0bf16d3ed77524eacbe5b296abece1b15d2947902a3df6641e078f054fa46311044e5617e7fcea925c6bcbe0f1177a03d5faf5030fdd3e232fef7a9542468926c794896"}, {&(0x7f0000000cc0)="f8b01c5936d424842063e7daf33485107dbd4c8a751500c5c15a6f8f1ab48a62ab95524b1623c8f43cbc179c3126f32616455c1130489d95eccb03f0687cfbb6d7298a96202274b9f3ec10b78eedee64c953df04f2c5a885ca3a924a16dfa63a4f07ce36f477c85137d9289a9f3d99b9fea02c66c0b7aacadf03faaa74a5290ba8e822d517c3ec93b1aa4f0d02fbf228efa06c02019198abe82494066185d4ebff8f680ba216fa07f71a2a513d83fc1a935021b18714dc89404e6c9c4be3e765dff61c480b0d35973313039e2f60f6c9e8fa61ad8db00e6e53bf553c508b8c0f5464a4a11afe3a6a014c57e3dc4c5c07c148ea743f9d37"}, {&(0x7f0000000dc0)="210399ec15ee2374be7da397c272d519e0f20a4ed7ff2609113aeb04df41285cbd07711052f545e7a9e611ab140e79ed16dc8621acc9bec4612c912c948ba840ca8f9315206c9d72a3bb75436183f9c120ad593e9cc01894"}, {&(0x7f0000005d40)="d24f4eebbf7f4e9a666e276a6688a113cebb2a22de2197e7b58b9c2ddbbf2207870813e01bf59e631c889a0d693a2e823ce890dc82f71c6407bbca87473528d6da67eaab936c6722bab3a26b1336ecdd3fe49097121f918de296991a5ab05354131704352a5ee95faddad46772b28156dcba243005e60c11119883c7e7fae54b4ab6ec6af2eadb196bf9efff61c395d1eb9bc26f11a34893e12d164c148b317343d6fcf70b3c6cb53b7a5428fd179f14e124443ad054a2bc903c95b5aa20014063044232942fb4df81a126ace4653aa5aad3fa57faf0370915f0b93726609a3b0cf1461ebdd2775a06f056ee85801f3ba2a335c9", 0x41}], 0x0, &(0x7f0000004800)=[{0x20f, 0x104, 0x9, "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"}, {0x0, 0x100, 0x8, "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"}, {0x0, 0x10d, 0x3, "261502273493fc8871075940c6d7096fd223f7edac94373f57861c429001f27a247f4e9782387f1f27015a42337d5673c84e13dd66c167df04ecd6f66bffdfe51b099d495826fdaa1db8cc1be63e0d90bc361545360e17e4eb6f26c746873ecf9f619b23aca6c7f376e1b8cc2f5bef5082566d1142324b292a776e745dedb3c9781829526dbf81c32d8420d69d0cf47fd777676f9dc5a48ab4465e525c652164fc3d8b304abc2cfc7f460eac894aab40af9367521a"}, {0x0, 0x10f, 0x6, "d1720e1e67bc2a964906ccf9265f2cb374e54bc8199c686d9dc29f882bd8be1948e1cb914eb47e22b427b1bcca06b65278fcb9207d94da605359290171e70d467e5f2bfafbfd37a674101a9c68f0815796e9d8fddc426e948d74c8430f987787205dfe2bf48b31e049444abaa3af2cf6a2866b687cadf37b1c7d58d2def7e88d429f60319f03330b04b0ac934d45746c960599c20036c3c3316f039f1394900b9391281d0ff0dcbf27281cc2f2161d4b334b75acccce15ee636c9da5e55e7651934aa488117859b5e968cefa854d7d3dbbccfaf903fd3979aa431616a04ab2"}, {0x0, 0x112, 0x1, "2b0662cc6635c860e408c69bd21be1e2161bd71a25fa4c7b694e2b1b"}, {0x0, 0x102, 0x898, "28e153d587db7dbe23a9de2383d31cbf990302590cccbeddef1f8b7feb2d72475ef54d1466b5cc2d3373017015d7637be0e3892b7c615ae54d834d4652005e463fbf604425a3b41eb98fcc02d35c3d5ad6793ea07d9848285823f37ddd16ca0be3f9c8943a024b3391e63f2b2ba22c441fe3921a2719a40110b62376808ac333e0e2882554739ac600f8a5205d33d416688626c451640d31ca662a93"}, {0x0, 0x117, 0x0, "445e52f308986fb29a0c2e054e351665c7e0d863b4e919e25d82efd3df39bad63ec565852d6259c46a445129fae496621032fddf5742e0ccdbdd2763086d93e130e3718da09c0696638490ae8e8f49fd99af4677c76aa750ba8dac817645cdd3ab4b6945627e98fdf9620ae86316030cfb535c2f9e5efaf6529d0f0c027f025bc507299354d8feaea008ad370dde09718a0de430f9c4fdd9ba537927b471e67bdf461768986199b8f2c4f9856dc2"}, {0x0, 0x10f, 0x400, "8a33c22e24f1aa2f21f7bdf0e0c34298bacbe3e3aab8622f1f30a108580e4135e24f55e481d44676054b582fd14d0efb36deedccfeb322fc146ba9e4036427c0bffc7bd8dbde72be5ddce27da2fb8472606068e80e7feaab1fdb1b17ba22806bb26e38a6d8c0f1f7887a13fd8523dfe3e9666a8c0adaf1c368f3876a7a14ec2b53990223c68eeaebd409eaebce04222f95afa422f98f"}]}}, {{&(0x7f0000002480)=@isdn={0x22, 0x6, 0x6, 0x1}, 0x0, &(0x7f0000000640), 0x0, &(0x7f0000003500)=[{0x0, 0x105, 0xb81, "3f6e51d1aca0eefcaf82162622519799a5122dad4f294007215c41a8652d509dc8f3c8b9418b2681f7a77b8f2ea7348c051f39cecb9df2c603d35b9c666ffe82e5644f3ec067c600cd2b2b8d0dea6e1e9cbec8fc92ce267a598b268d18db058bb946084232d39e4f768bc63e64b61ee48e70b65029380655fbaf95919edd404aa660452eef4407d89317f2664be3d54aea9b79b8a7ff82490b640aa1647d1cb90d686a6cf28684a8a50b9cfea051e7dc6a63e9fe47d6d28b4ec23193856dbe5bad028c35530d30d310e2a20609d96e7d97d2aece51e2916bce00b878d083d2e8ce2f5780892f79b155240ccab9a99e5162a5fa30c76debc6764b9ea70f34c44da897db7d8095c75c5b52feae8a86d0f9ced2fc6765aa671e87e14132ced42bbf75972e9ed3dfa4e89df0827971f0626886f651d0930860933eb92fee837a8acede50f48dafdb8d67674bea6ccfe98cbe531d236df5b458032f59d2d7e3b3c49f3d510f899f476665b7cd30f851076906267387b74f3efbd80c0c9c87a5b3635c131c32e76f65073cb8e35e40c32a73803c2abe3a50e90a90d7021585a818736111e951eb315ff91d35883f5becf028f2ab36af0c1b49278fc9e694f28d6d336e239c863930a77c0c1328835aa291ccb5c76bf0dc43d3bdfa237f83a98d6e4df91f7982099f25730eb3f02586bd17285bd776f68a00524f17476d35637d33bb9d4ea465d9e6f0a927da58ea6bf0d574007f72c7e1c5082c8b2af927eaa26d3cdba6e2a87472049588ce9b2ff48babfb4f210e959f18ba78299b27253ab631c4bb6988b635b7f0112243d3d2f4775ed29b3300b9573eb698216cffdf671b333dcc2da4eed00de3b00785467ff4297b4d69b26bfe5fb3e04f87c2f8769625a1a431f9ee2dc94375c0f280889bcb2ed93f697c4debfd84622b0b101380c4afc1ac59e48b697ea117ead7bb0290227016370f20dae6e4b957da53a85c155737f27ce139b378e1dfb9989d1b9025f9a8ac52c2dfdaedaf7136fd77bba8ba2137e2db73160d99e0204bac501116e5cf8c62b8389598312a09226e7f72be918903dad036c442e3e91084fbf423e46bd6b5650f250037a2adb0b97cf7e90cec70d8af3121030ca81beff5dc3d6dcd0031c411ebd3ae54b0fa57036f6389861400785d93ca7e798e1ece926bcd4da8f2dfe35582276064b97ea2a3b7876de27be1293cab7a320e7e39ed0513f3736aad6aedec2d0b9e290c547a750237e9c7784ec8553bc201e109d13e57c8ec774472e786880a2b274abec1d1a409feacaf761e45b9a71db970db9ad811c99256fb7f4fad3c7fff7608f85e33fa1a19318dda73d635b675602f63852c20bc9120d854665ea0f8a255c06ac820da92a5a9b718caac0c0966df11c25c157973b55b19e97d4bab62189ed448eaca2bdb8453269c8de800c4ca22e684628a033fa407b2197e7a2ccc7b6c734efe323714c5dbb7d7f844e9d433c28671d3542cc590206c668e01a565f98df3e9ecefacf000bcf0778da0120a0b4c315e4f1fca112254ae0dd217a0b96a4175048f711eaab33a830b70129ef2d1ccc63da06f4bca91e0584d6cb79d3c2aedfaf0434219903dec9b554fd829c7d3ee479d7e590ffdd0d318bb04f9c4a45cd09680228bb68064149d7e29184b4373b3de7f76b1e2c64dd27ea3ee7c1855db1e73c819507132359236629a83ea09aca465d80642e301a05fb18203ee239f68e15f8e17667ba77e89976f7a0803d2f2918289ae3ee0cd122e458246a4ec7585b4ca0e46bf408484c8dbde993ef80547a30753ea01b4039786e4490ca41f0fe4a408cb3dba6456e7001c095171f60d052ee5552db8cbd52f5501b17fa496acb30eb036e30a51a38139da8e9e71dd187b0726d409379cfd0116a2bf03f0584a9fa37e5b68728e4984e0e53811ace7d77dad245f14136c13cd97a65ac1d522c4f3086f73ee59eb43b49dcdc8261ce8bf3f379515df391f57fd0beccd1960c3fc76289f42f482c8738757e71933618c8e22d65fb54eb5f784ce0c067c627f9b73a3d76d5d2219686a342f4e60cc2a289288e99dacb51f6364a6a03fa04f86b0f6a7d6b0ba527b441aeb67d7ff4a5829e6a049eb31cd6e2e681ec2fc7ef502122efa3d4f435b5248df79c2a563c8004c0a2ff68f65e75888d3db7f482a8bd6bef87b4f9c6686e41cce342561571f415a957014088ef85d76f577c0548368f26a9963c699ae75084a717fe76dcb5e8badfd8bc4d00c4b5c7e07ff9b2258da4ad3f5b6504f109f3512205128b230a704b5236d8627e0e56bb1325136fa64b33d796243f0fb22924c2832ee856e9f9eaba95687797a42c71a1f7b6320045ccacc81e14d332081058c2a1f13ee827a6d2c6bce49a787ef62bf94ebc73664ba30d41bf7cf98daef276c5faabf5218768f01716c3f6a150dcc6de4f94b8d7dbb176a67527f82d9e0eecfafa15142f58f78784e84e5ef742f13627915ed0422dcf80efd86b736c90dbd84ef927cbb412597414586e2d9bdc6f53e1995b2f86593e0e0552729a2bfa9b6598bbd6511e2e3ae76df6b9ce128a3a869e6bc2de5a7654643e0c376d0a31ff47405f57f0e2fce8b6cc55c2ae65047ed55d55da0c469b4704b0133b156d317cc8be102cfda79bc96d24f1a99bea339125338aaa73572bfd4c7149ac77552659b49c298326d404cd6a94a7f91294629db5d225787ef36ee4435575d6537af5d4d19bea1b43eaea3cda7e4fde873082ab9a1892b36b5ae866bc6760a72c703ef61f00819ccad6e756618ab98a5f4f7ef03947f2c4265acd94cb1c56475aedd0367b7b098971856a4d7002aa68a1598b91a0e26adac3e100fef3c75c5ad843169b2dcd5016cd51d563d859d1f5d17ec18c3b408be9f8237a3a433b4e95e5036dfe05da84ec5005832be0873dd11c64f74c81abd325ea4b2316a5f6c87424c9b7b1fed84d12405e5f2be7029810d6101708e23dc23b87b8d25d19e9bbf9a7a29ab9a35354e1f462832b5bc55302a41bbbb6f545fbd821805059255cacb6a36242a1e2f226ccf088d91012f5d84aed0034ac3113f395987f0a93e4043ae452bd7bb3125cfa13ff5bb957af232e3223544fbbacb20bd3cd79688eda09d9b4d3884a75fccc2db54e8e5568a21eae3919aa8e85b12235a4fc71121b3df7bef89a017893c2bc66eb2b1044b84f6084ddeeff1a41e873314b99b74207058e278daaa979d45442d399c2fb97e3b5b0bbf6c3473942846c79c37d1904e2b597d6db737061385225fc711b7f9c6a416a0f353735e034cc457f4db42bb709d255bf360eba73e4378bb0f7453332baab8e35176b67caede990372d647e1de01bbf7e1b8d66fbff57eb658dff9a0256616247e9957411feab3cae74785d908120ae47fd3e9ea7114fa12c4cf64fbb37b71c067ac93d9cd9405eb4f52766dd4d5e2f3d35552eff8bec807be4788567c15049d6e949673c41106837066a8a92ce07b25e439f54c10879ccdf098b6932d5b3dbb3759f17297fb97766910c6a8ba1d9ebbb159e30043321dab55c79013e8cbfe5f0c18cfcaf2e75e834d5ee99f4880dc536d848e4d3ebedd28e753673e42c85456cbebe2d4503fce7063ef4ab52545b1657e877024d4843160934aa547f666d7f22261af2609a8044fa12dbe9145786a7b15a23077c5bbfd5dee0d31e79370c8cce509f8a4c24c6926684e85622368207e90d6a81f2e8bb39a6f48f39e1f639fda54f8a4ef3373fd3c55db179d45581bff82ced036217c92028fe89fb8981186e8f645225eb38cd22d706981966512e7f902b4480ff9ba18d7105437692b44ff63003557c37d1b9aecbf39d5ae271ab0c437e9be420df94655a3b68edb5fe936ac5026f5b0bb64e65950089dbb26822609266d7d1c90c61d0445719e58a9ea7b236a825d2dc355715704ddb83952280faca438f08bfb18b700c2431a7e193bb3bf75a2c889080ade9b65bfe9f02ce365f0a4037089331c01a9c54cd5a03f462f95f61830587fe6a78baf5a5cc7fad6e1c77cc3793863346e7301533209163b81b7590593d5964dee121689825257ec5240a78fa096e90679a3c29707039d7e73dfebc5493c47755250d141d842c978e10c928bfeb87455d3c54d0dd5de425cf80e53f62cd383e6d387ded2a40f56be6c7a48e1ed60a22c47e1a1c39cad401ef6396fb930f7ed92bd8bad5736156ae63ce01bd6a516b8fbd2f3ccb9dafa153e3f2f5d8e2add2cc1c32e9c299097ee69cdb57f3a1067c5b677aa28b403503698438db5ba474ab095b26c56bcdf722d8cdd4e78bc7155eb8c5d309f8d33344e56c57d403babb49c029b27676bed465e956198f96befd910a4d8cf331c52174b699f9c4995750784cb926aba8bf58fbede01e1efda19748b9d92fd533f6e4493f835eee04b8d6b1fc1b7bcd2eaf37b8af28fef3ce753d2947376d6657dc8c41aac421d2c8964f1d6b877dd920d4d2c484fe4f2675be91dc179d5e69b7789cfa8a16a036e42b2086079a575f30c9e1a57add70eb0846ef28f8143c19410b9377f1f8b51834186afac0b52b0302626c015619c860f18d85e82a12c2dd3a1f5557909c190d8c0c5d889b63827cfe3572053303dc2fd2dc54c59bfc453173ce128a87452c3fba199c4f397e3e713aa4a69631e914641fec94005c96cc2c18e250bb62cefdd84cf7fef7186781c6a743b5b4fff1afd67fe7db9ade3583fddf5464c2f9541b1beee1cab3ef6fe28d7d0d8789a7172c60ac6b206cea2cfd8dc58e39e7939016b634c07dcc9fdf496da0b78c06ca2a5da26d0d78983d6c27affed690db63eb1049104715bdc720edc954f6ef4a7809ce6209c13970dd7623c2967ae8d7277e5db0b97b4690468048541f73f84a68a68e6c7e77a153ccfeca7c82615b456d8643014445905407d93594b16621123d25f32e123d870b626af1548372ac33f8940874c595520d4d4f2fe6face3bfce5b16541cd7783a2e5d7c8634a4c2997c4c3f91b92a0148322d46a226bb4b37e714ee9aa5e8023bf13b7985abb0578b87595801ff72f5b7d3c2541a19f8a490f2f20c0bb42ae538eb437a44d6446e51998e2f788b91dba97a7111f5686e8c34b5fd4bc0eccf55e161b5a127dddb210f10ddff28805211629c800e2695bcca112b57887a28d4a2f369262d93240e40c716321fe515d184738b1ffe29e5ec33c8a217d6aa7081de8100b44241f8e867b95d461de67c96a49863a0421cc81ef76c6b7458d4b5240b3f06966657c4af3bd27ddb78493254539ad7f48bbf92bba19fa7e5c7a0176716ed79b654f9d713da7cbe66ef8cbb4614ae282e03412295637213237ba8e335771699a9bb8d76f87b8b60395f8496cee0d9b3d4d26f92d2bf1946535af015281d90ca75efdab2e0f3cb56726671dc2b97ae4743eba9acd2706dec24e06819d8d1775800f028bb0e4d1d99b383e5cb7a036fee236a49282d65c281d7512ca651dd35683ec52831499735a807c0466285944979459db4d12744842da12440264a92162c0943d0b4bac7813d1a340d49a7c41379e24398085f698fc7312f86e4938a3256e45edc1f2b38635de3c995998c2c1c78fedd1912d060012bd00c27ac2e9d733a32791f75acbd71a66ddfbc21bc01d53dfb2d41633d6fa87422b69f190aded7719a6f8aacfbc858de59ea59a588c3f3608792ea49450882fd5b4c1029cfdd22868b6a2da9d023d6eaf8fe873f979e7c7f9e2efc84b57c2116c920266c11e41ca89f7c9b96a78715f2ab846f346f"}, {0x0, 0x110, 0x80, "a44895b49b4ed4f65833e1d696aff62dab2cc16ff9a54c4bfe5fd59ece1c78af089fbd44b431cc6ba99feeeac7e10ec1680a57a79a0f62aee0ebe47d817e4997a2662f64c08584f2cb496529b3cbde86a223b21b0265d981235dc8584ab9744a26e8372fdfaf56f42619dc77b1021ef6a9bb18bf3c05a468d9c74aac5fee61a8a4b564ef6d8ed11a26baf433df71de2af98d79be9139f449580edb40bde8c82fe70790c3b06afb6b8f514fa30586da9408cc709d7d6a"}]}}], 0x40000000000029c, 0x8082) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000007000100070c10000000000000000000", 0x58}], 0x1) r9 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0)='NLBL_MGMT\x00') r11 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r11, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000007000100070c10000000000000000000", 0x58}], 0x1) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000046c0)='nl80211\x00') sendmsg$NL80211_CMD_DEL_KEY(r11, &(0x7f00000047c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000004780)={&(0x7f0000004700)=ANY=[@ANYBLOB="707f0000", @ANYRES16=r12, @ANYBLOB="00042dbd7000fcdbdf250c00000012000a009da91b01653a91d510d74bfb7fcc00000a000600000000000000000004000b000a000600aaaaaaaaaa1100001100070033a6fe9121f2d2b6f4a27d3e910000000800090001ac0f000a000600aaaaaaaaaabb00000500080005000000"], 0x74}, 0x1, 0x0, 0x0, 0x844}, 0x4000000) sendmsg$NLBL_MGMT_C_LISTDEF(r9, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1080480}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r10], 0x2}, 0x1, 0x0, 0x0, 0x814}, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r8, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000004c0)={&(0x7f0000000580)={0x64, r10, 0x0, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_DOMAIN={0xb, 0x1, 'broute\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20002815}, 0x8000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c0000005a00010000000000000000001d0105001800030000000000000000007ca0a6623de619e202000000184000000000eaff00000000e893979c6a9c692b000000000800050006000000"], 0x4c}}, 0x0) r13 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r13, &(0x7f0000000140), 0x42, 0x0) accept(r8, &(0x7f00000002c0)=@ll, &(0x7f0000000340)=0x80) getsockopt$EBT_SO_GET_INIT_ENTRIES(r3, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x4, 0xd3, [], 0x2, &(0x7f00000000c0)=[{}, {}], &(0x7f0000000100)=""/211}, &(0x7f0000000280)=0x78) 16:19:47 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x4c01, &(0x7f0000000000)) 16:19:47 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0xf0b2d4f2580fb3bb) ioctl$SG_NEXT_CMD_LEN(r0, 0x5385, &(0x7f0000000000)) 16:19:47 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x400454ca, 0x0) 16:19:47 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}, {}], 0x2) 16:19:47 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x5385, &(0x7f0000000000)) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x400000, 0x0) write$P9_RXATTRCREATE(r1, &(0x7f00000000c0)={0x7, 0x21, 0x2}, 0x7) 16:19:47 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x4004556a, 0x0) 16:19:47 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x4c04, &(0x7f0000000000)) 16:19:47 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f5d", 0xd}], 0x1) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r5 = socket(0x200000000000011, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r5, &(0x7f0000000240)={0x11, 0x0, r7}, 0x14) getsockname$packet(r5, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) getsockopt$inet_int(r5, 0x0, 0x12, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r8 = socket(0x200000000000011, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r8, &(0x7f0000000240)={0x11, 0x0, r10}, 0x14) getsockname$packet(r8, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) getsockopt$IP6T_SO_GET_REVISION_TARGET(r8, 0x29, 0x45, &(0x7f0000000200)={'HL\x00'}, &(0x7f0000000240)=0x1e) ioctl$int_in(r4, 0x800000c004500a, &(0x7f0000000300)) ioctl$VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f00000000c0)={0x7, 0x1, 0x4, 0x2, 0x80000001, {0x0, 0x7530}, {0x5, 0x2, 0x70, 0x7, 0x6, 0xff, 'uw9/'}, 0x1000, 0x4, @planes=&(0x7f0000000080)={0x80, 0x8000, @userptr=0x8001, 0x2}, 0x4, 0x0, r4}) ioctl$SNDCTL_DSP_RESET(r4, 0x5000, 0x0) fsetxattr$security_evm(r1, &(0x7f0000000000)='security.evm\x00', &(0x7f0000000040)=@md5={0x1, "899510bdeebf132e10843ab8a63de2ad"}, 0x11, 0x2) ioctl$DRM_IOCTL_CONTROL(0xffffffffffffffff, 0x40086414, &(0x7f00000001c0)={0x3, 0x80}) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000900)={0x8000, {{0xa, 0x4e24, 0x99c, @local, 0xff}}, 0x0, 0x8, [{{0xa, 0x4e20, 0x2, @mcast1, 0xcbbe}}, {{0xa, 0x4e21, 0x3, @mcast2, 0x114}}, {{0xa, 0x4e23, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x5}}, {{0xa, 0x4e21, 0x3, @local}}, {{0xa, 0x4e20, 0x4, @empty}}, {{0xa, 0x4e24, 0x6, @rand_addr="04876ab7ea30c8fc907b58e1b7033af6", 0x19}}, {{0xa, 0x4e24, 0x6, @rand_addr="cc08261009b1113819572221828b1c12", 0x6}}, {{0xa, 0x4e22, 0x5cf3a300, @dev={0xfe, 0x80, [], 0x33}, 0xffff}}]}, 0x490) 16:19:48 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}, {}], 0x2) 16:19:48 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x227b, &(0x7f0000000000)) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000007000100070c10000000000000000000", 0x58}], 0x1) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000080), &(0x7f00000000c0)=0x40) 16:19:48 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x40049409, 0x0) 16:19:48 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x4) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x5385, &(0x7f0000000000)) r1 = socket(0x200000000000011, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r4, 0x800000c004500a, &(0x7f0000000300)) fcntl$setflags(r4, 0x2, 0x1) bind$packet(r1, &(0x7f0000000240)={0x11, 0x0, r3}, 0x14) getsockname$packet(r1, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@multicast2, @in6=@initdev}}, {{@in=@empty}, 0x0, @in=@dev}}, &(0x7f00000002c0)=0xe8) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x41, 0x0) sendmsg$NET_DM_CMD_STOP(r5, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000815}, 0x1) 16:19:48 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x5382, &(0x7f0000000000)) 16:19:48 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}, {}], 0x2) [ 554.337011][ T27] audit: type=1800 audit(1578759588.336:49): pid=17394 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=16881 res=0 16:19:48 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) timer_create(0x2, &(0x7f0000000000)={0x0, 0x25, 0x6, @thr={&(0x7f0000000580)="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", &(0x7f00000002c0)="21bcdf022f5c6a6a4829a0c35a55fd39890bb2290d36bbace67c98af44cd7bac00368bed107f69d7328f7d8503aee3c0abac2d4b340ac7fe3a68f4cb6fd5ea475ec60f354e219c62d2716b46ee0a98c97a1ef695302aa017f0216363e84db57c47f20440298ec9c29d1c3a59e2b2a0972b44e1391747adbb4ffe3bb00b0e73a1956c2fb18efbe8e98dcce8a5d1f1ab438e7d4347f920403471332c1bbfe1cf015f8f8a18cc1fb2e8e8fdee22f6e6a3729ddb44f296341dbb6a473ffd014863ec5717a678223370044bcdf8629820aac2985ca056568e8ad6deb85fb221b7cc3cc99b7a075c83af32ce6b4a3b80435dda5ac78ce615b7b5bc1f4a9bf7e80a2d679d68623f2be51246a8d202685afd9d3b45f13e8870609187375b747d9b4bffc879db0829f28604578d9ff1d8df0eb53bb43bf9158449ae8ffdea03e589faa950b77968740d2c751908084dea5d226e509e8583d384f977e458"}}, &(0x7f0000000040)=0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x80000, 0x0) getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000200)=0xf61, &(0x7f0000000240)=0x4) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f00000000c0)={{}, {r2, r3+10000000}}, &(0x7f0000000100)) r4 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) writev(r4, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f5d", 0xd}], 0x1) 16:19:48 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x40186366, 0x0) 16:19:48 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}, {&(0x7f0000000000)="c5e138cea8943f0266bf87a9edf33d30379fa87913e797fcfe7f0f007c9423a75283", 0x22}], 0x2) 16:19:48 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x5385, &(0x7f0000000000)) 16:19:48 executing program 5: syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x800, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x800400200) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000080)={0xe09f, 0xb, 0x4, 0x0, 0x4, {0x0, 0x7530}, {0x3, 0x0, 0x9, 0x0, 0xfc, 0x6, "77ee5dc5"}, 0x9, 0x1, @userptr=0x7, 0x1ff, 0x0, 0xffffffffffffffff}) ioctl$SG_NEXT_CMD_LEN(r3, 0x5385, &(0x7f0000000100)=0xc2) 16:19:48 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f5d", 0xd}], 0x1) r1 = open(&(0x7f0000000000)='./file0\x00', 0xa00, 0x8) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x1) 16:19:48 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x200000000000011, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r2, &(0x7f0000000240)={0x11, 0x0, r4}, 0x14) getsockname$packet(r2, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) getpeername$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) r5 = socket$bt_bnep(0x1f, 0x3, 0x4) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000180)={@loopback, @empty, 0x0}, &(0x7f00000001c0)=0xc) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'ip_vti0\x00', r6}) bind$packet(r1, &(0x7f0000000240)={0x11, 0x0, r7}, 0x14) getsockname$packet(r1, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) syz_read_part_table(0xf8, 0x5, &(0x7f0000000580)=[{&(0x7f0000000280)="7d5f2b305828d5a05b09eec59a03f508529246839280aeb07ae7a3245c9f9f5cf47261e0f75deedc5fc4568101aeee8821361e6dcaa20825c7d38a871d81840cb3ce68da527753c654fdab6463ed83944768aebbf8cde0762be5d5126f695ad3b9fddcf8d53b4245b3dfa10b97638f931cdd9f61c29da814762ed4482c0c1c0a9306f2934831ccca68512a77c73e9781454a033e1bd68998290052b1c0c579e80fdb910ebd712081c27c48c0294a1c37df90b7d18d3afe9118fb835ae1ff2d23345654642026293f4f205d42f3ba8223e4a6f420a8509086a958db80485c544a2b8ef3f35a891378e0ec0253f70a6f3c18c211ee533ec8", 0xf7, 0x4}, {&(0x7f0000000200)="d2b944dbfe42306bddbb7f97e26a18e050ab4c9310e1009c82a3e5c3bd0777109dfb628f5ac7c1322d52344e1767", 0x2e, 0x80000000}, {&(0x7f0000000380), 0x0, 0x7fffffff}, {&(0x7f0000000400)="5b2ab2f19bcdd47b856c349229585b9f350d9065da2dac08cbadeb65fdca0af38d78db321407fe1de43cd77bd85d74ed1ea129a6b5c4d896cfb6319844d454db3595ed24a940270226cd9886098db7171441776f234179de08ac28e8cc0b93ff798a84e85946a73d62e162c3a1c48840fba1624544c28f2d8266827701b93f69ccb09ab7c040b5e3b15c863a7c10c6bd13db6927aa57904576b9f6774f1231654abc347532e8243a8d31bfaadd463a4cac2eaf81f8e99b0ee0fd9554984023c3b8812a45f8c960d7cc9f8eb6720f8c61c81f5769d3226005cf627d95b108", 0xde, 0x401}, {&(0x7f0000000540)="31dda0be2ec930397ebf4ee0fc8cb9bc9e004f5d5d0d06ffe7cd5ad89af1ad092b5ccf1b", 0x24, 0x6}]) r8 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r8, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="0600fc34", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r8, 0x84, 0x66, &(0x7f0000000040)={r9}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r9, 0x1}, 0x8) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) r10 = socket(0x200000000000011, 0x3, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r10, &(0x7f0000000240)={0x11, 0x0, r12}, 0x14) getsockname$packet(r10, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) r13 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r13, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r13, 0x84, 0x1d, &(0x7f0000000640)=ANY=[@ANYBLOB="01f3ff00", @ANYRES32=0x0], &(0x7f000095dffc)=0xffffffffffffff3a) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r13, 0x84, 0x66, &(0x7f0000000040)={r14}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r10, 0x84, 0x1, &(0x7f0000000380)={r14, 0xff, 0x8, 0x4, 0x2, 0x8}, &(0x7f0000000600)=0x14) ioctl$SG_NEXT_CMD_LEN(r0, 0x227b, &(0x7f0000000000)) 16:19:48 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x5386, &(0x7f0000000000)) 16:19:48 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x4020940d, 0x0) 16:19:48 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$packet(0x11, 0x2, 0x300) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000040)="4bc47bdcd250bcc7740981b22faca94efe5aab17929fdbade5b83203ef97ff7210ae", 0x22}, {&(0x7f00000000c0)="ab9f1f65142446f9172aba6099ecbcc0b2ca23cf0ebbed42dbf2fafc4fcf4b3f13443fdf906d7139c1937030d2fd0d8b7278fc5a62caa3a7e3e6", 0x3a}, {&(0x7f0000000100)="ede3e5bf6cd8c9148075bfc16e0b435c56569660ee194c4c40ae0c1e10f90d9f2ea826d228415502ec1ae89dbf354b6d06f9e4d778d27987113d42b5d80e45d66e76af9a0b0a880c2d7e9ebcb4c8e1466f83bdc0a492909b7285efe6bde18a7cdcade3c8166467238c875f29de55e795a88ae4a56373b4b7a5911f4d129968c6d37c2c6cb5e5bb90688ec11884cc8b2526d5cc3628b70351faacf193d6f4f7a43e69a27177ca45b97bfbb452324e035ba51cd285203d3f026f2e65f57512cd607d651a15c55ed218d47bbf09aed9c58b30fcf417f329694117a76ea99adad32105da11ce1f596fb1db29a627a3b112", 0xef}, {&(0x7f0000000200)="0000571531ec3f9dd1e98a66e2ba03e93c30e7eb6ff076c8887089825258ce240569da803496328f75879b03a0727d1647da2046998653228b82d1b13a5a44b2117badd325cd925df5df651d252c835f69d8e4f040fbc1a4854f7df4762f444a8ad97d", 0x63}, {&(0x7f00000002c0)="4306b6acf1c4dee699d3fd42675d72c0cae77b424a06e919e836e1b919e3e466bb4bb5cf9c2f48bbd598acd3e3714120", 0x30}, {&(0x7f0000000340)="48ad22634dfee650a793a85b58d4ee4a872b42fdc7d0f97af8cb3c56699c76339794037744b0cdf2c7a0ecf3c435054b03", 0x31}, {&(0x7f0000000480)}, {&(0x7f00000003c0)="92d3788cf8f97c92cf8f6c122870755a070a31f1b75d65f39142aef1a1eeb40dbcd91aee773656bed554251f661eebe9a9672497e1", 0xffffffffffffff17}], 0x8) ioctl$TCGETX(r0, 0x5432, &(0x7f0000000000)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r3, 0x800000c004500a, &(0x7f0000000300)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r4, 0x800000c004500a, &(0x7f0000000300)) ioctl$int_in(r4, 0x5452, &(0x7f0000000080)=0xfffe) dup2(0xffffffffffffffff, r2) 16:19:48 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}, {&(0x7f0000000000)="c5", 0x1}], 0x2) 16:19:48 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x4020ae46, 0x0) 16:19:48 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x5385, &(0x7f0000000000)) r1 = socket$l2tp(0x2, 0x2, 0x73) fcntl$dupfd(r0, 0x406, r1) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x9, 0x8000}) 16:19:49 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000000c0)={0xff, 0x7, 0x4, 0x4000000, 0x83f, {0x77359400}, {0x3, 0x2, 0x2, 0xff, 0x3, 0xea, "780def98"}, 0x10001, 0x1, @planes=&(0x7f0000000080)={0x9d2, 0x6, @fd=r2, 0x415f}, 0x1ff, 0x0, 0xffffffffffffffff}) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000000140)='/dev/sg#\x00', 0x0, r0) ioctl$SG_NEXT_CMD_LEN(r0, 0x5385, &(0x7f0000000000)) 16:19:49 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x800454d2, 0x0) 16:19:49 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f5d", 0x73}], 0x1) 16:19:49 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x5421, &(0x7f0000000000)) 16:19:49 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}, {&(0x7f0000000000)="c5", 0x1}], 0x2) 16:19:49 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="600000000000fa1107000000a088c8f96f2e7591615629879339e0af39f4ea5af5844f00000000786070d22ed0010000002c894ece9c2d39fa4200000000ea476a36579b502c2062072dff002f12a80100000000000000df7b4916b665cec04a88c6092d130000000000000000000800ef3b2500ca1913a17ec5c84d129ea61ca5e56a1696166ec2e0216a577ab89907a1d73b91f80759591820cdc711c7f0f96179496e88608fbcca5fdb9277bef74cb20eb298031867fa2382f8ad0177c20ac160fc9ae490a306c09d127d482d8421f1d64a13de9167a36254498e8a9f4af80fa776e6edd629a77b04e06ce3a490188397a90fa2be00bf388f89f1107d2c94b2ea1bed952879421c0802c1312f6b615cf4a4f0df4db287c9cdc9dec040caa4a5bcf09f2587ca602d79d18a36d3"]) r3 = getuid() setresuid(0xee01, r3, 0x0) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000380)={{}, {0x1, 0x1}, [{0x2, 0x4, r3}, {0x2, 0x4, r4}], {0x4, 0x3}, [], {0x10, 0x4}, {0x20, 0x4}}, 0x34, 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) r5 = socket(0x200000000000011, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r5, &(0x7f0000000240)={0x11, 0x19, r7}, 0x14) getsockname$packet(r5, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) r8 = socket(0x200000000000011, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) ioctl$NS_GET_NSTYPE(r1, 0xb703, 0x0) bind$packet(r8, &(0x7f0000000240)={0x11, 0x0, r10}, 0x14) getsockname$packet(r8, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0c000000ee462fb143f7ab2947604c46ab2f763ccb93bbcb0a0100dd522cc23d820027cb02778d434519db8e00001c33e4a44200881bc493846d3ae014ddf4b0f71f1fb133ea1366bf958338094c3054", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x14) setsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000100)={r11, 0x7, 0x4aa8, 0x2}, 0x10) ioctl$SG_NEXT_CMD_LEN(r0, 0x227b, &(0x7f0000000000)) 16:19:49 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x80086301, 0x0) 16:19:49 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x5385, &(0x7f0000000000)) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x101000, 0x0) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="274c8e00", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) r5 = syz_open_procfs(r4, &(0x7f0000000180)='oom_adj\x00') ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f00000001c0)={0x1}) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000040)={r3}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f00000000c0)={r3, 0x8001}, 0x8) 16:19:49 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}, {}], 0x2) 16:19:49 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f5d", 0xd}], 0x1) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000040)={0x2, 0x6a, "b405d1ddc9bd0ee9ae5fecd0cbab01f1bb6e3033f645089bf8f90b9971e568ebd2b008c7efc2b2f95fda4b7633015327f7059b1bd14d088c8d25f24714c72575a92ef51207a96d6930b5d1de18ab41657c77af8d680069dc97a2d01e44a2f9ea7a7a9d94db23b29cb6a1"}) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='sched\x00') ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f0000000100)) 16:19:49 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x5450, &(0x7f0000000000)) 16:19:50 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}, {}], 0x2) 16:19:50 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x80404507, 0x0) 16:19:50 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x5451, &(0x7f0000000000)) 16:19:50 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x5452, &(0x7f0000000000)) 16:19:50 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}, {}], 0x2) 16:19:50 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x5460, &(0x7f0000000000)) 16:19:50 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4011ec2062128153, 0x20011, 0xffffffffffffffff, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x227b, &(0x7f0000000000)) 16:19:50 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SET_PDEATHSIG(0x1, 0x3b) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f5d", 0xd}], 0x1) 16:19:50 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0xfffffffffffffffe, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000080)='/dev/vcsu#\x00', 0x9, 0x800) setsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f00000000c0)=0x100, 0x4) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x1000000, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x5385, &(0x7f0000000000)) 16:19:50 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0xc0045878, 0x0) 16:19:50 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="c5", 0x1}], 0x1) 16:19:50 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000000)="00000000000000000000000000f15f7944c3fa26ea69a99e568636f9d1be0000000060ff39f1b7ff12ae075eb380ac6f7ac2bebeb2f031465a71be7ccc4da3055bda067605a58e68aa86d061c8446a0dc2da8f7e4a8607705821487a066c7892cac1e18a284058d87ec45289c6b5d3ae87d3e016b50a6a2e05fba763f56c5b", 0x7f}], 0x1) 16:19:50 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x6364, &(0x7f0000000000)) 16:19:50 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x101200) ioctl$USBDEVFS_RELEASEINTERFACE(r1, 0x80045510, &(0x7f00000000c0)=0x3) ioctl$SG_NEXT_CMD_LEN(r0, 0x227b, &(0x7f0000000000)) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205647, &(0x7f0000000180)={0x9e0000, 0x4326, 0x20, r0, 0x0, &(0x7f0000000140)={0x990afe, 0x4a219110, [], @p_u16=&(0x7f0000000100)=0xe805}}) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000040)={r6}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f00000001c0)={r6, 0x1, 0x5, 0x3f, 0xbd, 0x5}, &(0x7f0000000200)=0x14) 16:19:50 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x8912, &(0x7f0000000000)) 16:19:50 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0xc0045878, 0x0) 16:19:50 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="c5", 0x1}], 0x1) 16:19:51 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f5d", 0xd}], 0x1) 16:19:51 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x5385, &(0x7f0000000000)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000080)=0xe1) 16:19:51 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x8933, &(0x7f0000000000)) 16:19:51 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="c5", 0x1}], 0x1) 16:19:51 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0xc004743e, 0x0) 16:19:51 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000100)=0x7c) r1 = socket$inet_sctp(0x2, 0x1, 0x84) accept4$inet(r1, &(0x7f0000000140)={0x2, 0x0, @dev}, &(0x7f0000000180)=0x10, 0x400) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x373440, 0x0) ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f0000000040)=""/102) prctl$PR_GET_SECUREBITS(0x1b) 16:19:51 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0xab05, &(0x7f0000000000)) 16:19:51 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'rfc3686(ctr-aes-aesni)\x00'}, 0x58) close(r0) r1 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x2000) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r1, 0x0) ioctl$SG_NEXT_CMD_LEN(r1, 0x5385, &(0x7f0000000000)=0x65) r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000a00)='asymmetric\x00', 0x0, &(0x7f0000000200)="3081", 0x2, r2) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) setpriority(0x5, r3, 0x40) request_key(&(0x7f0000000a00)='user\x00', &(0x7f0000000a40)={'syz', 0x1}, &(0x7f0000000a80)='hwsim0\x00', r2) keyctl$get_keyring_id(0x0, r2, 0x152) 16:19:51 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x227b, &(0x7f0000000000)) 16:19:51 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0xc0189436, 0x0) 16:19:51 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000000)="c5", 0x1}], 0x2) 16:19:51 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) 16:19:51 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x400454ca, &(0x7f0000000000)) 16:19:51 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000000)="c5", 0x1}], 0x2) 16:19:51 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x40049409, &(0x7f0000000000)) 16:19:51 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0xc020660b, 0x0) 16:19:51 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f5d", 0xd}], 0x1) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000180)={0x0, {{0xa, 0x4e21, 0x8, @empty, 0xb95e}}}, 0x88) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x715f503c38d868b2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r1, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x28, 0x6e, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000088}, 0x8004) 16:19:51 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x227b, &(0x7f0000000000)) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x101000, 0x0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f00000001c0)={&(0x7f00000000c0), &(0x7f0000000100)=""/169, 0xa9}) flock(r0, 0x6) 16:19:51 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x40186366, &(0x7f0000000000)) 16:19:52 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) msync(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2) ioctl$SG_NEXT_CMD_LEN(r0, 0x5385, &(0x7f0000000000)) 16:19:52 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000000)="c5", 0x1}], 0x2) 16:19:52 executing program 1: kexec_load(0x8001, 0x8, &(0x7f0000000580)=[{&(0x7f0000000000)="84747757cf53ee90afb8122c23f0c6ceeb65cc4eedd5c1fac51e457119cb862456", 0x21, 0x8001, 0x914a}, {&(0x7f0000000040)="020c1c473379f6d917f6c0c7fcd61668d078b8c8ea6bf6272fd3491e143f05a481f7623381ada867b8e9fb56b224515a7c0c4cfe979c6665b9959bb7dd7edb66ccf68a5bf7d1e829336591191d3b18bc955878a79e51e393299a471bc1503a7c1c4a", 0x62, 0x822}, {&(0x7f00000000c0)="66972e0d5aa808e3a06afcc4ccc714ce81f6648082fd5c15f279bf9523254b5d096e11525c503e273737f2206190ee3e22e7ff53e1b264534b355a61bdd7ac14c54afa0d65f08a412ab31490f0fa1431b9e62b7359c0851da3622cdb189ab7e91315680fcd81da0f70b2abdc374f26ebea151b71d6f09c5c40d845fb490afdcb83b29a08414b3158bf26363617322f7581516bf32dc4a1293bb10b4dbb547205f47c5e34f0880ed54db853bfcf406fe7562ab3611e2f9f566321ad16774cc60457ee74f77571cbb84ac66b5965c3d953", 0xd0, 0x4, 0xc4}, {&(0x7f00000001c0)="f59b50ba47c5ccb9a23cbee82a46c8a26edc57c6b7b7498e163ecadf4885538fa9514a733bfb766fbcc371031c18774b6435830bd41b2d3d437eb0143f3ad41287a559ba96a409cb02eef61efdd93f0b7665512713856bc22cc7900757e6420c1d3ddad9a9332b37443c3fa06f845f076de27a8e3b95536e0176f268786a4c9d34908fcdf09505add074b4f92e79a8b2519c34b09d0ac520d8fb4c86aa0dc57acaaaf5d19b7857259525d455913b2fb71ef43c2ff13b0a747611ace9a2bf97c77b3a384abce4bcd6ce706e3eb6eafdd49bfd555bd661cf5607b131bfeb754444b7c6b7a9", 0xe4, 0x81, 0x5}, {&(0x7f00000002c0)="15f22daf6ebc94b73cd2164d8faff9ba95f7217b35bbaf2c", 0x18, 0x4, 0x401}, {&(0x7f0000000300)="bba6d098fc86e4005c3172e69420b023ae71bdea87e8f3888bf711a0b37ef4e8a4dd27a5bec8b64169d2c7708282a3708192f6d91968f1bd163adf7e30b5b1678d32ff6780103c39f1fca1ceddf8c56569feebc70fabc8a821bf28670a42dc0f6e6068dc8a3199371707d8d379a89b953d5c52a2e1ef2d4532606bb586f34e739362c3c3ee748f529ff40f5b0b4602fa5b034710323fa70b9eb3b9ec91f4247c2abc78e15b2eb74f13dccce43f373c562c95b5a0c4c07993b9abf9342063be15", 0xc0, 0x905a}, {&(0x7f00000003c0)="a4e2a9667864dc9c22c46b2fa1dcd21bee33ad3281a4bf4f3186ffa79cc78c36f1b9eeec7763094d64c2df6f3be76314a8f95dd96758e17e5daddd67db7d16ccde48c97b1e515046b441cb19c8104781ce524dc7200c35ff6ad452fb698f28756a5a6f96726c29211b04", 0x6a, 0x5, 0x7}, {&(0x7f0000000440)="768a4cf0a20bd62f38787b7e202f6ebe4fab56", 0x13, 0x1, 0xfffffffffffffffc}], 0xa0000) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f5d", 0xd}], 0x1) 16:19:52 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0xc0481273, 0x0) 16:19:52 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x4020940d, &(0x7f0000000000)) 16:19:52 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) arch_prctl$ARCH_GET_CPUID(0x1011) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) mmap(&(0x7f0000ff5000/0x8000)=nil, 0x8000, 0x8, 0x20010, r1, 0xc5320000) ioctl$SG_NEXT_CMD_LEN(r0, 0x227b, &(0x7f0000000000)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000300)) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000080)={0x8, 0x4, 0x4, 0x800, 0x7, {0x0, 0x7530}, {0xa676cd2319266247, 0x0, 0x4, 0x8, 0x1, 0x81, "793c83f4"}, 0x6, 0x1, @fd, 0x7fffffff, 0x0, r2}) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000100)={0x0, 0xfb7b, 0x20, 0x200}, &(0x7f0000000140)=0x18) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f00000001c0)={r4, 0x9}, &(0x7f0000000200)=0x8) 16:19:52 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000008c0)}, {&(0x7f0000000000)="c5", 0x1}], 0x2) 16:19:52 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x6, [@func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0x3}, {0x3, 0x4}, {0xd}, {0x0, 0x4}, {0xa, 0x3}, {0x6, 0x5}]}]}, {0x0, [0x77b3db9dc5bdca44, 0x0, 0x0, 0x61]}}, &(0x7f00000001c0)=""/242, 0x5a, 0xf2, 0x1}, 0x20) r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r2}, 0x14) getsockname$packet(r0, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000300)={0xffff75f3}, 0x4) r3 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r3, 0x1267, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SELLOADLUT(r4, 0x541c, &(0x7f0000000000)={0xb, 0x0, 0x4000000000000}) r5 = syz_open_pts(r4, 0x82) ioctl$GIO_UNISCRNMAP(r5, 0x4b69, &(0x7f0000000080)=""/188) 16:19:52 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x800454d2, &(0x7f0000000000)) 16:19:52 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f5d", 0xd}], 0x1) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000180)=ANY=[@ANYBLOB="010100002f823d04ad210aff2fcad2a3cd2e1cb6b4c88b91946e94a5977b3e71db8a48765b1f410f9e4b1b766a147c3b196d1bfacfe0cbce23522a212a0e3b087bec2dffefbde4bf00", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000040)={r3}, &(0x7f0000000140)=0x8) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/autofs\x00', 0x4000, 0x0) ioctl$KVM_GET_MP_STATE(r4, 0x8004ae98, &(0x7f0000000240)) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000000)={r3, 0xeb, "ca4f5803e6873ffe65128ac98d11e7d575f8e8d460b117c30f0a47059bc1aecb0daaf70143713465a2bb34db685b38a0d960973a8b61cba0cd2f3b127f53e0ec704f3985f1dfd87a51f84f396bc7950a5a72b03910fb40a74ef5245a5159cc4adc64a5011b402195c7fb5948d4a1ae2b2f12bd2bd50c440f9c0081c284097e2eff688f7638a185ebf3e557c26f61ea25edf6eec633f35e40d0d808204ea3eeefc706423ccb1404ec41bfdc819046fd47e6061c1e273a5b15e5a631362e7efdcd1e57cf573b261743fcdfac879a3b93bea6d094ad4df377a7a8d2b375132869f871271b37d63e65c505c805"}, &(0x7f0000000100)=0xf3) 16:19:52 executing program 5: mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, 0xffffffffffffffff, 0x0) ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x5385, &(0x7f0000000000)) 16:19:52 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsu\x00', 0x200000, 0x0) recvmsg(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/93, 0x5d}, {&(0x7f0000001140)=""/205, 0xcd}, {&(0x7f0000001240)=""/171, 0xab}], 0x4, &(0x7f0000001340)=""/142, 0x8e}, 0x40) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r1, 0x0) ioctl$SG_NEXT_CMD_LEN(r1, 0x227b, &(0x7f0000000000)) 16:19:52 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x80086301, &(0x7f0000000000)) 16:19:52 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000008c0)}, {&(0x7f0000000000)="c5", 0x1}], 0x2) 16:19:52 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8180) ioctl$SG_NEXT_CMD_LEN(r0, 0x1267, 0x0) 16:19:52 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x1000) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000000c0)={0x41, 0x2, 0x2}, 0x10) ioctl$SG_NEXT_CMD_LEN(r0, 0x5385, &(0x7f0000000000)) 16:19:52 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) lseek(r0, 0x3, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x120811, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x227b, &(0x7f0000000000)) 16:19:52 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0xc0045878, &(0x7f0000000000)) 16:19:53 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000008c0)}, {&(0x7f0000000000)="c5", 0x1}], 0x2) 16:19:53 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x8) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0xe3, 0x10, 0x0, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f00000000c0)=[r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r4, r0], 0x7) ioctl$SG_NEXT_CMD_LEN(r0, 0x5385, &(0x7f0000000000)) 16:19:53 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0xc0045878, &(0x7f0000000000)) 16:19:53 executing program 1: r0 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) getsockopt$inet6_int(r0, 0x29, 0x1, &(0x7f0000000000), 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'veth0\x00', &(0x7f0000000100)=@ethtool_test={0x1a, 0x21f, 0x0, 0x1, [0x0]}}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000280)={{{@in6=@empty, @in6=@local}}, {{@in=@broadcast}, 0x0, @in=@remote}}, &(0x7f0000000080)=0x112) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000280)={{{@in6=@empty, @in6=@local}}, {{@in=@broadcast}, 0x0, @in=@remote}}, &(0x7f0000000080)=0xe8) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'veth1\x00'}) open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = dup3(r5, r6, 0x0) ioctl$KVM_SET_CPUID(r7, 0x4138ae84, &(0x7f0000000200)=ANY=[]) r9 = dup2(r8, 0xffffffffffffffff) mmap$xdp(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x0, 0x40010, r9, 0x180000000) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r9, 0xc0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x7, 0x3}, 0x0, 0x0, 0x0, &(0x7f0000000580)=0x7, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0xffffffffffff0000}}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) 16:19:53 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000300)) fsetxattr$security_capability(r2, &(0x7f0000000080)='security.capability\x00', &(0x7f00000000c0)=@v2={0x2000000, [{0x4, 0xffff}, {0x10001, 0x7ff}]}, 0x14, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x10, r1, 0x3000) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$SG_NEXT_CMD_LEN(r0, 0x5385, &(0x7f0000000000)) 16:19:53 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000008c0)="7c8d800ed9982be4", 0x8}, {&(0x7f0000000000)="c5", 0x1}], 0x2) 16:19:53 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0xc0189436, &(0x7f0000000000)) [ 559.686191][ T27] audit: type=1804 audit(1578759593.686:50): pid=17720 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir272933446/syzkaller.5OPVhs/329/bus" dev="sda1" ino=17253 res=1 16:19:53 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000008c0)="7c8d800ed9982be4", 0x8}, {&(0x7f0000000000)="c5", 0x1}], 0x2) 16:19:53 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x1000000000000000, 0x200000) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x20011, r0, 0x0) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000001100)='/dev/audio1\x00', 0x80402, 0x0) ioctl$SNDCTL_DSP_GETBLKSIZE(r1, 0xc0045004, &(0x7f0000001140)) ioctl$SG_NEXT_CMD_LEN(r0, 0x5385, &(0x7f0000000000)) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x4, 0x0) 16:19:53 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0xc020660b, &(0x7f0000000000)) 16:19:54 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0xc0481273, &(0x7f0000000000)) 16:19:54 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000008c0)="7c8d800ed9982be4", 0x8}, {&(0x7f0000000000)="c5", 0x1}], 0x2) 16:19:54 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x1267, &(0x7f0000000000)) 16:19:54 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) r3 = fcntl$dupfd(r2, 0x203, r1) syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x24, 0x1134c0) socketpair(0x3, 0x4, 0x6, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f0000000300), &(0x7f00000002c0)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$PPPIOCSNPMODE(r3, 0x4008744b, &(0x7f0000000080)={0x8057}) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x5385, &(0x7f0000000000)) 16:19:54 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f", 0xc}, {&(0x7f0000000000)="c5", 0x1}], 0x2) 16:19:54 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x1267, &(0x7f0000000000)=0x2) 16:19:54 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f", 0xc}, {&(0x7f0000000000)="c5", 0x1}], 0x2) 16:19:54 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$packet(0x11, 0x2, 0x300) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000040)="4bc47bdcd250bcc7740981b22faca94efe5aab17929fdbade5b83203ef97ff7210ae", 0x22}, {&(0x7f00000000c0)="ab9f1f65142446f9172aba6099ecbcc0b2ca23cf0ebbed42dbf2fafc4fcf4b3f13443fdf906d7139c1937030d2fd0d8b7278fc5a62caa3a7e3e6", 0x3a}, {&(0x7f0000000100)="ede3e5bf6cd8c9148075bfc16e0b435c56569660ee194c4c40ae0c1e10f90d9f2ea826d228415502ec1ae89dbf354b6d06f9e4d778d27987113d42b5d80e45d66e76af9a0b0a880c2d7e9ebcb4c8e1466f83bdc0a492909b7285efe6bde18a7cdcade3c8166467238c875f29de55e795a88ae4a56373b4b7a5911f4d129968c6d37c2c6cb5e5bb90688ec11884cc8b2526d5cc3628b70351faacf193d6f4f7a43e69a27177ca45b97bfbb452324e035ba51cd285203d3f026f2e65f57512cd607d651a15c55ed218d47bbf09aed9c58b30fcf417f329694117a76ea99adad32105da11ce1f596fb1db29a627a3b112", 0xef}, {&(0x7f0000000200)="0000571531ec3f9dd1e98a66e2ba03e93c30e7eb6ff076c8887089825258ce240569da803496328f75879b03a0727d1647da2046998653228b82d1b13a5a44b2117badd325cd925df5df651d252c835f69d8e4f040fbc1a4854f7df4762f444a8ad97d", 0x63}, {&(0x7f00000002c0)="4306b6acf1c4dee699d3fd42675d72c0cae77b424a06e919e836e1b919e3e466bb4bb5cf9c2f48bbd598acd3e3714120", 0x30}, {&(0x7f0000000340)="48ad22634dfee650a793a85b58d4ee4a872b42fdc7d0f97af8cb3c56699c76339794037744b0cdf2c7a0ecf3c435054b03", 0x31}, {&(0x7f0000000480)}, {&(0x7f00000003c0)="92d3788cf8f97c92cf8f6c122870755a070a31f1b75d65f39142aef1a1eeb40dbcd91aee773656bed554251f661eebe9a9672497e1", 0xffffffffffffff17}], 0x8) ioctl$TCGETX(r0, 0x5432, &(0x7f0000000000)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r3, 0x800000c004500a, &(0x7f0000000300)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r4, 0x800000c004500a, &(0x7f0000000300)) ioctl$int_in(r4, 0x5452, &(0x7f0000000080)=0xfffe) dup2(0xffffffffffffffff, r2) 16:19:54 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f", 0xc}, {&(0x7f0000000000)="c5", 0x1}], 0x2) 16:19:54 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x1267, &(0x7f0000000000)=0x3) 16:19:54 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b", 0xe}, {&(0x7f0000000000)="c5", 0x1}], 0x2) 16:19:54 executing program 5 (fault-call:2 fault-nth:0): r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2275, &(0x7f0000000000)) 16:19:54 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x1267, &(0x7f0000000000)=0x4) [ 560.913358][T17778] FAULT_INJECTION: forcing a failure. [ 560.913358][T17778] name failslab, interval 1, probability 0, space 0, times 0 [ 560.974319][T17778] CPU: 0 PID: 17778 Comm: syz-executor.5 Not tainted 5.5.0-rc5-syzkaller #0 [ 560.983052][T17778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 560.993147][T17778] Call Trace: [ 560.996452][T17778] dump_stack+0x197/0x210 [ 561.000812][T17778] should_fail.cold+0xa/0x15 [ 561.005427][T17778] ? fault_create_debugfs_attr+0x180/0x180 [ 561.011265][T17778] ? ___might_sleep+0x163/0x2c0 [ 561.016138][T17778] __should_failslab+0x121/0x190 [ 561.021094][T17778] should_failslab+0x9/0x14 [ 561.025648][T17778] __kmalloc+0x2e0/0x770 [ 561.029906][T17778] ? mark_held_locks+0xf0/0xf0 [ 561.034679][T17778] ? mark_lock+0xc2/0x1220 [ 561.039111][T17778] ? _parse_integer+0x190/0x190 [ 561.043982][T17778] ? tomoyo_realpath_from_path+0xc5/0x660 [ 561.049723][T17778] tomoyo_realpath_from_path+0xc5/0x660 [ 561.055285][T17778] ? tomoyo_path_number_perm+0x193/0x520 [ 561.060939][T17778] tomoyo_path_number_perm+0x1dd/0x520 [ 561.066415][T17778] ? tomoyo_path_number_perm+0x193/0x520 [ 561.072077][T17778] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 561.077898][T17778] ? __f_unlock_pos+0x19/0x20 [ 561.082624][T17778] ? __fget+0x37f/0x550 [ 561.086800][T17778] ? ksys_dup3+0x3e0/0x3e0 [ 561.091231][T17778] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 561.097503][T17778] ? fput_many+0x12c/0x1a0 [ 561.101967][T17778] tomoyo_file_ioctl+0x23/0x30 [ 561.106748][T17778] security_file_ioctl+0x77/0xc0 [ 561.111707][T17778] ksys_ioctl+0x57/0xd0 [ 561.115983][T17778] __x64_sys_ioctl+0x73/0xb0 [ 561.120603][T17778] do_syscall_64+0xfa/0x790 [ 561.125127][T17778] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 561.131028][T17778] RIP: 0033:0x45af49 [ 561.134935][T17778] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 561.154549][T17778] RSP: 002b:00007f3395cc5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 561.163239][T17778] RAX: ffffffffffffffda RBX: 00007f3395cc5c90 RCX: 000000000045af49 [ 561.171225][T17778] RDX: 0000000020000000 RSI: 0000000000002275 RDI: 0000000000000003 [ 561.179211][T17778] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 561.187193][T17778] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3395cc66d4 [ 561.195180][T17778] R13: 00000000004c5835 R14: 00000000004dc4f8 R15: 0000000000000004 16:19:55 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b", 0xe}, {&(0x7f0000000000)="c5", 0x1}], 0x2) [ 561.247397][T17778] ERROR: Out of memory at tomoyo_realpath_from_path. 16:19:55 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x1267, &(0x7f0000000000)=0x5) 16:19:55 executing program 5 (fault-call:2 fault-nth:1): r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2275, &(0x7f0000000000)) 16:19:55 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r1, &(0x7f0000000240)={0x11, 0x0, r3}, 0x14) getsockname$packet(r1, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r4, 0x800000c004500a, &(0x7f0000000300)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000440)={0x6, 0x2, 0x1, r6}) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r8, 0x800000c004500a, &(0x7f0000000300)) r9 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r9, 0x800000c004500a, &(0x7f0000000300)) r10 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r10, 0x800000c004500a, &(0x7f0000000300)) r11 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r11, 0x800000c004500a, &(0x7f0000000300)) r12 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SELLOADLUT(r12, 0x541c, &(0x7f0000000000)={0xb}) ioctl$TIOCGPGRP(r12, 0x540f, &(0x7f0000000480)=0x0) r14 = getuid() setresuid(0xee01, r14, 0x0) r15 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/icmp6\x00') fstat(r15, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r17 = socket$vsock_stream(0x28, 0x1, 0x0) fstat(r17, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r16, r18) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@ipv4, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@loopback}}, &(0x7f00000005c0)=0xe8) r20 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/icmp6\x00') fstat(r20, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r22 = socket$vsock_stream(0x28, 0x1, 0x0) fstat(r22, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r21, r24) getgroups(0x8, &(0x7f0000000100)=[0x0, 0xffffffffffffffff, 0xee01, 0xee01, 0x0, r24, 0xee00, 0x0]) syz_open_procfs(0x0, 0x0) r27 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/sequencer\x00', 0x100, 0x0) fstat(r27, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r28, 0x0) setresgid(0xee00, r25, r28) open$dir(&(0x7f0000000600)='./file0\x00', 0x800, 0x20) r29 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r29, 0x800000c004500a, &(0x7f0000000300)) r30 = socket(0x200000000000011, 0x3, 0x0) r31 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r31, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r30, &(0x7f0000000240)={0x11, 0x0, r32}, 0x14) r33 = socket(0x200000000000011, 0x3, 0x0) r34 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r34, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r33, &(0x7f0000000240)={0x11, 0x0, r35}, 0x14) getsockname$packet(r33, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) r36 = socket(0x200000000000011, 0x3, 0x0) r37 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r37, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r36, &(0x7f0000000240)={0x11, 0x0, r38}, 0x14) getsockname$packet(r36, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) getsockname$packet(0xffffffffffffffff, &(0x7f0000000b40), &(0x7f0000000c00)=0x40c32b00) accept4$tipc(r30, &(0x7f0000000640)=@id, &(0x7f0000000680)=0x10, 0x40000) r39 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r39, 0x800000c004500a, &(0x7f0000000300)) r40 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r40, 0x800000c004500a, &(0x7f0000000300)) r41 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r41, 0x800000c004500a, &(0x7f0000000300)) getpid() r42 = socket(0x200000000000011, 0x3, 0x0) r43 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r43, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r42, &(0x7f0000000240)={0x11, 0x0, r44}, 0x14) getsockname$packet(r42, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) getsockopt$inet_IP_XFRM_POLICY(r42, 0x0, 0x11, &(0x7f00000006c0)={{{@in6, @in6=@loopback}}, {{@in=@loopback}, 0x0, @in6}}, &(0x7f00000007c0)=0xe8) stat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)) r45 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r45, 0x800000c004500a, &(0x7f0000000300)) r46 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r46, 0x800000c004500a, &(0x7f0000000300)) r47 = getpid() sched_setscheduler(r47, 0x5, &(0x7f0000000380)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000a80)={r47, 0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000a40)='{]GPL\x00', 0xffffffffffffffff}, 0x30) r49 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/nvme-fabrics\x00', 0x100, 0x0) sendmmsg$unix(r49, &(0x7f00000009c0)=[{&(0x7f0000000080)=@abs={0x0, 0x0, 0x4e20}, 0x46, &(0x7f0000000400)=[{&(0x7f0000000100)="1465ecda6df3c93667f3a28c367251fe3e5fc76c8bc92414d944f9af6d59633133c3fe41eb367a64efefbe7c2f3c4d995eca8268432013b9ca56bdc4c4e6ac90318c08b6f7d32ac288346cc06fe9dda65024a37709bb8863b387a21f22014d1e727da340f0de2c513e9eed5b5ed5d17a31bde15a3d22e42bcc31b9004a1ba94a1506b0a263ee46db22ae57605ef8ff79a69c1c021975942aefc213b16c74b9f1953c458123db04942726a6469911af855048e2b52b8f738d80f79c19fcb3edea686bcbddce6bd0afe4f620d36b88fd90bcdb4794e0455c9c6559ae", 0xdb}, {&(0x7f0000000200)="5282ec8f60b38982c2415a807188b716b8daa0004425353f46e6cc22ddefc57628020a15f8f8937f2b6c95c324975322371391b43bf120503e1f7244a5b6de75be30d03fd9af71c096c5d468231110150cb0d12f501838522973f60b232ead04f132382d7c23e1848841a920f87d181443bb21c41d6ddc7c3a82e13084a31827ce631edf180895b3e179ef2fd9d1e9dc4a5ad24586e1c3cc64ec3dd996d45209383a13e1719ec269975ae14e14d87b850183fde1be22e7ca8abdc44104a7837c9802cbf8e6c64438340be7afb8d1527d279798eef44b578d4f9f540c049d89788a7bf8ac65f8783e96fd7f4bb21b25dbf6396b9e2b0784866e", 0xf9}, {&(0x7f0000000300)="07b02517c98c56048c3a6a5b1ce3dfec6cf524f461afa1767d6564327e0ea952a048213ab6c4969739370f002dd2136faa04265a32b67c3a03224657d0f307e81e381e69b09a8dcb4685490bb4e96c102e70e1fb6b954266ce56028a447c1a475c7a19661e59638bdfeeedac766410658eabe576a2a9aa0d02a15a5094d9ce9e186b7de4ef57210d9f8a60a5b3a27683bcbb166a260cc2e54ba3d2bac7bbbee9df462b4c0d7e1ed18672173d3154dbfb56c610a0a297059649b5bed52362b09e13d8be2716320f", 0xc7}], 0x3, &(0x7f00000008c0)=[@rights={{0x20, 0x1, 0x1, [r4, r7, r8, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [r9, r0, r10, r11]}}, @cred={{0x1c, 0x1, 0x2, {r13, r14, r16}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r19, r28}}}, @cred={{0x0, 0x1, 0x2, {r48, r23, r26}}}, @rights={{0x0, 0x1, 0x1, [r36, r45, r46, r17]}}], 0xd0, 0x1}], 0x1, 0x2346199a36a1bf59) ioctl$SG_NEXT_CMD_LEN(r0, 0x227b, &(0x7f0000000000)) [ 561.404317][T17788] FAULT_INJECTION: forcing a failure. [ 561.404317][T17788] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 561.417580][T17788] CPU: 1 PID: 17788 Comm: syz-executor.5 Not tainted 5.5.0-rc5-syzkaller #0 [ 561.426286][T17788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 561.436357][T17788] Call Trace: [ 561.439663][T17788] dump_stack+0x197/0x210 [ 561.444016][T17788] should_fail.cold+0xa/0x15 [ 561.448625][T17788] ? fault_create_debugfs_attr+0x180/0x180 [ 561.454444][T17788] ? __kasan_check_read+0x11/0x20 [ 561.459484][T17788] ? mark_lock+0xc2/0x1220 [ 561.463930][T17788] should_fail_alloc_page+0x50/0x60 [ 561.469146][T17788] __alloc_pages_nodemask+0x1a1/0x910 [ 561.474543][T17788] ? __alloc_pages_slowpath+0x2920/0x2920 [ 561.480277][T17788] ? __kasan_check_read+0x11/0x20 [ 561.485325][T17788] ? fault_create_debugfs_attr+0x180/0x180 [ 561.491155][T17788] cache_grow_begin+0x90/0xc60 [ 561.495939][T17788] ? tomoyo_realpath_from_path+0xc5/0x660 [ 561.501674][T17788] ? trace_hardirqs_off+0x62/0x240 [ 561.506800][T17788] __kmalloc+0x6b2/0x770 [ 561.511049][T17788] ? mark_held_locks+0xf0/0xf0 [ 561.515827][T17788] ? mark_lock+0xc2/0x1220 [ 561.520273][T17788] ? tomoyo_realpath_from_path+0xc5/0x660 [ 561.526007][T17788] tomoyo_realpath_from_path+0xc5/0x660 [ 561.531562][T17788] ? tomoyo_path_number_perm+0x193/0x520 [ 561.537214][T17788] tomoyo_path_number_perm+0x1dd/0x520 [ 561.542688][T17788] ? tomoyo_path_number_perm+0x193/0x520 [ 561.548340][T17788] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 561.554156][T17788] ? __f_unlock_pos+0x19/0x20 [ 561.558876][T17788] ? __fget+0x37f/0x550 [ 561.563078][T17788] ? ksys_dup3+0x3e0/0x3e0 [ 561.567517][T17788] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 561.573770][T17788] ? fput_many+0x12c/0x1a0 [ 561.578207][T17788] tomoyo_file_ioctl+0x23/0x30 [ 561.582988][T17788] security_file_ioctl+0x77/0xc0 [ 561.587948][T17788] ksys_ioctl+0x57/0xd0 [ 561.592123][T17788] __x64_sys_ioctl+0x73/0xb0 [ 561.596748][T17788] do_syscall_64+0xfa/0x790 [ 561.601264][T17788] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 561.607163][T17788] RIP: 0033:0x45af49 [ 561.611064][T17788] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 561.630677][T17788] RSP: 002b:00007f3395cc5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 561.639110][T17788] RAX: ffffffffffffffda RBX: 00007f3395cc5c90 RCX: 000000000045af49 [ 561.647099][T17788] RDX: 0000000020000000 RSI: 0000000000002275 RDI: 0000000000000003 [ 561.655083][T17788] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 561.663068][T17788] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3395cc66d4 [ 561.671048][T17788] R13: 00000000004c5835 R14: 00000000004dc4f8 R15: 0000000000000004 16:19:55 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b", 0xe}, {&(0x7f0000000000)="c5", 0x1}], 0x2) 16:19:55 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x1267, &(0x7f0000000000)=0x6) 16:19:55 executing program 0 (fault-call:4 fault-nth:0): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}, {&(0x7f0000000000)="c5", 0x1}], 0x2) 16:19:55 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x4001, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1080480}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3], 0x2}, 0x1, 0x0, 0x0, 0x814}, 0x10) sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x12000024}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r3, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x6}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2c}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, 'ppp1(\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x3b}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x50}, 0x4000) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f5d", 0xd}], 0x1) times(&(0x7f0000000000)) 16:19:56 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x1267, &(0x7f0000000000)=0x7) 16:19:56 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x227b, &(0x7f0000000000)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VFIO_GET_API_VERSION(r2, 0x3b64) 16:19:56 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f679b64", 0xf}, {&(0x7f0000000000)="c5", 0x1}], 0x2) 16:19:56 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000008c0)="088d800ed9982be49b0d317f679b64", 0xf}, {&(0x7f0000000000)="c5", 0x1}], 0x2) 16:19:56 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x1267, &(0x7f0000000000)=0x8) 16:19:56 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) r1 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, r1) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x40000, 0x0) ioctl$SNDRV_PCM_IOCTL_DRAIN(r2, 0x4144, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x227b, &(0x7f0000000000)) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000540)='/dev/full\x00', 0x0, 0x0) r4 = socket$inet6(0xa, 0x400000000001, 0x0) close(r4) r5 = open(&(0x7f00000002c0)='./bus\x00', 0x143042, 0x0) ftruncate(r5, 0x2008002) sendfile(r4, r5, 0x0, 0x200fff) ioctl$SG_GET_TIMEOUT(r5, 0x2202, 0x0) setsockopt$packet_int(r3, 0x107, 0x9, &(0x7f0000000580), 0x4) 16:19:56 executing program 5 (fault-call:2 fault-nth:2): r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2275, &(0x7f0000000000)) 16:19:56 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f5d", 0xd}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000007000100070c10000000000000000000", 0x58}], 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r3, 0x1, 0x0, 0x0, {0x1a}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'bb\x00'}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10020060}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xc4, r3, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x8}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x40, 0x84, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x3c, 0x6, [@NL80211_BAND_60GHZ={0x8, 0x2, 0xfffffc01}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x1}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x5}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x7ff}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x9}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x7}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x1000}]}]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x58, 0x2d, [{0x5, 0x0, [0x15]}, {0xd, 0x0, [0x13, 0x6, 0x1c, 0x8, 0x13, 0x12, 0xa, 0xf, 0x16]}, {0x8, 0x0, [0x3, 0x19, 0xd, 0x12]}, {0xc, 0x0, [0x10, 0x14, 0x1e, 0x10, 0x13, 0x4, 0x1a, 0x1]}, {0x5, 0x0, [0x1c]}, {0xc, 0x0, [0x3, 0x10, 0xd, 0xc, 0x1a, 0x2, 0x1a, 0x8]}, {0x9, 0x0, [0x17, 0x11, 0xf, 0x16, 0x5]}, {0x5, 0x0, [0x1b]}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x2}]}, 0xc4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 16:19:56 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000008c0)="098d800ed9982be49b0d317f679b64", 0xf}, {&(0x7f0000000000)="c5", 0x1}], 0x2) 16:19:56 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x227b, &(0x7f0000000000)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x50000, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f00000002c0)='./bus\x00', 0x143042, 0x0) ftruncate(r2, 0x2008002) sendfile(r1, r2, 0x0, 0x200fff) ioctl$DRM_IOCTL_AGP_INFO(r2, 0x80386433, &(0x7f0000000180)=""/4) r3 = getpgid(0xffffffffffffffff) ioprio_set$pid(0x3, r3, 0x100000001) 16:19:56 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x1267, &(0x7f0000000000)=0x300) 16:19:56 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f5d", 0xd}], 0x1) fchmod(r0, 0xd4b415a6fe4464d8) 16:19:56 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000008c0)="0a8d800ed9982be49b0d317f679b64", 0xf}, {&(0x7f0000000000)="c5", 0x1}], 0x2) 16:19:56 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x1, r1}) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x227b, &(0x7f0000000000)) 16:19:56 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x1267, &(0x7f0000000000)=0x500) 16:19:56 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2275, &(0x7f0000000000)) 16:19:57 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f5d", 0xd}], 0x1) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) r2 = dup2(r1, 0xffffffffffffffff) read$eventfd(r2, &(0x7f0000000000), 0x8) 16:19:57 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000008c0)="0d8d800ed9982be49b0d317f679b64", 0xf}, {&(0x7f0000000000)="c5", 0x1}], 0x2) 16:19:57 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r1, &(0x7f0000000240)={0x11, 0x0, r3}, 0x14) getsockname$packet(r1, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r4, 0x800000c004500a, &(0x7f0000000300)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000440)={0x6, 0x2, 0x1, r6}) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r8, 0x800000c004500a, &(0x7f0000000300)) r9 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r9, 0x800000c004500a, &(0x7f0000000300)) r10 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r10, 0x800000c004500a, &(0x7f0000000300)) r11 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r11, 0x800000c004500a, &(0x7f0000000300)) r12 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SELLOADLUT(r12, 0x541c, &(0x7f0000000000)={0xb}) ioctl$TIOCGPGRP(r12, 0x540f, &(0x7f0000000480)=0x0) r14 = getuid() setresuid(0xee01, r14, 0x0) r15 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/icmp6\x00') fstat(r15, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r17 = socket$vsock_stream(0x28, 0x1, 0x0) fstat(r17, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r16, r18) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@ipv4, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@loopback}}, &(0x7f00000005c0)=0xe8) r20 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/icmp6\x00') fstat(r20, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r22 = socket$vsock_stream(0x28, 0x1, 0x0) fstat(r22, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r21, r24) getgroups(0x8, &(0x7f0000000100)=[0x0, 0xffffffffffffffff, 0xee01, 0xee01, 0x0, r24, 0xee00, 0x0]) syz_open_procfs(0x0, 0x0) r27 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/sequencer\x00', 0x100, 0x0) fstat(r27, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r28, 0x0) setresgid(0xee00, r25, r28) open$dir(&(0x7f0000000600)='./file0\x00', 0x800, 0x20) r29 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r29, 0x800000c004500a, &(0x7f0000000300)) r30 = socket(0x200000000000011, 0x3, 0x0) r31 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r31, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r30, &(0x7f0000000240)={0x11, 0x0, r32}, 0x14) r33 = socket(0x200000000000011, 0x3, 0x0) r34 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r34, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r33, &(0x7f0000000240)={0x11, 0x0, r35}, 0x14) getsockname$packet(r33, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) r36 = socket(0x200000000000011, 0x3, 0x0) r37 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r37, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r36, &(0x7f0000000240)={0x11, 0x0, r38}, 0x14) getsockname$packet(r36, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) getsockname$packet(0xffffffffffffffff, &(0x7f0000000b40), &(0x7f0000000c00)=0x40c32b00) accept4$tipc(r30, &(0x7f0000000640)=@id, &(0x7f0000000680)=0x10, 0x40000) r39 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r39, 0x800000c004500a, &(0x7f0000000300)) r40 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r40, 0x800000c004500a, &(0x7f0000000300)) r41 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r41, 0x800000c004500a, &(0x7f0000000300)) getpid() r42 = socket(0x200000000000011, 0x3, 0x0) r43 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r43, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r42, &(0x7f0000000240)={0x11, 0x0, r44}, 0x14) getsockname$packet(r42, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) getsockopt$inet_IP_XFRM_POLICY(r42, 0x0, 0x11, &(0x7f00000006c0)={{{@in6, @in6=@loopback}}, {{@in=@loopback}, 0x0, @in6}}, &(0x7f00000007c0)=0xe8) stat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)) r45 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r45, 0x800000c004500a, &(0x7f0000000300)) r46 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r46, 0x800000c004500a, &(0x7f0000000300)) r47 = getpid() sched_setscheduler(r47, 0x5, &(0x7f0000000380)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000a80)={r47, 0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000a40)='{]GPL\x00', 0xffffffffffffffff}, 0x30) r49 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/nvme-fabrics\x00', 0x100, 0x0) sendmmsg$unix(r49, &(0x7f00000009c0)=[{&(0x7f0000000080)=@abs={0x0, 0x0, 0x4e20}, 0x46, &(0x7f0000000400)=[{&(0x7f0000000100)="1465ecda6df3c93667f3a28c367251fe3e5fc76c8bc92414d944f9af6d59633133c3fe41eb367a64efefbe7c2f3c4d995eca8268432013b9ca56bdc4c4e6ac90318c08b6f7d32ac288346cc06fe9dda65024a37709bb8863b387a21f22014d1e727da340f0de2c513e9eed5b5ed5d17a31bde15a3d22e42bcc31b9004a1ba94a1506b0a263ee46db22ae57605ef8ff79a69c1c021975942aefc213b16c74b9f1953c458123db04942726a6469911af855048e2b52b8f738d80f79c19fcb3edea686bcbddce6bd0afe4f620d36b88fd90bcdb4794e0455c9c6559ae", 0xdb}, {&(0x7f0000000200)="5282ec8f60b38982c2415a807188b716b8daa0004425353f46e6cc22ddefc57628020a15f8f8937f2b6c95c324975322371391b43bf120503e1f7244a5b6de75be30d03fd9af71c096c5d468231110150cb0d12f501838522973f60b232ead04f132382d7c23e1848841a920f87d181443bb21c41d6ddc7c3a82e13084a31827ce631edf180895b3e179ef2fd9d1e9dc4a5ad24586e1c3cc64ec3dd996d45209383a13e1719ec269975ae14e14d87b850183fde1be22e7ca8abdc44104a7837c9802cbf8e6c64438340be7afb8d1527d279798eef44b578d4f9f540c049d89788a7bf8ac65f8783e96fd7f4bb21b25dbf6396b9e2b0784866e", 0xf9}, {&(0x7f0000000300)="07b02517c98c56048c3a6a5b1ce3dfec6cf524f461afa1767d6564327e0ea952a048213ab6c4969739370f002dd2136faa04265a32b67c3a03224657d0f307e81e381e69b09a8dcb4685490bb4e96c102e70e1fb6b954266ce56028a447c1a475c7a19661e59638bdfeeedac766410658eabe576a2a9aa0d02a15a5094d9ce9e186b7de4ef57210d9f8a60a5b3a27683bcbb166a260cc2e54ba3d2bac7bbbee9df462b4c0d7e1ed18672173d3154dbfb56c610a0a297059649b5bed52362b09e13d8be2716320f", 0xc7}], 0x3, &(0x7f00000008c0)=[@rights={{0x20, 0x1, 0x1, [r4, r7, r8, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [r9, r0, r10, r11]}}, @cred={{0x1c, 0x1, 0x2, {r13, r14, r16}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r19, r28}}}, @cred={{0x0, 0x1, 0x2, {r48, r23, r26}}}, @rights={{0x0, 0x1, 0x1, [r36, r45, r46, r17]}}], 0xd0, 0x1}], 0x1, 0x2346199a36a1bf59) ioctl$SG_NEXT_CMD_LEN(r0, 0x227b, &(0x7f0000000000)) 16:19:57 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2, &(0x7f0000000000)) 16:19:57 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x1267, &(0x7f0000000000)=0x600) 16:19:57 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f5d", 0xd}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000007000100070c10000000000000000000", 0x58}], 0x1) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40001000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, [], 0x2f}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8004000}, 0x24000004) 16:19:57 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000008c0)="9b8d800ed9982be49b0d317f679b64", 0xf}, {&(0x7f0000000000)="c5", 0x1}], 0x2) 16:19:57 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x10, &(0x7f0000000000)) 16:19:57 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x1267, &(0x7f0000000000)=0x700) 16:19:57 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000008c0)="7c9b800ed9982be49b0d317f679b64", 0xf}, {&(0x7f0000000000)="c5", 0x1}], 0x2) 16:19:57 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x1267, &(0x7f0000000000)) 16:19:57 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x1267, &(0x7f0000000000)=0x4000) 16:19:57 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000008c0)="7c8d9b0ed9982be49b0d317f679b64", 0xf}, {&(0x7f0000000000)="c5", 0x1}], 0x2) 16:19:57 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x1274, &(0x7f0000000000)) 16:19:58 executing program 2 (fault-call:1 fault-nth:0): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b2a31", 0xb}], 0x1) 16:19:58 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x1267, &(0x7f0000000000)=0xff00) 16:19:58 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000140)=0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r3, 0x800000c004500a, &(0x7f0000000300)) r4 = open(&(0x7f0000000000)='./file0\x00', 0x80, 0x138) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f0000000040)={r7}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000280)={r7, 0x4}, 0x8) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/icmp6\x00') fstat(r8, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = socket$vsock_stream(0x28, 0x1, 0x0) fstat(r10, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r9, r11) getgroups(0x8, &(0x7f0000000100)=[0x0, 0xffffffffffffffff, 0xee01, 0xee01, 0x0, r11, 0xee00, 0x0]) write$FUSE_ENTRY(r4, &(0x7f00000001c0)={0x90, 0x0, 0x6, {0x5, 0x0, 0x2, 0x1ff, 0x9, 0x5, {0x4, 0x1, 0xf39, 0x4, 0x6, 0x7fff, 0x5, 0x9, 0x7, 0xffff, 0x7ff, r5, r11, 0xfc, 0x400}}}, 0x90) writev(r2, &(0x7f0000000180), 0x10000000000000e5) 16:19:58 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000008c0)="7c8d8007d9982be49b0d317f679b64", 0xf}, {&(0x7f0000000000)="c5", 0x1}], 0x2) 16:19:58 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x1275, &(0x7f0000000000)) 16:19:58 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b2a31", 0xb}], 0x1) 16:19:58 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x1267, &(0x7f0000000000)=0x1000000) 16:19:58 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000008c0)="7c8d8008d9982be49b0d317f679b64", 0xf}, {&(0x7f0000000000)="c5", 0x1}], 0x2) 16:19:58 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x1276, &(0x7f0000000000)) 16:19:58 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="088d800ed9982be49b2a31", 0xb}], 0x1) 16:19:58 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x1267, &(0x7f0000000000)=0x2000000) 16:19:58 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000008c0)="7c8d8009d9982be49b0d317f679b64", 0xf}, {&(0x7f0000000000)="c5", 0x1}], 0x2) 16:19:58 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="098d800ed9982be49b2a31", 0xb}], 0x1) 16:19:58 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2201, &(0x7f0000000000)) 16:19:59 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f5d", 0xd}], 0x1) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f00000002c0)='./bus\x00', 0x143042, 0x0) ftruncate(r2, 0x2008002) sendfile(r1, r2, 0x0, 0x200fff) openat$cgroup_ro(r2, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x5, 0x1000) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x303200, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SELLOADLUT(r3, 0x541c, &(0x7f0000000000)={0xb}) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000100)={0x95, 0x70, 0x8}) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000140)) 16:19:59 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x1267, &(0x7f0000000000)=0x3000000) 16:19:59 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="0a8d800ed9982be49b2a31", 0xb}], 0x1) 16:19:59 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2202, &(0x7f0000000000)) 16:19:59 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x7, 0x100) ioctl$SG_NEXT_CMD_LEN(r0, 0x1267, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f00000000c0)={0x3f, {{0x2, 0x4e21, @loopback}}}, 0x88) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000007000100070c10000000000000000000", 0x58}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000007000100070c10000000000000000000", 0x58}], 0x1) getsockopt$bt_hci(r3, 0x0, 0x3, &(0x7f00000003c0)=""/191, &(0x7f0000000480)=0xbf) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)={0xffffffffffffffff}) r5 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x800) ioctl$TCSETXW(r5, 0x5435, &(0x7f00000002c0)={0x3c, 0x7, [0xf4, 0x0, 0x3, 0xc7, 0x5], 0x7}) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000240)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_REMOVE(r4, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x44, r6, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x4}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x722335f8e4996199}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NLBL_CALIPSO_C_ADD(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x3c, r6, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x4}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x5}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4805}, 0x8000) 16:19:59 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000008c0)="7c8d800ad9982be49b0d317f679b64", 0xf}, {&(0x7f0000000000)="c5", 0x1}], 0x2) 16:19:59 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x1267, &(0x7f0000000000)=0x4000000) 16:19:59 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="0d8d800ed9982be49b2a31", 0xb}], 0x1) 16:19:59 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2203, &(0x7f0000000000)) 16:19:59 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000008c0)="7c8d800cd9982be49b0d317f679b64", 0xf}, {&(0x7f0000000000)="c5", 0x1}], 0x2) 16:19:59 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x1267, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = open(&(0x7f00000002c0)='./bus\x00', 0x143042, 0x0) ftruncate(r2, 0x2008002) sendfile(r1, r2, 0x0, 0x200fff) ioctl$SNDRV_PCM_IOCTL_RESET(r2, 0x4141, 0x0) 16:19:59 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="9b8d800ed9982be49b2a31", 0xb}], 0x1) 16:20:00 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x1267, &(0x7f0000000000)=0x5000000) 16:20:00 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x1f2bf33d708da42e, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$VT_DISALLOCATE(r0, 0x5608) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r1, &(0x7f0000000000)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f5d", 0x6}], 0x1) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) ptrace$setopts(0x4206, r2, 0x1, 0x100000) r3 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x204500) ioctl$PPPIOCGMRU(r3, 0x80047453, &(0x7f00000000c0)) 16:20:00 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000008c0)="7c8d800dd9982be49b0d317f679b64", 0xf}, {&(0x7f0000000000)="c5", 0x1}], 0x2) [ 565.965741][ T27] audit: type=1800 audit(1578759599.966:51): pid=18011 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=16486 res=0 16:20:00 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c9b800ed9982be49b2a31", 0xb}], 0x1) 16:20:00 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000300)) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r3, 0x800000c004500a, &(0x7f0000000300)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r4, 0x800000c004500a, &(0x7f0000000300)) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r5, 0x800000c004500a, &(0x7f0000000300)) write$binfmt_elf32(r1, &(0x7f00000001c0)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRES64=r1, @ANYRESOCT=r2, @ANYPTR64=&(0x7f0000001300)=ANY=[@ANYRESDEC=r4, @ANYRESOCT, @ANYBLOB="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"], @ANYRESDEC=r5, @ANYRESDEC], 0x65) ioctl$SG_NEXT_CMD_LEN(r0, 0x1267, 0x0) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x200000, 0x0) ioctl$RTC_AIE_ON(r6, 0x7001) 16:20:00 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2205, &(0x7f0000000000)) 16:20:00 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x1267, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f00000002c0)='./bus\x00', 0x143042, 0x0) ftruncate(r2, 0x2008002) sendfile(r1, r2, 0x0, 0x200fff) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) modify_ldt$write2(0x11, &(0x7f0000000000)={0x10000, 0x100000, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, 0x10) 16:20:00 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d9b0ed9982be49b2a31", 0xb}], 0x1) 16:20:00 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2270, &(0x7f0000000000)) 16:20:00 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x1267, &(0x7f0000000000)=0x6000000) 16:20:00 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000008c0)="7c8d800fd9982be49b0d317f679b64", 0xf}, {&(0x7f0000000000)="c5", 0x1}], 0x2) 16:20:00 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f5d", 0xd}], 0x1) 16:20:00 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d8007d9982be49b2a31", 0xb}], 0x1) 16:20:00 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x1267, &(0x7f0000000000)=0x7000000) 16:20:00 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2271, &(0x7f0000000000)) 16:20:00 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000008c0)="7c8d8018d9982be49b0d317f679b64", 0xf}, {&(0x7f0000000000)="c5", 0x1}], 0x2) 16:20:00 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x8, 0x3cce86f72c0c930c) ioctl$KDFONTOP_COPY(r1, 0x4b72, &(0x7f0000000080)={0x3, 0x1, 0x13, 0x1d, 0x85, &(0x7f0000000580)}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f00000002c0)='./bus\x00', 0x143042, 0x0) ftruncate(r3, 0x2008002) sendfile(r2, r3, 0x0, 0x200fff) ioctl$RNDZAPENTCNT(r3, 0x5204, &(0x7f00000000c0)=0xb8) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r4, 0x800000c004500a, &(0x7f0000000300)) writev(r4, &(0x7f0000000540)=[{&(0x7f0000000000)="00000031ecd625000080000000", 0xffffffffffffffcf}], 0x1) read(r0, &(0x7f00000001c0)=""/214, 0xd6) 16:20:00 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d8008d9982be49b2a31", 0xb}], 0x1) [ 566.887926][ T27] audit: type=1800 audit(1578759600.886:52): pid=18068 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=17293 res=0 16:20:00 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x1267, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000007000100070c10000000000000000000", 0x58}], 0x1) setsockopt$sock_timeval(r1, 0x1, 0x21, &(0x7f0000000000)={0x0, 0x7530}, 0x10) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000300)) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f00000001c0)={0x9a0000, 0x7, 0x5, r2, 0x0, &(0x7f0000000180)={0x9a0903, 0xffffffff, [], @p_u32=&(0x7f0000000100)=0x4}}) r4 = socket$inet6(0xa, 0x400000000001, 0x0) close(r4) r5 = open(&(0x7f00000002c0)='./bus\x00', 0x143042, 0x0) r6 = socket(0x200000000000011, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r6, &(0x7f0000000240)={0x11, 0x0, r8}, 0x14) getsockname$packet(r6, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) connect$rds(r6, &(0x7f0000000340)={0x2, 0x4e21, @broadcast}, 0x10) ftruncate(r5, 0x2008002) sendfile(r4, r5, 0x0, 0x200fff) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000200)={0xffffffffffffffff}, 0x111, 0x7b0152aa14eff374}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000280)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x4, @loopback, 0x1}, r9}}, 0x30) 16:20:00 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x1267, &(0x7f0000000000)=0x8000000) 16:20:00 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2272, &(0x7f0000000000)) 16:20:00 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000008c0)="7c8d801ad9982be49b0d317f679b64", 0xf}, {&(0x7f0000000000)="c5", 0x1}], 0x2) 16:20:00 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d8009d9982be49b2a31", 0xb}], 0x1) 16:20:01 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x1267, &(0x7f0000000000)=0x40000000) 16:20:01 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ad9982be49b2a31", 0xb}], 0x1) 16:20:01 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2276, &(0x7f0000000000)) 16:20:01 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000008c0)="7c8d801bd9982be49b0d317f679b64", 0xf}, {&(0x7f0000000000)="c5", 0x1}], 0x2) 16:20:01 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x1267, &(0x7f0000000000)=0xfdfdffff) 16:20:01 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f5d", 0xd}], 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) setpriority(0x1, r2, 0x800) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="97d800000000000000dd0400000004000104"], 0x18}}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc080661a, &(0x7f0000000000)={{0x2, 0x0, @descriptor="116dbf59916bce50"}}) 16:20:01 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2279, &(0x7f0000000000)) [ 567.606159][ T27] audit: type=1800 audit(1578759601.606:53): pid=18086 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=17284 res=0 16:20:01 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000008c0)="7c8d809bd9982be49b0d317f679b64", 0xf}, {&(0x7f0000000000)="c5", 0x1}], 0x2) 16:20:01 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800cd9982be49b2a31", 0xb}], 0x1) 16:20:01 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x1267, &(0x7f0000000000)=0xff000000) 16:20:01 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_pts(r0, 0x80) writev(r0, &(0x7f0000000080)=[{&(0x7f00000008c0)="7c8d800ed9982be49b0d317f5d", 0xd}, {&(0x7f0000000000)="541b9803af4eb3bf7e74b3b77d3e6354772ed9213a85e8433cfae4b6edf399c5041cb9a558a50c6dc00318fec84e7f8b087c3835628f917284f4dc868ebb461c0964540b5626f061969bec4ce21237f4248e6ffcf3a72316492630c6a2455ff2dbc4dcd4ff", 0x65}], 0x2) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) syz_open_dev$tty1(0xc, 0x4, 0x4) r2 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x4, 0x20000) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f0000000140)) r3 = open(&(0x7f00000002c0)='./bus\x00', 0x143042, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000240)) r4 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000007c0)="585ccbe4ed83b836c1a647492ada388e174bfd206895b66147b3c9e1587a050000000700000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e0000ce0637ce0000b4ec24c52b3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274e95c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f477253900000000000000005da06773ddaf4d0c0b3627c2b1bf8283a6bd4d4d55a5f3759254f6f2070e861ce6f926dfd00d8ca491", 0xe0, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000200)='user\x00', 0x0, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r6 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000a00)='asymmetric\x00', 0x0, &(0x7f0000000200)="3081", 0x2, r6) r7 = request_key(&(0x7f0000000a00)='user\x00', &(0x7f0000000a40)={'syz', 0x1}, &(0x7f0000000a80)='hwsim0\x00', r6) keyctl$dh_compute(0x17, &(0x7f0000000140)={r7, r4, r5}, 0x0, 0x0, 0x0) r8 = request_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)='/dev/vcs#\x00', r7) keyctl$setperm(0x5, r8, 0x80401) ftruncate(r3, 0x2008002) sendfile(r1, r3, 0x0, 0x200fff) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r3, 0x800455d1, &(0x7f00000000c0)) 16:20:01 executing program 3: ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x1ff) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x1267, 0x0) 16:20:01 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x227a, &(0x7f0000000000)) [ 567.805562][ T27] audit: type=1800 audit(1578759601.806:54): pid=18114 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=16510 res=0 16:20:01 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000008c0)="7c8d800e9b982be49b0d317f679b64", 0xf}, {&(0x7f0000000000)="c5", 0x1}], 0x2) 16:20:01 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x227b, &(0x7f0000000000)) 16:20:01 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x1267, &(0x7f0000000000)=0xfffffdfd) 16:20:02 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800dd9982be49b2a31", 0xb}], 0x1) 16:20:02 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x1267, 0x0) ioctl$int_in(0xffffffffffffffff, 0x800000c004500a, &(0x7f0000000300)) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="473c0cd98519ef64383450a742815c7bd3da8a88a5806ec0fa63e55f91dc3b4c58263d7cd86f49e58f2fb152e7bc337be326e4e2dd5d60e8665543bbd50d6f8dfc0f90390b1153a2b8d0bb81fa6351dfc182d7f541fe0e5a8ff4a3cdf123de66bf2a92be4f42bff0704fdd9e33c0ae253bb927efa21d597568a71dfee98367578aedaec4a01b25f427ff", 0x8a}, {&(0x7f0000000200)="985505376e4e48c3b14bf700f7144b494336220cf6c3430324ac414fe4f51f8ebeefa49de22305e9fb6f7e187777515aaa876189f31099eb4fae9620455fe052fc9fef11987f7fe4756184e2c2cefca3231e0113c19846", 0x57}, {&(0x7f0000000340)="f0f4585c6cc41d948fc93b74a69b8486703868aeeeda418f421906d1d31e13c012c0413516d0f68933c9c022fb5beef8a3ced64074c98688b1201c2d1b4cbd67a217f9271ba0898b9c82aa3b5af63401e416126b468a997a09fe12505a510681cef423b75693634d0c30e4f01d7ed759551245f43890860cf2ab6dedf51df41b4ef6b5a1cadb5171651657b5439536c8286ab0ccd10672d3edece71eeae89678c2a874b5b62181967b31f8bc12e5601d748467d82708e38206e624eb3c9e5a308735eab63344f0342022fe07c08cf7676891727e6155496178eac7", 0xdb}], 0x3, &(0x7f0000000280)=[@ip_tos_int={{0x14}}], 0x18}}, {{&(0x7f00000002c0)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000440)="b5b4f5502914eda0c8dcc9c9cb6e4d5c4182101525ca1e7f8d59e18e118d51e6dfed812b02d864d2240b6e9518855ea897", 0x31}], 0x1}}], 0x2, 0x4000000) r2 = socket(0x200000000000011, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r2, &(0x7f0000000240)={0x11, 0x0, r4}, 0x14) getsockname$packet(r2, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000100)=@gcm_256={{0x7d437da697bd23dd}, "3257039a3a7831f9", "2f5719c321fa8d9e343ad94af8cb532780388f64ceca74df3eb1c4bddf74804f", "1f3b9395", "b83648cabe9baf6e"}, 0x38) ioctl$PPPIOCCONNECT(r1, 0x4004743a, &(0x7f0000000000)=0x1) 16:20:02 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000008c0)="7c8d800ed99b2be49b0d317f679b64", 0xf}, {&(0x7f0000000000)="c5", 0x1}], 0x2) 16:20:02 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x227c, &(0x7f0000000000)) 16:20:02 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ocfs2_control\x00', 0x100, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f00000000c0)) ioctl$SG_NEXT_CMD_LEN(r0, 0x1267, &(0x7f0000000000)) 16:20:02 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d800fd9982be49b2a31", 0xb}], 0x1) 16:20:02 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000000)={{0x1, 0xb004, 0x1a, 0x93, 0x9, 0x4, 0x6, 0x90, 0x0, 0x6, 0x1, 0x7}, {0x5000, 0x8001, 0x4, 0x8, 0x20, 0x1f, 0x2, 0xf1, 0x6, 0x9, 0x9, 0x68}, {0x3000, 0x0, 0x9, 0x80, 0x81, 0x3, 0x23, 0x9, 0x1, 0x0, 0x80, 0x5}, {0xd000, 0x1, 0x10, 0x8, 0xdb, 0xfa, 0x7, 0x1, 0x21, 0xff, 0xd7, 0x10}, {0x2, 0x100000, 0x7, 0x5, 0xff, 0x5, 0x9, 0x7f, 0xf7, 0x8, 0xee, 0x7f}, {0x2000, 0x100000, 0x2c62de6a792b3cec, 0x2, 0x73, 0x40, 0x81, 0x9, 0x5, 0xff, 0x40, 0x1}, {0x4000, 0xa008, 0xf, 0x0, 0x0, 0x20, 0x81, 0x7, 0x83, 0x0, 0x64, 0x9}, {0x1, 0x1, 0xa, 0xfa, 0x0, 0x8, 0x0, 0xf7, 0x3, 0x2, 0x45, 0x5}, {0x1, 0x803}, {0x4000, 0xe}, 0x19, 0x0, 0x5000, 0x40000, 0x5, 0x2, 0x2fa6d87959d07098, [0x9, 0x2, 0x0, 0x7]}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) userfaultfd(0x400) ioctl$TIOCL_SELLOADLUT(r0, 0x541c, &(0x7f0000000000)={0xb}) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000540)={0x3, 0x0, 0x17, 0x5, 0x10, &(0x7f0000000140)}) 16:20:02 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000008c0)="7c8d800ed99808e49b0d317f679b64", 0xf}, {&(0x7f0000000000)="c5", 0x1}], 0x2) 16:20:02 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r1, 0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000080)='/dev/sg#\x00'}, 0x30) r3 = fcntl$dupfd(r0, 0x406, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$RTC_WIE_OFF(r3, 0x7010) r4 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r4, 0x1267, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x0, &(0x7f0000000000), 0x4) socket$tipc(0x1e, 0x5, 0x0) 16:20:02 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x227d, &(0x7f0000000000)) 16:20:02 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d8018d9982be49b2a31", 0xb}], 0x1) 16:20:02 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r1 = getuid() r2 = getuid() setresuid(0xee01, r2, 0x0) r3 = getuid() setresuid(0xee01, r3, 0x0) r4 = getuid() setresuid(0xee01, r4, 0x0) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000900)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@mcast1}}, &(0x7f0000000340)=0x158) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@mcast2}}, &(0x7f0000000480)=0xe8) r9 = getuid() setresuid(0xee01, r9, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0, 0x0, 0x0}, &(0x7f0000000500)=0xc) newfstatat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) lstat(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)) lstat(&(0x7f00000008c0)='./file0\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r16 = syz_open_procfs(0x0, &(0x7f00000004c0)='auxv\x00') fstat(r16, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r17, 0x0) r18 = getpid() sched_setscheduler(r18, 0x5, &(0x7f0000000380)) syz_open_procfs(r18, &(0x7f0000000140)='attr/prev\x00') setregid(r17, 0x0) r19 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r19, 0x800000c004500a, &(0x7f0000000300)) fstat(r19, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000780)='system.posix_acl_access\x00', &(0x7f0000000b80)=ANY=[@ANYBLOB="020000000100037e0000000002000400", @ANYRES32=r1, @ANYBLOB="02000200", @ANYRES32=r10, @ANYBLOB="02000100", @ANYRES32=r3, @ANYBLOB="02000000", @ANYRES32=r14, @ANYBLOB="02001a80", @ANYRES32=r5, @ANYBLOB="02000400", @ANYRES32=r6, @ANYRES32, @ANYRES32=r7, @ANYBLOB="02000300", @ANYRES32=r8, @ANYBLOB="02000200", @ANYRES32=r9, @ANYBLOB="040003000000000008000200", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB='\b\x00\b\x00', @ANYRES32=r12, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r13, @ANYBLOB="08000200", @ANYBLOB="29ce3cb952c670ab8a33cabd124e96df38470558e3b93657d5bbbb31b7509387498265a07fa9ef34edc8275ed5cf0adc22164aeb8b4d28e02224b04ea4f816f08087f1dea3f887b5b6002c06098938111ef9eea4986eb16a7aef1535c7a31bdd48b848f41c8c020e5b6e620c710281accc5b6fda87771db5d413d28c1921568827e6df248061e3b27fd352b2f25e9af60f010e260801dedcbcbc26ff3034ff305dcc50b150431dc9e83159762aa8207baa553248eeca8bc9ad832920da5df45d2a25b126f780f9b6f4da2e8bdd00e7009525c2c1191935a5f328aeecbcb12f5cfa7d5772b5496ce2c8ef71d7a2137bfc99131b4f17bb964133", @ANYBLOB="08007acd", @ANYRES32=r15, @ANYBLOB="08000500", @ANYRES32=0x0, @ANYBLOB="08000200cc9ce432824f02c62c3e05000000f6ff00001161e4922a2b47f403e1addc9b9a52fdd0a6837450680900000000", @ANYRES32=r17, @ANYBLOB="08000600", @ANYRES32=r20, @ANYBLOB="10000300000000002000050000000000"], 0x25, 0x5a82e63f73f7cb07) ioctl$SG_NEXT_CMD_LEN(r0, 0x1267, &(0x7f00000000c0)=0x4) 16:20:02 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000008c0)="7c8d800ed99809e49b0d317f679b64", 0xf}, {&(0x7f0000000000)="c5", 0x1}], 0x2) 16:20:02 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f00000008c0)="7c8d801ad9982be49b2a31", 0xb}], 0x1) [ 568.907268][T18213] ================================================================== [ 568.907437][T18213] BUG: KASAN: global-out-of-bounds in soft_cursor+0x439/0xa30 [ 568.907452][T18213] Read of size 32 at addr ffffffff88741760 by task syz-executor.1/18213 [ 568.907457][T18213] [ 568.907475][T18213] CPU: 0 PID: 18213 Comm: syz-executor.1 Not tainted 5.5.0-rc5-syzkaller #0 [ 568.907485][T18213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 568.907490][T18213] Call Trace: [ 568.907509][T18213] dump_stack+0x197/0x210 [ 568.907524][T18213] ? soft_cursor+0x439/0xa30 [ 568.907550][T18213] print_address_description.constprop.0.cold+0x5/0x30b [ 568.907563][T18213] ? soft_cursor+0x439/0xa30 [ 568.907577][T18213] ? soft_cursor+0x439/0xa30 [ 568.907593][T18213] __kasan_report.cold+0x1b/0x41 [ 568.907612][T18213] ? soft_cursor+0x439/0xa30 [ 568.907632][T18213] kasan_report+0x12/0x20 [ 568.907647][T18213] check_memory_region+0x134/0x1a0 [ 568.907663][T18213] memcpy+0x24/0x50 [ 568.907678][T18213] soft_cursor+0x439/0xa30 [ 568.907693][T18213] ? mark_lock+0xc2/0x1220 [ 568.907719][T18213] bit_cursor+0x12fc/0x1a60 [ 568.907744][T18213] ? bit_clear+0x530/0x530 [ 568.907771][T18213] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 568.907787][T18213] ? get_color+0x225/0x430 [ 568.907805][T18213] fbcon_cursor+0x487/0x660 [ 568.907819][T18213] ? __kasan_check_read+0x11/0x20 [ 568.907840][T18213] ? bit_clear+0x530/0x530 [ 568.907877][T18213] hide_cursor+0x9d/0x2b0 [ 568.907899][T18213] redraw_screen+0x60b/0x7d0 [ 568.907920][T18213] ? respond_string+0x2c0/0x2c0 [ 568.907947][T18213] fbcon_do_set_font+0x829/0x960 [ 568.907968][T18213] fbcon_copy_font+0x12c/0x190 [ 568.907983][T18213] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 568.907997][T18213] ? fbcon_do_set_font+0x960/0x960 [ 568.908012][T18213] con_font_op+0x6b2/0x1270 [ 568.908028][T18213] ? lock_downgrade+0x920/0x920 [ 568.908044][T18213] ? con_write+0xd0/0xd0 [ 568.908075][T18213] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 568.908094][T18213] ? _copy_from_user+0x12c/0x1a0 [ 568.908115][T18213] vt_ioctl+0x181a/0x26d0 [ 568.908134][T18213] ? complete_change_console+0x3a0/0x3a0 [ 568.908149][T18213] ? lock_downgrade+0x920/0x920 [ 568.908197][T18213] ? rwlock_bug.part.0+0x90/0x90 [ 568.908218][T18213] ? tomoyo_path_number_perm+0x214/0x520 [ 568.908234][T18213] ? find_held_lock+0x35/0x130 [ 568.908255][T18213] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 568.908298][T18213] ? tty_jobctrl_ioctl+0x50/0xd40 [ 568.908313][T18213] ? complete_change_console+0x3a0/0x3a0 [ 568.908354][T18213] tty_ioctl+0xa37/0x14f0 [ 568.908376][T18213] ? tty_vhangup+0x30/0x30 [ 568.908392][T18213] ? tomoyo_path_number_perm+0x454/0x520 [ 568.908415][T18213] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 568.908432][T18213] ? tomoyo_path_number_perm+0x25e/0x520 [ 568.908453][T18213] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 568.908491][T18213] ? tty_vhangup+0x30/0x30 [ 568.908510][T18213] do_vfs_ioctl+0x977/0x14e0 [ 568.908533][T18213] ? compat_ioctl_preallocate+0x220/0x220 [ 568.908549][T18213] ? __fget+0x37f/0x550 [ 568.908571][T18213] ? ksys_dup3+0x3e0/0x3e0 [ 568.908627][T18213] ? ns_to_kernel_old_timeval+0x100/0x100 [ 568.908652][T18213] ? tomoyo_file_ioctl+0x23/0x30 [ 568.908670][T18213] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 568.908687][T18213] ? security_file_ioctl+0x8d/0xc0 [ 568.908707][T18213] ksys_ioctl+0xab/0xd0 [ 568.908727][T18213] __x64_sys_ioctl+0x73/0xb0 [ 568.908748][T18213] do_syscall_64+0xfa/0x790 [ 568.908769][T18213] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 568.908781][T18213] RIP: 0033:0x45af49 [ 568.908797][T18213] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 568.908806][T18213] RSP: 002b:00007f86896b2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 568.908827][T18213] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 568.908837][T18213] RDX: 0000000020000540 RSI: 0000000000004b72 RDI: 0000000000000004 [ 568.908846][T18213] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 568.908855][T18213] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f86896b36d4 [ 568.908865][T18213] R13: 00000000004c4237 R14: 00000000004daab8 R15: 00000000ffffffff [ 568.908887][T18213] [ 568.908893][T18213] The buggy address belongs to the variable: [ 568.908915][T18213] oid_index+0x220/0xb80 [ 568.908919][T18213] [ 568.908924][T18213] Memory state around the buggy address: [ 568.908938][T18213] ffffffff88741600: 00 02 fa fa fa fa fa fa 00 01 fa fa fa fa fa fa [ 568.908950][T18213] ffffffff88741680: 00 04 fa fa fa fa fa fa 00 00 02 fa fa fa fa fa [ 568.908962][T18213] >ffffffff88741700: 00 03 fa fa fa fa fa fa 07 fa fa fa fa fa fa fa [ 568.908970][T18213] ^ [ 568.908983][T18213] ffffffff88741780: 00 01 fa fa fa fa fa fa 00 05 fa fa fa fa fa fa [ 568.908997][T18213] ffffffff88741800: 03 fa fa fa fa fa fa fa 03 fa fa fa fa fa fa fa [ 568.909002][T18213] ================================================================== [ 568.909008][T18213] Disabling lock debugging due to kernel taint [ 568.913941][T18213] Kernel panic - not syncing: panic_on_warn set ... [ 568.913961][T18213] CPU: 1 PID: 18213 Comm: syz-executor.1 Tainted: G B 5.5.0-rc5-syzkaller #0 [ 568.913974][T18213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 568.913983][T18213] Call Trace: [ 568.914002][T18213] dump_stack+0x197/0x210 [ 568.914022][T18213] panic+0x2e3/0x75c [ 568.914040][T18213] ? add_taint.cold+0x16/0x16 [ 568.914058][T18213] ? soft_cursor+0x439/0xa30 [ 568.914103][T18213] ? preempt_schedule+0x4b/0x60 [ 568.914122][T18213] ? ___preempt_schedule+0x16/0x18 [ 568.914141][T18213] ? trace_hardirqs_on+0x5e/0x240 [ 568.914158][T18213] ? soft_cursor+0x439/0xa30 [ 568.914175][T18213] end_report+0x47/0x4f [ 568.914190][T18213] ? soft_cursor+0x439/0xa30 [ 568.914205][T18213] __kasan_report.cold+0xe/0x41 [ 568.914220][T18213] ? soft_cursor+0x439/0xa30 [ 568.914235][T18213] kasan_report+0x12/0x20 [ 568.914251][T18213] check_memory_region+0x134/0x1a0 [ 568.914265][T18213] memcpy+0x24/0x50 [ 568.914281][T18213] soft_cursor+0x439/0xa30 [ 568.914295][T18213] ? mark_lock+0xc2/0x1220 [ 568.914312][T18213] bit_cursor+0x12fc/0x1a60 [ 568.914336][T18213] ? bit_clear+0x530/0x530 [ 568.914357][T18213] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 568.914373][T18213] ? get_color+0x225/0x430 [ 568.914389][T18213] fbcon_cursor+0x487/0x660 [ 568.914405][T18213] ? __kasan_check_read+0x11/0x20 [ 568.914420][T18213] ? bit_clear+0x530/0x530 [ 568.914439][T18213] hide_cursor+0x9d/0x2b0 [ 568.914457][T18213] redraw_screen+0x60b/0x7d0 [ 568.914475][T18213] ? respond_string+0x2c0/0x2c0 [ 568.914494][T18213] fbcon_do_set_font+0x829/0x960 [ 568.914513][T18213] fbcon_copy_font+0x12c/0x190 [ 568.914526][T18213] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 568.914542][T18213] ? fbcon_do_set_font+0x960/0x960 [ 568.914556][T18213] con_font_op+0x6b2/0x1270 [ 568.914571][T18213] ? lock_downgrade+0x920/0x920 [ 568.914585][T18213] ? con_write+0xd0/0xd0 [ 568.914604][T18213] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 568.914620][T18213] ? _copy_from_user+0x12c/0x1a0 [ 568.914635][T18213] vt_ioctl+0x181a/0x26d0 [ 568.914650][T18213] ? complete_change_console+0x3a0/0x3a0 [ 568.914665][T18213] ? lock_downgrade+0x920/0x920 [ 568.914681][T18213] ? rwlock_bug.part.0+0x90/0x90 [ 568.914698][T18213] ? tomoyo_path_number_perm+0x214/0x520 [ 568.914713][T18213] ? find_held_lock+0x35/0x130 [ 568.914729][T18213] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 568.914746][T18213] ? tty_jobctrl_ioctl+0x50/0xd40 [ 568.914761][T18213] ? complete_change_console+0x3a0/0x3a0 [ 568.914777][T18213] tty_ioctl+0xa37/0x14f0 [ 568.914793][T18213] ? tty_vhangup+0x30/0x30 [ 568.914809][T18213] ? tomoyo_path_number_perm+0x454/0x520 [ 568.914827][T18213] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 568.914843][T18213] ? tomoyo_path_number_perm+0x25e/0x520 [ 568.914859][T18213] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 568.914884][T18213] ? tty_vhangup+0x30/0x30 [ 568.914901][T18213] do_vfs_ioctl+0x977/0x14e0 [ 568.914917][T18213] ? compat_ioctl_preallocate+0x220/0x220 [ 568.914932][T18213] ? __fget+0x37f/0x550 [ 568.914947][T18213] ? ksys_dup3+0x3e0/0x3e0 [ 568.914964][T18213] ? ns_to_kernel_old_timeval+0x100/0x100 [ 568.914981][T18213] ? tomoyo_file_ioctl+0x23/0x30 [ 568.914998][T18213] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 568.915013][T18213] ? security_file_ioctl+0x8d/0xc0 [ 568.915028][T18213] ksys_ioctl+0xab/0xd0 [ 568.915044][T18213] __x64_sys_ioctl+0x73/0xb0 [ 568.915060][T18213] do_syscall_64+0xfa/0x790 [ 568.915078][T18213] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 568.915086][T18213] RIP: 0033:0x45af49 [ 568.915098][T18213] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 568.915105][T18213] RSP: 002b:00007f86896b2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 568.915118][T18213] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 568.915125][T18213] RDX: 0000000020000540 RSI: 0000000000004b72 RDI: 0000000000000004 [ 568.915131][T18213] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 568.915139][T18213] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f86896b36d4 [ 568.915146][T18213] R13: 00000000004c4237 R14: 00000000004daab8 R15: 00000000ffffffff [ 568.916765][T18213] Kernel Offset: disabled [ 569.828190][T18213] Rebooting in 86400 seconds..