0x0, 0x3, 0x0, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x0)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:47:26 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x1000000000000, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:47:27 executing program 5:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dd\x00\x00\x00\x00i\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
r5 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r6 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r6, 0x1000000)
sendfile(r5, r6, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(r3, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r7, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x0, 0x8, 0x3, 0xf9af, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r8, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r8, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:47:27 executing program 0:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r3, 0x1000000)
r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r5 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r5, 0x1000000)
sendfile(r4, r5, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000080)=0x1)
r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x6, 0x0, 0x3, 0x0, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:47:27 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0xfeffff00000000, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:47:27 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x100000000000000, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:47:27 executing program 1:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dd\x00\x00\x00\x00i\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
r5 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r6 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r6, 0x1000000)
sendfile(r5, r6, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(r3, &(0x7f0000000840), 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
openat$vcsu(0xffffffffffffff9c, 0x0, 0xf05fd903538a0bf7, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
r8 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r8, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:47:27 executing program 3:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
sendfile(r3, r4, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0x0, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000240)={0x7, [0x50c, 0x5, 0x1000, 0x8, 0x3, 0xf9af, 0x3]}, &(0x7f0000000280)=0x12)
ftruncate(0xffffffffffffffff, 0x1000000)
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r6, 0x2272, &(0x7f00000002c0))
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r7, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r7, 0x81785501, &(0x7f0000000000)=""/56)
r8 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r8, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:47:27 executing program 4:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r3, 0x1000000)
r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r5 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r5, 0x1000000)
sendfile(r4, r5, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x0, 0x0, 0x3, 0x0, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0x0)

20:47:27 executing program 0:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r3, 0x1000000)
r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r5 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r5, 0x1000000)
sendfile(r4, r5, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000080)=0x1)
r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x6, 0x0, 0x3, 0x0, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:47:27 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x200000000000000, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:47:27 executing program 0:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r3, 0x1000000)
r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r5 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r5, 0x1000000)
sendfile(r4, r5, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000080)=0x1)
r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x6, 0x0, 0x3, 0x0, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:47:27 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x300000000000000, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:47:27 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x400000000000000, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:47:27 executing program 5:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dd\x00\x00\x00\x00i\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
r5 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r6 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r6, 0x1000000)
sendfile(r5, r6, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(r3, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r7, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x0, 0x8, 0x3, 0xf9af, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r8, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r8, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:47:28 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x400000100000000, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:47:28 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x500000000000000, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:47:28 executing program 5:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dd\x00\x00\x00\x00i\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
r5 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r6 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r6, 0x1000000)
sendfile(r5, r6, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(r3, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r7, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x0, 0x8, 0x3, 0xf9af, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r8, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r8, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:47:28 executing program 1:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dd\x00\x00\x00\x00i\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
r5 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r6 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r6, 0x1000000)
sendfile(r5, r6, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(r3, &(0x7f0000000840), 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
openat$vcsu(0xffffffffffffff9c, 0x0, 0xf05fd903538a0bf7, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
r8 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r8, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:47:28 executing program 3:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
sendfile(r3, r4, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0x0, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000240)={0x7, [0x50c, 0x5, 0x1000, 0x8, 0x3, 0xf9af, 0x3]}, &(0x7f0000000280)=0x12)
ftruncate(0xffffffffffffffff, 0x1000000)
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r6, 0x2272, &(0x7f00000002c0))
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r7, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r7, 0x81785501, &(0x7f0000000000)=""/56)
r8 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r8, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:47:28 executing program 4:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r3, 0x1000000)
r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r5 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r5, 0x1000000)
sendfile(r4, r5, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x0, 0x0, 0x3, 0x0, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0x0)

20:47:28 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x600000000000000, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:47:28 executing program 5:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dd\x00\x00\x00\x00i\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
r5 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r6 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r6, 0x1000000)
sendfile(r5, r6, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(r3, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r7, 0x84, 0x16, &(0x7f0000000240)={0x7, [0x50c, 0x5, 0x6, 0x8, 0x3, 0xf9af, 0x3]}, &(0x7f0000000280)=0x12)
ftruncate(0xffffffffffffffff, 0x1000000)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r8, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r8, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:47:28 executing program 0:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r3, 0x1000000)
r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r5 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r5, 0x1000000)
sendfile(r4, r5, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000080)=0x1)
r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x6, 0x0, 0x3, 0x0, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:47:28 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x700000000000000, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:47:28 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x800000000000000, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:47:29 executing program 0:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r3, 0x1000000)
r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r5 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r5, 0x1000000)
sendfile(r4, r5, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000080)=0x1)
r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x6, 0x0, 0x3, 0x0, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:47:29 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x900000000000000, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:47:29 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x1000000000000000, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:47:29 executing program 0:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r3, 0x1000000)
r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r5 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r5, 0x1000000)
sendfile(r4, r5, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000080)=0x1)
r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x6, 0x0, 0x3, 0x0, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:47:29 executing program 1:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dd\x00\x00\x00\x00i\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
r5 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r6 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r6, 0x1000000)
sendfile(r5, r6, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(r3, &(0x7f0000000840), 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0x0, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
r8 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r8, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:47:29 executing program 3:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
sendfile(r3, r4, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0x0, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000240)={0x7, [0x50c, 0x5, 0x1000, 0x8, 0x3, 0xf9af, 0x3]}, &(0x7f0000000280)=0x12)
ftruncate(0xffffffffffffffff, 0x1000000)
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r6, 0x2272, &(0x7f00000002c0))
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r7, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r7, 0x81785501, &(0x7f0000000000)=""/56)
r8 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r8, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:47:29 executing program 4:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r3, 0x1000000)
r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r5 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r5, 0x1000000)
sendfile(r4, r5, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x0, 0x0, 0x3, 0x0, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0x0)

20:47:29 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x2000000000000000, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:47:29 executing program 5:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dd\x00\x00\x00\x00i\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
r5 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r6 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r6, 0x1000000)
sendfile(r5, r6, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(r3, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r7, 0x84, 0x16, &(0x7f0000000240)={0x7, [0x50c, 0x5, 0x6, 0x8, 0x3, 0xf9af, 0x3]}, &(0x7f0000000280)=0x12)
ftruncate(0xffffffffffffffff, 0x1000000)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r8, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r8, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:47:29 executing program 0:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r3, 0x1000000)
r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r5 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r5, 0x1000000)
sendfile(r4, r5, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000080)=0x1)
r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x6, 0x0, 0x3, 0x0, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:47:29 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x2010000000000000, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:47:29 executing program 5:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dd\x00\x00\x00\x00i\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
r5 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r6 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r6, 0x1000000)
sendfile(r5, r6, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(r3, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r7, 0x84, 0x16, &(0x7f0000000240)={0x7, [0x50c, 0x5, 0x6, 0x8, 0x3, 0xf9af, 0x3]}, &(0x7f0000000280)=0x12)
ftruncate(0xffffffffffffffff, 0x1000000)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r8, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r8, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:47:30 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x3f00000000000000, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:47:30 executing program 5:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dd\x00\x00\x00\x00i\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
r5 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r6 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r6, 0x1000000)
sendfile(r5, r6, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(r3, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r7, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x0, 0x6, 0x8, 0x3, 0xf9af, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r8, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r8, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:47:30 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x8cffffff00000000, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:47:30 executing program 1:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dd\x00\x00\x00\x00i\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
r5 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r6 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r6, 0x1000000)
sendfile(r5, r6, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(r3, &(0x7f0000000840), 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0x0, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
r8 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r8, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:47:30 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0xf6ffffff00000000, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:47:30 executing program 3:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
sendfile(r3, r4, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000240)={0x7, [0x50c, 0x5, 0x1000, 0x8, 0x3, 0xf9af, 0x3]}, &(0x7f0000000280)=0x12)
ftruncate(0xffffffffffffffff, 0x1000000)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r5, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r5, 0x2272, &(0x7f00000002c0))
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r6, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r6, 0x81785501, &(0x7f0000000000)=""/56)
r7 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r7, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:47:30 executing program 5:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dd\x00\x00\x00\x00i\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
r5 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r6 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r6, 0x1000000)
sendfile(r5, r6, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(r3, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r7, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x0, 0x6, 0x8, 0x3, 0xf9af, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r8, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r8, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:47:30 executing program 4:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r3, 0x1000000)
r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r5 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r5, 0x1000000)
sendfile(r4, r5, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000080)=0x1)
r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x6, 0x0, 0x3, 0x0, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:47:30 executing program 0:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r3, 0x1000000)
r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r5 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r5, 0x1000000)
sendfile(r4, r5, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000080)=0x1)
r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x6, 0x0, 0x3, 0x0, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:47:30 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0xfeffffff00000000, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:47:30 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0xff00000000000000, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:47:31 executing program 0:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r3, 0x1000000)
r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r5 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r5, 0x1000000)
sendfile(r4, r5, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000080)=0x1)
r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x6, 0x0, 0x3, 0x0, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:47:31 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0xffff000000000000, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:47:31 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0xffffff7f00000000, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:47:31 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=';p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:47:31 executing program 1:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dd\x00\x00\x00\x00i\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
r5 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r6 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r6, 0x1000000)
sendfile(r5, r6, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(r3, &(0x7f0000000840), 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0x0, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
r8 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r8, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:47:31 executing program 0:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r3, 0x1000000)
r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r5 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r5, 0x1000000)
sendfile(r4, r5, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000080)=0x1)
r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x6, 0x0, 0x3, 0x0, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ftruncate(0xffffffffffffffff, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:47:31 executing program 3:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
sendfile(r3, r4, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000240)={0x7, [0x50c, 0x5, 0x1000, 0x8, 0x3, 0xf9af, 0x3]}, &(0x7f0000000280)=0x12)
ftruncate(0xffffffffffffffff, 0x1000000)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r5, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r5, 0x2272, &(0x7f00000002c0))
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r6, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r6, 0x81785501, &(0x7f0000000000)=""/56)
r7 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r7, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:47:31 executing program 5:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dd\x00\x00\x00\x00i\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
r5 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r6 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r6, 0x1000000)
sendfile(r5, r6, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(r3, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r7, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x0, 0x6, 0x8, 0x3, 0xf9af, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r8, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r8, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:47:31 executing program 4:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r3, 0x1000000)
r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r5 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r5, 0x1000000)
sendfile(r4, r5, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000080)=0x1)
r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x6, 0x0, 0x3, 0x0, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:47:31 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='\\p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:47:32 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9/\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:47:32 executing program 5:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dd\x00\x00\x00\x00i\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
r5 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r6 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r6, 0x1000000)
sendfile(r5, r6, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(r3, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r7, 0x84, 0x16, &(0x7f0000000240)={0x7, [0x50c, 0x1000, 0x6, 0x8, 0x3, 0xf9af, 0x3]}, &(0x7f0000000280)=0x12)
ftruncate(0xffffffffffffffff, 0x1000000)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r8, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r8, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:47:32 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9\\\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:47:32 executing program 5:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dd\x00\x00\x00\x00i\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
r5 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r6 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r6, 0x1000000)
sendfile(r5, r6, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(r3, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r7, 0x84, 0x16, &(0x7f0000000240)={0x7, [0x50c, 0x1000, 0x6, 0x8, 0x3, 0xf9af, 0x3]}, &(0x7f0000000280)=0x12)
ftruncate(0xffffffffffffffff, 0x1000000)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r8, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r8, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:47:32 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x02', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:47:32 executing program 1:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dd\x00\x00\x00\x00i\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
r5 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r6 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r6, 0x1000000)
sendfile(r5, r6, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(r3, &(0x7f0000000840), 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
ftruncate(0xffffffffffffffff, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
r8 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r8, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:47:32 executing program 0:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r3, 0x1000000)
r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r5 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r5, 0x1000000)
sendfile(r4, r5, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000080)=0x1)
r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x6, 0x0, 0x3, 0x0, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ftruncate(0xffffffffffffffff, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:47:32 executing program 5:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dd\x00\x00\x00\x00i\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
r5 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r6 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r6, 0x1000000)
sendfile(r5, r6, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(r3, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r7, 0x84, 0x16, &(0x7f0000000240)={0x7, [0x50c, 0x1000, 0x6, 0x8, 0x3, 0xf9af, 0x3]}, &(0x7f0000000280)=0x12)
ftruncate(0xffffffffffffffff, 0x1000000)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r8, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r8, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:47:32 executing program 3:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
sendfile(r3, r4, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000240)={0x7, [0x50c, 0x5, 0x1000, 0x8, 0x3, 0xf9af, 0x3]}, &(0x7f0000000280)=0x12)
ftruncate(0xffffffffffffffff, 0x1000000)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r5, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r5, 0x2272, &(0x7f00000002c0))
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r6, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r6, 0x81785501, &(0x7f0000000000)=""/56)
r7 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r7, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:47:32 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x03', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:47:32 executing program 4:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r3, 0x1000000)
r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r5 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r5, 0x1000000)
sendfile(r4, r5, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000080)=0x1)
r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000240)={0x7, [0x50c, 0x1000, 0x6, 0x0, 0x3, 0x0, 0x3]}, &(0x7f0000000280)=0x12)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:47:32 executing program 0:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r3, 0x1000000)
r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r5 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r5, 0x1000000)
sendfile(r4, r5, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000080)=0x1)
r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x6, 0x0, 0x3, 0x0, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ftruncate(0xffffffffffffffff, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:47:33 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x04', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:47:33 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x05', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:47:33 executing program 0:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r3, 0x1000000)
r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r5 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r5, 0x1000000)
sendfile(r4, r5, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000080)=0x1)
r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x6, 0x0, 0x3, 0x0, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xeefffdef)

20:47:33 executing program 0:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r3, 0x1000000)
r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r5 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r5, 0x1000000)
sendfile(r4, r5, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000080)=0x1)
r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x6, 0x0, 0x3, 0x0, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xeefffdef)

20:47:33 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x06', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:47:33 executing program 1:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dd\x00\x00\x00\x00i\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
r5 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r6 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r6, 0x1000000)
sendfile(r5, r6, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(r3, &(0x7f0000000840), 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
ftruncate(0xffffffffffffffff, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
r8 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r8, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:47:33 executing program 5:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dd\x00\x00\x00\x00i\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
r5 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r6 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r6, 0x1000000)
sendfile(r5, r6, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(r3, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r7, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x0, 0x1000, 0x6, 0x8, 0x3, 0xf9af, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r8, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r8, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:47:33 executing program 3:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
sendfile(r3, r4, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r5, 0x84, 0x16, 0x0, &(0x7f0000000280))
ftruncate(0xffffffffffffffff, 0x1000000)
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r6, 0x2272, &(0x7f00000002c0))
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r7, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r7, 0x81785501, &(0x7f0000000000)=""/56)
r8 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r8, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:47:33 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\a', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:47:33 executing program 4 (fault-call:10 fault-nth:0):
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r3, 0x1000000)
r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r5 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r5, 0x1000000)
sendfile(r4, r5, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x0, 0x0, 0x3, 0x0, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:47:34 executing program 5:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dd\x00\x00\x00\x00i\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
r5 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r6 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r6, 0x1000000)
sendfile(r5, r6, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(r3, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r7, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x0, 0x1000, 0x6, 0x8, 0x3, 0xf9af, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r8, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r8, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

[  834.056557][T27165] FAULT_INJECTION: forcing a failure.
[  834.056557][T27165] name failslab, interval 1, probability 0, space 0, times 0
[  834.082285][T27165] CPU: 0 PID: 27165 Comm: syz-executor.4 Not tainted 5.5.0-rc1-syzkaller #0
[  834.091360][T27165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  834.101533][T27165] Call Trace:
[  834.104863][T27165]  dump_stack+0x11d/0x181
[  834.109375][T27165]  should_fail.cold+0xa/0x1a
[  834.114059][T27165]  __should_failslab+0xee/0x130
[  834.119133][T27165]  should_failslab+0x9/0x14
[  834.123736][T27165]  kmem_cache_alloc_trace+0x2a/0x5d0
[  834.129080][T27165]  ? __sanitizer_cov_trace_switch+0x13/0x80
[  834.135055][T27165]  ? __sanitizer_cov_trace_switch+0x49/0x80
[  834.141150][T27165]  alloc_pipe_info+0xf8/0x3b0
[  834.145854][T27165]  splice_direct_to_actor+0x4b3/0x540
[  834.151288][T27165]  ? generic_pipe_buf_nosteal+0x20/0x20
20:47:34 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\b', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

[  834.157043][T27165]  ? security_file_permission+0x88/0x280
[  834.162852][T27165]  ? rw_verify_area+0xee/0x250
[  834.167860][T27165]  do_splice_direct+0x161/0x1e0
[  834.172767][T27165]  do_sendfile+0x384/0x7f0
[  834.177221][T27165]  __x64_sys_sendfile64+0xbe/0x140
[  834.182371][T27165]  do_syscall_64+0xcc/0x3a0
[  834.187017][T27165]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  834.192956][T27165] RIP: 0033:0x45a919
[  834.196957][T27165] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  834.217016][T27165] RSP: 002b:00007f3328f5fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  834.225449][T27165] RAX: ffffffffffffffda RBX: 00007f3328f5fc90 RCX: 000000000045a919
[  834.233578][T27165] RDX: 00000000200000c0 RSI: 0000000000000008 RDI: 0000000000000007
[  834.241640][T27165] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  834.249646][T27165] R10: 00000000eefffdef R11: 0000000000000246 R12: 00007f3328f606d4
[  834.257722][T27165] R13: 00000000004c925e R14: 00000000004e0f88 R15: 0000000000000009
20:47:34 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\t', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:47:34 executing program 4 (fault-call:10 fault-nth:1):
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r3, 0x1000000)
r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r5 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r5, 0x1000000)
sendfile(r4, r5, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x0, 0x0, 0x3, 0x0, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:47:34 executing program 5:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dd\x00\x00\x00\x00i\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
r5 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r6 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r6, 0x1000000)
sendfile(r5, r6, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(r3, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r7, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x0, 0x1000, 0x6, 0x8, 0x3, 0xf9af, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r8, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r8, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:47:34 executing program 0:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r3, 0x1000000)
r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r5 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r5, 0x1000000)
sendfile(r4, r5, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000080)=0x1)
r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x6, 0x0, 0x3, 0x0, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xeefffdef)

20:47:34 executing program 1:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dd\x00\x00\x00\x00i\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
r5 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r6 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r6, 0x1000000)
sendfile(r5, r6, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(r3, &(0x7f0000000840), 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
ftruncate(0xffffffffffffffff, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
r8 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r8, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:47:34 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x10', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

[  834.701729][T27187] FAULT_INJECTION: forcing a failure.
[  834.701729][T27187] name failslab, interval 1, probability 0, space 0, times 0
20:47:34 executing program 3:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
sendfile(r3, r4, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r5, 0x84, 0x16, 0x0, &(0x7f0000000280))
ftruncate(0xffffffffffffffff, 0x1000000)
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r6, 0x2272, &(0x7f00000002c0))
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r7, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r7, 0x81785501, &(0x7f0000000000)=""/56)
r8 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r8, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

[  834.746426][T27187] CPU: 0 PID: 27187 Comm: syz-executor.4 Not tainted 5.5.0-rc1-syzkaller #0
[  834.755272][T27187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  834.765419][T27187] Call Trace:
[  834.768735][T27187]  dump_stack+0x11d/0x181
[  834.773160][T27187]  should_fail.cold+0xa/0x1a
[  834.777780][T27187]  __should_failslab+0xee/0x130
[  834.782788][T27187]  should_failslab+0x9/0x14
[  834.787318][T27187]  __kmalloc+0x53/0x690
[  834.791499][T27187]  ? __read_once_size+0x34/0xe0
[  834.796375][T27187]  ? __read_once_size+0x38/0xe0
[  834.801245][T27187]  ? alloc_pipe_info+0x20e/0x3b0
[  834.806338][T27187]  alloc_pipe_info+0x20e/0x3b0
[  834.811181][T27187]  splice_direct_to_actor+0x4b3/0x540
[  834.816636][T27187]  ? generic_pipe_buf_nosteal+0x20/0x20
[  834.822201][T27187]  ? security_file_permission+0x88/0x280
[  834.827950][T27187]  ? rw_verify_area+0xee/0x250
[  834.832795][T27187]  do_splice_direct+0x161/0x1e0
[  834.837681][T27187]  do_sendfile+0x384/0x7f0
[  834.842128][T27187]  __x64_sys_sendfile64+0xbe/0x140
[  834.847288][T27187]  do_syscall_64+0xcc/0x3a0
[  834.851830][T27187]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  834.857735][T27187] RIP: 0033:0x45a919
[  834.861775][T27187] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  834.881444][T27187] RSP: 002b:00007f3328f5fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  834.889897][T27187] RAX: ffffffffffffffda RBX: 00007f3328f5fc90 RCX: 000000000045a919
[  834.897962][T27187] RDX: 00000000200000c0 RSI: 0000000000000008 RDI: 0000000000000007
[  834.905994][T27187] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  834.913986][T27187] R10: 00000000eefffdef R11: 0000000000000246 R12: 00007f3328f606d4
[  834.922130][T27187] R13: 00000000004c925e R14: 00000000004e0f88 R15: 0000000000000009
20:47:35 executing program 0:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r3, 0x1000000)
r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r5 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r5, 0x1000000)
sendfile(r4, r5, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000080)=0x1)
r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x6, 0x0, 0x3, 0x0, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0xeefffdef)

20:47:35 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:47:35 executing program 4 (fault-call:10 fault-nth:2):
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r3, 0x1000000)
r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r5 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r5, 0x1000000)
sendfile(r4, r5, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x0, 0x0, 0x3, 0x0, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

[  835.239031][T27216] FAULT_INJECTION: forcing a failure.
[  835.239031][T27216] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  835.256064][T27216] CPU: 0 PID: 27216 Comm: syz-executor.4 Not tainted 5.5.0-rc1-syzkaller #0
[  835.264763][T27216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  835.274837][T27216] Call Trace:
[  835.278150][T27216]  dump_stack+0x11d/0x181
[  835.282505][T27216]  ? __tsan_read8+0x34/0x100
[  835.287182][T27216]  should_fail.cold+0xa/0x1a
[  835.291818][T27216]  should_fail_alloc_page+0x50/0x60
[  835.297047][T27216]  __alloc_pages_nodemask+0xd2/0x310
[  835.302541][T27216]  alloc_pages_vma+0xc1/0x3a0
[  835.307229][T27216]  shmem_alloc_page+0x67/0xf0
[  835.311998][T27216]  shmem_alloc_and_acct_page+0x125/0x450
[  835.317657][T27216]  ? process_measurement+0x149/0x1190
[  835.323111][T27216]  shmem_getpage_gfp+0x2f2/0x1390
[  835.328200][T27216]  shmem_file_read_iter+0x224/0x720
[  835.333608][T27216]  ? iov_iter_pipe+0xfa/0x120
20:47:35 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

[  835.338503][T27216]  generic_file_splice_read+0x35c/0x500
[  835.344094][T27216]  do_splice_to+0xf2/0x130
[  835.348764][T27216]  ? add_to_pipe+0x1c0/0x1c0
[  835.353372][T27216]  ? add_to_pipe+0x1c0/0x1c0
[  835.358050][T27216]  splice_direct_to_actor+0x1b6/0x540
[  835.363537][T27216]  ? generic_pipe_buf_nosteal+0x20/0x20
[  835.369319][T27216]  do_splice_direct+0x161/0x1e0
[  835.374231][T27216]  do_sendfile+0x384/0x7f0
[  835.378738][T27216]  __x64_sys_sendfile64+0xbe/0x140
[  835.383883][T27216]  do_syscall_64+0xcc/0x3a0
[  835.388601][T27216]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  835.394645][T27216] RIP: 0033:0x45a919
[  835.398584][T27216] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  835.418200][T27216] RSP: 002b:00007f3328f5fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  835.426641][T27216] RAX: ffffffffffffffda RBX: 00007f3328f5fc90 RCX: 000000000045a919
20:47:35 executing program 0:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r3, 0x1000000)
r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r5 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r5, 0x1000000)
sendfile(r4, r5, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000080)=0x1)
r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x6, 0x0, 0x3, 0x0, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0xeefffdef)

[  835.434625][T27216] RDX: 00000000200000c0 RSI: 0000000000000008 RDI: 0000000000000007
[  835.442648][T27216] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  835.450637][T27216] R10: 00000000eefffdef R11: 0000000000000246 R12: 00007f3328f606d4
[  835.458624][T27216] R13: 00000000004c925e R14: 00000000004e0f88 R15: 0000000000000009
20:47:35 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:47:35 executing program 1:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dd\x00\x00\x00\x00i\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
r5 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r6 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r6, 0x1000000)
sendfile(r5, r6, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(r3, &(0x7f0000000840), 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
r8 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r8, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:47:35 executing program 4 (fault-call:10 fault-nth:3):
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r3, 0x1000000)
r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r5 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r5, 0x1000000)
sendfile(r4, r5, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x0, 0x0, 0x3, 0x0, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:47:35 executing program 5:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dd\x00\x00\x00\x00i\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
r5 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r6 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r6, 0x1000000)
sendfile(r5, r6, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(r3, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r7, 0x84, 0x16, &(0x7f0000000240)={0x7, [0x5, 0x1000, 0x6, 0x8, 0x3, 0xf9af, 0x3]}, &(0x7f0000000280)=0x12)
ftruncate(0xffffffffffffffff, 0x1000000)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r8, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r8, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:47:35 executing program 3:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
sendfile(r3, r4, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r5, 0x84, 0x16, 0x0, &(0x7f0000000280))
ftruncate(0xffffffffffffffff, 0x1000000)
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r6, 0x2272, &(0x7f00000002c0))
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r7, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r7, 0x81785501, &(0x7f0000000000)=""/56)
r8 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r8, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

[  835.912707][T27240] FAULT_INJECTION: forcing a failure.
[  835.912707][T27240] name failslab, interval 1, probability 0, space 0, times 0
[  835.925503][T27240] CPU: 1 PID: 27240 Comm: syz-executor.4 Not tainted 5.5.0-rc1-syzkaller #0
[  835.934196][T27240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  835.944390][T27240] Call Trace:
[  835.947751][T27240]  dump_stack+0x11d/0x181
[  835.952111][T27240]  should_fail.cold+0xa/0x1a
[  835.956736][T27240]  __should_failslab+0xee/0x130
[  835.961606][T27240]  should_failslab+0x9/0x14
[  835.966242][T27240]  kmem_cache_alloc+0x29/0x5d0
[  835.971070][T27240]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  835.977319][T27240]  ? __rcu_read_unlock+0x66/0x3d0
[  835.982450][T27240]  xas_alloc+0x208/0x240
[  835.987035][T27240]  xas_create+0x44e/0x920
[  835.991653][T27240]  xas_create_range+0x129/0x300
[  835.996619][T27240]  shmem_add_to_page_cache+0x2f0/0x6b0
[  836.002107][T27240]  shmem_getpage_gfp+0x3fd/0x1390
[  836.007292][T27240]  shmem_file_read_iter+0x224/0x720
20:47:35 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

[  836.012509][T27240]  ? iov_iter_pipe+0xfa/0x120
[  836.017311][T27240]  generic_file_splice_read+0x35c/0x500
[  836.022928][T27240]  do_splice_to+0xf2/0x130
[  836.027370][T27240]  ? add_to_pipe+0x1c0/0x1c0
[  836.032041][T27240]  ? add_to_pipe+0x1c0/0x1c0
[  836.036647][T27240]  splice_direct_to_actor+0x1b6/0x540
[  836.042048][T27240]  ? generic_pipe_buf_nosteal+0x20/0x20
[  836.047621][T27240]  do_splice_direct+0x161/0x1e0
[  836.052498][T27240]  do_sendfile+0x384/0x7f0
[  836.056977][T27240]  __x64_sys_sendfile64+0xbe/0x140
[  836.062134][T27240]  do_syscall_64+0xcc/0x3a0
[  836.066671][T27240]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  836.072598][T27240] RIP: 0033:0x45a919
[  836.076532][T27240] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  836.096293][T27240] RSP: 002b:00007f3328f5fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  836.104783][T27240] RAX: ffffffffffffffda RBX: 00007f3328f5fc90 RCX: 000000000045a919
20:47:36 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

[  836.112937][T27240] RDX: 00000000200000c0 RSI: 0000000000000008 RDI: 0000000000000007
[  836.120923][T27240] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  836.128919][T27240] R10: 00000000eefffdef R11: 0000000000000246 R12: 00007f3328f606d4
[  836.137144][T27240] R13: 00000000004c925e R14: 00000000004e0f88 R15: 0000000000000009
20:47:36 executing program 5:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dd\x00\x00\x00\x00i\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
r5 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r6 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r6, 0x1000000)
sendfile(r5, r6, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(r3, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r7, 0x84, 0x16, &(0x7f0000000240)={0x7, [0x5, 0x1000, 0x6, 0x8, 0x3, 0xf9af, 0x3]}, &(0x7f0000000280)=0x12)
ftruncate(0xffffffffffffffff, 0x1000000)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r8, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r8, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:47:36 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p ', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:47:36 executing program 0:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r3, 0x1000000)
r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r5 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r5, 0x1000000)
sendfile(r4, r5, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000080)=0x1)
r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x6, 0x0, 0x3, 0x0, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0xeefffdef)

20:47:36 executing program 5:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dd\x00\x00\x00\x00i\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
r5 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r6 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r6, 0x1000000)
sendfile(r5, r6, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(r3, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r7, 0x84, 0x16, &(0x7f0000000240)={0x7, [0x5, 0x1000, 0x6, 0x8, 0x3, 0xf9af, 0x3]}, &(0x7f0000000280)=0x12)
ftruncate(0xffffffffffffffff, 0x1000000)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r8, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r8, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:47:36 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:47:36 executing program 4:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r3, 0x1000000)
r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r5 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r5, 0x1000000)
sendfile(r4, r5, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x0, 0x0, 0x3, 0x0, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:47:36 executing program 1:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dd\x00\x00\x00\x00i\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
r5 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r6 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r6, 0x1000000)
sendfile(r5, r6, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(r3, &(0x7f0000000840), 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
r8 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r8, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:47:36 executing program 5:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dd\x00\x00\x00\x00i\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
r5 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r6 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r6, 0x1000000)
sendfile(r5, r6, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(r3, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r7, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x0, 0x5, 0x1000, 0x6, 0x8, 0x3, 0xf9af, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r8, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r8, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:47:36 executing program 3:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
sendfile(r3, r4, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000240)={0x6, [0x50c, 0x5, 0x1000, 0x8, 0x3, 0xf9af]}, &(0x7f0000000280)=0x10)
ftruncate(0xffffffffffffffff, 0x1000000)
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r6, 0x2272, &(0x7f00000002c0))
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r7, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r7, 0x81785501, &(0x7f0000000000)=""/56)
r8 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r8, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:47:36 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x10', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:47:37 executing program 5:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dd\x00\x00\x00\x00i\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
r5 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r6 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r6, 0x1000000)
sendfile(r5, r6, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(r3, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r7, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x0, 0x5, 0x1000, 0x6, 0x8, 0x3, 0xf9af, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r8, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r8, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:47:37 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:47:37 executing program 0:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r3, 0x1000000)
r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r5 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r5, 0x1000000)
sendfile(r4, r5, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000080)=0x1)
r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x6, 0x0, 0x3, 0x0, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0x0)

20:47:37 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\xc0', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:47:37 executing program 0:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r3, 0x1000000)
r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r5 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r5, 0x1000000)
sendfile(r4, r5, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000080)=0x1)
r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x6, 0x0, 0x3, 0x0, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0x0)

20:47:37 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:47:37 executing program 4:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r3, 0x1000000)
r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r5 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r5, 0x1000000)
sendfile(r4, r5, &(0x7f00000000c0)=0xf18002, 0xeefffdef)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x0, 0x0, 0x3, 0x0, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:47:37 executing program 1:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dd\x00\x00\x00\x00i\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
r5 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r6 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r6, 0x1000000)
sendfile(r5, r6, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(r3, &(0x7f0000000840), 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
r8 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r8, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:47:37 executing program 3:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
sendfile(r3, r4, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000240)={0x6, [0x50c, 0x5, 0x1000, 0x8, 0x3, 0xf9af]}, &(0x7f0000000280)=0x10)
ftruncate(0xffffffffffffffff, 0x1000000)
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r6, 0x2272, &(0x7f00000002c0))
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r7, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r7, 0x81785501, &(0x7f0000000000)=""/56)
r8 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r8, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:47:38 executing program 0:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r3, 0x1000000)
r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r5 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r5, 0x1000000)
sendfile(r4, r5, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000080)=0x1)
r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x6, 0x0, 0x3, 0x0, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0x0)

20:47:38 executing program 5:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dd\x00\x00\x00\x00i\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
r5 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r6 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r6, 0x1000000)
sendfile(r5, r6, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(r3, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r7, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x0, 0x5, 0x1000, 0x6, 0x8, 0x3, 0xf9af, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r8, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r8, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:47:38 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\xff', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:47:38 executing program 5:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dd\x00\x00\x00\x00i\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
r5 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r6 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r6, 0x1000000)
sendfile(r5, r6, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(r3, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r7, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x6, 0x8, 0x3, 0xf9af, 0x3]}, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r8, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r8, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:47:38 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:47:39 executing program 1:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dd\x00\x00\x00\x00i\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
r5 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r6 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r6, 0x1000000)
sendfile(r5, r6, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(r3, &(0x7f0000000840), 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
r8 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r8, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:47:39 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x04', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:47:39 executing program 3:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
sendfile(r3, r4, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000240)={0x6, [0x50c, 0x5, 0x1000, 0x8, 0x3, 0xf9af]}, &(0x7f0000000280)=0x10)
ftruncate(0xffffffffffffffff, 0x1000000)
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r6, 0x2272, &(0x7f00000002c0))
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r7, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r7, 0x81785501, &(0x7f0000000000)=""/56)
r8 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r8, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:47:39 executing program 4:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r3, 0x1000000)
r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r5 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r5, 0x1000000)
sendfile(r4, r5, &(0x7f00000000c0)=0xf18003, 0xeefffdef)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x0, 0x0, 0x3, 0x0, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:47:39 executing program 5:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dd\x00\x00\x00\x00i\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
r5 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r6 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r6, 0x1000000)
sendfile(r5, r6, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(r3, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r7, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x6, 0x8, 0x3, 0xf9af, 0x3]}, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r8, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r8, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:47:39 executing program 0:
r0 = syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040))
r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r1, 0xc0884113, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000})

20:47:39 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:47:39 executing program 0:

20:47:39 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:47:39 executing program 0:

20:47:39 executing program 0:

20:47:40 executing program 3:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
sendfile(r3, r4, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000240)={0x7, [0x50c, 0x5, 0x1000, 0x8, 0x3, 0xf9af, 0x0]}, &(0x7f0000000280)=0x12)
ftruncate(0xffffffffffffffff, 0x1000000)
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r6, 0x2272, &(0x7f00000002c0))
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r7, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r7, 0x81785501, &(0x7f0000000000)=""/56)
r8 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r8, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:47:40 executing program 1:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dd\x00\x00\x00\x00i\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
r5 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r6 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r6, 0x1000000)
sendfile(r5, r6, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(r3, &(0x7f0000000840), 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
r8 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r8, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:47:40 executing program 0:

20:47:40 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:47:40 executing program 4:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r3, 0x1000000)
r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r5 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r5, 0x1000000)
sendfile(r4, r5, &(0x7f00000000c0)=0xf18004, 0xeefffdef)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x0, 0x0, 0x3, 0x0, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:47:40 executing program 5:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dd\x00\x00\x00\x00i\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
r5 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r6 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r6, 0x1000000)
sendfile(r5, r6, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(r3, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r7, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x6, 0x8, 0x3, 0xf9af, 0x3]}, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r8, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r8, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:47:40 executing program 0:

20:47:40 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x01', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:47:40 executing program 0:

20:47:40 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:47:40 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000001f40)={{0x84, @multicast1, 0x0, 0x1, 'lblc\x00'}, {@empty, 0x0, 0x0, 0x0, 0x0, 0xffffff00}}, 0x44)

20:47:40 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:47:40 executing program 3:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
sendfile(r3, r4, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000240)={0x7, [0x50c, 0x5, 0x1000, 0x8, 0x3, 0xf9af, 0x0]}, &(0x7f0000000280)=0x12)
ftruncate(0xffffffffffffffff, 0x1000000)
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r6, 0x2272, &(0x7f00000002c0))
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r7, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r7, 0x81785501, &(0x7f0000000000)=""/56)
r8 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r8, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:47:41 executing program 1:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dd\x00\x00\x00\x00i\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
r5 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r6 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r6, 0x1000000)
sendfile(r5, r6, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(r3, &(0x7f0000000840), 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
r8 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r8, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:47:41 executing program 0:
socket$kcm(0x2, 0x1000000000000805, 0x84)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0x2b, 0x1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0)
r1 = socket$kcm(0x2, 0x2, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161)
sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f0000000300)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000003c0), 0x0, 0x5}, 0x0)

20:47:41 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:47:41 executing program 4:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r3, 0x1000000)
r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r5 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r5, 0x1000000)
sendfile(r4, r5, &(0x7f00000000c0)=0xf18005, 0xeefffdef)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x0, 0x0, 0x3, 0x0, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:47:41 executing program 5:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dd\x00\x00\x00\x00i\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
r5 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r6 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r6, 0x1000000)
sendfile(r5, r6, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(r3, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r7, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x6, 0x8, 0x3, 0xf9af, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r8, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r8, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:47:41 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:47:41 executing program 0:
r0 = socket$inet6(0xa, 0x80003, 0x80)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071")
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x1e8, 0x0, 0x0, 0x0, 0xb8, 0xb8, 0x150, 0x150, 0x150, 0x150, 0x150, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8, 0x0, {0x6020000}}, @unspec=@CT0={0x48, 'CT\x00'}}, {{@ip={@local, @multicast1, 0x0, 0x0, '\x00', 'nr0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x248)

20:47:41 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$inet_int(r0, 0x0, 0x31, 0x0, &(0x7f0000000080))

20:47:41 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

[  841.477646][T27488] xt_NFQUEUE: number of total queues is 0
20:47:41 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
writev(r1, &(0x7f0000000200)=[{&(0x7f0000000300)='\vp', 0x2}], 0x1)

20:47:41 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:47:41 executing program 3:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
sendfile(r3, r4, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000240)={0x7, [0x50c, 0x5, 0x1000, 0x8, 0x3, 0xf9af, 0x0]}, &(0x7f0000000280)=0x12)
ftruncate(0xffffffffffffffff, 0x1000000)
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r6, 0x2272, &(0x7f00000002c0))
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r7, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r7, 0x81785501, &(0x7f0000000000)=""/56)
r8 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r8, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:47:42 executing program 1:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dd\x00\x00\x00\x00i\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
r5 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r6 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r6, 0x1000000)
sendfile(r5, r6, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(r3, &(0x7f0000000840), 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x0)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
r8 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r8, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:47:42 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:47:42 executing program 4:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r3, 0x1000000)
r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r5 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r5, 0x1000000)
sendfile(r4, r5, &(0x7f00000000c0)=0xf1800d, 0xeefffdef)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x0, 0x0, 0x3, 0x0, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:47:42 executing program 5:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dd\x00\x00\x00\x00i\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
r5 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r6 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r6, 0x1000000)
sendfile(r5, r6, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(r3, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r7, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x6, 0x8, 0x3, 0xf9af, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r8, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r8, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:47:42 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:47:42 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:47:42 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\xff', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:47:42 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:47:42 executing program 3:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
sendfile(r3, r4, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000240)={0x6, [0x50c, 0x5, 0x1000, 0x8, 0x3, 0x3]}, &(0x7f0000000280)=0x10)
ftruncate(0xffffffffffffffff, 0x1000000)
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r6, 0x2272, &(0x7f00000002c0))
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r7, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r7, 0x81785501, &(0x7f0000000000)=""/56)
r8 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r8, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:47:44 executing program 0:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
sendfile(r3, r4, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000240)={0x6, [0x50c, 0x5, 0x1000, 0x8, 0x3, 0xf9af]}, &(0x7f0000000280)=0x10)
ftruncate(0xffffffffffffffff, 0x1000000)
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r6, 0x2272, &(0x7f00000002c0))
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r7, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r7, 0x81785501, &(0x7f0000000000)=""/56)
r8 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r8, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:47:44 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\xff', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:47:44 executing program 4:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r3, 0x1000000)
r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r5 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r5, 0x1000000)
sendfile(r4, r5, &(0x7f00000000c0)=0xf1800f, 0xeefffdef)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x0, 0x0, 0x3, 0x0, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:47:44 executing program 5:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dd\x00\x00\x00\x00i\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
r5 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r6 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r6, 0x1000000)
sendfile(r5, r6, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(r3, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r7, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x6, 0x8, 0x3, 0xf9af, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r8, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r8, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:47:44 executing program 1:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dd\x00\x00\x00\x00i\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
r5 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r6 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r6, 0x1000000)
sendfile(r5, r6, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(r3, &(0x7f0000000840), 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x0)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
r8 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r8, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:47:44 executing program 3:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
sendfile(r3, r4, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000240)={0x6, [0x50c, 0x5, 0x1000, 0x8, 0x3, 0x3]}, &(0x7f0000000280)=0x10)
ftruncate(0xffffffffffffffff, 0x1000000)
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r6, 0x2272, &(0x7f00000002c0))
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r7, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r7, 0x81785501, &(0x7f0000000000)=""/56)
r8 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r8, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:47:44 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\xff', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:47:44 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:47:45 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:47:45 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:47:45 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x7f', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:47:45 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x8c', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:47:51 executing program 0:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
sendfile(r3, r4, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000240)={0x6, [0x50c, 0x5, 0x1000, 0x8, 0x3, 0xf9af]}, &(0x7f0000000280)=0x10)
ftruncate(0xffffffffffffffff, 0x1000000)
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r6, 0x2272, &(0x7f00000002c0))
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r7, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r7, 0x81785501, &(0x7f0000000000)=""/56)
r8 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r8, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:47:51 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\xf6', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:47:51 executing program 3:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
sendfile(r3, r4, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000240)={0x6, [0x50c, 0x5, 0x1000, 0x8, 0x3, 0x3]}, &(0x7f0000000280)=0x10)
ftruncate(0xffffffffffffffff, 0x1000000)
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r6, 0x2272, &(0x7f00000002c0))
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r7, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r7, 0x81785501, &(0x7f0000000000)=""/56)
r8 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r8, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:47:51 executing program 5:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dd\x00\x00\x00\x00i\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
r5 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r6 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r6, 0x1000000)
sendfile(r5, r6, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(r3, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r7, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x6, 0x8, 0x3, 0xf9af, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r8, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r8, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:47:51 executing program 4:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r3, 0x1000000)
r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r5 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r5, 0x1000000)
sendfile(r4, r5, &(0x7f00000000c0)=0xf18010, 0xeefffdef)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x0, 0x0, 0x3, 0x0, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:47:51 executing program 1:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dd\x00\x00\x00\x00i\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
r5 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r6 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r6, 0x1000000)
sendfile(r5, r6, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(r3, &(0x7f0000000840), 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x0)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
r8 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r8, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:47:51 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\xfe', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:47:51 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:47:51 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:47:51 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:47:51 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:47:51 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:47:59 executing program 1:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dd\x00\x00\x00\x00i\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
r5 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r6 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r6, 0x1000000)
sendfile(r5, r6, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(r3, &(0x7f0000000840), 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
r8 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r8, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:47:59 executing program 4:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r3, 0x1000000)
r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r5 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r5, 0x1000000)
sendfile(r4, r5, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000300)=ANY=[@ANYBLOB="f0f0a7a2586737b2b575566e149a26f3cbc5b94c272abe95eaca30ecad2ba36db80d28ee435e6ef7a70ce306015388a2c0edf5892f95b1de9fefa6026b5f56ff13353de5dfb0476a9ac7e0d9317805f62c16ec2f841cd7e749d592295958fff07af8ceb8a08b4b0209b6b706b90291a57b4e09c772af6cf4bb3697e308df9627594f03c863c1bd0d669c1aead69c99e7a375a6620500"/164], &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:47:59 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:47:59 executing program 0:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
sendfile(r3, r4, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000240)={0x6, [0x50c, 0x5, 0x1000, 0x8, 0x3, 0xf9af]}, &(0x7f0000000280)=0x10)
ftruncate(0xffffffffffffffff, 0x1000000)
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r6, 0x2272, &(0x7f00000002c0))
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r7, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r7, 0x81785501, &(0x7f0000000000)=""/56)
r8 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r8, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:47:59 executing program 3:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
sendfile(r3, r4, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000240)={0x7, [0x50c, 0x5, 0x1000, 0x8, 0x3, 0x0, 0x3]}, &(0x7f0000000280)=0x12)
ftruncate(0xffffffffffffffff, 0x1000000)
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r6, 0x2272, &(0x7f00000002c0))
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r7, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r7, 0x81785501, &(0x7f0000000000)=""/56)
r8 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r8, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:47:59 executing program 5:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dd\x00\x00\x00\x00i\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
r5 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r6 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r6, 0x1000000)
sendfile(r5, r6, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(r3, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r7, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x6, 0x8, 0x3, 0xf9af, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r8, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r8, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:47:59 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:47:59 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:47:59 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:48:00 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:48:00 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:48:00 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:48:08 executing program 3:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
sendfile(r3, r4, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000240)={0x7, [0x50c, 0x5, 0x1000, 0x8, 0x3, 0x0, 0x3]}, &(0x7f0000000280)=0x12)
ftruncate(0xffffffffffffffff, 0x1000000)
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r6, 0x2272, &(0x7f00000002c0))
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r7, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r7, 0x81785501, &(0x7f0000000000)=""/56)
r8 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r8, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:48:08 executing program 1:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dd\x00\x00\x00\x00i\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
r5 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r6 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r6, 0x1000000)
sendfile(r5, r6, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(r3, &(0x7f0000000840), 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
r8 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r8, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:48:08 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:48:08 executing program 0:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:48:08 executing program 5:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dd\x00\x00\x00\x00i\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
r5 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r6 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r6, 0x1000000)
sendfile(r5, r6, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(r3, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r7, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x6, 0x8, 0x3, 0xf9af, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r8, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r8, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:48:08 executing program 4:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r3, 0x1000000)
r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r5 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r5, 0x1000000)
sendfile(r4, r5, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x40000000000001)
r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x0, 0x0, 0x3, 0x0, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:48:08 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:48:08 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:48:08 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:48:08 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:48:08 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:48:08 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:48:09 executing program 3:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
sendfile(r3, r4, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000240)={0x7, [0x50c, 0x5, 0x1000, 0x8, 0x3, 0x0, 0x3]}, &(0x7f0000000280)=0x12)
ftruncate(0xffffffffffffffff, 0x1000000)
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r6, 0x2272, &(0x7f00000002c0))
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r7, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r7, 0x81785501, &(0x7f0000000000)=""/56)
r8 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r8, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:48:14 executing program 0 (fault-call:10 fault-nth:0):
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r3, 0x1000000)
r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r5 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r5, 0x1000000)
sendfile(r4, r5, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000080)=0x1)
r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x6, 0x0, 0x3, 0x0, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:48:14 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:48:14 executing program 5:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dd\x00\x00\x00\x00i\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
r5 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r6 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r6, 0x1000000)
sendfile(r5, r6, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(r3, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r7, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x6, 0x8, 0x3, 0xf9af, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r8, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:48:14 executing program 4:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r3, 0x1000000)
r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r5 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r5, 0x1000000)
sendfile(r4, r5, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4000009, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="080000000c0505000010001d000003f7ff4761d1"], &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:48:14 executing program 1:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dd\x00\x00\x00\x00i\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
r5 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r6 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r6, 0x1000000)
sendfile(r5, r6, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(r3, &(0x7f0000000840), 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
r8 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r8, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:48:14 executing program 3:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
sendfile(r3, r4, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000240)={0x6, [0x50c, 0x5, 0x1000, 0x8, 0xf9af, 0x3]}, &(0x7f0000000280)=0x10)
ftruncate(0xffffffffffffffff, 0x1000000)
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r6, 0x2272, &(0x7f00000002c0))
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r7, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r7, 0x81785501, &(0x7f0000000000)=""/56)
r8 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r8, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:48:14 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:48:14 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:48:14 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:48:14 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x2, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:48:15 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x3, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:48:15 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x4, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:48:23 executing program 0:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r3, 0x1000000)
r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r5 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r5, 0x1000000)
sendfile(r4, r5, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000080)=0x1)
r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x6, 0x0, 0x3, 0x0, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:48:23 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x5, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:48:23 executing program 1:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dd\x00\x00\x00\x00i\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
r5 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r6 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r6, 0x1000000)
sendfile(r5, r6, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(r3, &(0x7f0000000840), 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
r8 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r8, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:48:23 executing program 5:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dd\x00\x00\x00\x00i\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
r5 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r6 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r6, 0x1000000)
sendfile(r5, r6, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(r3, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r7, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x6, 0x8, 0x3, 0xf9af, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r8, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:48:23 executing program 3:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
sendfile(r3, r4, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000240)={0x6, [0x50c, 0x5, 0x1000, 0x8, 0xf9af, 0x3]}, &(0x7f0000000280)=0x10)
ftruncate(0xffffffffffffffff, 0x1000000)
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r6, 0x2272, &(0x7f00000002c0))
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r7, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r7, 0x81785501, &(0x7f0000000000)=""/56)
r8 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r8, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:48:23 executing program 4:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
memfd_create(&(0x7f0000000040)='\x00', 0x0)
accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
ftruncate(0xffffffffffffffff, 0x1)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
sendfile(r3, r4, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="e8ffffff0b050500001000000000030000000300"], &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40086602, 0x400007)
ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000100))
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
sched_setscheduler(0x0, 0x5, &(0x7f0000000380))
r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
fcntl$setstatus(r7, 0x4, 0x3800)
getpid()
ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, 0x0)
timer_create(0x6, &(0x7f00000009c0)={0x0, 0x19, 0x2, @thr={&(0x7f0000000740)="c5d1eeb4f8b0cb2bd4ff72e1991bad73b1153fc777691ecd580ccdd913c64de9a5ee30ac2f544ebfe4196aabf1f8dcc1d83c27321df8d6c1cddc74f6a73cca9b163ffaacce0654595d30b9334f657f2d84be39f2a96274f2a9e42881aebf1e2b6d5812deaa47b376851ebbee8f014cc55677182da5057a001753d0c241e6d7ae94231a9d8b943b970fe6c8166b67ca53ba933ad5b1099fb7f57e7fb2683b67a502b21e96dd23feb6775294b02cff76fc69ae0b79263c1a95b774abc582", 0x0}}, &(0x7f0000000180))
socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={0x0, @broadcast, @dev}, &(0x7f0000000200)=0xc)
syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x75, 0x1)

20:48:24 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x6, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:48:24 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x7, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:48:24 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x8, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:48:24 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x9, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:48:24 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x10, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:48:24 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x300, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:48:32 executing program 5:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dd\x00\x00\x00\x00i\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
r5 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r6 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r6, 0x1000000)
sendfile(r5, r6, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(r3, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r7, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x6, 0x8, 0x3, 0xf9af, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r8, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:48:32 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x500, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:48:32 executing program 3:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
sendfile(r3, r4, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000240)={0x6, [0x50c, 0x5, 0x1000, 0x8, 0xf9af, 0x3]}, &(0x7f0000000280)=0x10)
ftruncate(0xffffffffffffffff, 0x1000000)
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r6, 0x2272, &(0x7f00000002c0))
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r7, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r7, 0x81785501, &(0x7f0000000000)=""/56)
r8 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r8, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:48:32 executing program 4:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/net/pfkey\x00', 0x80042, 0x0)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000380)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x2})
syz_open_dev$vbi(0x0, 0x1, 0x2)
r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x26c20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x1112a, 0x0, 0x200000000000df8, 0x4, 0x7fff, 0x6}, 0x0, 0xc, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
r5 = syz_open_dev$vbi(&(0x7f0000000480)='/dev/vbi#\x00', 0x0, 0x2)
r6 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r6, 0x1000000)
sendfile(r5, r6, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3)
ioctl$int_in(r2, 0x5421, &(0x7f0000000080)=0x1)
r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r7, 0x84, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="08000000929e78710f0c05050000100000000003"], &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r8, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r8, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r9, 0x40086602, 0x400007)
getsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000140), &(0x7f0000000300)=0x4)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r10, &(0x7f0000000000)=ANY=[], 0x32600)
write$cgroup_subtree(r10, &(0x7f0000000000)=ANY=[@ANYBLOB="0003656dff727920"], 0xda00)
ioctl$EVIOCGUNIQ(r10, 0x80404508, &(0x7f00000003c0)=""/93)

20:48:32 executing program 1:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dd\x00\x00\x00\x00i\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
r5 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r6 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r6, 0x1000000)
sendfile(r5, r6, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(r3, &(0x7f0000000840), 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
r8 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r8, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:48:32 executing program 0:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r3, 0x1000000)
r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r5 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r5, 0x1000000)
sendfile(r4, r5, &(0x7f00000000c0)=0xf18002, 0xeefffdef)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000080)=0x1)
r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x6, 0x0, 0x3, 0x0, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:48:32 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x600, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:48:32 executing program 4:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000200), 0x43400)
ioctl$KVM_S390_UCAS_UNMAP(r1, 0x4018ae51, &(0x7f0000000140)={0x4, 0x8001, 0xfffffffffffffffe})
syz_open_dev$vbi(0x0, 0x1, 0x2)
r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
r5 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r6 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r6, 0x1000000)
sendfile(r5, r6, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3)
ioctl$int_in(r2, 0x5421, &(0x7f0000000080)=0x1)
r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r7, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x0, 0x0, 0x3, 0x0, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r8, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r8, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:48:32 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x700, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:48:32 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x900, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:48:32 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x1020, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:48:33 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x2000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:48:33 executing program 5:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dd\x00\x00\x00\x00i\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
r5 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r6 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r6, 0x1000000)
sendfile(r5, r6, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(r3, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r7, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x6, 0x8, 0x3, 0xf9af, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r8, 0x40086602, 0x0)
ioctl$SG_GET_RESERVED_SIZE(r8, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:48:33 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x2010, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:48:33 executing program 3:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
sendfile(r3, r4, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000240)={0x7, [0x50c, 0x5, 0x1000, 0x8, 0x0, 0xf9af, 0x3]}, &(0x7f0000000280)=0x12)
ftruncate(0xffffffffffffffff, 0x1000000)
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r6, 0x2272, &(0x7f00000002c0))
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r7, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r7, 0x81785501, &(0x7f0000000000)=""/56)
r8 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r8, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:48:33 executing program 1:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dd\x00\x00\x00\x00i\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
r5 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r6 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r6, 0x1000000)
sendfile(r5, r6, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(r3, &(0x7f0000000840), 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
r8 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r8, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:48:33 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x3f00, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:48:39 executing program 0:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r3, 0x1000000)
r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r5 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r5, 0x1000000)
sendfile(r4, r5, &(0x7f00000000c0)=0xf18003, 0xeefffdef)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000080)=0x1)
r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x6, 0x0, 0x3, 0x0, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:48:39 executing program 4:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x1af, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r3, 0x1000000)
r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r5 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r5, 0x1000000)
sendfile(r4, r5, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x0, 0x0, 0x3, 0x0, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:48:39 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0xedc0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:48:39 executing program 5:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dd\x00\x00\x00\x00i\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
r5 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r6 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r6, 0x1000000)
sendfile(r5, r6, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(r3, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r7, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x6, 0x8, 0x3, 0xf9af, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r8, 0x40086602, 0x0)
ioctl$SG_GET_RESERVED_SIZE(r8, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:48:39 executing program 3:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
sendfile(r3, r4, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000240)={0x7, [0x50c, 0x5, 0x1000, 0x8, 0x0, 0xf9af, 0x3]}, &(0x7f0000000280)=0x12)
ftruncate(0xffffffffffffffff, 0x1000000)
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r6, 0x2272, &(0x7f00000002c0))
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r7, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r7, 0x81785501, &(0x7f0000000000)=""/56)
r8 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r8, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:48:39 executing program 1:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dd\x00\x00\x00\x00i\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
r5 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r6 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r6, 0x1000000)
sendfile(r5, r6, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(r3, &(0x7f0000000840), 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
r8 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r8, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:48:40 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0xff00, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:48:40 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0xfeffff, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:48:40 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x1000000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:48:40 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x1000004, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:48:40 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x2000000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:48:40 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x3000000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:48:49 executing program 0:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r3, 0x1000000)
r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r5 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r5, 0x1000000)
sendfile(r4, r5, &(0x7f00000000c0)=0xf18004, 0xeefffdef)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000080)=0x1)
r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x6, 0x0, 0x3, 0x0, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:48:49 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x4000000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:48:49 executing program 5:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dd\x00\x00\x00\x00i\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
r5 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r6 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r6, 0x1000000)
sendfile(r5, r6, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(r3, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r7, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x6, 0x8, 0x3, 0xf9af, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r8, 0x40086602, 0x0)
ioctl$SG_GET_RESERVED_SIZE(r8, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:48:49 executing program 1:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dd\x00\x00\x00\x00i\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
r5 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r6 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r6, 0x1000000)
sendfile(r5, r6, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(r3, &(0x7f0000000840), 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
r8 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r8, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:48:49 executing program 4:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r3, 0x1000000)
r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0)
setsockopt$bt_BT_FLUSHABLE(r5, 0x112, 0x8, &(0x7f0000000300)=0x5, 0x4)
r6 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r6, 0x1000000)
sendfile(r4, r6, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r7, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x0, 0x0, 0x3, 0x0, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r8, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r8, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:48:49 executing program 3:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
sendfile(r3, r4, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000240)={0x7, [0x50c, 0x5, 0x1000, 0x8, 0x0, 0xf9af, 0x3]}, &(0x7f0000000280)=0x12)
ftruncate(0xffffffffffffffff, 0x1000000)
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r6, 0x2272, &(0x7f00000002c0))
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r7, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r7, 0x81785501, &(0x7f0000000000)=""/56)
r8 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r8, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:48:49 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x4000001, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:48:49 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x5000000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:48:49 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x6000000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:48:49 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x7000000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:48:49 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x8000000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:48:49 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x9000000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:48:56 executing program 0:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r3, 0x1000000)
r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r5 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r5, 0x1000000)
sendfile(r4, r5, &(0x7f00000000c0)=0xf18005, 0xeefffdef)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000080)=0x1)
r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x6, 0x0, 0x3, 0x0, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:48:56 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x10000000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:48:56 executing program 3:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
sendfile(r3, r4, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000240)={0x6, [0x50c, 0x5, 0x1000, 0x3, 0xf9af, 0x3]}, &(0x7f0000000280)=0x10)
ftruncate(0xffffffffffffffff, 0x1000000)
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r6, 0x2272, &(0x7f00000002c0))
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r7, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r7, 0x81785501, &(0x7f0000000000)=""/56)
r8 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r8, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:48:56 executing program 5:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dd\x00\x00\x00\x00i\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
r5 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r6 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r6, 0x1000000)
sendfile(r5, r6, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(r3, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r7, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x6, 0x8, 0x3, 0xf9af, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r8, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:48:56 executing program 4:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r3, 0x1000000)
r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r5 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r5, 0x1000000)
sendfile(r4, r5, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x0, 0x0, 0x3, 0x0, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r8 = creat(&(0x7f0000000140)='\x00', 0x132)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r8, 0xc040564a, &(0x7f0000000300)={0x81, 0x0, 0x2002, 0x5, 0x6, 0x5, 0x3})
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:48:56 executing program 1:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dd\x00\x00\x00\x00i\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
r5 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r6 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r6, 0x1000000)
sendfile(r5, r6, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(r3, &(0x7f0000000840), 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
r8 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r8, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:48:56 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x20000000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:48:57 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x20100000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:48:57 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x3f000000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:48:57 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x8cffffff, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:48:57 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0xc0ed0000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:48:57 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0xf6ffffff, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:49:03 executing program 0:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r3, 0x1000000)
r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r5 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r5, 0x1000000)
sendfile(r4, r5, &(0x7f00000000c0)=0xf1800d, 0xeefffdef)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000080)=0x1)
r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x6, 0x0, 0x3, 0x0, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:49:03 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0xfeffffff, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:49:03 executing program 3:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
sendfile(r3, r4, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000240)={0x6, [0x50c, 0x5, 0x1000, 0x3, 0xf9af, 0x3]}, &(0x7f0000000280)=0x10)
ftruncate(0xffffffffffffffff, 0x1000000)
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r6, 0x2272, &(0x7f00000002c0))
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r7, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r7, 0x81785501, &(0x7f0000000000)=""/56)
r8 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r8, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:49:03 executing program 5:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dd\x00\x00\x00\x00i\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
r5 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r6 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r6, 0x1000000)
sendfile(r5, r6, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(r3, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r7, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x6, 0x8, 0x3, 0xf9af, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r8, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:49:03 executing program 1:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dd\x00\x00\x00\x00i\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
r5 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r6 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r6, 0x1000000)
sendfile(r5, r6, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(r3, &(0x7f0000000840), 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, 0x0)
r8 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r8, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:49:03 executing program 4:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r3, 0x1000000)
r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r5 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r5, 0x1000000)
sendfile(r4, r5, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x0, 0x0, 0x3, 0x0, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$ASHMEM_GET_PROT_MASK(r7, 0x7706, &(0x7f0000000140))
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:49:03 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0xff000000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:49:03 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0xffff0000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:49:03 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0xfffffe00, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:49:03 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0xffffff7f, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:49:03 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0xffffff8c, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:49:03 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0xfffffff6, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:49:12 executing program 0:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r3, 0x1000000)
r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r5 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r5, 0x1000000)
sendfile(r4, r5, &(0x7f00000000c0)=0xf1800f, 0xeefffdef)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000080)=0x1)
r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x6, 0x0, 0x3, 0x0, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:49:12 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0xfffffffe, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:49:12 executing program 3:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
sendfile(r3, r4, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000240)={0x6, [0x50c, 0x5, 0x1000, 0x3, 0xf9af, 0x3]}, &(0x7f0000000280)=0x10)
ftruncate(0xffffffffffffffff, 0x1000000)
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r6, 0x2272, &(0x7f00000002c0))
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r7, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r7, 0x81785501, &(0x7f0000000000)=""/56)
r8 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r8, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:49:12 executing program 1:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dd\x00\x00\x00\x00i\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
r5 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r6 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r6, 0x1000000)
sendfile(r5, r6, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(r3, &(0x7f0000000840), 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, 0x0)
r8 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r8, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:49:12 executing program 5:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dd\x00\x00\x00\x00i\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
r5 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r6 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r6, 0x1000000)
sendfile(r5, r6, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(r3, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r7, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x6, 0x8, 0x3, 0xf9af, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r8, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:49:12 executing program 4:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(0x0, 0x3, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x32a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r3, 0x1000000)
r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r5 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r5, 0x1000000)
sendfile(r4, r5, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r6, &(0x7f000000b740)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x0, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000340)={0xa, 0x0, 0x0, @local}, 0x1c, 0x0}}], 0x2, 0x0)
r7 = dup2(0xffffffffffffffff, r6)
r8 = syz_open_dev$admmidi(0x0, 0x7fffffff, 0x10002)
r9 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00')
read$FUSE(r9, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={<r10=>0x0}, &(0x7f0000000140)=0x8)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r8, 0x84, 0x66, &(0x7f0000000140)={r10, 0x101}, 0x0)
setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000100)={0xbbc, 0x200, 0x7fffffff, 0x1b, r10}, 0x10)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000140)={r10, 0x7a1b}, &(0x7f0000000300)=0x8)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
r11 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r11, 0x84, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="084040000cfa050100c4b2000000030100000000df18cd47f15438438056b4746cb1ae83dca86a945d2cd1bce9c7c0e349aaa978f642a6f4600afcac54a090f085345c8c32a29ec2b3f8efad6eea3d13352ce26a7b20ee725b074784ad45ac2b1e530e2dbd422fe451b5ac3c1c9774370a35b72d6c003ec0595d31215e1512a142f295ca2b53b357c9d7df419cafb2bd48b5e65bd655cb2392e732cddfabdea10ebef7b3dc"], &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
socket(0x40000000002, 0x3, 0x2)
socketpair$unix(0x1, 0x5, 0x0, 0x0)

20:49:12 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0xedc000000000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

[  932.921172][T28228] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based  firewall rule not found. Use the iptables CT target to attach helpers instead.
20:49:12 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x1000000000000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:49:13 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0xfeffff00000000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:49:13 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x100000000000000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:49:13 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x200000000000000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:49:13 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x300000000000000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:49:20 executing program 3:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
sendfile(r3, r4, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000240)={0x7, [0x50c, 0x5, 0x1000, 0x0, 0x3, 0xf9af, 0x3]}, &(0x7f0000000280)=0x12)
ftruncate(0xffffffffffffffff, 0x1000000)
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r6, 0x2272, &(0x7f00000002c0))
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r7, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r7, 0x81785501, &(0x7f0000000000)=""/56)
r8 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r8, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:49:20 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x400000000000000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:49:20 executing program 0:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r3, 0x1000000)
r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r5 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r5, 0x1000000)
sendfile(r4, r5, &(0x7f00000000c0)=0xf18010, 0xeefffdef)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000080)=0x1)
r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x6, 0x0, 0x3, 0x0, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:49:20 executing program 1:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dd\x00\x00\x00\x00i\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
r5 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r6 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r6, 0x1000000)
sendfile(r5, r6, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(r3, &(0x7f0000000840), 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, 0x0)
r8 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r8, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:49:20 executing program 5:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dd\x00\x00\x00\x00i\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
r5 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r6 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r6, 0x1000000)
sendfile(r5, r6, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(r3, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r7, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x6, 0x8, 0x3, 0xf9af, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r8, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r8, 0x2272, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:49:20 executing program 4:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfffffffffffffcb6)
write$cgroup_subtree(r1, &(0x7f0000000680)=ANY=[@ANYBLOB="94a0fae2ef62c9d8a5cf470f460052b99026830ffa74d703d3d626da5b6f625db8f6d0d9159d70c10d7baf8e06f90ba747c741a7b3a370f3889f41293736f3e06f2dc5dcf13b18920ecc037c1a7067d7c5928a9c7837055d6f20dc8ec45ade447fdf3bfdff3ca33e9b10cb5da338cb22474b4291a41f7ac8d8ce483cc43544c97e00"/144], 0xda00)
ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f0000000140)={0x9, 0x6, 0xe6f, 0xb, 0x1})
syz_open_dev$vbi(0x0, 0x1, 0x2)
r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
r5 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r6 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300)='/dev/hwrng\x00', 0xc0, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000640)={0x0, 0x4, 0x1, <r8=>0xffffffffffffffff, 0x0, &(0x7f0000000600)={0x990a92, 0x5, [], @p_u32=&(0x7f00000005c0)=0x4}})
sendmsg$nl_xfrm(r8, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x9b940d3ea18ca70a}, 0xc, &(0x7f0000000500)={&(0x7f0000000380)=@delsa={0x148, 0x11, 0x0, 0x70bd2c, 0x25dfdbfe, {@in6=@mcast1, 0x4d2, 0xa, 0x6c}, [@ipv6_hthresh={0x8}, @tmpl={0x104, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x1e}, 0x4d4, 0x33}, 0x2, @in6=@loopback, 0x3504, 0x1, 0x3, 0xbe, 0x101, 0x1, 0x75}, {{@in6=@empty, 0x4d6, 0xe18ed52ac96eef3a}, 0xa, @in6=@empty, 0x3502, 0x1, 0x0, 0x3, 0x1, 0x9e, 0xb6ee}, {{@in=@rand_addr=0x8, 0x4d3, 0xff}, 0x2, @in6=@ipv4={[], [], @rand_addr=0x1a}, 0x0, 0x1, 0x2, 0x8e, 0x8, 0x6233, 0x8}, {{@in6=@mcast1, 0x4d4, 0x20}, 0x2, @in=@remote, 0x3505, 0x0, 0x0, 0x6, 0x8, 0x7, 0x9}]}, @srcaddr={0x14, 0xd, @in6=@loopback}]}, 0x148}, 0x1, 0x0, 0x0, 0x80}, 0x0)
ftruncate(r6, 0x1000000)
sendfile(r5, r6, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x39061000)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3)
ioctl$int_in(r2, 0x5421, &(0x7f0000000080)=0x1)
r9 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0x4000, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r9, 0x84, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="d20d8764ad0345c97de5c0cd5fb2e4db69af239f891601b33f1b0fd626fbb261cb56a432f179102426929d4bd653cf46e36a36de13da22d033e967f0316b2849f82b2541f7fcd2e88e2352150467d2e9ad88e837fbf93a659c399c7ae072eb0b28fb954f9e625c98aedc6a60995e9b21accced5e363ec13b071676c89d"], &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r10, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r10, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:49:20 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x400000100000000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:49:20 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x500000000000000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:49:20 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x600000000000000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:49:20 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x700000000000000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:49:20 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x800000000000000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:49:20 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x900000000000000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:49:20 executing program 3:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
sendfile(r3, r4, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000240)={0x7, [0x50c, 0x5, 0x1000, 0x0, 0x3, 0xf9af, 0x3]}, &(0x7f0000000280)=0x12)
ftruncate(0xffffffffffffffff, 0x1000000)
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r6, 0x2272, &(0x7f00000002c0))
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r7, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r7, 0x81785501, &(0x7f0000000000)=""/56)
r8 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r8, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:49:20 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x1000000000000000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

[  940.899669][T28280] vivid-003: kernel_thread() failed
20:49:28 executing program 1:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dd\x00\x00\x00\x00i\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
r5 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r6 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r6, 0x1000000)
sendfile(r5, r6, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(r3, &(0x7f0000000840), 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
r8 = memfd_create(0x0, 0x0)
ftruncate(r8, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:49:28 executing program 5:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dd\x00\x00\x00\x00i\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
r5 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r6 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r6, 0x1000000)
sendfile(r5, r6, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(r3, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r7, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x6, 0x8, 0x3, 0xf9af, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r8, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r8, 0x2272, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:49:28 executing program 4:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0xaf5bea89ec9f773, 0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6104fdda557115d5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff, 0x2}, 0x10000, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r3, 0x1000000)
r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r5 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r5, 0x1000000)
sendfile(r4, r5, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x0, 0x0, 0x3, 0x0, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0x32600)
write$cgroup_subtree(r8, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0xda00)
ioctl$KVM_GET_MP_STATE(r8, 0x8004ae98, &(0x7f0000000140))

20:49:28 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x2000000000000000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:49:28 executing program 0:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x10000, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r3, 0x1000000)
r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r5 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r5, 0x1000000)
sendfile(r4, r5, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000080)=0x1)
r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x6, 0x0, 0x3, 0x0, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:49:28 executing program 3:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
sendfile(r3, r4, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000240)={0x7, [0x50c, 0x5, 0x1000, 0x0, 0x3, 0xf9af, 0x3]}, &(0x7f0000000280)=0x12)
ftruncate(0xffffffffffffffff, 0x1000000)
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r6, 0x2272, &(0x7f00000002c0))
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r7, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r7, 0x81785501, &(0x7f0000000000)=""/56)
r8 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r8, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:49:28 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x2010000000000000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:49:28 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x3f00000000000000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:49:28 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x8cffffff00000000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:49:28 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0xf6ffffff00000000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:49:29 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0xfeffffff00000000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:49:29 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0xff00000000000000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:49:29 executing program 1:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dd\x00\x00\x00\x00i\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
r5 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r6 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r6, 0x1000000)
sendfile(r5, r6, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(r3, &(0x7f0000000840), 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
r8 = memfd_create(0x0, 0x0)
ftruncate(r8, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:49:29 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0xffff000000000000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:49:29 executing program 3:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
sendfile(r3, r4, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000240)={0x6, [0x50c, 0x5, 0x8, 0x3, 0xf9af, 0x3]}, &(0x7f0000000280)=0x10)
ftruncate(0xffffffffffffffff, 0x1000000)
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r6, 0x2272, &(0x7f00000002c0))
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r7, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r7, 0x81785501, &(0x7f0000000000)=""/56)
r8 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r8, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:49:29 executing program 5:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dd\x00\x00\x00\x00i\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
r5 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r6 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r6, 0x1000000)
sendfile(r5, r6, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(r3, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r7, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x6, 0x8, 0x3, 0xf9af, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r8, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r8, 0x2272, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:49:37 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0xffffff7f00000000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:49:37 executing program 4:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r3, 0x1000000)
r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r5 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r5, 0x1000000)
sendfile(r4, r5, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x0, 0x0, 0x3, 0x0, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r8, &(0x7f0000000200), 0x43400)
ioctl$VT_OPENQRY(r8, 0x5600, &(0x7f0000000140))
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:49:37 executing program 5:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dd\x00\x00\x00\x00i\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
r5 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r6 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r6, 0x1000000)
sendfile(r5, r6, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(r3, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r7, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x6, 0x8, 0x3, 0xf9af, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r8, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r8, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:49:37 executing program 1:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dd\x00\x00\x00\x00i\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
r5 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r6 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r6, 0x1000000)
sendfile(r5, r6, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(r3, &(0x7f0000000840), 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
r8 = memfd_create(0x0, 0x0)
ftruncate(r8, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:49:37 executing program 0:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x111, 0x2, 0x1, 0x4)
r3 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r3, 0x1000000)
r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r5 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r5, 0x1000000)
sendfile(r4, r5, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000080)=0x1)
r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000000)=ANY=[@ANYBLOB="080062d987c05174796c957f46ea6bb7e5750000828e13061d2aefd1a8d65b1239"], &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:49:37 executing program 3:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
sendfile(r3, r4, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000240)={0x6, [0x50c, 0x5, 0x8, 0x3, 0xf9af, 0x3]}, &(0x7f0000000280)=0x10)
ftruncate(0xffffffffffffffff, 0x1000000)
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r6, 0x2272, &(0x7f00000002c0))
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r7, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r7, 0x81785501, &(0x7f0000000000)=""/56)
r8 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r8, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:49:37 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'%rans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:49:37 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'\\rans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:49:37 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'t\\ans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:49:37 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'tr\\ns=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:49:37 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'tra%s=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:49:37 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'tran#=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:49:37 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'tran%=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:49:38 executing program 4:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6d2ec1cbc3150bbd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000, 0x0, 0x0, 0x0, 0x800000000000, 0x3, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r3, 0x1000000)
r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r5 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r5, 0x1000000)
sendfile(r4, r5, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="080000000c05050300"], &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:49:38 executing program 5:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dd\x00\x00\x00\x00i\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
r5 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r6 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r6, 0x1000000)
sendfile(r5, r6, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(r3, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r7, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x6, 0x8, 0x3, 0xf9af, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r8, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r8, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:49:38 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'tran*=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:49:44 executing program 0:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r3, 0x1000000)
r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r5 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r5, 0x1000000)
sendfile(r4, r5, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000080)=0x1)
r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x6, 0x0, 0x3, 0x0, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r8, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"]}, 0x2b0)
fallocate(r8, 0x70, 0x4000000000000000, 0x100000000)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:49:44 executing program 1:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dd\x00\x00\x00\x00i\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
r5 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r6 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r6, 0x1000000)
sendfile(r5, r6, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(r3, &(0x7f0000000840), 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
memfd_create(0x0, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:49:44 executing program 3:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
sendfile(r3, r4, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000240)={0x6, [0x50c, 0x5, 0x8, 0x3, 0xf9af, 0x3]}, &(0x7f0000000280)=0x10)
ftruncate(0xffffffffffffffff, 0x1000000)
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r6, 0x2272, &(0x7f00000002c0))
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r7, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r7, 0x81785501, &(0x7f0000000000)=""/56)
r8 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r8, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:49:44 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'tran+=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:49:44 executing program 5:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dd\x00\x00\x00\x00i\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
r5 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r6 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r6, 0x1000000)
sendfile(r5, r6, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(r3, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r7, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x6, 0x8, 0x3, 0xf9af, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r8, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r8, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:49:44 executing program 4:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r3, 0x1000000)
r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r5 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r5, 0x1000000)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40086602, 0x400007)
ioctl$VIDIOC_S_AUDOUT(r6, 0x40345632, &(0x7f0000000140)={0x82b0, "95c6206e7861e5f706d9c9c75788d90a98fc12123d5ab39ee6acf150e5cbca5e", 0x1, 0xe26e9ac17f92bc9})
sendfile(r4, r5, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r7, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x0, 0x0, 0x3, 0x0, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r8, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r8, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:49:44 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'tran-=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:49:44 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'tran.=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:49:44 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'tran0=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:49:44 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'tranI=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:49:45 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'tranQ=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:49:45 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'tranR=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:49:54 executing program 0:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
r1 = syz_open_dev$vbi(0x0, 0x1, 0x2)
ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000140)={0x990000, 0x2, 0xfffffffb, <r2=>0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x99096a, 0x9, [], @value64=0x100}})
r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x2, 0x0, 0x0, 0xf8, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x1ff, 0x1f}, 0x12a, 0x0, 0x200000000000df8, 0x4, 0x0, 0x40000, 0x80}, 0x0, 0xfffffffffffffffb, r2, 0x0)
r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r5, 0x1000000)
r6 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r7 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r7, 0x1000000)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r8, 0x40086602, 0x400007)
r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00')
sendmsg$IPVS_CMD_GET_DEST(r8, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0xb26f33fd978ca51f}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="fc00001a", @ANYRES16=r9, @ANYBLOB="00022bbd7000fddbdf250800000008000400000000003400020008000e004e2400000800090001000000080007000101000008000d0001000000080007007a00000008000300010000004c00020008000e004e23000008000d000000000008000400400000000800030002000000080004000002000008000600ecbf00000800080064020000080007000100000008000d00000000005800030014000200626373663000000000000000000000001400020076657468315f746f5f626f6e6400000008000500e00000021400060000000000000000000000ffffac1414bb0800010000000000080007004e2100000800060001000000"], 0xfc}, 0x1, 0x0, 0x0, 0x40000}, 0x40000)
sendfile(r6, r7, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r4, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4)
ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000080)=0x1)
r10 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r10, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x6, 0x0, 0x3, 0x0, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r11, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r11, 0x2272, &(0x7f00000002c0))
r12 = syz_open_dev$vcsn(&(0x7f0000000500)='/dev/vcs#\x00', 0x1, 0x8042)
ioctl$PPPIOCSCOMPRESS(r12, 0x4010744d)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:49:54 executing program 4:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r3, 0x1000000)
r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r5 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r5, 0x1000000)
sendfile(r4, r5, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="080000000c050500001800000000030000000300"], &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x400, 0x0)
write$dsp(r8, &(0x7f0000000300)="6bb61012ec401114b4ae429681175606d41ffc48b8499d5b0fb131124e795b527671b6798ad304422b5a7377f2f9563df01ee65e1203be34aedf40e17e26b51219f060473eb0326cf986e32092368d1f3730dbcbafeb769d7422c6f33cf223b216428357ddfe9356d643757cff9d7d4e75", 0x71)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
ftruncate(0xffffffffffffffff, 0x100000001000001)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:49:54 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'tranS=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:49:54 executing program 5:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dd\x00\x00\x00\x00i\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
r5 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r6 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r6, 0x1000000)
sendfile(r5, r6, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(r3, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r7, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x6, 0x8, 0x3, 0xf9af, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r8, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r8, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:49:54 executing program 1:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dd\x00\x00\x00\x00i\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
r5 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r6 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r6, 0x1000000)
sendfile(r5, r6, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(r3, &(0x7f0000000840), 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
memfd_create(0x0, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:49:54 executing program 3:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
sendfile(r3, r4, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000240)={0x7, [0x50c, 0x5, 0x0, 0x8, 0x3, 0xf9af, 0x3]}, &(0x7f0000000280)=0x12)
ftruncate(0xffffffffffffffff, 0x1000000)
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r6, 0x2272, &(0x7f00000002c0))
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r7, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r7, 0x81785501, &(0x7f0000000000)=""/56)
r8 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r8, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:49:54 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'tranT=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:49:54 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'tranV=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:49:54 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'tranX=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:49:54 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'tran\\=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:49:54 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'tranb=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:49:54 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'tranc=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:50:03 executing program 0:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40086602, 0x400007)
r4 = getpid()
write$FUSE_LK(r3, &(0x7f0000000000)={0x28, 0x0, 0x8, {{0x36cf, 0x8, 0x0, r4}}}, 0x28)
r5 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r5, 0x1000000)
r6 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r7 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r7, 0x1000000)
sendfile(r6, r7, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000080)=0x1)
r8 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r8, 0x84, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="080000000c05050000000000030000000300"], &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r9, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r9, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:50:03 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trand=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:50:03 executing program 3:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
sendfile(r3, r4, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000240)={0x7, [0x50c, 0x5, 0x0, 0x8, 0x3, 0xf9af, 0x3]}, &(0x7f0000000280)=0x12)
ftruncate(0xffffffffffffffff, 0x1000000)
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r6, 0x2272, &(0x7f00000002c0))
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r7, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r7, 0x81785501, &(0x7f0000000000)=""/56)
r8 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r8, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:50:03 executing program 1:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dd\x00\x00\x00\x00i\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
r5 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r6 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r6, 0x1000000)
sendfile(r5, r6, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(r3, &(0x7f0000000840), 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
memfd_create(0x0, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:50:03 executing program 5:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dd\x00\x00\x00\x00i\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
r5 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r6 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r6, 0x1000000)
sendfile(r5, r6, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(r3, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r7, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x6, 0x8, 0x3, 0xf9af, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r8, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r8, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:50:03 executing program 4:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r3, 0x1000000)
r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r5 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r5, 0x1000000)
sendfile(r4, r5, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x0, 0x0, 0x3, 0x0, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r8, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000010000000000000008006966623000000000000000000000000064756d6d79300000000000e1ff00000069705f76746930000000000000000000697036746e6c30000000000000000000aaaaaaaaaabb0000000000000180c20000000000000000000000f000000070010000a8010000697000000000000000000000000000000000000000000000000000000000000020000000000000007f000001ac14140000000000000000000073412ab2f485d7e5b8580fe4fd20285b10286f3b230000000000007265616c6d0000000000000000000000000000000000000000000000000000001000000000000000000000000000000000002000000000006172707265706c7900000000000000000000001c0000000000000000000000001000000000000000aaaaaaaaaaaa000000000000000000005241544545535400000000000000000000000000000000000000000000000000200000000000000073797a310000000000000000000000000000000000000000000000005b650000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaa"]}, 0x2b0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r8, 0x660c)

20:50:03 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trang=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:50:03 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trani=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:50:03 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'tranl=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:50:03 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trano=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:50:04 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'tranp=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:50:04 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'tranq=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:50:12 executing program 1:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dd\x00\x00\x00\x00i\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
r5 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r6 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r6, 0x1000000)
sendfile(r5, r6, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(r3, &(0x7f0000000840), 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
r8 = memfd_create(0x0, 0x0)
ftruncate(r8, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:50:12 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'tranu=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:50:12 executing program 3:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
sendfile(r3, r4, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000240)={0x7, [0x50c, 0x5, 0x0, 0x8, 0x3, 0xf9af, 0x3]}, &(0x7f0000000280)=0x12)
ftruncate(0xffffffffffffffff, 0x1000000)
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r6, 0x2272, &(0x7f00000002c0))
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r7, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r7, 0x81785501, &(0x7f0000000000)=""/56)
r8 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r8, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:50:12 executing program 4:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_config_ext={0x29, 0x6}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10000, 0x0, 0x0, 0x0, 0x2, 0x5, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r3, 0x1000000)
r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r5 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x3, 0x0)
ftruncate(r5, 0x1000000)
sendfile(r4, r5, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x0, 0x0, 0x3, 0x0, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
ftruncate(0xffffffffffffffff, 0x1000000)
socket$inet(0x2, 0x0, 0x20)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r8, &(0x7f0000000200), 0x43400)
setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f0000000300)={&(0x7f0000000140)=""/8, 0x31000, 0x800, 0xfffffffc, 0x2}, 0x20)

20:50:12 executing program 0:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r3, 0x1000000)
r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r5 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r5, 0x1000000)
sendfile(r4, r5, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000080)=0x1)
r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x6, 0x0, 0x3, 0x0, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r7, 0x84, 0x1, &(0x7f0000000000)={<r8=>0x0, 0x6, 0x634, 0xa126, 0x6, 0x1}, &(0x7f0000000140)=0x14)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f0000000300)=@sack_info={r8, 0x200, 0x1f000000}, &(0x7f0000000340)=0xc)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r9, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r9, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:50:12 executing program 5:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dd\x00\x00\x00\x00i\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
r5 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r6 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r6, 0x1000000)
sendfile(r5, r6, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(r3, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r7, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x6, 0x8, 0x3, 0xf9af, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r8, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r8, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:50:13 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'tranw=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:50:13 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'tranx=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:50:13 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=%d,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:50:13 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=.d,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

[  993.356282][T28685] 9pnet: Could not find request transport: %d
[  993.367236][T28686] 9pnet: Could not find request transport: %d
20:50:13 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=/d,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

[  993.439181][T28688] 9pnet: Could not find request transport: .d
[  993.457383][T28691] 9pnet: Could not find request transport: .d
20:50:13 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=\\d,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

[  993.534137][T28693] 9pnet: Could not find request transport: /d
[  993.551154][T28696] 9pnet: Could not find request transport: /d
[  993.635925][T28699] 9pnet: Could not find request transport: \d
[  993.649271][T28700] 9pnet: Could not find request transport: \d
20:50:13 executing program 1:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dd\x00\x00\x00\x00i\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
r5 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r6 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r6, 0x1000000)
sendfile(r5, r6, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(r3, &(0x7f0000000840), 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
r8 = memfd_create(0x0, 0x0)
ftruncate(r8, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:50:13 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fI,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:50:13 executing program 3:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
sendfile(r3, r4, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000240)={0x6, [0x50c, 0x1000, 0x8, 0x3, 0xf9af, 0x3]}, &(0x7f0000000280)=0x10)
ftruncate(0xffffffffffffffff, 0x1000000)
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r6, 0x2272, &(0x7f00000002c0))
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r7, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r7, 0x81785501, &(0x7f0000000000)=""/56)
r8 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r8, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

[  993.897996][T28706] 9pnet: Could not find request transport: fI
20:50:14 executing program 4:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000200), 0x43400)
ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000140)={0x18, 0x0, {0x0, @random="b2f0c0966dc1", 'hwsim0\x00'}})
r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
r5 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r6 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r6, 0x1000000)
sendfile(r5, r6, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3)
ioctl$int_in(r2, 0x5421, &(0x7f0000000080)=0x1)
r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r7, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x0, 0x0, 0x3, 0x0, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r8, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r8, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

[  993.955181][T28713] 9pnet: Could not find request transport: fI
20:50:19 executing program 0:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r1 = getpid()
r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x400, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000140)={0x0, 0x2, 0x10000, 0x2000, &(0x7f0000ffe000/0x2000)=nil})
r6 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r7 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r7, 0x1000000)
sendfile(r6, r7, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3)
ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000080)=0x1)
r8 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r8, 0x84, 0x16, &(0x7f0000000300)=ANY=[@ANYBLOB="080000000c0505000010060000000300000003007e58fc23c70101f4ad932187bad407845e57873766b8c98e79100c1ebb0352b4f70e69df1ecf4c1e5feed951ce92c530ca08f4ee6716f669b62f701a2b43b3b11921f1eeef01aa0f32603406e9b3747d0f30d7ef8f6816cdc59f73634ac9ab2f666ae37c638be996892f7dd0c59284a6782298e18f60959c7b0d61011732e14feec5a0cfc313c6632d6961db32a2e0f454aaba06b5"], &(0x7f0000000280)=0x14)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r9, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"]}, 0x2b0)
fcntl$dupfd(r4, 0x406, r9)
ftruncate(0xffffffffffffffff, 0x1000000)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
socket$alg(0x26, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r10, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r10, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:50:19 executing program 3:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
sendfile(r3, r4, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000240)={0x6, [0x50c, 0x1000, 0x8, 0x3, 0xf9af, 0x3]}, &(0x7f0000000280)=0x10)
ftruncate(0xffffffffffffffff, 0x1000000)
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r6, 0x2272, &(0x7f00000002c0))
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r7, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r7, 0x81785501, &(0x7f0000000000)=""/56)
r8 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r8, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:50:19 executing program 4:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ioctl$DRM_IOCTL_MARK_BUFS(r3, 0x40206417, &(0x7f0000000500)={0x1ff, 0x4, 0x0, 0x9, 0xb, 0x2})
ftruncate(r3, 0x1000000)
r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r5 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r5, 0x1000000)
sendfile(r4, r5, &(0x7f00000000c0)=0xf18001, 0xeefffdec)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r2, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40086602, 0x400007)
ioctl$VIDIOC_S_JPEGCOMP(r6, 0x408c563e, &(0x7f00000003c0)={0xc26f, 0x7, 0x2f, "e564073482b4b46ec35074790264b7a788e58a9d9a7b0af4cddc6ee84c08ceee03c2d254947a408b1921f42cbb1d6746222cb8f8bb1a44abf410b1e8", 0x3a, "66f9953013f48bda4080e5d1a2d9f40609a7c562be756c7f1d2849244bdff68b6bce6078f2863f387ee75e9c77137435d4b5046a704f9a8dea2ff1c7", 0xd0})
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r7, 0x84, 0x16, &(0x7f0000000300)=ANY=[@ANYBLOB="080000e90b0505000010000000000300000003fffff98c5a09e49e01ddd47c9c6350c0601c1256b452eb4c264de13e930ce634f796cdf1357dbf435a87465381f3f0a02a16bbca9975afe49dcf11fb29e8b86971a6f24f3905c1bd16a632e888b7e0e3a1cf3080906d57b1e17184a641268cd335162fc01d531353f042eab1a118e456e14d7b34f0d0be4b06834b1daeed2846a4d7ca0e8764c945997d72e0a0f1f0b4c38a39028b7db5171c909c9c98be46"], &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r8, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r8, 0x2272, &(0x7f00000002c0))
lsetxattr$smack_xattr_label(&(0x7f0000000240)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPOUT\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB="2f6400762568e555170287"], 0xb, 0x1)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:50:19 executing program 5:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dd\x00\x00\x00\x00i\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
r5 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r6 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r6, 0x1000000)
sendfile(r5, r6, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(r3, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r7, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x6, 0x8, 0x3, 0xf9af, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r8, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r8, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
ftruncate(0xffffffffffffffff, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:50:19 executing program 1:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dd\x00\x00\x00\x00i\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
r5 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r6 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r6, 0x1000000)
sendfile(r5, r6, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(r3, &(0x7f0000000840), 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
r8 = memfd_create(0x0, 0x0)
ftruncate(r8, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:50:19 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fQ,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

[  999.535521][T28741] 9pnet: Could not find request transport: fQ
[  999.552104][T28748] 9pnet: Could not find request transport: fQ
20:50:19 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fR,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:50:19 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fS,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

[  999.648025][T28758] 9pnet: Could not find request transport: fR
[  999.671126][T28760] 9pnet: Could not find request transport: fR
20:50:19 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fT,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

[  999.753342][T28763] 9pnet: Could not find request transport: fS
[  999.764454][T28765] 9pnet: Could not find request transport: fS
20:50:19 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fV,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

[  999.834221][T28767] 9pnet: Could not find request transport: fT
[  999.846333][T28769] 9pnet: Could not find request transport: fT
20:50:19 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=f\\,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

[  999.928088][T28772] 9pnet: Could not find request transport: fV
[  999.949215][T28773] 9pnet: Could not find request transport: fV
20:50:20 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fb,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

[ 1000.033131][T28776] 9pnet: Could not find request transport: f\
[ 1000.054435][T28777] 9pnet: Could not find request transport: f\
[ 1000.133947][T28780] 9pnet: Could not find request transport: fb
[ 1000.151166][T28781] 9pnet: Could not find request transport: fb
20:50:26 executing program 0:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r3, 0x1000000)
r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r5 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r5, 0x1000000)
r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x5c4880, 0x0)
ioctl$VFIO_IOMMU_GET_INFO(r6, 0x3b70, &(0x7f0000000140)={0x18, 0x0, 0x0, 0x42})
sendfile(r4, r5, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000080)=0x1)
r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r7, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x6, 0x0, 0x3, 0x0, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r8, 0x40086602, 0x400007)
r9 = socket$can_bcm(0x1d, 0x2, 0x2)
r10 = socket(0x2, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000008c80)={'vcan0\x00', <r11=>0x0})
connect$can_bcm(r9, &(0x7f0000000440)={0x1d, r11}, 0x10)
r12 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r12, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"]}, 0x2b0)
r13 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r13, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"]}, 0x2b0)
sendmsg$can_bcm(r9, &(0x7f0000000140)={&(0x7f0000000000), 0xfffffffffffffd32, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="050000000000000e0000000000000000", @ANYRES64=0x0, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64=r12, @ANYRESDEC=r13], @ANYRES32, @ANYRES64=0x0, @ANYBLOB="00000000080000000000000000000400c4d981ae211e6951f204f96d03835e9b423c4aeb64e3465bf612d69aeb2f0958871145ed47e98db2744019fd49ff6f20b04946048e37542b219e30b465f697da83d128dce7a48d1c5769f4e3c12da87ec7589b6717cc04b1bafa8a59048c9c2e2cdbd1475d2df98f"], 0x6}}, 0x0)
sendmsg$can_bcm(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x6, 0x0, 0x0, {0x77359400}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "c61f2323d752075b"}}, 0x48}}, 0x0)
ioctl$SG_GET_RESERVED_SIZE(r8, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ftruncate(0xffffffffffffffff, 0x1000000)

20:50:26 executing program 3:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
sendfile(r3, r4, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000240)={0x6, [0x50c, 0x1000, 0x8, 0x3, 0xf9af, 0x3]}, &(0x7f0000000280)=0x10)
ftruncate(0xffffffffffffffff, 0x1000000)
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r6, 0x2272, &(0x7f00000002c0))
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r7, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r7, 0x81785501, &(0x7f0000000000)=""/56)
r8 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r8, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:50:26 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fg,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:50:26 executing program 1:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dd\x00\x00\x00\x00i\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
r5 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r6 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r6, 0x1000000)
sendfile(r5, r6, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(r3, &(0x7f0000000840), 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
r8 = memfd_create(0x0, 0x0)
ftruncate(r8, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xeefffdef)

20:50:26 executing program 5:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dd\x00\x00\x00\x00i\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
r5 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r6 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r6, 0x1000000)
sendfile(r5, r6, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(r3, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r7, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x6, 0x8, 0x3, 0xf9af, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r8, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r8, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
ftruncate(0xffffffffffffffff, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:50:26 executing program 4:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r3, 0x1000000)
r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r5 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r5, 0x1000000)
sendfile(r4, r5, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x0, 0x0, 0x3, 0x0, 0x3]}, &(0x7f0000000280)=0xfdd0)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:50:26 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fq,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

[ 1006.068878][T28803] 9pnet: Could not find request transport: fg
[ 1006.092515][T28809] 9pnet: Could not find request transport: fg
20:50:26 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fs,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

[ 1006.175875][T28816] 9pnet: Could not find request transport: fq
[ 1006.194534][T28818] 9pnet: Could not find request transport: fq
20:50:26 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fu,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

[ 1006.278636][T28821] 9pnet: Could not find request transport: fs
[ 1006.288364][T28822] 9pnet: Could not find request transport: fs
20:50:26 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fw,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

[ 1006.363738][T28824] 9pnet: Could not find request transport: fu
[ 1006.375607][T28827] 9pnet: Could not find request transport: fu
20:50:26 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd;', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

[ 1006.464121][T28830] 9pnet: Could not find request transport: fw
[ 1006.477951][T28831] 9pnet: Could not find request transport: fw
20:50:26 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'\\fdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

[ 1006.587061][T28834] 9pnet: Could not find request transport: fd;rfdno=0x0000000000000005
[ 1006.603615][T28835] 9pnet: Could not find request transport: fd;rfdno=0x0000000000000005
[ 1006.684871][T28837] 9pnet: Insufficient options for proto=fd
[ 1006.696437][T28839] 9pnet: Insufficient options for proto=fd
20:50:33 executing program 0:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = memfd_create(&(0x7f0000000300)='3\x93nM\xd8\x00\x00\x00\x00#', 0x0)
ftruncate(r3, 0x1000000)
r4 = syz_open_dev$vbi(&(0x7f0000000140)='/\xafg:\x1cPq\x93\xe3\x00', 0x0, 0x2)
r5 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r5, 0x1000000)
sendfile(r4, r5, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000080)=0x1)
r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x6, 0x0, 0x3, 0x0, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:50:33 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'r%dno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:50:33 executing program 5:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dd\x00\x00\x00\x00i\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
r5 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r6 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r6, 0x1000000)
sendfile(r5, r6, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(r3, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r7, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x6, 0x8, 0x3, 0xf9af, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r8, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r8, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
ftruncate(0xffffffffffffffff, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:50:33 executing program 1:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dd\x00\x00\x00\x00i\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
r5 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r6 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r6, 0x1000000)
sendfile(r5, r6, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(r3, &(0x7f0000000840), 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
r8 = memfd_create(0x0, 0x0)
ftruncate(r8, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xeefffdef)

20:50:33 executing program 3:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
sendfile(r3, r4, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000240)={0x7, [0x50c, 0x0, 0x1000, 0x8, 0x3, 0xf9af, 0x3]}, &(0x7f0000000280)=0x12)
ftruncate(0xffffffffffffffff, 0x1000000)
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r6, 0x2272, &(0x7f00000002c0))
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r7, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r7, 0x81785501, &(0x7f0000000000)=""/56)
r8 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r8, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:50:33 executing program 4:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x10000, 0x4, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r3, 0x1000000)
r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r5 = memfd_create(&(0x7f0000000300)='\x06+\xac\xde\x9f\xce\x8b7\xbb\xbd\xe4\xa8N\xf1j\x11\xe5\xda\xf4\xba\x06\x8b@@\xc9\x85\xcd\xee\x19\xc5\xd9\xf7\xb2\t9\x91\xd2\xe4E\n\x9e\x1feI\x86\x82U_\b\xde\xdd\xf6\xa3\x17\xc0\r\xeb\x11\xa8%\xffr}\xb4\x1e/;H\xed\xc0ar\xb5\xb4\xa9\x06%\x9cH\xa6#\x963\xfb\b\xfeg\xf4\x00\x00\x00\x00\x00\x00(-\xa4\xd7\xc6\xdd\xa6\xe3\v\x1b\xa5i\x9c\xa2K\xb5<Q)\xa0\xad\xf0\x1a\xe3\xa9\xc8\xd1\xc8y\xf9r\x93Z\xc9S%\x94\xf7\x0e\xec\xd9^\xd6\xe7_}\xc7\x9e\x19*y?_\x87\xee\xbc\x9d#-\x04E\xda\'\xf1K\x05U\xa9\xf3\b/\xc3s\x8fk\xb36 wS<\x82\x14\xcf\xa4\xe0\x89\tg\'\a\x93\xac\xd0Oi%\xdfJ\xe4w\xc5\xe0\x01^\xa6\xf3\x92\x9aCm\xf6t\xf3\x16\xf1\xf1\xe8\x92\xe8F2zr\xe3\x89g\xf1\xa7?&kC\x1d\xcbA\xb8*\x9dq=p/\x031\x970\b\x85*\x00'/254, 0x9e9c30c0c0bee43f)
ftruncate(r5, 0x1000000)
sendfile(r4, r5, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x0, 0x0, 0x3, 0x0, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
ftruncate(0xffffffffffffffff, 0x1000000)
r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
readahead(r8, 0x80, 0xfffffffffffff000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

[ 1013.473020][T28858] 9pnet: Insufficient options for proto=fd
[ 1013.503852][T28865] 9pnet: Insufficient options for proto=fd
20:50:33 executing program 4:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r3, 0x1000000)
r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r5 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r5, 0x1000000)
sendfile(r4, r5, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x0, 0x0, 0x3, 0x0, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000000140)={0x4000, 0x8000})
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:50:33 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'r.dno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:50:33 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'r/dno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

[ 1013.640417][T28874] 9pnet: Insufficient options for proto=fd
[ 1013.654784][T28877] 9pnet: Insufficient options for proto=fd
20:50:33 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'r\\dno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

[ 1013.769159][T28882] 9pnet: Insufficient options for proto=fd
[ 1013.778030][T28884] 9pnet: Insufficient options for proto=fd
20:50:33 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfIno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

[ 1013.878233][T28887] 9pnet: Insufficient options for proto=fd
[ 1013.889045][T28888] 9pnet: Insufficient options for proto=fd
20:50:34 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfQno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

[ 1013.991654][T28891] 9pnet: Insufficient options for proto=fd
[ 1014.003480][T28892] 9pnet: Insufficient options for proto=fd
[ 1014.081939][T28895] 9pnet: Insufficient options for proto=fd
[ 1014.098753][T28896] 9pnet: Insufficient options for proto=fd
20:50:41 executing program 1:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dd\x00\x00\x00\x00i\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
r5 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r6 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r6, 0x1000000)
sendfile(r5, r6, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(r3, &(0x7f0000000840), 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
r8 = memfd_create(0x0, 0x0)
ftruncate(r8, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xeefffdef)

20:50:41 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfRno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:50:41 executing program 3:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
sendfile(r3, r4, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000240)={0x7, [0x50c, 0x0, 0x1000, 0x8, 0x3, 0xf9af, 0x3]}, &(0x7f0000000280)=0x12)
ftruncate(0xffffffffffffffff, 0x1000000)
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r6, 0x2272, &(0x7f00000002c0))
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r7, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r7, 0x81785501, &(0x7f0000000000)=""/56)
r8 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r8, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:50:41 executing program 5:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dd\x00\x00\x00\x00i\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
r5 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r6 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r6, 0x1000000)
sendfile(r5, r6, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(r3, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r7, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x6, 0x8, 0x3, 0xf9af, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r8, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r8, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xeefffdef)

20:50:41 executing program 4:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r3, 0x1000000)
r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r5 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r5, 0x1000000)
sendfile(r4, r5, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x0, 0x0, 0x3, 0x0, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0x32600)
write$cgroup_subtree(r8, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0xda00)
ioctl$TUNSETQUEUE(r8, 0x400454d9, &(0x7f0000000140)={'syzkaller1\x00', 0x200})
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:50:41 executing program 0:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r3, 0x1000000)
r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r5 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r5, 0x1000000)
r6 = pkey_alloc(0x0, 0x2)
pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, r6)
sendfile(r4, r5, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000080)=0x1)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r7, &(0x7f0000000200), 0x43400)
ioctl$VFIO_CHECK_EXTENSION(r7, 0x3b65, 0x6)
r8 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r8, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x6, 0x0, 0x3, 0x0, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r9, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r9, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:50:41 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfSno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

[ 1021.882615][T28920] 9pnet: Insufficient options for proto=fd
[ 1021.893954][T28924] 9pnet: Insufficient options for proto=fd
20:50:42 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfTno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

[ 1021.991148][T28932] 9pnet: Insufficient options for proto=fd
[ 1022.009528][T28933] 9pnet: Insufficient options for proto=fd
20:50:42 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfVno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

[ 1022.097533][T28936] 9pnet: Insufficient options for proto=fd
[ 1022.110953][T28938] 9pnet: Insufficient options for proto=fd
20:50:42 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rf\\no', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

[ 1022.209875][T28941] 9pnet: Insufficient options for proto=fd
[ 1022.219379][T28943] 9pnet: Insufficient options for proto=fd
20:50:42 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfbno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

[ 1022.315449][T28946] 9pnet: Insufficient options for proto=fd
[ 1022.334033][T28947] 9pnet: Insufficient options for proto=fd
20:50:42 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfgno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

[ 1022.426032][T28950] 9pnet: Insufficient options for proto=fd
[ 1022.437820][T28951] 9pnet: Insufficient options for proto=fd
20:50:42 executing program 1:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dd\x00\x00\x00\x00i\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
r5 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r6 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r6, 0x1000000)
sendfile(r5, r6, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(r3, &(0x7f0000000840), 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
r8 = memfd_create(0x0, 0x0)
ftruncate(r8, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0xeefffdef)

[ 1022.538477][T28953] 9pnet: Insufficient options for proto=fd
[ 1022.553914][T28957] 9pnet: Insufficient options for proto=fd
20:50:42 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfqno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:50:42 executing program 3:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
sendfile(r3, r4, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000240)={0x7, [0x50c, 0x0, 0x1000, 0x8, 0x3, 0xf9af, 0x3]}, &(0x7f0000000280)=0x12)
ftruncate(0xffffffffffffffff, 0x1000000)
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r6, 0x2272, &(0x7f00000002c0))
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r7, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r7, 0x81785501, &(0x7f0000000000)=""/56)
r8 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r8, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:50:42 executing program 4:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r3, 0x1000000)
r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r5 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r5, 0x1000000)
sendfile(r4, r5, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="080000000c050500003000030000000000000000"], &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
ftruncate(0xffffffffffffffff, 0x1000000)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0x32600)
write$cgroup_subtree(r8, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0xda00)
r9 = socket$caif_seqpacket(0x25, 0x5, 0x3)
pwritev(r9, &(0x7f0000000440)=[{&(0x7f0000000300)="9eccc31c098b372c49a60350b3d1721f447677846ba6d6345ae10e1846d9039913183e16a2ae97c337d904fe3e5471e056bed5200d89f24eea019a5a1af80ff2d249beab617c52e9e97d0b6abac5536473385512d49f599467b9a2ec61fe0a06f7022dd46988f7fdd1", 0x69}, {&(0x7f0000000380)="126e58f4d58b5d493a95c73b2b7abf540e2eb73a6f286fa72ff2c800151e3af9eba8492549268e2070e3a5d127550657724600987e342147e33e4524cfe5569123fa58d3c22b0f80a5f8c74b7a18637fec6f1f967e652e5e76df11f6a022d440c6294220332848cb8358c7a46a764c9afd90ee8ebf77e639132fdbe12f94a71c30af863910fa26a56592a48e50dd6d592d5dc5370843151f6a02931bff9f907a8635e5da53ffb21df0e6a9caa57531141de608bcf38461", 0xb7}], 0x2, 0x102d0a59)
setsockopt$packet_tx_ring(r8, 0x107, 0xd, &(0x7f0000000140)=@req={0x776, 0x2a1, 0x1f, 0x8}, 0x10)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:50:42 executing program 5:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dd\x00\x00\x00\x00i\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
r5 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r6 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r6, 0x1000000)
sendfile(r5, r6, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(r3, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r7, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x6, 0x8, 0x3, 0xf9af, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r8, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r8, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xeefffdef)

[ 1022.752106][T28965] 9pnet: Insufficient options for proto=fd
[ 1022.824463][T28974] 9pnet: Insufficient options for proto=fd
20:50:49 executing program 0:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = memfd_create(&(0x7f0000000140)='\x00', 0x0)
ftruncate(r3, 0x1000000)
r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r5 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r5, 0x1000000)
sendfile(r4, r5, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000080)=0x1)
r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x6, 0x0, 0x3, 0x0, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0x32600)
getsockopt$inet_mreqn(r8, 0x0, 0x23, &(0x7f0000000380)={@remote, @local, <r9=>0x0}, &(0x7f00000003c0)=0xc)
sendmsg$kcm(r7, &(0x7f0000000740)={&(0x7f0000000400)=@xdp={0x2c, 0x9, r9, 0x22}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000480)="df573afc0e7b10e5974d28c5a3010ed1335b75c326331fa014e06b4f148d4876e1d9010c3184bd3466eda617008cea9240b9dd086468b91d9b7bae53515e5b9561aae3cebb432168592e62219c0c3036ab00ebb5545eed9a8190e52ce22cfd2791018b5de357f7dccc30b31da375457c23758c6cdd8a60ae84685a54fbf08e7a1d160ffac5a9c08ad7a1015cf79ab0bb0011e85067454c8870800054deb5aa4d9d1cf51ceeebace33ec7771b869d1d65c4c5b8d66afee971cc", 0xb9}, {&(0x7f00000005c0)="a430ea6dbe204e78a3fcd55d370d9c60414aae11748e1e9b70d117bb4974f4fdf01a18e25175fad0b9ed34551041fc19a3eddee35f9200d4c877db230c302259846094dcd9ca756fc577a682233653f6dca5e89fd1c387499f980d5f426a1d8ff6b0b0b85ddd9fa4f29e6476ad95f656dac0d91c48efd14c424aaefcb9dca231a2cb0139292e8911254a11d509a5cfeddf1c4f947f49c0f357508b8d", 0x9c}], 0x2, &(0x7f0000000680)=[{0xb0, 0x218, 0x2, "8ffa97c963a1f75ee48de9f4f249245826e5238560d00a5f0419d5645c085a274ed9980db9d58c985c9512e92a4fa3ad6c66fec939ae92a2c7ae9ecee1ab5fe03229301ba586e3e7842c7acc49db142736137d3a8a0ec95b74d809866048f6d3d8539e88e1c9a06e41c46280f835b99d838af26431d98f57d6216583024ea4f237949cb4bd86595d5c65bc657fef40feb455adc38b86947e88b0ea8bf9"}], 0xb0}, 0x1000)
write$cgroup_subtree(r8, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0xda00)
ioctl$VIDIOC_CROPCAP(r8, 0xc02c563a, &(0x7f0000000000)={0xc, {0x89b8, 0x5, 0x4}, {0x6e, 0x80000004, 0x5, 0x7}, {0x800, 0x4cf7f4ee}})
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:50:49 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfsno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:50:49 executing program 3:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
sendfile(r3, r4, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000240)={0x6, [0x5, 0x1000, 0x8, 0x3, 0xf9af, 0x3]}, &(0x7f0000000280)=0x10)
ftruncate(0xffffffffffffffff, 0x1000000)
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r6, 0x2272, &(0x7f00000002c0))
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r7, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r7, 0x81785501, &(0x7f0000000000)=""/56)
r8 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r8, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:50:49 executing program 5:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dd\x00\x00\x00\x00i\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
r5 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r6 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r6, 0x1000000)
sendfile(r5, r6, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(r3, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r7, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x6, 0x8, 0x3, 0xf9af, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r8, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r8, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xeefffdef)

20:50:49 executing program 1:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dd\x00\x00\x00\x00i\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
r5 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r6 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r6, 0x1000000)
sendfile(r5, r6, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(r3, &(0x7f0000000840), 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
r8 = memfd_create(0x0, 0x0)
ftruncate(r8, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0xeefffdef)

20:50:49 executing program 4:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r3, 0x1000000)
r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r5 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r5, 0x1000000)
sendfile(r4, r5, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x0, 0x0, 0x3, 0x0, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

[ 1029.303776][T29005] 9pnet: Insufficient options for proto=fd
[ 1029.314968][T29008] 9pnet: Insufficient options for proto=fd
20:50:49 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfuno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:50:49 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfwno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

[ 1029.405346][T29016] 9pnet: Insufficient options for proto=fd
[ 1029.419510][T29018] 9pnet: Insufficient options for proto=fd
20:50:49 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfd%o', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

[ 1029.493935][T29020] 9pnet: Insufficient options for proto=fd
[ 1029.506634][T29022] 9pnet: Insufficient options for proto=fd
20:50:49 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdn%', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

[ 1029.589289][T29025] 9pnet: Insufficient options for proto=fd
[ 1029.606371][T29026] 9pnet: Insufficient options for proto=fd
20:50:49 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdn\\', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

[ 1029.676397][T29028] 9pnet: Insufficient options for proto=fd
[ 1029.691593][T29030] 9pnet: Insufficient options for proto=fd
20:50:49 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x3b, {'wfdno', 0x3d, r2}})

[ 1029.766583][T29032] 9pnet: Insufficient options for proto=fd
[ 1029.778388][T29033] 9pnet: Insufficient options for proto=fd
[ 1029.847186][T29036] 9pnet: Insufficient options for proto=fd
[ 1029.858021][T29038] 9pnet: Insufficient options for proto=fd
20:50:58 executing program 0:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r3, 0x1000000)
r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r5 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r5, 0x1000000)
sendfile(r4, r5, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000080)=0x1)
r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x6, 0x0, 0x3, 0x0, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:50:58 executing program 5:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dd\x00\x00\x00\x00i\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
r5 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r6 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r6, 0x1000000)
sendfile(r5, r6, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(r3, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r7, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x6, 0x8, 0x3, 0xf9af, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r8, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r8, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0xeefffdef)

20:50:58 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'Ifdno', 0x3d, r2}})

20:50:58 executing program 3:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
sendfile(r3, r4, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000240)={0x6, [0x5, 0x1000, 0x8, 0x3, 0xf9af, 0x3]}, &(0x7f0000000280)=0x10)
ftruncate(0xffffffffffffffff, 0x1000000)
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r6, 0x2272, &(0x7f00000002c0))
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r7, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r7, 0x81785501, &(0x7f0000000000)=""/56)
r8 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r8, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:50:58 executing program 1:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dd\x00\x00\x00\x00i\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
r5 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r6 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r6, 0x1000000)
sendfile(r5, r6, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(r3, &(0x7f0000000840), 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
r8 = memfd_create(0x0, 0x0)
ftruncate(r8, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0xeefffdef)

20:50:58 executing program 4:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r3, 0x1000000)
r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r5 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r5, 0x1000000)
sendfile(r4, r5, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x0, 0x0, 0x3, 0x0, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r8, 0x40086602, 0x400007)
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000540)='/dev/dlm_plock\x00', 0x1240, 0x0)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r9, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"]}, 0x2b0)
ioctl$VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000700)={0x4, 0x1, 0x4, 0x2001000, 0xffffffd9, {0x0, 0x7530}, {0x5, 0x8, 0x81, 0x4, 0xff, 0x0, "318d74a9"}, 0x83df, 0x4, @planes=&(0x7f00000006c0)={0x2, 0x2, @userptr=0x4, 0x8a}, 0x5, 0x0, <r10=>r9})
r11 = openat$cgroup_ro(r10, &(0x7f0000000680)='[pu.stat\x00\xacj/\b\x8f;\t\xc6\x15\x12\xee\x89Y\x97|\xcdp0\x00\x00P\xf2\x96\x1bz\xeet\xe8\x02\xca\x97', 0x7a05, 0x1700)
write$cgroup_subtree(r11, &(0x7f0000000000)=ANY=[], 0x32600)
write$cgroup_subtree(r11, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0xda00)
r12 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00')
ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000480)={0xee5, 0x3, 0x4, 0x38000, 0x6, {}, {0x4, 0x1, 0x2, 0xff, 0xff, 0x29, "013fe030"}, 0x7f, 0x1, @planes=&(0x7f0000000440)={0xffffffff, 0x14, @fd, 0x4}, 0x1, 0x0, <r13=>r6})
setsockopt$inet6_MCAST_JOIN_GROUP(r13, 0x29, 0x2a, &(0x7f00000005c0)={0x800, {{0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x8}}}, 0x88)
sendmsg$IPVS_CMD_GET_DEST(r11, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x54, r12, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nr0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffd}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfaf4}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:50:58 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'Qfdno', 0x3d, r2}})

[ 1038.910931][T29057] 9pnet: Insufficient options for proto=fd
[ 1038.921710][T29061] 9pnet: Insufficient options for proto=fd
20:50:59 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'Rfdno', 0x3d, r2}})

[ 1039.026538][T29070] 9pnet: Insufficient options for proto=fd
[ 1039.046702][T29072] 9pnet: Insufficient options for proto=fd
20:50:59 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'Sfdno', 0x3d, r2}})

[ 1039.123396][T29075] 9pnet: Insufficient options for proto=fd
[ 1039.133110][T29077] 9pnet: Insufficient options for proto=fd
20:50:59 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'Tfdno', 0x3d, r2}})

[ 1039.220779][T29079] 9pnet: Insufficient options for proto=fd
[ 1039.244627][T29081] 9pnet: Insufficient options for proto=fd
[ 1039.311653][T29083] 9pnet: Insufficient options for proto=fd
[ 1039.324950][T29084] 9pnet: Insufficient options for proto=fd
20:50:59 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'Vfdno', 0x3d, r2}})

20:50:59 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'\\fdno', 0x3d, r2}})

[ 1039.421702][T29088] 9pnet: Insufficient options for proto=fd
[ 1039.446976][T29089] 9pnet: Insufficient options for proto=fd
[ 1039.547401][T29092] 9pnet: Insufficient options for proto=fd
[ 1039.567674][T29093] 9pnet: Insufficient options for proto=fd
20:51:07 executing program 0:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r3, 0x1000000)
r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r5 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r5, 0x1000000)
sendfile(r4, r5, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000080)=0x9)
r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x6, 0x0, 0x3, 0x0, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:51:07 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'bfdno', 0x3d, r2}})

20:51:07 executing program 5:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dd\x00\x00\x00\x00i\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
r5 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r6 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r6, 0x1000000)
sendfile(r5, r6, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(r3, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r7, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x6, 0x8, 0x3, 0xf9af, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r8, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r8, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0xeefffdef)

20:51:07 executing program 1:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dd\x00\x00\x00\x00i\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
r5 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r6 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r6, 0x1000000)
sendfile(r5, r6, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(r3, &(0x7f0000000840), 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
r8 = memfd_create(0x0, 0x0)
ftruncate(r8, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x0)

20:51:07 executing program 4:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r3, 0x1000000)
r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r5 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r5, 0x1000000)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000140)={&(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x8000, 0x2})
sendfile(r4, r5, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40086602, 0x400007)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r6, 0x84, 0x1c, &(0x7f0000000240), &(0x7f0000000380)=0x4)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r7, 0x84, 0x16, &(0x7f0000000300)=ANY=[@ANYBLOB="080000000c050500001000000000030000000300cc6ee009ab3a449c362d3dd6310cf9b6d5f01eca1c64ad91696abea37d01528d51c1386932121744631820e6cf82e645"], &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r8, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r8, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:51:07 executing program 3:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
sendfile(r3, r4, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000240)={0x6, [0x5, 0x1000, 0x8, 0x3, 0xf9af, 0x3]}, &(0x7f0000000280)=0x10)
ftruncate(0xffffffffffffffff, 0x1000000)
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r6, 0x2272, &(0x7f00000002c0))
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r7, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r7, 0x81785501, &(0x7f0000000000)=""/56)
r8 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r8, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:51:07 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'dfdno', 0x3d, r2}})

[ 1047.436669][T29116] 9pnet: Insufficient options for proto=fd
[ 1047.472244][T29124] 9pnet: Insufficient options for proto=fd
20:51:07 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'gfdno', 0x3d, r2}})

[ 1047.559664][T29131] 9pnet: Insufficient options for proto=fd
[ 1047.571366][T29132] 9pnet: Insufficient options for proto=fd
20:51:07 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'qfdno', 0x3d, r2}})

[ 1047.657718][T29134] 9pnet: Insufficient options for proto=fd
[ 1047.668498][T29136] 9pnet: Insufficient options for proto=fd
20:51:07 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'sfdno', 0x3d, r2}})

[ 1047.778616][T29139] 9pnet: Insufficient options for proto=fd
[ 1047.788140][T29141] 9pnet: Insufficient options for proto=fd
20:51:07 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'ufdno', 0x3d, r2}})

[ 1047.887898][T29144] 9pnet: Insufficient options for proto=fd
[ 1047.898022][T29145] 9pnet: Insufficient options for proto=fd
20:51:08 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'w%dno', 0x3d, r2}})

[ 1048.001129][T29148] 9pnet: Insufficient options for proto=fd
[ 1048.013578][T29149] 9pnet: Insufficient options for proto=fd
[ 1048.097316][T29152] 9pnet: Insufficient options for proto=fd
[ 1048.109976][T29153] 9pnet: Insufficient options for proto=fd
20:51:14 executing program 3:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
sendfile(r3, r4, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000240)={0x7, [0x0, 0x5, 0x1000, 0x8, 0x3, 0xf9af, 0x3]}, &(0x7f0000000280)=0x12)
ftruncate(0xffffffffffffffff, 0x1000000)
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r6, 0x2272, &(0x7f00000002c0))
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r7, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r7, 0x81785501, &(0x7f0000000000)=""/56)
r8 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r8, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:51:14 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'w.dno', 0x3d, r2}})

20:51:14 executing program 5:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dd\x00\x00\x00\x00i\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
r5 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r6 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r6, 0x1000000)
sendfile(r5, r6, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(r3, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r7, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x6, 0x8, 0x3, 0xf9af, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r8, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r8, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0xeefffdef)

20:51:14 executing program 1:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dd\x00\x00\x00\x00i\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
r5 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r6 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r6, 0x1000000)
sendfile(r5, r6, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(r3, &(0x7f0000000840), 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
r8 = memfd_create(0x0, 0x0)
ftruncate(r8, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x0)

20:51:14 executing program 4:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = memfd_create(&(0x7f0000000140)='\x00', 0x0)
ftruncate(r3, 0x1000000)
r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r5 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r5, 0x1000000)
sendfile(r4, r5, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="080010000c2805000010000000001c0e000000000000452a0627bcb97059da4ea4c5650c67d217057e10e44e2c0f43356bc14b9d3b5d90bf27b121e05da2c804cdbc7aef82ab120a9d623f5408f127400f8d6271e38e6e7bd3be66d6d3809d4d18b1cffd8e25d04c0aeac30472e93a3e631fcfc1483d"], &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
prctl$PR_GET_TSC(0x19, &(0x7f0000000300))
ftruncate(0xffffffffffffffff, 0x1000000)
ioctl$EVIOCSABS2F(r7, 0x401845ef, &(0x7f0000000240)={0x8, 0x0, 0x7, 0xda, 0x3e, 0x3})
ioctl$KVM_SET_LAPIC(r7, 0x4400ae8f, &(0x7f00000005c0)={"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"})
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:51:14 executing program 0:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r1, 0x1000000)
r2 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r3 = memfd_create(&(0x7f00000003c0)='\x00\x00\x04\x00\x00\xc41P\xa2\xee\xaa\xd6\xbc\xf5\x94\x19[c\f\xe2\x00\x00\x00\x00\x00\x00', 0x3)
ftruncate(r3, 0x1000000)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r4, &(0x7f0000000200), 0x43400)
ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r4, 0xc0305616, &(0x7f0000000240)={0x0, {0x4, 0x10000}})
sendfile(r2, r3, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
r5 = creat(&(0x7f0000000140)='./file0\x00', 0x89)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, &(0x7f0000000540)=0xc1eb, 0x4)
ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000080)=0x1)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x32600)
write$cgroup_subtree(r7, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0xda00)
accept4$tipc(r7, &(0x7f0000000280), &(0x7f0000000300)=0x10, 0x80000)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r6, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
ioctl$sock_inet_tcp_SIOCATMARK(r6, 0x8905, &(0x7f0000000000))

[ 1054.989164][T29175] 9pnet: Insufficient options for proto=fd
[ 1055.002011][T29179] 9pnet: Insufficient options for proto=fd
20:51:15 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'w/dno', 0x3d, r2}})

20:51:15 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'w\\dno', 0x3d, r2}})

[ 1055.104983][T29189] 9pnet: Insufficient options for proto=fd
[ 1055.115237][T29190] 9pnet: Insufficient options for proto=fd
[ 1055.187461][T29192] 9pnet: Insufficient options for proto=fd
[ 1055.199446][T29194] 9pnet: Insufficient options for proto=fd
20:51:15 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfIno', 0x3d, r2}})

20:51:15 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfQno', 0x3d, r2}})

[ 1055.292386][T29197] 9pnet: Insufficient options for proto=fd
[ 1055.304724][T29198] 9pnet: Insufficient options for proto=fd
20:51:15 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfRno', 0x3d, r2}})

[ 1055.400189][T29201] 9pnet: Insufficient options for proto=fd
[ 1055.420300][T29203] 9pnet: Insufficient options for proto=fd
20:51:15 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfSno', 0x3d, r2}})

[ 1055.522046][T29206] 9pnet: Insufficient options for proto=fd
[ 1055.533380][T29207] 9pnet: Insufficient options for proto=fd
[ 1055.615547][T29210] 9pnet: Insufficient options for proto=fd
[ 1055.625671][T29212] 9pnet: Insufficient options for proto=fd
20:51:15 executing program 3:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
sendfile(r3, r4, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000240)={0x7, [0x0, 0x5, 0x1000, 0x8, 0x3, 0xf9af, 0x3]}, &(0x7f0000000280)=0x12)
ftruncate(0xffffffffffffffff, 0x1000000)
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r6, 0x2272, &(0x7f00000002c0))
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r7, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r7, 0x81785501, &(0x7f0000000000)=""/56)
r8 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r8, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:51:15 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfTno', 0x3d, r2}})

20:51:15 executing program 5:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dd\x00\x00\x00\x00i\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
r5 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r6 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r6, 0x1000000)
sendfile(r5, r6, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(r3, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r7, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x6, 0x8, 0x3, 0xf9af, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r8, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r8, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0x0)

20:51:15 executing program 1:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dd\x00\x00\x00\x00i\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
r5 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r6 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r6, 0x1000000)
sendfile(r5, r6, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(r3, &(0x7f0000000840), 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
r8 = memfd_create(0x0, 0x0)
ftruncate(r8, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x0)

[ 1055.871318][T29219] 9pnet: Insufficient options for proto=fd
20:51:15 executing program 4:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r3, 0x1000000)
r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r5 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r5, 0x1000000)
sendfile(r4, r5, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="080000000cee0400001000000000030000000300"], &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

[ 1055.953266][T29230] 9pnet: Insufficient options for proto=fd
20:51:21 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/568]}, 0x2b0)
ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000300)={0xf2b7fff, 0x401, 0x1, <r1=>r0, 0x0, &(0x7f0000000140)={0x0, 0x4, [], @p_u8=&(0x7f0000000000)=0x80}})
ioctl$SNDCTL_DSP_GETOSPACE(r1, 0x8010500c, &(0x7f0000000340))
r2 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r2, 0x40047452, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r5, 0x1000000)
r6 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r7 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r7, 0x1000000)
sendfile(r6, r7, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r8, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"]}, 0x2b0)
write$binfmt_misc(r8, &(0x7f0000000380)={'syz1'}, 0xfffffffffffffe7f)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r4, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4)
ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000080)=0x1)
r9 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r9, 0x84, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="0800a1c6a007ca5498662bcd726511efed4ff700000c054cd163e37514864dd2d0feee15330a504b51ed3f5d31670080acc7c21a872773057eae"], &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r10, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r10, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:51:21 executing program 5:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dd\x00\x00\x00\x00i\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
r5 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r6 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r6, 0x1000000)
sendfile(r5, r6, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(r3, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r7, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x6, 0x8, 0x3, 0xf9af, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r8, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r8, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0x0)

20:51:21 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfVno', 0x3d, r2}})

20:51:21 executing program 3:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
sendfile(r3, r4, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000240)={0x7, [0x0, 0x5, 0x1000, 0x8, 0x3, 0xf9af, 0x3]}, &(0x7f0000000280)=0x12)
ftruncate(0xffffffffffffffff, 0x1000000)
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r6, 0x2272, &(0x7f00000002c0))
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r7, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r7, 0x81785501, &(0x7f0000000000)=""/56)
r8 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r8, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:51:21 executing program 4:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r3, 0x1000000)
r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r5 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r5, 0x1000000)
sendfile(r4, r5, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x0, 0x0, 0x3, 0x0, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$LOOP_SET_FD(r7, 0x4c00, r0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r8, &(0x7f0000000200), 0x43400)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[], 0x32600)
write$cgroup_subtree(r9, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0xda00)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r9, 0x84, 0xa, &(0x7f0000000880)={0x1, 0x7e9, 0x201, 0xffff, 0x1, 0x8e97, 0x6, 0x1, <r10=>0x0}, &(0x7f0000001140)=0x20)
sendmmsg$inet_sctp(r8, &(0x7f0000001080)=[{&(0x7f0000000140)=@in6={0xa, 0x4e20, 0x7f, @mcast2, 0x81}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000300)="92895fc531cb0aaa60257cdb3625579a99c3ab45db1b3934a3993db8fbb12e6d4c122ef270b3008e4aeb91855f86004d4eef5cf400debe3af057fe6000290e8e944175ee234b613a77347a018c99b2d8b7106a2a5845313122b141aefc0d89022cc74735d2e13df600e532f7f29e19b4f682e115ce5e6bf323bc095abc03d76792be3bbcc8339578dc82d5707a685a68fd29d87e4dd91e0cbab2d4cc85cf8cb6eafb40da516f87d6c686397a6a371478463219b6a4a56f50870115", 0xbb}, {&(0x7f00000003c0)="3e11f8936cb6e987ea8ff5499842f26fe5621b009b4e96477070ac657f5e2a0162c9a2831f6ce6e63d58bb1be212ce8eb81c3ad933d5aa7c6da11f4d3db1a12cd8d4a1b446", 0x45}, {&(0x7f0000000440)="4217ab4de44810e7b12b79bb7b89762f6a87adab", 0x14}, {&(0x7f0000000480)="143fb7d9", 0x4}, {&(0x7f00000005c0)="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", 0xfe}, {&(0x7f00000004c0)="00e4cf5b6f70ceb1ee1cfae658e1b6509370db72f624694752a1982bc5086ea1bf8ee4199502cbb5c8904ee9e93c54b8e56707f2d8db6bdc9913da18a633f02f7c230897b511141bc50af0bf33c496e4d136c94c53eee1b85a6caa446bccfc74820f8990abc0ba08ebee10381a95dd1de0d92d6029e1c837df3199", 0x7b}, {&(0x7f00000006c0)="f513fd23a10dcef79bb8ce1f17969b093bf5e0a2006ef92aa32f1f5f6aa6431923959f13bd5322bc1629ad9ccaa58d4dda82c8fb7487856b321088571464c486af4e087a8e73ffb3b5fbceb5978c7e3b3cfed23b6674d78eef505de7e468074ccd349b6e1ea1ac4411b1482cdf63a40522f114212c6bea922e6cd63155df19429cd9448dd71f4fec9340eb482f08a2dd2ecaec719034dbce9bcf14b8be7e05c4c89d8eec", 0xa4}], 0x7, &(0x7f0000001180)=[@dstaddrv4={0x18, 0x84, 0x7, @multicast2}, @prinfo={0x18, 0x84, 0x5, {0x10, 0xcf6}}, @dstaddrv6={0x20, 0x84, 0x8, @rand_addr="8e9d32022f332768fafc1254d620eb53"}, @sndrcv={0x30, 0x84, 0x1, {0x4000, 0x1, 0x2, 0x57, 0x8001, 0x6, 0x9a, 0x401, r10}}], 0x80, 0x4000000}, {&(0x7f0000000540)=@in6={0xa, 0x4e20, 0x8, @loopback, 0x2}, 0x1c, &(0x7f0000000a80)=[{&(0x7f0000000880)}, {&(0x7f00000008c0)="b11682769ea5dd16a8e90a33a51d2be17ce35698c84dd213a739a1ae5d29577d207e6e77081d87176ebb6f5cd6ebc4640b0fcaa7965163a13d1b93b836540056a28d519c4531039aa4d4432cf8aea4a6b7eaf55a6b82cc6f79bed226f54f933dd516a604ca368c229877e0ce83821fcffc5b54e675702eeaaddc8ff2e31cf9244c8e3ce3c9b9bbaeebf1095ee3c437d8f9866cd8186fc8622a42df9d", 0x9c}, {&(0x7f0000000980)="431eee7cba1fc633b59e8c35b81a5be15fe0d94feeecf7c8915d76ae74529e5b9fccc9817f30fbcad860f5a95ff59dce3ca59131fb2aefab3f838f783596997ddec454da4abeb5828d254ad0b4bdf5a726d26796cc1c2d16abaa04696041255d40044555633c9c14831aa33aae9ea1b88def53aeae3ba6137fd536ce23c8a8e9e1a90d32408104a18af80e409387399433173358871e3c0eb79491c40612e7ffe02a15ff89db5be8477273e4df0b2436b8b00f389508122e771cb35dd3d8b969ad92a6fa2d750060ea4f53eb334fd617ca1c06b004276f2ca020bc18ee9c7b1dd79d1c72ea817fac23ca4fddfdec0dbf2843abf8e226e3dc", 0xf8}], 0x3, &(0x7f0000000ac0)=[@authinfo={0x18, 0x84, 0x6, {0xfffa}}, @dstaddrv6={0x20, 0x84, 0x8, @mcast2}, @authinfo={0x18, 0x84, 0x6, {0x2}}, @init={0x18, 0x84, 0x0, {0xe9, 0x3ff, 0x0, 0x7ff}}, @dstaddrv6={0x20, 0x84, 0x8, @rand_addr="33c66498dd224be08dacfcb4aee9877c"}], 0x88, 0x7a379f8ab4d3b4f6}, {&(0x7f0000000b80)=@in={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000f40)=[{&(0x7f0000000bc0)="a4bbe32029c7e9b4f6a9b96301515cd1b321f003a988e7111b979e6ff95ce0981c949e3b0fc02d54bc03d4680165b11107ce3103a693b08d5e2e200cd659fe8e36e4ff7a0f4ce06f46403470b52b0a84f521956a", 0x54}, {&(0x7f0000000c40)="c1dcc1ee1b4ee62e5298637995a0fd283ba7f9bae60de21ba7af1a612e50c1e8ce3386d73be528d66127e702f1039ae591e83ec37a48140723f102495ca65437498b7eb822ae869a5b8f18eed961df28e767c4093ce420e93e5d071352ec6462b594483e142a7e8025912ba80c2446924b7bf0bc9432d5c309fd4bacb6b6e4e91f727acd170bc80ff89fe79e2ad79c0e38827be64c9a11e0a3f48bc13e4404da3a399877a2432bb3f17d2df60f4312a806f1aa890468933bdf3341f7c4186ce6d731b0c88097b6efe8066b3b4be50969c1600a8396378bb9574690e73c97ae8df7d53c34cf33d9", 0xe7}, {&(0x7f0000000d40)="66c4cfd2e33941bf59590fb816dd8e066c7a99f7ed11344990feeaf242515455a9de8a11cef74e57a8de1c32fa9032bbf8a49ef3e1016d910a3657fb90fcbee25eb903e6ddb03b7de2c27e4f65fe0c2f4bb0abdae443f3c328bfc81cd20c1664858982f0da6b6ba1139df431661a2c20952bd6d841093ee6f09f64242c935c233c133889a51572ee2a505042a19b348364046175d2d83846a966bcf41d2517f5309b83ce8101f0cf77a23d43abe8cb108d841947af392aab6cfd66", 0xbb}, {&(0x7f0000000e00)="3081f177cffe6d4886331cbf5b7f9478b2a0daad96eaa4973e570310ef4eb4be61979a649fd821395cda112f6df718750802ae24085dc237fe323c76abc9fdf0523569dcc7ca43ab42a5bfc4b198324c95bb0672fe7e53690bb354f98a20556a8249ea8ca461e0a207de03f4003b4e13057646ad8813f9e013e5f617d8781392adc75a34b35f2035be71657337bdada2038d13626096976b0f6a9def98d74ef334f02ec5c0f7bb548a33f89874f427570238f9ef31a7d79b472d902febdb5fb8b38f992bcbd3007db138a1d7ad463fd44277856b64fa717449f8c566", 0xdc}, {&(0x7f0000000f00)="03c21c865607fb5b63c0760924aed0fc40161a3e8c42d706", 0x18}], 0x5, &(0x7f0000000fc0)=[@authinfo={0x18, 0x84, 0x6, {0x2}}, @init={0x18, 0x84, 0x0, {0x8, 0x8f, 0x7fff, 0x6}}, @dstaddrv6={0x20, 0x84, 0x8, @remote}, @dstaddrv4={0x18, 0x84, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}, @init={0x18, 0x84, 0x0, {0x7, 0x8, 0x3, 0x7fff}}, @authinfo={0x18, 0x84, 0x6, {0x3}}, @dstaddrv4={0x18, 0x84, 0x7, @remote}], 0xb0, 0x4001}], 0x3, 0x476df17a89dcea6a)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
ioctl$KDDELIO(r7, 0x4b35, 0xffffffff00000001)

20:51:21 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
clone(0x1000000210007fb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0)
write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c460000002ed8e4f9e765ce27b90300060000000000000000b738000000000035f4c38442a3bc82200005000000000203000000000000004000000000000000000000ffff080000000000090000000000000000000003000000000000000d60395a7088d7c27f000000a101000100030000000000a999caabac9d880348d1849ae697139777cc64e81a1ac4bc769e8c916c840d410c05e31dff0eca1ff9fc89d1ffd9f2174407619e3a318378887fa2920241332d623872339d63e84e2d5d14eefab45c2caab9c616bd06ab9cb5f0f55c57ea000000"], 0xd8)
execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="805400003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4802, 0x0)

[ 1061.502101][T29257] ERROR: Domain '<kernel> /sbin/init /etc/init.d/rc /sbin/startpar /etc/init.d/ssh /sbin/start-stop-daemon /usr/sbin/sshd /usr/sbin/sshd /bin/bash /root/syz-fuzzer /root/syz-executor.1 proc:/self/fd/6' not defined.
20:51:21 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
clone(0x1000000210007fb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0)
write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c460000002ed8e4f9e765ce27b90300060000000000000000b738000000000035f4c38442a3bc82200005000000000203000000000000004000000000000000000000ffff080000000000090000000000000000000003000000000000000d60395a7088d7c27f000000a101000100030000000000a999caabac9d880348d1849ae697139777cc64e81a1ac4bc769e8c916c840d410c05e31dff0eca1ff9fc89d1ffd9f2174407619e3a318378887fa2920241332d623872339d63e84e2d5d14eefab45c2caab9c616bd06ab9cb5f0f55c57ea000000"], 0xd8)
execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="805400003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4802, 0x0)

[ 1061.542484][T29258] 9pnet: Insufficient options for proto=fd
[ 1061.562331][T29267] 9pnet: Insufficient options for proto=fd
20:51:21 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wf\\no', 0x3d, r2}})

20:51:21 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
clone(0x1000000210007fb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0)
write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c460000002ed8e4f9e765ce27b90300060000000000000000b738000000000035f4c38442a3bc82200005000000000203000000000000004000000000000000000000ffff080000000000090000000000000000000003000000000000000d60395a7088d7c27f000000a101000100030000000000a999caabac9d880348d1849ae697139777cc64e81a1ac4bc769e8c916c840d410c05e31dff0eca1ff9fc89d1ffd9f2174407619e3a318378887fa2920241332d623872339d63e84e2d5d14eefab45c2caab9c616bd06ab9cb5f0f55c57ea000000"], 0xd8)
execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="805400003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4802, 0x0)

20:51:21 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
clone(0x1000000210007fb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0)
write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c460000002ed8e4f9e765ce27b90300060000000000000000b738000000000035f4c38442a3bc82200005000000000203000000000000004000000000000000000000ffff080000000000090000000000000000000003000000000000000d60395a7088d7c27f000000a101000100030000000000a999caabac9d880348d1849ae697139777cc64e81a1ac4bc769e8c916c840d410c05e31dff0eca1ff9fc89d1ffd9f2174407619e3a318378887fa2920241332d623872339d63e84e2d5d14eefab45c2caab9c616bd06ab9cb5f0f55c57ea000000"], 0xd8)
execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="805400003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4802, 0x0)

[ 1061.790924][T29283] 9pnet: Insufficient options for proto=fd
[ 1061.813554][T29286] 9pnet: Insufficient options for proto=fd
20:51:21 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfbno', 0x3d, r2}})

20:51:21 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
dup(r0)
clone(0x1000000210007fb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0)
write$binfmt_elf32(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c460000002ed8e4f9e765ce27b90300060000000000000000b738000000000035f4c38442a3bc82200005000000000203000000000000004000000000000000000000ffff080000000000090000000000000000000003000000000000000d60395a7088d7c27f000000a101000100030000000000a999caabac9d880348d1849ae697139777cc64e81a1ac4bc769e8c916c840d410c05e31dff0eca1ff9fc89d1ffd9f2174407619e3a318378887fa2920241332d623872339d63e84e2d5d14eefab45c2caab9c616bd06ab9cb5f0f55c57ea000000"], 0xd8)
execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="805400003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4802, 0x0)

[ 1061.995500][T29298] 9pnet: Insufficient options for proto=fd
[ 1062.038299][T29301] 9pnet: Insufficient options for proto=fd
20:51:30 executing program 0:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r3, 0x1000000)
r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r5 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r5, 0x1000000)
sendfile(r4, r5, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000080)=0x1)
r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000300)=ANY=[@ANYBLOB="080000000c0505000010060000000300004003004bb3454e0ac963f85a13981aed2683b360ca47f707000000000000001e5c00"/65], &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:51:30 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
dup(r0)
clone(0x1000000210007fb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0)
write$binfmt_elf32(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c460000002ed8e4f9e765ce27b90300060000000000000000b738000000000035f4c38442a3bc82200005000000000203000000000000004000000000000000000000ffff080000000000090000000000000000000003000000000000000d60395a7088d7c27f000000a101000100030000000000a999caabac9d880348d1849ae697139777cc64e81a1ac4bc769e8c916c840d410c05e31dff0eca1ff9fc89d1ffd9f2174407619e3a318378887fa2920241332d623872339d63e84e2d5d14eefab45c2caab9c616bd06ab9cb5f0f55c57ea000000"], 0xd8)
execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="805400003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4802, 0x0)

20:51:30 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfgno', 0x3d, r2}})

20:51:30 executing program 5:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dd\x00\x00\x00\x00i\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
r5 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r6 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r6, 0x1000000)
sendfile(r5, r6, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(r3, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r7, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x6, 0x8, 0x3, 0xf9af, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r8, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r8, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0x0)

20:51:30 executing program 3:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
sendfile(r3, r4, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000240)={0x7, [0x50c, 0x5, 0x1000, 0x8, 0x3, 0xf9af, 0x3]}, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r6, 0x2272, &(0x7f00000002c0))
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r7, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r7, 0x81785501, &(0x7f0000000000)=""/56)
r8 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r8, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:51:30 executing program 4:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r3, 0x1000000)
r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r5 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r5, 0x1000000)
sendfile(r4, r5, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
ioctl$RTC_UIE_ON(r5, 0x7003)
getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000300)=@known='trusted.overlay.nlink\x00', &(0x7f0000000340)=""/104, 0x68)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x0, 0x0, 0x3, 0x0, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:51:30 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
dup(r0)
clone(0x1000000210007fb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0)
write$binfmt_elf32(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c460000002ed8e4f9e765ce27b90300060000000000000000b738000000000035f4c38442a3bc82200005000000000203000000000000004000000000000000000000ffff080000000000090000000000000000000003000000000000000d60395a7088d7c27f000000a101000100030000000000a999caabac9d880348d1849ae697139777cc64e81a1ac4bc769e8c916c840d410c05e31dff0eca1ff9fc89d1ffd9f2174407619e3a318378887fa2920241332d623872339d63e84e2d5d14eefab45c2caab9c616bd06ab9cb5f0f55c57ea000000"], 0xd8)
execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="805400003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4802, 0x0)

[ 1070.126622][T29331] 9pnet: Insufficient options for proto=fd
20:51:30 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
clone(0x1000000210007fb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0)
write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c460000002ed8e4f9e765ce27b90300060000000000000000b738000000000035f4c38442a3bc82200005000000000203000000000000004000000000000000000000ffff080000000000090000000000000000000003000000000000000d60395a7088d7c27f000000a101000100030000000000a999caabac9d880348d1849ae697139777cc64e81a1ac4bc769e8c916c840d410c05e31dff0eca1ff9fc89d1ffd9f2174407619e3a318378887fa2920241332d623872339d63e84e2d5d14eefab45c2caab9c616bd06ab9cb5f0f55c57ea000000"], 0xd8)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="805400003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4802, 0x0)

[ 1070.200235][T29339] 9pnet: Insufficient options for proto=fd
[ 1070.236574][T29341] EXT4-fs (loop1): bad geometry: block count 580964351930795064 exceeds size of device (4096 blocks)
20:51:30 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfqno', 0x3d, r2}})

20:51:30 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
clone(0x1000000210007fb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0)
write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c460000002ed8e4f9e765ce27b90300060000000000000000b738000000000035f4c38442a3bc82200005000000000203000000000000004000000000000000000000ffff080000000000090000000000000000000003000000000000000d60395a7088d7c27f000000a101000100030000000000a999caabac9d880348d1849ae697139777cc64e81a1ac4bc769e8c916c840d410c05e31dff0eca1ff9fc89d1ffd9f2174407619e3a318378887fa2920241332d623872339d63e84e2d5d14eefab45c2caab9c616bd06ab9cb5f0f55c57ea000000"], 0xd8)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="805400003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4802, 0x0)

[ 1070.408806][T29351] 9pnet: Insufficient options for proto=fd
[ 1070.425262][T29353] 9pnet: Insufficient options for proto=fd
20:51:30 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfsno', 0x3d, r2}})

[ 1070.573543][T29357] 9pnet: Insufficient options for proto=fd
20:51:30 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
clone(0x1000000210007fb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0)
write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c460000002ed8e4f9e765ce27b90300060000000000000000b738000000000035f4c38442a3bc82200005000000000203000000000000004000000000000000000000ffff080000000000090000000000000000000003000000000000000d60395a7088d7c27f000000a101000100030000000000a999caabac9d880348d1849ae697139777cc64e81a1ac4bc769e8c916c840d410c05e31dff0eca1ff9fc89d1ffd9f2174407619e3a318378887fa2920241332d623872339d63e84e2d5d14eefab45c2caab9c616bd06ab9cb5f0f55c57ea000000"], 0xd8)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="805400003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4802, 0x0)

[ 1070.622805][T29362] 9pnet: Insufficient options for proto=fd
20:51:37 executing program 0:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r3, 0x1000000)
r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r5 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
sendfile(r4, r5, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000080)=0x1)
r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x6, 0x0, 0x3, 0x0, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
ioctl$TCXONC(r7, 0x540a, 0x1)

20:51:37 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfuno', 0x3d, r2}})

20:51:37 executing program 3:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
sendfile(r3, r4, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000240)={0x7, [0x50c, 0x5, 0x1000, 0x8, 0x3, 0xf9af, 0x3]}, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r6, 0x2272, &(0x7f00000002c0))
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r7, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r7, 0x81785501, &(0x7f0000000000)=""/56)
r8 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r8, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:51:37 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
clone(0x1000000210007fb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0)
execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="805400003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4802, 0x0)

20:51:37 executing program 4:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0x43400)
ioctl$sock_bt_bnep_BNEPCONNDEL(r2, 0x400442c9, &(0x7f0000000500)={0x4, @remote})
r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
r5 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r6 = syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x1f, 0x40)
sendmsg$alg(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000380)="57ad8f03e7237ed85c44b9781ca82a2afb4a06089ee28ae26cd1467bbeed34c643ff8d8a5b5f6ef5836d2fc3023d73c242dd117411eefebc31d68c28c6743d557c227d", 0x43}, {&(0x7f0000000400)="dce45b782dd16d0a2be80a80d37328baaa45cad5f283274c043b5f98ce30362a9b3fe97451b086819a4af53644e7c9668f3b7ea00929c1de0611b43f0b8ec6a5d602557b", 0x44}], 0x2, 0x0, 0x0, 0x4851}, 0x800)
r7 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r7, 0x1000000)
sendfile(r5, r7, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r3)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
r8 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r8, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x0, 0x0, 0x3, 0x0, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r10, 0x40086602, 0x400007)
ioctl$VIDIOC_G_EXT_CTRLS(r10, 0xc0205647, &(0x7f0000000300)={0x9c0000, 0x8, 0x7, r9, 0x0, &(0x7f0000000140)={0x9b090e, 0xcd}})
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r9, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r9, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:51:37 executing program 5:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x10, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x3c)
bpf$MAP_UPDATE_ELEM(0x3, &(0x7f0000000180)={r0, &(0x7f0000000340), 0x0}, 0x20)

20:51:37 executing program 5:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f00000001c0)={'fiyt\a@\x00\x00\x00\x00\x00\x03\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xfc\xff\xff\xff\x00'}, &(0x7f0000000080)=0x44)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

[ 1077.525390][T29387] 9pnet: Insufficient options for proto=fd
[ 1077.550005][T29394] 9pnet: Insufficient options for proto=fd
20:51:37 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfwno', 0x3d, r2}})

20:51:37 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
clone(0x1000000210007fb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0)
execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="805400003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4802, 0x0)

20:51:37 executing program 5:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x2d}, {0x80000006}]}, 0x10)
syz_emit_ethernet(0x6e, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0)

20:51:37 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
clone(0x1000000210007fb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0)
execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="805400003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4802, 0x0)

[ 1077.894381][T29424] 9pnet: Insufficient options for proto=fd
[ 1077.937598][T29427] 9pnet: Insufficient options for proto=fd
20:51:38 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfd%o', 0x3d, r2}})

[ 1078.104501][T29438] 9pnet: Insufficient options for proto=fd
[ 1078.190442][T29440] 9pnet: Insufficient options for proto=fd
20:51:44 executing program 0:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r3, 0x1000000)
r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r5 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r5, 0x1000000)
sendfile(r4, r5, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000080)=0x1)
syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x7, 0x1480)
r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x6, 0x0, 0x3, 0x0, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:51:44 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
clone(0x1000000210007fb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c460000002ed8e4f9e765ce27b90300060000000000000000b738000000000035f4c38442a3bc82200005000000000203000000000000004000000000000000000000ffff080000000000090000000000000000000003000000000000000d60395a7088d7c27f000000a101000100030000000000a999caabac9d880348d1849ae697139777cc64e81a1ac4bc769e8c916c840d410c05e31dff0eca1ff9fc89d1ffd9f2174407619e3a318378887fa2920241332d623872339d63e84e2d5d14eefab45c2caab9c616bd06ab9cb5f0f55c57ea000000"], 0xd8)
execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="805400003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4802, 0x0)

20:51:44 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(ccm(camellia))\x00'}, 0x58)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="36a951112b7bb9a3ba52dcccb5c89778587a0a", 0x13)

20:51:44 executing program 3:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
sendfile(r3, r4, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000240)={0x7, [0x50c, 0x5, 0x1000, 0x8, 0x3, 0xf9af, 0x3]}, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r6, 0x2272, &(0x7f00000002c0))
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r7, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r7, 0x81785501, &(0x7f0000000000)=""/56)
r8 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r8, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:51:44 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdn%', 0x3d, r2}})

20:51:44 executing program 4:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r3, 0x1000000)
r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r5 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r5, 0x1000000)
sendfile(r4, r5, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x0, 0x0, 0x3, 0x0, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
prctl$PR_SET_DUMPABLE(0x4, 0x9095200fbb894dfb)

[ 1084.839292][T29456] 9pnet: Insufficient options for proto=fd
[ 1084.878436][T29464] 9pnet: Insufficient options for proto=fd
20:51:44 executing program 5:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2f42f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x240, 0x0, 0xa)

20:51:44 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdn\\', 0x3d, r2}})

20:51:44 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
clone(0x1000000210007fb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c460000002ed8e4f9e765ce27b90300060000000000000000b738000000000035f4c38442a3bc82200005000000000203000000000000004000000000000000000000ffff080000000000090000000000000000000003000000000000000d60395a7088d7c27f000000a101000100030000000000a999caabac9d880348d1849ae697139777cc64e81a1ac4bc769e8c916c840d410c05e31dff0eca1ff9fc89d1ffd9f2174407619e3a318378887fa2920241332d623872339d63e84e2d5d14eefab45c2caab9c616bd06ab9cb5f0f55c57ea000000"], 0xd8)
execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="805400003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4802, 0x0)

20:51:45 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
clone(0x1000000210007fb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c460000002ed8e4f9e765ce27b90300060000000000000000b738000000000035f4c38442a3bc82200005000000000203000000000000004000000000000000000000ffff080000000000090000000000000000000003000000000000000d60395a7088d7c27f000000a101000100030000000000a999caabac9d880348d1849ae697139777cc64e81a1ac4bc769e8c916c840d410c05e31dff0eca1ff9fc89d1ffd9f2174407619e3a318378887fa2920241332d623872339d63e84e2d5d14eefab45c2caab9c616bd06ab9cb5f0f55c57ea000000"], 0xd8)
execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="805400003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4802, 0x0)

[ 1085.115505][T29480] 9pnet: Insufficient options for proto=fd
20:51:45 executing program 5:
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x4000)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clone(0x48202100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$bt_l2cap(r0, 0x0, 0x0)
accept(r0, 0x0, 0x0)
setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0)
r1 = syz_open_procfs(0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000180), 0x5)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0))
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001980)={'nr0\x00'})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000002b00)={{{@in=@broadcast, @in6=@ipv4={[], [], @local}}}, {{@in6=@ipv4={[], [], @multicast2}}, 0x0, @in=@empty}}, 0x0)
sendmmsg$inet(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="e7a1e0016836661c1b9f00000000000000b7b331019246098f00849ee17cfe020a9c757608559e9602a5e94b1f34efe17aa4545bc36d1a0af8df23ccb16703ef09101f364eefa9c6177e9124684d2d37a0b990ed830e6f6781f357e359f6e284a483bcab421732db85cbc20c24fae300"/129, @ANYBLOB="ac1e1001ea107c336ba87094"], 0xc}}], 0x1, 0x4000010)
perf_event_open(&(0x7f0000940000)={0x0, 0x70, 0xfffffffffffffffe, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xc, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
write$FUSE_STATFS(r2, &(0x7f0000000240)={0x60, 0x0, 0x5, {{0x7, 0x1bf, 0x0, 0xb6, 0x1, 0x0, 0x0, 0x6}}}, 0x60)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, 0x0)
perf_event_open$cgroup(&(0x7f0000000140)={0x0, 0x70, 0x7f, 0x1, 0x81, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext, 0x20, 0x0, 0x4, 0x4, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0)
r3 = socket(0x1000000010, 0x0, 0x0)
dup(r3)
r4 = open(0x0, 0x0, 0x0)
ftruncate(r4, 0x1045)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c)
r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000240)='fou\x00')
sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x5044800}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYPTR64], 0x3}, 0x1, 0x0, 0x0, 0x20000000}, 0x20044816)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x1, 0x0)
writev(r6, &(0x7f00000023c0), 0x1000000000000252)
ioctl$TIOCNXCL(r6, 0x540d)

[ 1085.162579][T29485] 9pnet: Insufficient options for proto=fd
20:51:45 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0)
write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c460000002ed8e4f9e765ce27b90300060000000000000000b738000000000035f4c38442a3bc82200005000000000203000000000000004000000000000000000000ffff080000000000090000000000000000000003000000000000000d60395a7088d7c27f000000a101000100030000000000a999caabac9d880348d1849ae697139777cc64e81a1ac4bc769e8c916c840d410c05e31dff0eca1ff9fc89d1ffd9f2174407619e3a318378887fa2920241332d623872339d63e84e2d5d14eefab45c2caab9c616bd06ab9cb5f0f55c57ea000000"], 0xd8)
execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="805400003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4802, 0x0)

[ 1085.352387][T29491] IPVS: ftp: loaded support on port[0] = 21
[ 1085.421866][T29495] EXT4-fs (loop1): bad geometry: block count 580964351930795064 exceeds size of device (4096 blocks)
20:51:53 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0)
write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c460000002ed8e4f9e765ce27b90300060000000000000000b738000000000035f4c38442a3bc82200005000000000203000000000000004000000000000000000000ffff080000000000090000000000000000000003000000000000000d60395a7088d7c27f000000a101000100030000000000a999caabac9d880348d1849ae697139777cc64e81a1ac4bc769e8c916c840d410c05e31dff0eca1ff9fc89d1ffd9f2174407619e3a318378887fa2920241332d623872339d63e84e2d5d14eefab45c2caab9c616bd06ab9cb5f0f55c57ea000000"], 0xd8)
execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="805400003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4802, 0x0)

20:51:53 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x3b})

20:51:53 executing program 5:

20:51:53 executing program 3:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
sendfile(r3, r4, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000240)={0x7, [0x50c, 0x5, 0x1000, 0x8, 0x3, 0xf9af, 0x3]}, &(0x7f0000000280)=0x12)
ftruncate(0xffffffffffffffff, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r6, 0x2272, &(0x7f00000002c0))
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r7, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r7, 0x81785501, &(0x7f0000000000)=""/56)
r8 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r8, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:51:53 executing program 0:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r3, 0x1000000)
r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r5 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r5, 0x1000000)
sendfile(r4, r5, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
lseek(0xffffffffffffffff, 0x7f, 0x1)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40086602, 0x400007)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000380)={<r7=>0x0, @in={{0x2, 0x4e24, @loopback}}}, &(0x7f0000000140)=0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000000440)={0xfff9, 0x2, 0x53746c1f6e0da2b1, 0x7, 0x0, 0x5, 0x7fffffff, 0xd7fe, r7}, 0x20)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000080)=0x1)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000000)={0x30, 0x5, 0x0, {0x0, 0xffffffff, 0x8001, 0x9}}, 0x30)
r8 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r8, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x6, 0x0, 0x3, 0x0, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r9, 0x40086602, 0x400007)
read$alg(r3, &(0x7f0000000300)=""/83, 0x53)
ioctl$SG_GET_RESERVED_SIZE(r9, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0x401, 0xeefffdef)

20:51:53 executing program 4:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"]}, 0x2b0)
fcntl$getown(r1, 0x9)
r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
r5 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r6 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r6, 0x1000000)
sendfile(r5, r6, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3)
ioctl$int_in(r2, 0x5421, &(0x7f0000000080)=0x1)
r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r7, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x0, 0x0, 0x3, 0x0, 0x3]}, &(0x7f0000000280)=0x14)
bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast2}, 0x4bb}, 0x1c)
ftruncate(0xffffffffffffffff, 0x1000000)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r8, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r8, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:51:53 executing program 5:

[ 1093.424191][T29524] 9pnet: Insufficient options for proto=fd
[ 1093.458792][T29528] 9pnet: Insufficient options for proto=fd
20:51:53 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

[ 1093.516292][T29523] EXT4-fs (loop1): bad geometry: block count 580964351930795064 exceeds size of device (4096 blocks)
20:51:53 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0)
write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c460000002ed8e4f9e765ce27b90300060000000000000000b738000000000035f4c38442a3bc82200005000000000203000000000000004000000000000000000000ffff080000000000090000000000000000000003000000000000000d60395a7088d7c27f000000a101000100030000000000a999caabac9d880348d1849ae697139777cc64e81a1ac4bc769e8c916c840d410c05e31dff0eca1ff9fc89d1ffd9f2174407619e3a318378887fa2920241332d623872339d63e84e2d5d14eefab45c2caab9c616bd06ab9cb5f0f55c57ea000000"], 0xd8)
execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="805400003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4802, 0x0)

20:51:53 executing program 5:

20:51:53 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x2}})

20:51:53 executing program 5:

[ 1093.870188][T29545] EXT4-fs (loop1): bad geometry: block count 580964351930795064 exceeds size of device (4096 blocks)
20:51:53 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x3}})

20:51:54 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180))
clone(0x1000000210007fb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0)
write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c460000002ed8e4f9e765ce27b90300060000000000000000b738000000000035f4c38442a3bc82200005000000000203000000000000004000000000000000000000ffff080000000000090000000000000000000003000000000000000d60395a7088d7c27f000000a101000100030000000000a999caabac9d880348d1849ae697139777cc64e81a1ac4bc769e8c916c840d410c05e31dff0eca1ff9fc89d1ffd9f2174407619e3a318378887fa2920241332d623872339d63e84e2d5d14eefab45c2caab9c616bd06ab9cb5f0f55c57ea000000"], 0xd8)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="805400003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4802, 0x0)

20:51:54 executing program 5:

[ 1094.148508][T29530] vivid-003: kernel_thread() failed
20:51:54 executing program 3:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
sendfile(r3, r4, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000240)={0x7, [0x50c, 0x5, 0x1000, 0x8, 0x3, 0xf9af, 0x3]}, &(0x7f0000000280)=0x12)
ftruncate(0xffffffffffffffff, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r6, 0x2272, &(0x7f00000002c0))
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r7, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r7, 0x81785501, &(0x7f0000000000)=""/56)
r8 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r8, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:52:02 executing program 0:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
r1 = syz_open_dev$vbi(0x0, 0x1, 0x2)
clock_gettime(0x0, &(0x7f0000000140)={<r2=>0x0, <r3=>0x0})
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r4, &(0x7f0000000200), 0x43400)
ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000300)={0x5, 0x3, 0x4, 0x4000000, 0x7, {r2, r3/1000+30000}, {0x5, 0x2, 0x7, 0x9, 0x9, 0x2, "c4b92ca5"}, 0xb5ed, 0x3, @fd=r4, 0x9, 0x0, r1})
mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000380)=""/214)
r5 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r7, 0x1000000)
r8 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r9 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r9, 0x1000000)
sendfile(r8, r9, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r6, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r5, 0x2405, r6)
ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000080)=0x1)
r10 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r10, 0x84, 0x16, &(0x7f0000000000)=ANY=[@ANYBLOB="0800001af705ec3da60000000b006efd0172a8000000000000"], &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r11, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r11, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:52:02 executing program 4:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r3, 0x1000000)
r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r5 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r5, 0x1000000)
sendfile(r4, r5, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="0802f913d2719ec9ecca0000000005000000a777"], &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:52:02 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x4}})

20:52:02 executing program 5:

20:52:02 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180))
clone(0x1000000210007fb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0)
write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c460000002ed8e4f9e765ce27b90300060000000000000000b738000000000035f4c38442a3bc82200005000000000203000000000000004000000000000000000000ffff080000000000090000000000000000000003000000000000000d60395a7088d7c27f000000a101000100030000000000a999caabac9d880348d1849ae697139777cc64e81a1ac4bc769e8c916c840d410c05e31dff0eca1ff9fc89d1ffd9f2174407619e3a318378887fa2920241332d623872339d63e84e2d5d14eefab45c2caab9c616bd06ab9cb5f0f55c57ea000000"], 0xd8)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="805400003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4802, 0x0)

20:52:02 executing program 3:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
sendfile(r3, r4, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000240)={0x7, [0x50c, 0x5, 0x1000, 0x8, 0x3, 0xf9af, 0x3]}, &(0x7f0000000280)=0x12)
ftruncate(0xffffffffffffffff, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r6, 0x2272, &(0x7f00000002c0))
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r7, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r7, 0x81785501, &(0x7f0000000000)=""/56)
r8 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r8, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:52:02 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180))
clone(0x1000000210007fb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0)
write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c460000002ed8e4f9e765ce27b90300060000000000000000b738000000000035f4c38442a3bc82200005000000000203000000000000004000000000000000000000ffff080000000000090000000000000000000003000000000000000d60395a7088d7c27f000000a101000100030000000000a999caabac9d880348d1849ae697139777cc64e81a1ac4bc769e8c916c840d410c05e31dff0eca1ff9fc89d1ffd9f2174407619e3a318378887fa2920241332d623872339d63e84e2d5d14eefab45c2caab9c616bd06ab9cb5f0f55c57ea000000"], 0xd8)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="805400003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4802, 0x0)

20:52:02 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
recvmmsg(r0, &(0x7f0000001d00)=[{{0x0, 0xa, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"/774], 0x14}}, 0x0)

20:52:02 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x5}})

20:52:03 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6}})

20:52:03 executing program 1:
r0 = dup(0xffffffffffffffff)
clone(0x1000000210007fb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0)
write$binfmt_elf32(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c460000002ed8e4f9e765ce27b90300060000000000000000b738000000000035f4c38442a3bc82200005000000000203000000000000004000000000000000000000ffff080000000000090000000000000000000003000000000000000d60395a7088d7c27f000000a101000100030000000000a999caabac9d880348d1849ae697139777cc64e81a1ac4bc769e8c916c840d410c05e31dff0eca1ff9fc89d1ffd9f2174407619e3a318378887fa2920241332d623872339d63e84e2d5d14eefab45c2caab9c616bd06ab9cb5f0f55c57ea000000"], 0xd8)
execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="805400003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4802, 0x0)

[ 1103.160309][T29612] EXT4-fs (loop1): bad geometry: block count 580964351930795064 exceeds size of device (4096 blocks)
20:52:03 executing program 5:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet(0x2, 0x2, 0x0)
dup(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
pipe(&(0x7f00000001c0))
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast1, 0x8d})
ptrace$setopts(0x4206, r3, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xfffffffffffffd71}, {0x0, 0x1e1}, {&(0x7f00000002c0)=""/66, 0x9}], 0x3, 0x0, 0xb9, 0x0)
tkill(r3, 0x3c)
ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r3, 0x0, 0x0)

[ 1103.425391][T29629] EXT4-fs (loop1): bad geometry: block count 580964351930795064 exceeds size of device (4096 blocks)
20:52:09 executing program 1:
r0 = dup(0xffffffffffffffff)
clone(0x1000000210007fb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0)
write$binfmt_elf32(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c460000002ed8e4f9e765ce27b90300060000000000000000b738000000000035f4c38442a3bc82200005000000000203000000000000004000000000000000000000ffff080000000000090000000000000000000003000000000000000d60395a7088d7c27f000000a101000100030000000000a999caabac9d880348d1849ae697139777cc64e81a1ac4bc769e8c916c840d410c05e31dff0eca1ff9fc89d1ffd9f2174407619e3a318378887fa2920241332d623872339d63e84e2d5d14eefab45c2caab9c616bd06ab9cb5f0f55c57ea000000"], 0xd8)
execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="805400003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4802, 0x0)

20:52:09 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x7}})

20:52:09 executing program 3:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
sendfile(r3, r4, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000240)={0x7, [0x50c, 0x5, 0x1000, 0x8, 0x3, 0xf9af, 0x3]}, &(0x7f0000000280)=0x12)
ftruncate(0xffffffffffffffff, 0x1000000)
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r6, 0x2272, &(0x7f00000002c0))
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r7, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r7, 0x81785501, &(0x7f0000000000)=""/56)
r8 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r8, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:52:09 executing program 4:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r3, 0x1000000)
r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r5 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r5, 0x1000000)
sendfile(r4, r5, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x0, 0x0, 0x3, 0x0, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
ioctl$SIOCAX25GETINFO(r6, 0x89ed, &(0x7f0000000300))
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
ftruncate(0xffffffffffffffff, 0xffffff)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:52:09 executing program 5:
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
connect$llc(r0, &(0x7f0000000300)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x10)

20:52:09 executing program 0:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$userio(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/userio\x00', 0x8000, 0x0)
r3 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r3, 0x1000000)
r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000300)={0x0, @sco={0x1f, {0x3, 0x1, 0x0, 0x0, 0x4, 0xfb}}, @ax25={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6}, @ax25={0x3, @null, 0x5}, 0x6, 0x0, 0x0, 0x0, 0xffff, &(0x7f0000000140)='lo\x00', 0x0, 0x122d, 0x6b})
r5 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r5, 0x1000000)
sendfile(r4, r5, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
openat$md(0xffffffffffffff9c, &(0x7f0000000380)='/dev/md0\x00', 0x40800, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000080)=0x1)
r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x6, 0x0, 0x3, 0x0, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r8, 0x40086602, 0x400007)
ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x40})
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:52:09 executing program 1:
r0 = dup(0xffffffffffffffff)
clone(0x1000000210007fb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0)
write$binfmt_elf32(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c460000002ed8e4f9e765ce27b90300060000000000000000b738000000000035f4c38442a3bc82200005000000000203000000000000004000000000000000000000ffff080000000000090000000000000000000003000000000000000d60395a7088d7c27f000000a101000100030000000000a999caabac9d880348d1849ae697139777cc64e81a1ac4bc769e8c916c840d410c05e31dff0eca1ff9fc89d1ffd9f2174407619e3a318378887fa2920241332d623872339d63e84e2d5d14eefab45c2caab9c616bd06ab9cb5f0f55c57ea000000"], 0xd8)
execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="805400003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4802, 0x0)

20:52:09 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x8}})

20:52:09 executing program 5:
sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000080)={0x40, 0xff, 0x0, 0x0, 0xca, 0xff, 0x0, 0x0, 0x9, 0x8, 0x0, 0x7}, 0xe)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14)
bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$netlink(0x10, 0x3, 0x40000000010)
listen(r0, 0x1d7)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x200600)
r2 = socket$inet_sctp(0x2, 0x801, 0x84)
sendmsg(r2, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x4e23, @local}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)='#', 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0)
close(0xffffffffffffffff)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)={0x1, [0x0]}, &(0x7f0000a8a000)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYBLOB="0000eb00f968e8952aa038b88390db8f807252261a7cda42c5995821cbcaa7c1e4"], 0x8)
getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000580)={0x0, 0x80, 0x0, 0xffffffff}, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000140)={0x0, 0x7ff}, &(0x7f0000000240)=0x8)

20:52:09 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x9}})

20:52:09 executing program 5:
mmap(&(0x7f0000009000/0x3000)=nil, 0x3000, 0x0, 0x400002172, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x4000, 0x3, &(0x7f0000ff8000/0x4000)=nil)
r0 = inotify_init1(0x0)
fsetxattr$security_capability(r0, &(0x7f00000000c0)='security.capability\x00', 0x0, 0x0, 0x0)

[ 1109.604915][T29671] EXT4-fs (loop1): bad geometry: block count 580964351930795064 exceeds size of device (4096 blocks)
20:52:09 executing program 1:
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
clone(0x1000000210007fb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0)
write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c460000002ed8e4f9e765ce27b90300060000000000000000b738000000000035f4c38442a3bc82200005000000000203000000000000004000000000000000000000ffff080000000000090000000000000000000003000000000000000d60395a7088d7c27f000000a101000100030000000000a999caabac9d880348d1849ae697139777cc64e81a1ac4bc769e8c916c840d410c05e31dff0eca1ff9fc89d1ffd9f2174407619e3a318378887fa2920241332d623872339d63e84e2d5d14eefab45c2caab9c616bd06ab9cb5f0f55c57ea000000"], 0xd8)
execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="805400003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4802, 0x0)

20:52:09 executing program 5:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
dup(r0)
clone(0x1000000210007fb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0)
write$binfmt_elf32(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c460000002ed8e4f9e765ce27b90300060000000000000000b738000000000035f4c38442a3bc82200005000000000203000000000000004000000000000000000000ffff080000000000090000000000000000000003000000000000000d60395a7088d7c27f000000a101000100030000000000a999caabac9d880348d1849ae697139777cc64e81a1ac4bc769e8c916c840d410c05e31dff0eca1ff9fc89d1ffd9f2174407619e3a318378887fa2920241332d623872339d63e84e2d5d14eefab45c2caab9c616bd06ab9cb5f0f55c57ea000000"], 0xd8)
execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="805400003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4802, 0x0)

20:52:09 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x10}})

[ 1109.951775][T29702] ERROR: Domain '<kernel> /sbin/init /etc/init.d/rc /sbin/startpar /etc/init.d/ssh /sbin/start-stop-daemon /usr/sbin/sshd /usr/sbin/sshd /bin/bash /root/syz-fuzzer /root/syz-executor.5 proc:/self/fd/6' not defined.
20:52:10 executing program 3:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
sendfile(r3, r4, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000240)={0x7, [0x50c, 0x5, 0x1000, 0x8, 0x3, 0xf9af, 0x3]}, &(0x7f0000000280)=0x12)
ftruncate(0xffffffffffffffff, 0x1000000)
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r6, 0x2272, &(0x7f00000002c0))
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r7, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r7, 0x81785501, &(0x7f0000000000)=""/56)
r8 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r8, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:52:10 executing program 1:
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
clone(0x1000000210007fb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0)
write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c460000002ed8e4f9e765ce27b90300060000000000000000b738000000000035f4c38442a3bc82200005000000000203000000000000004000000000000000000000ffff080000000000090000000000000000000003000000000000000d60395a7088d7c27f000000a101000100030000000000a999caabac9d880348d1849ae697139777cc64e81a1ac4bc769e8c916c840d410c05e31dff0eca1ff9fc89d1ffd9f2174407619e3a318378887fa2920241332d623872339d63e84e2d5d14eefab45c2caab9c616bd06ab9cb5f0f55c57ea000000"], 0xd8)
execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="805400003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4802, 0x0)

20:52:10 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
getresuid(0x0, &(0x7f00000002c0)=<r1=>0x0, &(0x7f0000000300))
r2 = getegid()
setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000940)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="a2960c282e9d4694c82624022957833be66c8e47820e19e0d8c5942ec925828a9ed5ce68f67763805f74291e56684bc18597a37145d2ca504d8f4c7cea521cf6a52fa4f42a0a8096ba9d38eb272c7d6eac8f8a4394db", @ANYRES32, @ANYBLOB="040006000000000008000400", @ANYRES32, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="10000200000000002000040000000000"], 0x9, 0x0)
getresuid(0x0, &(0x7f00000002c0)=<r3=>0x0, &(0x7f0000000300))
r4 = getegid()
setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000940)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="a2960c282e9d4694c82624022957833be66c8e47820e19e0d8c5942ec925828a9ed5ce68f67763805f74291e56684bc18597a37145d2ca504d8f4c7cea521cf6a52fa4f42a0a8096ba9d38eb272c7d6eac8f8a4394db", @ANYRES32, @ANYBLOB="040006000000000008000400", @ANYRES32, @ANYBLOB, @ANYRES32=r4, @ANYBLOB="10000200000000002000040000000000"], 0x9, 0x0)
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000480)='./file1\x00', 0x0, 0x4, &(0x7f0000000780)=[{&(0x7f00000004c0)="3bdd6f1cf6b38504dba43ea3574587885254abe8d6899e61906fd0e7d8ae3947f861e1e6b07858980b3cf931605865a3c9f0ca17384e669e403c657cd16a4ec383fa4d900c4f6e", 0x47, 0x5}, {&(0x7f0000000540)="0b3bc71f3c54591da1cede9b53da9cbd0ef91b9fa5138b031b9f42cc7b10b8c988893637b88b5274e43d4056e1afec605be533ea937bca3aec07441055ce5fb89a1f4eb5a67b4c5804124a1d85a6df96d52b894e7892c382d72c7fa03de4ac200d45c8a192605e6f02c6aac4fe9b29edfd184d6485cfb26b76146ef70680075f88274a9f1032a9adc453e55342df7d9ae527b9cee0b3e19f4771c10f29b4960297e0713251ce81be8b41e05989d741e31f388afaad7e67c1737817ea90d6be246b628002cfd34d35565b53a72f9473bbd2554a88f35a82222d245a1c359969e66e919bb3d8a6a1a023779260c40c182571dec92afb052f645e", 0xf9, 0x6}, {&(0x7f0000000640)="8ce5e679b2a2de1b4b3f3738aa9d2adf388df47e03d5ce22a62ab6c7529764f70e916aa609dfcc6828b2587826bb5490719164ccb621f9a90fe8dddd71435da507db3b0011e3c04b64d38f51b69537f80be2c0670f3180a8e0e943fbdc3f0e713a2ad5269bde52b7dd5c68b8ec91f10adb8b575ee46893e5bb75d538a59ee41675a9d59f8fd980bf40d9e6fb2ee390e43117743e398a87937365ce488b7ee7e475b7beca2093f11178afb9e930190a0ec5e78490b96b533745567a102468ada7db6773c09226306b80bded96ac2ec8a695fe8151b7258f54bd833dbd4f4b597be90e333c4aa10c6036", 0xe9}, {&(0x7f0000000740)="5ee219fe1a63aadee2498f6f35257bccd8bf1e7a8b82cc2a71ece16cd070116d31c7c35696a956642026e3", 0x2b, 0x7}], 0x800000, &(0x7f0000000800)={[{@extent_cache='extent_cache'}, {@adaptive_mode='mode=adaptive'}, {@nodiscard='nodiscard'}, {@noinline_xattr='noinline_xattr'}, {@four_active_logs='active_logs=4'}], [{@uid_lt={'uid<', 0xffffffffffffffff}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@fsname={'fsname'}}, {@euid_eq={'euid', 0x3d, r1}}, {@seclabel='seclabel'}, {@obj_role={'obj_role', 0x3d, 'obj_type'}}, {@fowner_eq={'fowner', 0x3d, r3}}]})
r5 = dup(r0)
r6 = syz_open_dev$sg(0x0, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@initdev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000100)=0xe8)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x40000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[], [{@subj_user={'subj_user'}}, {@uid_eq={'uid', 0x3d, r7}}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/input/mice\x00'}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@obj_type={'obj_type', 0x3d, 'trans=fd,'}}, {@appraise='appraise'}]}})
r8 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x105400)
setsockopt$XDP_TX_RING(r8, 0x11b, 0x3, &(0x7f0000000040)=0x80, 0x4)
ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f00000000c0)=0x944)
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r9, &(0x7f000000b740)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x0, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000340)={0xa, 0x0, 0x0, @local}, 0x1c, 0x0}}], 0x2, 0x0)
r10 = dup2(0xffffffffffffffff, r9)
r11 = syz_open_dev$admmidi(0x0, 0x7fffffff, 0x10002)
r12 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00')
read$FUSE(r12, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r12, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={<r13=>0x0}, &(0x7f0000000140)=0x8)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r11, 0x84, 0x66, &(0x7f0000000140)={r13, 0x101}, 0x0)
setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r10, 0x84, 0x22, &(0x7f0000000100)={0xbbc, 0x200, 0x7fffffff, 0x1b, r13}, 0x10)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000080)={<r14=>r13, 0x3, 0x6, [0x1, 0x1, 0x3, 0x8000, 0x2, 0x0]}, &(0x7f0000000180)=0x14)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r8, 0x84, 0x1, &(0x7f0000000200)={r14, 0xb9b6, 0x9, 0x2, 0x1, 0x8}, 0x14)

[ 1110.359121][T29724] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 1110.374646][T29724] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[ 1110.383375][T29724] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 1110.395553][T29724] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock
[ 1110.487552][T29724] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based  firewall rule not found. Use the iptables CT target to attach helpers instead.
[ 1110.549817][T29733] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 1110.557728][T29733] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[ 1110.574404][T29733] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 1110.582271][T29733] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock
20:52:18 executing program 0:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r3, 0x1000000)
r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r5 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r5, 0x1000000)
sendfile(r4, r5, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
ioctl$SNDRV_PCM_IOCTL_RESET(0xffffffffffffffff, 0x4141, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000080)=0x1)
r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x6, 0x0, 0x3, 0x0, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:52:18 executing program 5:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
dup(r0)
clone(0x1000000210007fb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0)
write$binfmt_elf32(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c460000002ed8e4f9e765ce27b90300060000000000000000b738000000000035f4c38442a3bc82200005000000000203000000000000004000000000000000000000ffff080000000000090000000000000000000003000000000000000d60395a7088d7c27f000000a101000100030000000000a999caabac9d880348d1849ae697139777cc64e81a1ac4bc769e8c916c840d410c05e31dff0eca1ff9fc89d1ffd9f2174407619e3a318378887fa2920241332d623872339d63e84e2d5d14eefab45c2caab9c616bd06ab9cb5f0f55c57ea000000"], 0xd8)
execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="805400003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4802, 0x0)

20:52:18 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x152)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
fremovexattr(r0, &(0x7f0000000000)=@known='user.syz\x00')
write$cgroup_int(r0, &(0x7f0000000200), 0x43400)
mknodat(r0, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r2 = dup(r1)
r3 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}})

20:52:18 executing program 4:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4, 0x0, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x5, 0x1}, 0x10000, 0x20000000000000, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086602, 0x400007)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00')
preadv(r2, 0x0, 0x0, 0x400000000100)
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000140)={<r3=>0x0})
ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000300)={r3})
ioctl$DRM_IOCTL_GET_SAREA_CTX(r1, 0xc010641d, &(0x7f00000004c0)={r3, &(0x7f0000000440)=""/113})
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
ptrace$setopts(0x4206, r5, 0x0, 0x0)
tkill(r5, 0x3c)
ptrace$cont(0x18, r5, 0x0, 0x0)
ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080))
ptrace$cont(0x18, r5, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = dup2(r7, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ptrace$cont(0x20, r5, 0x0, 0x1)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r9 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r9, 0x1000000)

20:52:18 executing program 1:
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
clone(0x1000000210007fb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0)
write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c460000002ed8e4f9e765ce27b90300060000000000000000b738000000000035f4c38442a3bc82200005000000000203000000000000004000000000000000000000ffff080000000000090000000000000000000003000000000000000d60395a7088d7c27f000000a101000100030000000000a999caabac9d880348d1849ae697139777cc64e81a1ac4bc769e8c916c840d410c05e31dff0eca1ff9fc89d1ffd9f2174407619e3a318378887fa2920241332d623872339d63e84e2d5d14eefab45c2caab9c616bd06ab9cb5f0f55c57ea000000"], 0xd8)
execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="805400003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4802, 0x0)

20:52:18 executing program 3:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
sendfile(r3, r4, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000240)={0x7, [0x50c, 0x5, 0x1000, 0x8, 0x3, 0xf9af, 0x3]}, &(0x7f0000000280)=0x12)
ftruncate(0xffffffffffffffff, 0x1000000)
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r6, 0x2272, &(0x7f00000002c0))
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r7, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r7, 0x81785501, &(0x7f0000000000)=""/56)
r8 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r8, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:52:18 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r0 = dup(0xffffffffffffffff)
clone(0x1000000210007fb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0)
write$binfmt_elf32(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c460000002ed8e4f9e765ce27b90300060000000000000000b738000000000035f4c38442a3bc82200005000000000203000000000000004000000000000000000000ffff080000000000090000000000000000000003000000000000000d60395a7088d7c27f000000a101000100030000000000a999caabac9d880348d1849ae697139777cc64e81a1ac4bc769e8c916c840d410c05e31dff0eca1ff9fc89d1ffd9f2174407619e3a318378887fa2920241332d623872339d63e84e2d5d14eefab45c2caab9c616bd06ab9cb5f0f55c57ea000000"], 0xd8)
execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="805400003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4802, 0x0)

20:52:18 executing program 4:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r3, 0x1000000)
r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r5 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r5, 0x1000000)
sendfile(r4, r5, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x0, 0x0, 0x3, 0x0, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r8, 0x40086602, 0x400007)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={r7, 0x10, &(0x7f0000000540)={&(0x7f0000000480)=""/177, 0xb1, <r9=>0xffffffffffffffff}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xa, 0x9, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, [@ldst={0x3, 0x0, 0x1, 0x7, 0x7, 0xffffffffffffffe0}, @alu={0x4, 0x1, 0xb, 0x0, 0x9, 0x18, 0x8}, @call={0x85, 0x0, 0x0, 0x4b}, @jmp={0x5, 0x1, 0xd, 0x8, 0x0, 0x40, 0xffffffffffffffff}, @map={0x18, 0x3, 0x1, 0x0, r8}]}, &(0x7f0000000140)='syzkaller\x00', 0x5, 0x60, &(0x7f0000000380)=""/96, 0x41000, 0x6476f69962f68b3a, [], 0x0, 0x8, r6, 0x8, &(0x7f0000000400)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000440)={0x2, 0x0, 0x0, 0xfff}, 0x10, r9, r7}, 0x78)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:52:18 executing program 5:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
sendfile(r3, r4, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000240)={0x7, [0x50c, 0x5, 0x1000, 0x8, 0x3, 0xf9af, 0x3]}, &(0x7f0000000280)=0x12)
ftruncate(0xffffffffffffffff, 0x1000000)
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r6, 0x2272, &(0x7f00000002c0))
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r7, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r7, 0x81785501, &(0x7f0000000000)=""/56)
r8 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r8, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:52:19 executing program 2:
r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
ioctl$TCGETS(r0, 0x5401, &(0x7f0000000000))
r2 = dup(r1)
r3 = syz_open_dev$sg(0x0, 0x0, 0x0)
getresuid(&(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100))
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0, <r4=>0x0}, &(0x7f0000000200)=0xc)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x10002, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [{@fsmagic={'fsmagic', 0x3d, 0x8000000000000000}}, {@appraise_type='appraise_type=imasig'}, {@smackfsroot={'smackfsroot', 0x3d, 'proc'}}, {@obj_role={'obj_role', 0x3d, 'wfdno'}}, {@fowner_lt={'fowner<', r4}}, {@context={'context', 0x3d, 'system_u'}}]}})

20:52:19 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r0 = dup(0xffffffffffffffff)
clone(0x1000000210007fb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0)
write$binfmt_elf32(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c460000002ed8e4f9e765ce27b90300060000000000000000b738000000000035f4c38442a3bc82200005000000000203000000000000004000000000000000000000ffff080000000000090000000000000000000003000000000000000d60395a7088d7c27f000000a101000100030000000000a999caabac9d880348d1849ae697139777cc64e81a1ac4bc769e8c916c840d410c05e31dff0eca1ff9fc89d1ffd9f2174407619e3a318378887fa2920241332d623872339d63e84e2d5d14eefab45c2caab9c616bd06ab9cb5f0f55c57ea000000"], 0xd8)
execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="805400003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4802, 0x0)

20:52:19 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'t\x00', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:52:28 executing program 0:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r3, 0x1000000)
r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r5 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r5, 0x1000000)
sendfile(r4, r5, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000080)=0x1)
r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x6, 0x0, 0x3, 0x0, 0x3]}, &(0x7f0000000280)=0x14)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x32600)
write$cgroup_subtree(r7, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0xda00)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r7, &(0x7f0000000300)="34516abadd7f7ca5a7d5bfa72dfe9b09d25e8c2a55ef12474561819480e3bc0500099e48dcf2bbf10f8683ce01a6d75ff077ce1ef0ee9808282115cb64a9bab11d4c81a32ba172fff52ece9fb65dc71c238079a5564a20498999a7219a64d1eb273930928daf5bc4abd292606fc8a2e80ca0bd5399e130aa225f6c39c5a78f716b61923769c531a6c58f95231b9dcf98395d08505d76d8a0a0aff88d797b75bd2632ce540b60a55063b4c0b8a8788ef4ba066f04364a27e77aabc818a4be2447fadd01f392ba08d0b4ab301b46cdeca7e907b9b1962c2dde4b5ec506b91c0bf90c980919dab68524190cb34efb1ba8c7bbfd655d", &(0x7f0000000400)=""/148, 0xc}, 0x20)
ftruncate(0xffffffffffffffff, 0x1000000)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r8, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r8, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r9, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"]}, 0x2b0)
setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f0000000140)='veth1\x00', 0x10)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:52:28 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='\x00\x01H', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:52:28 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r0 = dup(0xffffffffffffffff)
clone(0x1000000210007fb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0)
write$binfmt_elf32(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c460000002ed8e4f9e765ce27b90300060000000000000000b738000000000035f4c38442a3bc82200005000000000203000000000000004000000000000000000000ffff080000000000090000000000000000000003000000000000000d60395a7088d7c27f000000a101000100030000000000a999caabac9d880348d1849ae697139777cc64e81a1ac4bc769e8c916c840d410c05e31dff0eca1ff9fc89d1ffd9f2174407619e3a318378887fa2920241332d623872339d63e84e2d5d14eefab45c2caab9c616bd06ab9cb5f0f55c57ea000000"], 0xd8)
execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="805400003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4802, 0x0)

20:52:28 executing program 3:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
sendfile(r3, r4, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000240)={0x7, [0x50c, 0x5, 0x1000, 0x8, 0x3, 0xf9af, 0x3]}, &(0x7f0000000280)=0x12)
ftruncate(0xffffffffffffffff, 0x1000000)
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40086602, 0x0)
ioctl$SG_GET_RESERVED_SIZE(r6, 0x2272, &(0x7f00000002c0))
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r7, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r7, 0x81785501, &(0x7f0000000000)=""/56)
r8 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r8, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:52:28 executing program 4:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0xda00)
ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000140)=0x34e14e3)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
r5 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r6 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r6, 0x1000000)
sendfile(r5, r6, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3)
ioctl$int_in(r2, 0x5421, &(0x7f0000000080)=0x1)
r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r7, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x0, 0x0, 0x3, 0x0, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r8, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r8, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:52:28 executing program 5:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
sendfile(r3, r4, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000240)={0x7, [0x50c, 0x5, 0x1000, 0x8, 0x3, 0xf9af, 0x3]}, &(0x7f0000000280)=0x12)
ftruncate(0xffffffffffffffff, 0x1000000)
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r6, 0x2272, &(0x7f00000002c0))
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r7, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r7, 0x81785501, &(0x7f0000000000)=""/56)
r8 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r8, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:52:28 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180))
r0 = dup(0xffffffffffffffff)
clone(0x1000000210007fb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0)
write$binfmt_elf32(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c460000002ed8e4f9e765ce27b90300060000000000000000b738000000000035f4c38442a3bc82200005000000000203000000000000004000000000000000000000ffff080000000000090000000000000000000003000000000000000d60395a7088d7c27f000000a101000100030000000000a999caabac9d880348d1849ae697139777cc64e81a1ac4bc769e8c916c840d410c05e31dff0eca1ff9fc89d1ffd9f2174407619e3a318378887fa2920241332d623872339d63e84e2d5d14eefab45c2caab9c616bd06ab9cb5f0f55c57ea000000"], 0xd8)
execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="805400003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4802, 0x0)

20:52:28 executing program 2:
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x4000, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={@ipv4={[], [], @rand_addr=0xfffffffa}, 0x1f})
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r2 = dup(r1)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r3, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r3, 0xc1205531, &(0x7f00000002c0)={0x2, 0x8, 0x28, 0xfff, [], [], [], 0x6, 0x2b1d5d07, 0x8, 0x3, "a9eda190d40d7063f4c6a0018de8a107"})
r4 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}})

20:52:28 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180))
r0 = dup(0xffffffffffffffff)
clone(0x1000000210007fb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0)
write$binfmt_elf32(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c460000002ed8e4f9e765ce27b90300060000000000000000b738000000000035f4c38442a3bc82200005000000000203000000000000004000000000000000000000ffff080000000000090000000000000000000003000000000000000d60395a7088d7c27f000000a101000100030000000000a999caabac9d880348d1849ae697139777cc64e81a1ac4bc769e8c916c840d410c05e31dff0eca1ff9fc89d1ffd9f2174407619e3a318378887fa2920241332d623872339d63e84e2d5d14eefab45c2caab9c616bd06ab9cb5f0f55c57ea000000"], 0xd8)
execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="805400003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4802, 0x0)

20:52:28 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x147)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = gettid()
tkill(r1, 0x14)
ptrace$setopts(0x4206, r1, 0x8, 0x4)
r2 = dup(r0)
r3 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}})

20:52:28 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180))
r0 = dup(0xffffffffffffffff)
clone(0x1000000210007fb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0)
write$binfmt_elf32(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c460000002ed8e4f9e765ce27b90300060000000000000000b738000000000035f4c38442a3bc82200005000000000203000000000000004000000000000000000000ffff080000000000090000000000000000000003000000000000000d60395a7088d7c27f000000a101000100030000000000a999caabac9d880348d1849ae697139777cc64e81a1ac4bc769e8c916c840d410c05e31dff0eca1ff9fc89d1ffd9f2174407619e3a318378887fa2920241332d623872339d63e84e2d5d14eefab45c2caab9c616bd06ab9cb5f0f55c57ea000000"], 0xd8)
execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="805400003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4802, 0x0)

[ 1128.820321][T29853] EXT4-fs (loop1): bad geometry: block count 580964351930795064 exceeds size of device (4096 blocks)
20:52:28 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0)
write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c460000002ed8e4f9e765ce27b90300060000000000000000b738000000000035f4c38442a3bc82200005000000000203000000000000004000000000000000000000ffff080000000000090000000000000000000003000000000000000d60395a7088d7c27f000000a101000100030000000000a999caabac9d880348d1849ae697139777cc64e81a1ac4bc769e8c916c840d410c05e31dff0eca1ff9fc89d1ffd9f2174407619e3a318378887fa2920241332d623872339d63e84e2d5d14eefab45c2caab9c616bd06ab9cb5f0f55c57ea000000"], 0xd8)
execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="805400003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4802, 0x0)

[ 1129.088714][T29861] EXT4-fs (loop1): bad geometry: block count 580964351930795064 exceeds size of device (4096 blocks)
20:52:36 executing program 0:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10100, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r3, 0x1000000)
r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r5 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r5, 0x1000000)
sendfile(r4, r5, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000080)=0x1)
r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x6, 0x0, 0x3, 0x0, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:52:36 executing program 3:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
sendfile(r3, r4, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000240)={0x7, [0x50c, 0x5, 0x1000, 0x8, 0x3, 0xf9af, 0x3]}, &(0x7f0000000280)=0x12)
ftruncate(0xffffffffffffffff, 0x1000000)
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40086602, 0x0)
ioctl$SG_GET_RESERVED_SIZE(r6, 0x2272, &(0x7f00000002c0))
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r7, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r7, 0x81785501, &(0x7f0000000000)=""/56)
r8 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r8, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:52:36 executing program 5:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
sendfile(r3, r4, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000240)={0x7, [0x50c, 0x5, 0x1000, 0x8, 0x3, 0xf9af, 0x3]}, &(0x7f0000000280)=0x12)
ftruncate(0xffffffffffffffff, 0x1000000)
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r6, 0x2272, &(0x7f00000002c0))
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r7, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r7, 0x81785501, &(0x7f0000000000)=""/56)
r8 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r8, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:52:36 executing program 4:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r3, 0x1000000)
r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r5 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r5, 0x1000000)
sendfile(r4, r5, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x0, 0x0, 0x3, 0x0, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$TCSETSW(r7, 0x5403, &(0x7f0000000140)={0xff, 0x7, 0x0, 0x2f, 0xb, "b0ae6b16e9955bca1ca938edddccb2b591e676"})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r8, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r8, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:52:36 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0)
write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c460000002ed8e4f9e765ce27b90300060000000000000000b738000000000035f4c38442a3bc82200005000000000203000000000000004000000000000000000000ffff080000000000090000000000000000000003000000000000000d60395a7088d7c27f000000a101000100030000000000a999caabac9d880348d1849ae697139777cc64e81a1ac4bc769e8c916c840d410c05e31dff0eca1ff9fc89d1ffd9f2174407619e3a318378887fa2920241332d623872339d63e84e2d5d14eefab45c2caab9c616bd06ab9cb5f0f55c57ea000000"], 0xd8)
execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="805400003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4802, 0x0)

20:52:36 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0xda00)
mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x110, r1, 0x180000000)
r2 = dup(r0)
r3 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000='version=9p2000'}, {@access_user='access=user'}, {@uname={'uname', 0x3d, 'em1-)),'}}, {@version_L='version=9p2000.L'}, {@debug={'debug', 0x3d, 0x2}}, {@cachetag={'cachetag', 0x3d, 'wfdno'}}]}})

20:52:36 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x400007)
ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f0000000000)={0x2})
r3 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}})

[ 1136.944399][T29892] EXT4-fs (loop1): bad geometry: block count 580964351930795064 exceeds size of device (4096 blocks)
20:52:37 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0)
write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c460000002ed8e4f9e765ce27b90300060000000000000000b738000000000035f4c38442a3bc82200005000000000203000000000000004000000000000000000000ffff080000000000090000000000000000000003000000000000000d60395a7088d7c27f000000a101000100030000000000a999caabac9d880348d1849ae697139777cc64e81a1ac4bc769e8c916c840d410c05e31dff0eca1ff9fc89d1ffd9f2174407619e3a318378887fa2920241332d623872339d63e84e2d5d14eefab45c2caab9c616bd06ab9cb5f0f55c57ea000000"], 0xd8)
execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="805400003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4802, 0x0)

20:52:37 executing program 2:
r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r2 = socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f0000000000)=0x3d16)
dup(r1)
syz_open_dev$sg(0x0, 0x0, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"]}, 0x2b0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"]}, 0x2b0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='\t\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYRESHEX=r3, @ANYPTR, @ANYRESOCT=r4, @ANYRES16, @ANYPTR64=&(0x7f0000000040)=ANY=[@ANYRES16], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYBLOB="ed5774d93bdb987bd57e7b30c2b899ecdec7519d1edbc6d5fdeaf267763556805c74d3a27aefbdb7e1d2a033088515b74a6c6c922f39c03a490362afbc03e3e7066203bd54f63949f753", @ANYPTR64, @ANYRES64, @ANYPTR64, @ANYRES32], @ANYRESDEC, @ANYRES32=r0], @ANYBLOB="e26b000000003d", @ANYRESHEX, @ANYBLOB=',\x00'])

[ 1137.263218][T29911] EXT4-fs (loop1): bad geometry: block count 580964351930795064 exceeds size of device (4096 blocks)
20:52:37 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
rename(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file1\x00')
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.SMACK64TRANSMUTE\x00', &(0x7f00000000c0)='TRUE', 0x4, 0x1)
r3 = openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
readahead(r3, 0x7, 0x5)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="74723dcfa0defca1c4bcd9aaf690ff8aba807f623b94347a8202e3c375eb7d334eccc45bb1936ed64c417ddb0ee352410ae50cde302411bbd1f04af469c6fc0e435303a05cd3b8e44984c7451cd684cf7fcdd4a1290e1f00000066e31821b922169ebb95b7e809303f95059c6146d4cb7d8c811d", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',\x00'])

20:52:37 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
clone(0x1000000210007fb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = memfd_create(0x0, 0x0)
write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c460000002ed8e4f9e765ce27b90300060000000000000000b738000000000035f4c38442a3bc82200005000000000203000000000000004000000000000000000000ffff080000000000090000000000000000000003000000000000000d60395a7088d7c27f000000a101000100030000000000a999caabac9d880348d1849ae697139777cc64e81a1ac4bc769e8c916c840d410c05e31dff0eca1ff9fc89d1ffd9f2174407619e3a318378887fa2920241332d623872339d63e84e2d5d14eefab45c2caab9c616bd06ab9cb5f0f55c57ea000000"], 0xd8)
execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="805400003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4802, 0x0)

20:52:37 executing program 2:
r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000002c0)={0x314, r2, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xa5a}]}, @TIPC_NLA_MEDIA={0x8c, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5a7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_BEARER={0x3c, 0x1, [@TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'eth', 0x3a, 'syzkaller0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x4, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xbd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffeffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8b5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1dc4}]}]}, @TIPC_NLA_NODE={0x4}, @TIPC_NLA_BEARER={0x150, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x0, @ipv4={[], [], @broadcast}, 0x3}}, {0x14, 0x2, @in={0x2, 0x4e21, @rand_addr=0x400}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @remote}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xfffffffc, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xff}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x0, @loopback, 0x1}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'X\f', 0x3a, 'ipddp0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x1, @local, 0x7}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x8, @mcast1}}}}]}, @TIPC_NLA_NET={0x14, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}]}, 0x314}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000)
r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x608283, 0x0)
setsockopt$inet_udp_int(r3, 0x11, 0x67, &(0x7f0000001880)=0x6, 0x4)

[ 1137.610423][T29936] 9pnet: Insufficient options for proto=fd
[ 1137.645134][T29936] 9pnet: Insufficient options for proto=fd
20:52:44 executing program 0:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r3, 0x1000000)
r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r5 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r5, 0x1000000)
sendfile(r4, r5, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000080)=0x1)
r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x6, 0x0, 0x3, 0x0, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:52:44 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
clone(0x1000000210007fb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = memfd_create(0x0, 0x0)
write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c460000002ed8e4f9e765ce27b90300060000000000000000b738000000000035f4c38442a3bc82200005000000000203000000000000004000000000000000000000ffff080000000000090000000000000000000003000000000000000d60395a7088d7c27f000000a101000100030000000000a999caabac9d880348d1849ae697139777cc64e81a1ac4bc769e8c916c840d410c05e31dff0eca1ff9fc89d1ffd9f2174407619e3a318378887fa2920241332d623872339d63e84e2d5d14eefab45c2caab9c616bd06ab9cb5f0f55c57ea000000"], 0xd8)
execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="805400003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4802, 0x0)

20:52:44 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f0000000000)={{0x9, 0x5}, {0xe0, 0x3e}, 0x800, 0x2, 0x2})
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:52:44 executing program 4:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r3, 0x1000000)
r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r5 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r6, &(0x7f0000000200), 0x43400)
fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000140)='/dev/vbi#\x00', &(0x7f0000000300)='\x00', 0x0)
ftruncate(r5, 0x1000000)
sendfile(r4, r5, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r7, 0x84, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="080000000c05aceb3de9248d8e6f030000000300"], &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r8, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r8, 0x2272, &(0x7f00000002c0))
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r9, &(0x7f0000000200), 0x43400)
ioctl$TCSETXF(r9, 0x5434, &(0x7f0000000480)={0x7, 0x8, [0x6, 0x8, 0x4, 0x7, 0x890], 0x100})
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r7, 0x84, 0x70, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e21, @local}}, [0x4, 0x0, 0x5, 0x2, 0x8, 0x0, 0x400, 0x20, 0x50e, 0xff, 0x8, 0x1ff, 0x1, 0x4]}, &(0x7f0000000440)=0x100)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:52:44 executing program 5:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0)
write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c460000002ed8e4f9e765ce27b90300060000000000000000b738000000000035f4c38442a3bc82200005000000000203000000000000004000000000000000000000ffff080000000000090000000000000000000003000000000000000d60395a7088d7c27f000000a101000100030000000000a999caabac9d880348d1849ae697139777cc64e81a1ac4bc769e8c916c840d410c05e31dff0eca1ff9fc89d1ffd9f2174407619e3a318378887fa2920241332d623872339d63e84e2d5d14eefab45c2caab9c616bd06ab9cb5f0f55c57ea000000"], 0xd8)
execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="805400003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4802, 0x0)

20:52:44 executing program 3:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
sendfile(r3, r4, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000240)={0x7, [0x50c, 0x5, 0x1000, 0x8, 0x3, 0xf9af, 0x3]}, &(0x7f0000000280)=0x12)
ftruncate(0xffffffffffffffff, 0x1000000)
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40086602, 0x0)
ioctl$SG_GET_RESERVED_SIZE(r6, 0x2272, &(0x7f00000002c0))
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r7, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r7, 0x81785501, &(0x7f0000000000)=""/56)
r8 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r8, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:52:44 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
clone(0x1000000210007fb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = memfd_create(0x0, 0x0)
write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c460000002ed8e4f9e765ce27b90300060000000000000000b738000000000035f4c38442a3bc82200005000000000203000000000000004000000000000000000000ffff080000000000090000000000000000000003000000000000000d60395a7088d7c27f000000a101000100030000000000a999caabac9d880348d1849ae697139777cc64e81a1ac4bc769e8c916c840d410c05e31dff0eca1ff9fc89d1ffd9f2174407619e3a318378887fa2920241332d623872339d63e84e2d5d14eefab45c2caab9c616bd06ab9cb5f0f55c57ea000000"], 0xd8)
execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="805400003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4802, 0x0)

20:52:44 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
clone(0x1000000210007fb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0)
write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c460000002ed8e4f9e765ce27b90300060000000000000000b738000000000035f4c38442a3bc82200005000000000203000000000000004000000000000000000000ffff080000000000090000000000000000000003000000000000000d60395a7088d7c27f000000a101000100030000000000a999caabac9d880348d1849ae697139777cc64e81a1ac4bc769e8c916c840d410c05e31dff0eca1ff9fc89d1ffd9f2174407619e3a318378887fa2920241332d623872339d63e84e2d5d14eefab45c2caab9c616bd06ab9cb5f0f55c57ea000000"], 0xd8)
execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="805400003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4802, 0x0)

20:52:44 executing program 2:
r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x2000)
getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000000)={'NETMAP\x00'}, &(0x7f0000000040)=0x1e)
dup(r1)
syz_open_dev$sg(0x0, 0x0, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"]}, 0x2b0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)=ANY=[])
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40086602, 0x400007)
write$char_usb(r3, &(0x7f0000000600)="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", 0xfd)

20:52:44 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f00000002c0)='./file0/file0\x00', r1, &(0x7f0000000180)='./file0/file0\x00')
sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x1c, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x40008801)
r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, r2, 0x0)
r3 = perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x45367b02a50b48a4, @perf_config_ext={0x3ff, 0xbd}, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x5, 0x0, 0x0, 0x0, 0x4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540), 0x6}, 0x20}, 0x0, 0x3, 0xffffffffffffffff, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x9, 0x0, 0xc7a6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000001, 0x0, 0x0)
ioctl$FS_IOC_SETFSLABEL(r3, 0x41009432, &(0x7f0000000580)="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")
r4 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x44000, 0x0)
ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@ipv4={[], [], @multicast2}, 0x800}, 0x20)
r5 = open(&(0x7f0000000500)='./file1\x00', 0x88000, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r5, &(0x7f00000000c0)='./file0\x00')
mkdirat(r5, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0)
open(&(0x7f0000000300)='.\x00', 0x8000, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f000014f000)={0x0, 0x1fe, &(0x7f00000000c0)={&(0x7f0000000100)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in6=@remote, @in6=@rand_addr="f26302d5222a1164c4327061e93af5f4", 0x0, 0x0, 0x0, 0x0, 0xa}}, [@mark={0xc, 0x15, {0x0, 0x9}}]}, 0xc4}}, 0x0)

20:52:44 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
clone(0x1000000210007fb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0)
write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c460000002ed8e4f9e765ce27b90300060000000000000000b738000000000035f4c38442a3bc82200005000000000203000000000000004000000000000000000000ffff080000000000090000000000000000000003000000000000000d60395a7088d7c27f000000a101000100030000000000a999caabac9d880348d1849ae697139777cc64e81a1ac4bc769e8c916c840d410c05e31dff0eca1ff9fc89d1ffd9f2174407619e3a318378887fa2920241332d623872339d63e84e2d5d14eefab45c2caab9c616bd06ab9cb5f0f55c57ea000000"], 0xd8)
execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="805400003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4802, 0x0)

20:52:44 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
ioctl$SG_GET_ACCESS_COUNT(r1, 0x2289, &(0x7f0000000000))
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:52:53 executing program 0:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r3, 0x1000000)
r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x2000, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000140)=0x10001)
r6 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r6, 0x1000000)
sendfile(r4, r6, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000080)=0x1)
r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r7, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x6, 0x0, 0x3, 0x0, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r8, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r8, 0x2272, &(0x7f00000002c0))
mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:52:53 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
clone(0x1000000210007fb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0)
write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c460000002ed8e4f9e765ce27b90300060000000000000000b738000000000035f4c38442a3bc82200005000000000203000000000000004000000000000000000000ffff080000000000090000000000000000000003000000000000000d60395a7088d7c27f000000a101000100030000000000a999caabac9d880348d1849ae697139777cc64e81a1ac4bc769e8c916c840d410c05e31dff0eca1ff9fc89d1ffd9f2174407619e3a318378887fa2920241332d623872339d63e84e2d5d14eefab45c2caab9c616bd06ab9cb5f0f55c57ea000000"], 0xd8)
execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="805400003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4802, 0x0)

20:52:53 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='io.stat\x00', 0x26e1, 0x0)
setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, 0x0, 0x0)
pwrite64(r0, &(0x7f0000000080)='5', 0x1, 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0xed5e0000})
ioctl(0xffffffffffffffff, 0x8912, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x100000002072, 0xffffffffffffffff, 0x0)
pwrite64(r0, &(0x7f0000000400)="e422dfa36fd12ffee6a7b54c5026ef926964d33abed7f63ecbdf1343e965f2dca490d36259f30599eca65a76668466cf23406b36e06ca3fff25799e033be935f7391774fcf4c31b74ca78753daa4b66dd62e93f48c9c06d5d90f250353972911ae8921121e58205d9e66afc549cbe5e12def5342b1db695f88adf0ffbc8455213e2c1b18aae3a9d1e3e1570d644dd2fcb7a30cb301dbc964101727eda2c785f359729e8d1c244cabc1", 0xa9, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000100)={0x0, {{0x2, 0x4e21}}}, 0x88)
r2 = socket$alg(0x26, 0x5, 0x0)
r3 = socket(0x19, 0x800, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'lo\x00', &(0x7f0000000040)=@ethtool_link_settings={0xa}})
write$binfmt_script(r3, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x125)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000280))
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x2, 0x400000000000003, 0x0, 0x403, 0x12, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x3, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x300000000000000, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x6000000, 0x40030000000000], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @sadb_key={0x4, 0x9, 0xa0, 0x0, "fd3d1a9da21ef5b5568df4c2a2363df6b6cdc393"}, @sadb_address={0x5, 0x17, 0x3c, 0x20, 0x0, @in6={0xa, 0x4e24, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3f}}, @sadb_x_sec_ctx={0x2, 0x18, 0x9, 0x1, 0x3, "dea13e"}]}, 0x90}}, 0x0)
ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f00000004c0))
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x84}, 0xc, &(0x7f0000000380)={&(0x7f0000000800)={0xfffffffffffffdef, 0x3a, 0x722, 0x70bd27, 0x25dfdbff, {0x1b}, [@typed={0x8, 0x76, @fd}, @typed={0x14, 0x22, @ipv6=@loopback}, @generic="68309e04d9eb63ef0f0132cd0dc4aaa9907421a10505c4a059f7a2af6edaeb2ab2e4d208e8f15b669b37e29b7647b084a7377e55b2e05a2a64a196a9c1865998ee19b37c49fedade7c6f527fc0995f085af9047338830eb73828d7b5005a07cfa8eeec99fc133ba52d906ac437160fac465707da2dd61b3611e1143f2f47b9ed9948faeea5469ce673a1b189548a9dfcc7300755e51ce91cf5304c8ba507"]}, 0xd0}, 0x1, 0x0, 0x0, 0xe}, 0x20008088)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.usage_ir_bytes\x00', 0x275a, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086607, 0x0)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r5, 0x29, 0x41, &(0x7f0000000700)=ANY=[], 0x0)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000140), 0x10)
ioctl$sock_x25_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000005c0)={@null='               \x00', 0x9, 'ip6gretap0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'})
mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x300000a, 0x8013, r1, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x5, 0x10001})
getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611)
ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f0000000300))
r6 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/21, 0x3c000, 0x1000, 0x2}, 0x18)
socket$isdn(0x22, 0x3, 0x2)

20:52:53 executing program 3:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
sendfile(r3, r4, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000240)={0x7, [0x50c, 0x5, 0x1000, 0x8, 0x3, 0xf9af, 0x3]}, &(0x7f0000000280)=0x12)
ftruncate(0xffffffffffffffff, 0x1000000)
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f00000002c0))
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r7, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r7, 0x81785501, &(0x7f0000000000)=""/56)
r8 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r8, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:52:53 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev\tsg#\x00', 0x7f, 0x0)
r1 = dup(r0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"]}, 0x2b0)
ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f00000000c0)={0x0, {0x2, 0x4e21, @multicast2}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e20, @loopback}, 0x40, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)='netdevsim0\x00', 0x6, 0x1})
r3 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}})

20:52:53 executing program 4:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x3f1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe238996a28576a53, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r3, 0x1000000)
r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r5 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r6, &(0x7f0000000200), 0x43400)
clock_gettime(0x0, &(0x7f0000000140)={<r7=>0x0, <r8=>0x0})
ioctl$VIDIOC_DQBUF(r6, 0xc0585611, &(0x7f0000000300)={0x1223, 0x9, 0x4, 0x40000000, 0x7fffffff, {r7, r8/1000+10000}, {0x1, 0xb, 0x1, 0x80, 0xbc, 0x0, "ba10f848"}, 0x0, 0x1, @userptr=0x6, 0x7, 0x0, <r9=>0xffffffffffffffff})
ioctl$DRM_IOCTL_GET_CAP(r9, 0xc010640c, &(0x7f0000000240)={0xffff, 0x1ff})
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r10, &(0x7f0000000200), 0x43400)
ioctl$SIOCX25SDTEFACILITIES(r10, 0x89eb, &(0x7f00000004c0)={0x24, 0x8, 0x3, 0x6, 0x1f, 0xf, 0x5, "8d2e1a8794e4107267552bbdf0ddb227a38858c7", "5346e1dbda5a78e0837622c26f72e21aa99bf387"})
ftruncate(r5, 0x1000000)
sendfile(r4, r5, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
r11 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r11, 0x84, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r12, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r12, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0xffffffff, 0x1b3b0)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:52:53 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
clone(0x1000000210007fb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0)
write$binfmt_elf32(r2, 0x0, 0x0)
execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="805400003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4802, 0x0)

[ 1153.808346][T30026] 9pnet: Insufficient options for proto=fd
[ 1153.838261][T30022] EXT4-fs (loop1): bad geometry: block count 580964351930795064 exceeds size of device (4096 blocks)
20:52:53 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
clone(0x1000000210007fb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0)
write$binfmt_elf32(r2, 0x0, 0x0)
execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="805400003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4802, 0x0)

20:52:53 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x8000, 0x0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=f,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',\x00'])

20:52:54 executing program 5:
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0)
r2 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x4)
write(r1, &(0x7f0000000600)="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", 0x200)

20:52:54 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
clone(0x1000000210007fb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0)
write$binfmt_elf32(r2, 0x0, 0x0)
execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="805400003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4802, 0x0)

[ 1154.137086][T30058] 9pnet: Could not find request transport: f
20:52:54 executing program 2:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x7413c13c2cc364ac, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x40, 0x0)
setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f00000004c0)=0x100, 0x4)
r3 = syz_open_dev$sg(0x0, 0x200, 0x200)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}})

[ 1154.287057][   T27] kauditd_printk_skb: 1 callbacks suppressed
[ 1154.287078][   T27] audit: type=1800 audit(1577393574.276:76): pid=30064 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16594 res=0
[ 1154.392099][   T27] audit: type=1804 audit(1577393574.286:77): pid=30068 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir545856486/syzkaller.PBPXpl/1017/file0" dev="sda1" ino=16594 res=1
20:52:58 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
clone(0x1000000210007fb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0)
write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[], 0x0)
execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="805400003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4802, 0x0)

20:52:58 executing program 5:
socket$kcm(0x2, 0x0, 0x84)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0x2, 0x2, 0x0)
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
r1 = socket$kcm(0x11, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000000c0)=r1, 0x4)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)

20:52:58 executing program 0:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r3, 0x1000000)
r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r5 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r5, 0x1000000)
sendfile(r4, r5, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000080)=0x1)
r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x6, 0x0, 0x3, 0x0, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x400, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:52:58 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="9afd134bcb000000"])

20:52:58 executing program 3:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
sendfile(r3, r4, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000240)={0x7, [0x50c, 0x5, 0x1000, 0x8, 0x3, 0xf9af, 0x3]}, &(0x7f0000000280)=0x12)
ftruncate(0xffffffffffffffff, 0x1000000)
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f00000002c0))
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r7, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r7, 0x81785501, &(0x7f0000000000)=""/56)
r8 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r8, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:52:58 executing program 4:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r3, 0x1000000)
r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r5 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r5, 0x1000000)
sendfile(r4, r5, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="0800004bd08805f8d5727c9b000c050500001000"], &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r8=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x2, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x2}, 0x0, 0x0, &(0x7f00000001c0)={0x5, 0x7, 0x8, 0x2}, &(0x7f0000000500)=0xfff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)}}, 0x10)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000300)={r8}, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r8}, 0xc)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
ftruncate(0xffffffffffffffff, 0x1000000)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00')
sendmsg$IPVS_CMD_GET_DEST(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x18, r10, 0xf01, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x6}]}, 0x18}}, 0x0)
sendmsg$IPVS_CMD_ZERO(r7, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0xe2de0886a2a9c63c}, 0xc, &(0x7f0000000380)={&(0x7f00000007c0)=ANY=[@ANYBLOB="58010000cf959281696de5c82e31c2a87c5ba394e0b87e0aefc56f17515813f59993fd264a87fe030e48fec16dd128f2505c404166dcd6402930bbeac4b5b77e17c92014a215371aa19e82b04fc1bbd8bacfbe380100f21f8d2f278fa89ef0f25500d4429fd6784a939ab47678000000", @ANYRES16=r10, @ANYBLOB="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"], 0x158}, 0x1, 0x0, 0x0, 0x20000000}, 0x8)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

[ 1158.961938][T30091] 9pnet: Insufficient options for proto=fd
20:52:59 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
clone(0x1000000210007fb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0)
write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[], 0x0)
execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="805400003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4802, 0x0)

[ 1159.006125][T30103] 9pnet: Insufficient options for proto=fd
20:52:59 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clock_nanosleep(0x9, 0x0, &(0x7f0000000000), 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r2 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r3 = dup(r2)
r4 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}})

[ 1159.074024][T30110] netlink: 'syz-executor.4': attribute type 6 has an invalid length.
[ 1159.085850][T30097] EXT4-fs (loop1): bad geometry: block count 1080 exceeds size of device (1 blocks)
[ 1159.091535][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1159.102786][    C0] protocol 88fb is buggy, dev hsr_slave_1
20:52:59 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
clone(0x1000000210007fb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0)
write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[], 0x0)
execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="805400003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4802, 0x0)

20:52:59 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r3, &(0x7f00000000c0), 0xff93)
write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000000)={0xa, {0x3, 0x7, 0x1}}, 0xa)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:52:59 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0)
ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, [], [{0x0, 0x0, 0x8629}, {0xffffffff}]})

20:52:59 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
clone(0x1000000210007fb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0)
write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0)
execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="805400003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4802, 0x0)

20:52:59 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = open(0x0, 0x0, 0x0)
symlinkat(&(0x7f00000002c0)='./file0/file0\x00', r0, &(0x7f0000000180)='./file0/file0\x00')
sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x1c, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x40008801)
r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0)
r2 = perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x45367b02a50b48a4, @perf_config_ext={0x3ff, 0xbd}, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x5, 0x0, 0x0, 0x0, 0x4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540), 0x6}, 0x20}, 0x0, 0x3, 0xffffffffffffffff, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x7}, 0x0, 0x0, 0x0, 0x9, 0x0, 0xc7a6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_nanosleep(0x9, 0x3, &(0x7f0000000000), 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f0000000580)="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")
r3 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x44000, 0x0)
ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@ipv4={[], [], @multicast2}, 0x800}, 0x20)
r4 = open(&(0x7f0000000500)='./file1\x00', 0x88000, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r4, &(0x7f00000000c0)='./file0\x00')
mkdirat(r4, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
open(&(0x7f0000000300)='.\x00', 0x8000, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f000014f000)={0x0, 0x1fe, &(0x7f00000000c0)={&(0x7f0000000100)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in6=@remote, @in6=@rand_addr="f26302d5222a1164c4327061e93af5f4", 0x0, 0x0, 0x0, 0x0, 0xa}}, [@mark={0xc, 0x15, {0x0, 0x9}}]}, 0xc4}}, 0x0)

20:52:59 executing program 2:
r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfe, 0x80010040}, 0xc)
r2 = semget$private(0x0, 0x207, 0x0)
semop(r2, &(0x7f0000000200)=[{}], 0x98)
semctl$SETVAL(r2, 0x0, 0x10, &(0x7f0000000040)=0x3)
dup(r1)
syz_open_dev$sg(0x0, 0x100000000, 0x4000)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"]}, 0x2b0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40086602, 0x400007)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r4)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000010000000000000008006966623000000000000000000000000064756d6d79300000000000e1ff00000069705f76746930000000000000000000697036746e6c30000000000000000000aaaaaaaaaabb0000000000000180c20000000000000000000000f000000070010000a8010000697000000000000000000000000000000000000000000000000000000000000020000000000000007f000001ac14140000000000000000000073412ab2f485d7e5b8580fe4fd20285b10286f3b230000000000007265616c6d0000000000000000000000000000000000000000000000000000001000000000000000000000000000000000002000000000006172707265706c7900000000000000000000001c0000000000000000000000001000000000000000aaaaaaaaaaaa000000000000000000005241544545535400000000000000000000000000000000000000000000000000200000000000000073797a310000000000000000000000000000000000000000000000005b650000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaa"]}, 0x2b0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"]}, 0x2b0)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"]}, 0x2b0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x2000000, &(0x7f0000000500)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3d679363c2f6e4ca3594ffa5abc4a3985cbb1dc7a9ec7f281729b2494bbc5107f296c14eb23505befe04f828683ec6262982e102472f9ce0739f9f38d76d8e4f961d8e2565205c94d4267ec5", @ANYPTR64=&(0x7f0000000080)=ANY=[@ANYRES16], @ANYRES32, @ANYPTR=&(0x7f0000000100)=ANY=[@ANYRESHEX=0x0, @ANYRESDEC=r7], @ANYBLOB="2cf7"])

[ 1159.834034][T30159] netlink: 'syz-executor.4': attribute type 6 has an invalid length.
[ 1159.934333][T30165] 9pnet: Insufficient options for proto=fd
20:53:06 executing program 0:
ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000000000)=0x1)
write$P9_RFSYNC(0xffffffffffffffff, &(0x7f0000000140)={0xffffffffffffffa2, 0x33, 0x1}, 0x7)
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x5e5a3e455e0cea5d, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r2 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r2, 0x1000000)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
sendfile(r3, r4, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x32600)
write$cgroup_subtree(r5, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0xda00)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r5, 0x2405, r1)
fsetxattr$security_capability(r1, &(0x7f0000000380)='security.capability\x00', &(0x7f00000003c0)=@v1={0x1000000, [{0x2, 0x9}]}, 0xc, 0x2)
ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000080)=0x1)
r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
ioctl$VIDIOC_LOG_STATUS(r6, 0x5646, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x6, 0x0, 0x3, 0x0, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ftruncate(0xffffffffffffffff, 0x1000000)
ioctl$VT_WAITACTIVE(r6, 0x5607)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000400)='/proc/self/net/pfkey\x00', 0x214000, 0x0)
ioctl$CAPI_NCCI_OPENCOUNT(r8, 0x80044326, &(0x7f0000000440)=0x6)

20:53:06 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
clone(0x1000000210007fb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0)
write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0)
execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="805400003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4802, 0x0)

20:53:06 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = open(0x0, 0x0, 0x0)
symlinkat(&(0x7f00000002c0)='./file0/file0\x00', r0, &(0x7f0000000180)='./file0/file0\x00')
sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x1c, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x40008801)
r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0)
r2 = perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x45367b02a50b48a4, @perf_config_ext={0x3ff, 0xbd}, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x5, 0x0, 0x0, 0x0, 0x4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540), 0x6}, 0x20}, 0x0, 0x3, 0xffffffffffffffff, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x7}, 0x0, 0x0, 0x0, 0x9, 0x0, 0xc7a6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_nanosleep(0x9, 0x3, &(0x7f0000000000), 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f0000000580)="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")
r3 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x44000, 0x0)
ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@ipv4={[], [], @multicast2}, 0x800}, 0x20)
r4 = open(&(0x7f0000000500)='./file1\x00', 0x88000, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r4, &(0x7f00000000c0)='./file0\x00')
mkdirat(r4, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
open(&(0x7f0000000300)='.\x00', 0x8000, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f000014f000)={0x0, 0x1fe, &(0x7f00000000c0)={&(0x7f0000000100)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in6=@remote, @in6=@rand_addr="f26302d5222a1164c4327061e93af5f4", 0x0, 0x0, 0x0, 0x0, 0xa}}, [@mark={0xc, 0x15, {0x0, 0x9}}]}, 0xc4}}, 0x0)

20:53:06 executing program 4:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r3, 0x1000000)
r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r5 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r5, 0x1000000)
sendfile(r4, r5, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x0, 0x0, 0x3, 0x0, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:53:06 executing program 3:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
sendfile(r3, r4, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000240)={0x7, [0x50c, 0x5, 0x1000, 0x8, 0x3, 0xf9af, 0x3]}, &(0x7f0000000280)=0x12)
ftruncate(0xffffffffffffffff, 0x1000000)
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f00000002c0))
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r7, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r7, 0x81785501, &(0x7f0000000000)=""/56)
r8 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r8, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:53:06 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
unshare(0x0)
pipe2(0x0, 0x0)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f00000011c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000001140), 0x4)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, 0x0)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x10d022, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(r3, &(0x7f0000002200), 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0101000000000000000001000000440001000c00070000000000960000000c0006006c626c637200000008000b000a69700008000800000000000800090000000000080001000a0000000800050002000000"], 0x58}}, 0x0)
sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, 0x0, 0x4000020)
r6 = dup(r0)
r7 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}})

20:53:06 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
clone(0x1000000210007fb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0)
write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0)
execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="805400003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4802, 0x0)

20:53:06 executing program 5:
r0 = socket$inet6(0xa, 0x3, 0x100000400000003a)
setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000800)=ANY=[@ANYBLOB], 0x8)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c)
sendmmsg(r0, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="8200", 0x2}], 0x1}}], 0x1, 0x8000)
write(r0, &(0x7f00000000c0)="f70b9378472cfa4100f9bcd66a0a277b7ffe8c719223", 0x16)

[ 1166.488417][T30184] EXT4-fs (loop1): bad geometry: block count 1080 exceeds size of device (1 blocks)
[ 1166.558707][T30187] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
20:53:06 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
clone(0x1000000210007fb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0)
write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c460000002ed8e4f9e765ce27b90300060000000000000000b738000000000035f4c38442a3bc82200005000000000203000000000000004000000000000000000000ffff080000000000090000000000000000000003000000000000000d60395a7088d7c27f000000"], 0x6c)
execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="805400003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4802, 0x0)

[ 1166.604002][T30209] 9pnet: Insufficient options for proto=fd
[ 1166.621196][T30187] IPVS: persistence engine module ip_vs_pe_
[ 1166.621196][T30187] ip not found
20:53:06 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
clone(0x1000000210007fb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0)
write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c460000002ed8e4f9e765ce27b90300060000000000000000b738000000000035f4c38442a3bc82200005000000000203000000000000004000000000000000000000ffff080000000000090000000000000000000003000000000000000d60395a7088d7c27f000000"], 0x6c)
execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="805400003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4802, 0x0)

[ 1166.712658][T30216] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
20:53:06 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
clone(0x1000000210007fb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0)
write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c460000002ed8e4f9e765ce27b90300060000000000000000b738000000000035f4c38442a3bc82200005000000000203000000000000004000000000000000000000ffff080000000000090000000000000000000003000000000000000d60395a7088d7c27f000000"], 0x6c)
execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="805400003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4802, 0x0)

[ 1166.779617][T30225] 9pnet: Insufficient options for proto=fd
[ 1166.804155][T30216] IPVS: persistence engine module ip_vs_pe_
[ 1166.804155][T30216] ip not found
20:53:06 executing program 5:

20:53:15 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
clone(0x1000000210007fb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0)
write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c460000002ed8e4f9e765ce27b90300060000000000000000b738000000000035f4c38442a3bc82200005000000000203000000000000004000000000000000000000ffff080000000000090000000000000000000003000000000000000d60395a7088d7c27f000000a101000100030000000000a999caabac9d880348d1849ae697139777cc64e81a1ac4bc769e8c916c840d410c05e31dff0eca1ff9fc89"], 0xa2)
execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="805400003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4802, 0x0)

20:53:15 executing program 2:
r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r2 = dup(r1)
r3 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}})
ioctl$SIOCRSACCEPT(r0, 0x89e3)

20:53:15 executing program 5:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff)

20:53:15 executing program 3:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
sendfile(r3, r4, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000240)={0x7, [0x50c, 0x5, 0x1000, 0x8, 0x3, 0xf9af, 0x3]}, &(0x7f0000000280)=0x12)
ftruncate(0xffffffffffffffff, 0x1000000)
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r6, 0x2272, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r7, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r7, 0x81785501, &(0x7f0000000000)=""/56)
r8 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r8, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:53:15 executing program 0:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r3, 0x1000000)
r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r5 = memfd_create(&(0x7f0000000c00)='/dev/vbi#\x00', 0x4)
ftruncate(r5, 0x1000000)
sendfile(r4, r5, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000080)=0x1)
r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x6, 0x0, 0x3, 0x0, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ftruncate(0xffffffffffffffff, 0x1000000)
r8 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x3, 0x105000)
sendmsg$tipc(r8, &(0x7f0000000b00)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x1, {{0x40, 0x4}, 0x2}}, 0x10, &(0x7f00000009c0)=[{&(0x7f0000000300)="5fa817f6458807299812e173eef237ac3397763b39952878283dbf89bba9fe4d637d0141ff24de1fb5ff41dc4437632dc550a57d4be333f70b2b051220590ce6154af90bff0b864307509d26a34fc83925ca448f21ef857e1900445bf125e865474abebc9913acdedca5720003284793bf6d13a1e2fa032544e8c2e65732b79cbfd750ccfd743b39e26cc638dff7c15546ee9d349934502113384b310ec93a981e0b2fbf8288fbcda5d4d4f1f08cdef4", 0xb0}, {&(0x7f00000003c0)="a1bbd8cfbcbcac152a78d7701ce36cd16248f07c8ffd29a3c86e4835194769e132ba4e17b5c022976fb3d783158342f29a2981179dd2a91370cbb2d221c980fbdf8836a00812ad53b4da36d652b7a1eeccecc78b906f8cc5a5fef59aff5b395b479e3fda55d04e7c1131741dc5b662d548a0b8358833b4bcdb6e3e46eae4ea39e0550e11efe7a7971938ab", 0x8b}, {&(0x7f0000000480)="cd14e890f5a3ffe7622acd422bec0a7770079fbe8a8fe10c59f0fc0eaeb2c10a1f159690dd2716a01fdc230355dec1f3b1e0441098ae71f76fc9db47aeff35e06d4726ace62241738e9a3a1421c327257158582bb258292cff48502ed252cb", 0x5f}, {&(0x7f0000000500)="3ea74139a590cb2f7f1bbc10e97f38243f6e3fb73121ebc76c89a6ba4044c0bc30aa89e5476d559bf1c4b947ff8e39e17d0928ef4d4c", 0x36}, {&(0x7f00000005c0)="c07cbf85a0cd13a075d413addc4d9ac72667f4acd02b103265f2a59fc1000dfbee381b04ba9c773bb9e4248cf6631b4c062dda490987d8a9d7dd4c2fe8f42e76c66cdd4b027dc59bf01d8258e07902b46710dde1b4c99d04bd66a05c9bde6df66e8b68b3ad702900b99ff178e718ec90146965e4e769cf4ab4afc9f7ee4772c99540dc4cb28e664c28c5b428f4eeccdfef465ae559805b4e2cb9554f5460a897cc02a2413ff4f2df69eeb86470394b0e12aadcc48585eb9209e0de2d6d78a0bb942007d8711f7d5864b1f6607ac925ec9ff60b77950e3b572d2cc053a6d52621a5042158333df5bd521a1e93d7", 0xed}, {&(0x7f00000006c0)="94d03979ad58619f2baeaf2930303cf3247c5606d6de06def24561d1ba123609e581d206733e01add4c5f626e5287ea99060ff12b7ffeb93bb61c04b7495f2fe87cc2d18be463e331488a0e0380b8d94247649bdb6dbe9209a536d4a598bbc9dbefc8625b4e4af7fea07d2437b78e9b68cea266024a664c685d5037305ae4e38a941ac3133a950b2375aa804253acdc7c6ebbc1d86d535bb113f403983b4ec71bf304037860ed5048c021b84777000fe540c0c11472ec9fc0661418903103b17d513ed872c79d548ee7a", 0xca}, {&(0x7f0000000540)="085283b9711f3b91996e7c88", 0xc}, {&(0x7f00000007c0)="8f9845e2e6802b7e4979bf3be3f49303ba6bc5349a52b81597aaa5cb355542617282f92a7683c5150913820556018b1603a06f337893061ae7f47e0e864def22b7ca6a5014e8a37b782f3731914b6f8ed1026364db374c9bb1a97ca8ee0e6b86f215a79965a14a7e4adb3f59d37293e1373b027ca4410c71d87b76e8bcf9d00e35d4fd524d6b76d7f79859f24989a0ba4783797c1a7e8126f2c8842553feb5af90163f0f1d8097f68c35d9cab92b74c47413aa3d71c44566ceabe409965be69e684187d4f5", 0xc5}, {&(0x7f00000008c0)="a45e7e0c995e6f292db22ab3dd9d7b43b44baac5210f5bfbfe7925670f31eec0dbe4328762a7bddc687007a9a23ec69af855798ee7e0f3c5b9f99867ed1e5507a461e4232b52a4ce0d0261db23c3cdde0cafc6e701971c87f1874ab47af4371196f3f9d1848aa496c11b1ac52c19c4040afcf3ebf40f66fc4f4eae81de54578b9fd28788ee657a5d9b5885fe711cc1159bf5879ce388abe957f6ee035ae7afe2aaed01a9d4af62115c18374c9d86fa7dbc40999274f1066a762205964cdebbbac93a1ba2976c", 0xc6}], 0x9, &(0x7f0000000a80)="c821cfa3724db6fd774b37ab5a5acd7d8d5ffeec84f564f47559ea49259bd80ebfd0701c924ff677c8942c7977e85a6711310a9edc03ac0cdef892363c1fa9f6d5ab4b3f5eeba18d7e185f07a8c9b5ea50e8af63c2302764ca95cdf452d674e730b1523591136640abb85c651bc38bb6a9", 0x71, 0x580c1}, 0x1)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:53:15 executing program 4:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x40000, 0x0)
ioctl$VIDIOC_ENUMINPUT(r1, 0xc050561a, &(0x7f00000002c0)={0x8, "b55ff5650182687043ae0f28456bb4dc96668a2ba97f19e6f8b4edb1bdf6a5a6", 0x1, 0x9, 0x2, 0x4104, 0x2040002, 0x8})
syz_open_dev$vbi(0x0, 0x1, 0x2)
r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x3}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
r5 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r6 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r6, 0x1000000)
sendfile(r5, r6, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3)
ioctl$int_in(r2, 0x5421, &(0x7f0000000080)=0x1)
r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r7, 0x84, 0x16, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r8, 0x40086602, 0x400007)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r9, 0x40086602, 0x200000000000000)
ioctl$SG_GET_RESERVED_SIZE(r9, 0x2272, &(0x7f0000000140))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:53:15 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
clone(0x1000000210007fb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0)
write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c460000002ed8e4f9e765ce27b90300060000000000000000b738000000000035f4c38442a3bc82200005000000000203000000000000004000000000000000000000ffff080000000000090000000000000000000003000000000000000d60395a7088d7c27f000000a101000100030000000000a999caabac9d880348d1849ae697139777cc64e81a1ac4bc769e8c916c840d410c05e31dff0eca1ff9fc89"], 0xa2)
execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="805400003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4802, 0x0)

20:53:16 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = dup(0xffffffffffffffff)
r1 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="7768b1b3ba076f", @ANYRESHEX=r1, @ANYBLOB=',\x00'])

20:53:16 executing program 5:
prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x2)
perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x63, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x18}, [@ldst={0x6, 0x3, 0x3f9, 0x5}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xffe9, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffec7}, 0x48)

20:53:16 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
clone(0x1000000210007fb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0)
write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c460000002ed8e4f9e765ce27b90300060000000000000000b738000000000035f4c38442a3bc82200005000000000203000000000000004000000000000000000000ffff080000000000090000000000000000000003000000000000000d60395a7088d7c27f000000a101000100030000000000a999caabac9d880348d1849ae697139777cc64e81a1ac4bc769e8c916c840d410c05e31dff0eca1ff9fc89"], 0xa2)
execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="805400003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4802, 0x0)

[ 1176.101684][T30277] 9pnet: Insufficient options for proto=fd
20:53:16 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
clone(0x1000000210007fb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0)
write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c460000002ed8e4f9e765ce27b90300060000000000000000b738000000000035f4c38442a3bc82200005000000000203000000000000004000000000000000000000ffff080000000000090000000000000000000003000000000000000d60395a7088d7c27f000000a101000100030000000000a999caabac9d880348d1849ae697139777cc64e81a1ac4bc769e8c916c840d410c05e31dff0eca1ff9fc89d1ffd9f2174407619e3a318378887fa2920241332d623872339d63"], 0xbd)
execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="805400003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4802, 0x0)

[ 1176.165410][T30277] 9pnet: Insufficient options for proto=fd
20:53:16 executing program 2:
creat(&(0x7f0000000140)='./file1\x00', 0xb1)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:53:16 executing program 5:
r0 = socket$inet6(0xa, 0x80003, 0x7e)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071")
r1 = socket$inet(0x2, 0x803, 0xa0)
connect$inet(r1, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0})
setsockopt$sock_timeval(r1, 0x1, 0x24, &(0x7f0000000180)={r2}, 0x10)

20:53:16 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
clone(0x1000000210007fb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0)
write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c460000002ed8e4f9e765ce27b90300060000000000000000b738000000000035f4c38442a3bc82200005000000000203000000000000004000000000000000000000ffff080000000000090000000000000000000003000000000000000d60395a7088d7c27f000000a101000100030000000000a999caabac9d880348d1849ae697139777cc64e81a1ac4bc769e8c916c840d410c05e31dff0eca1ff9fc89d1ffd9f2174407619e3a318378887fa2920241332d623872339d63"], 0xbd)
execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="805400003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4802, 0x0)

20:53:16 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x5, 0x12080)
ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f0000000040)=0x17dc)
r3 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}})

20:53:16 executing program 3:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
sendfile(r3, r4, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000240)={0x7, [0x50c, 0x5, 0x1000, 0x8, 0x3, 0xf9af, 0x3]}, &(0x7f0000000280)=0x12)
ftruncate(0xffffffffffffffff, 0x1000000)
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r6, 0x2272, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r7, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r7, 0x81785501, &(0x7f0000000000)=""/56)
r8 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r8, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:53:26 executing program 0:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r3, 0x1000000)
r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r5 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r5, 0x1000000)
sendfile(r4, r5, &(0x7f00000000c0)=0x2, 0xeefffdef)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000080)=0x1)
r6 = accept4$inet(0xffffffffffffffff, &(0x7f00000005c0)={0x2, 0x0, @multicast1}, &(0x7f0000000600)=0x10, 0x80000)
setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f0000000640)={0x5, {{0x2, 0x4e23, @local}}, 0x0, 0xa, [{{0x2, 0x4e21, @remote}}, {{0x2, 0x4e20}}, {{0x2, 0x4e24, @empty}}, {{0x2, 0x4e24, @multicast1}}, {{0x2, 0x4e21, @empty}}, {{0x2, 0x4e24, @rand_addr=0x4}}, {{0x2, 0x4e22, @multicast2}}, {{0x2, 0x4e23, @local}}, {{0x2, 0x4e22, @rand_addr=0x5}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x590)
r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r7, 0x84, 0x16, &(0x7f0000000300)=ANY=[@ANYBLOB="080be5557e2953f8a2ae000000e905050f001006878edacba9c2dd0a731fea7cee2f0896a6392b5d30e268974b87369fe09d636855d017b180a82471ba9bdc2a35d09c06bf5bae235ce3b6731610b57f23f59bf1624571f307002217c1175583fa80c7a100c2f04d2f676a66318ab4f8ac83a4e2edb3f6"], &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r8, 0x40086602, 0x400007)
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r8, 0x110, 0x4, &(0x7f0000000000)=0x1, 0x4)
ioctl$SG_GET_RESERVED_SIZE(r8, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:53:26 executing program 5:
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x800000000050000}]})
r0 = accept4$unix(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KDSKBSENT(r0, 0x4b49, 0x0)

20:53:26 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
clone(0x1000000210007fb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0)
write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c460000002ed8e4f9e765ce27b90300060000000000000000b738000000000035f4c38442a3bc82200005000000000203000000000000004000000000000000000000ffff080000000000090000000000000000000003000000000000000d60395a7088d7c27f000000a101000100030000000000a999caabac9d880348d1849ae697139777cc64e81a1ac4bc769e8c916c840d410c05e31dff0eca1ff9fc89d1ffd9f2174407619e3a318378887fa2920241332d623872339d63"], 0xbd)
execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="805400003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4802, 0x0)

20:53:26 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x501600, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:53:26 executing program 4:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
r1 = syz_open_dev$vbi(0x0, 0x1, 0x2)
r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
r5 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r6 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r6, 0x1000000)
sendfile(r5, r6, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3)
ioctl$int_in(r2, 0x5421, &(0x7f0000000080)=0x1)
r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r7, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x0, 0x0, 0x3, 0x0, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r8, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r8, 0x2272, &(0x7f00000002c0))
dup2(r1, r6)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:53:26 executing program 3:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
sendfile(r3, r4, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000240)={0x7, [0x50c, 0x5, 0x1000, 0x8, 0x3, 0xf9af, 0x3]}, &(0x7f0000000280)=0x12)
ftruncate(0xffffffffffffffff, 0x1000000)
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r6, 0x2272, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r7, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r7, 0x81785501, &(0x7f0000000000)=""/56)
r8 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r8, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:53:26 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
clone(0x1000000210007fb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0)
write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c460000002ed8e4f9e765ce27b90300060000000000000000b738000000000035f4c38442a3bc82200005000000000203000000000000004000000000000000000000ffff080000000000090000000000000000000003000000000000000d60395a7088d7c27f000000a101000100030000000000a999caabac9d880348d1849ae697139777cc64e81a1ac4bc769e8c916c840d410c05e31dff0eca1ff9fc89d1ffd9f2174407619e3a318378887fa2920241332d623872339d63e84e2d5d14eefab45c2caab9c616"], 0xcb)
execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="805400003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4802, 0x0)

20:53:26 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600)
write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0xda00)
write$cgroup_subtree(r2, &(0x7f0000000000), 0x0)
ioctl$USBDEVFS_BULK(r1, 0xc0185502, &(0x7f00000000c0)={{{0x2, 0x1}}, 0x65, 0x6b9, &(0x7f0000000000)="b129fcb8f55f4f1a7f759a05958492139dc282b5acaca962d48bb556c8812aa5fe99346804e92276f10b453a897edbea5e168cc66cc44ddfc5fd05d660729d18b20ff8b23e28a3d169a22e29a2d01b2fdaa6fa0a5c413d5a02ae54711d9f788a5613ca545c"})
r3 = dup(r0)
r4 = syz_open_dev$sg(0x0, 0xfffffffffffffffd, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}})

20:53:26 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
clone(0x1000000210007fb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0)
write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c460000002ed8e4f9e765ce27b90300060000000000000000b738000000000035f4c38442a3bc82200005000000000203000000000000004000000000000000000000ffff080000000000090000000000000000000003000000000000000d60395a7088d7c27f000000a101000100030000000000a999caabac9d880348d1849ae697139777cc64e81a1ac4bc769e8c916c840d410c05e31dff0eca1ff9fc89d1ffd9f2174407619e3a318378887fa2920241332d623872339d63e84e2d5d14eefab45c2caab9c616"], 0xcb)
execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="805400003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4802, 0x0)

20:53:26 executing program 5:
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r3 = io_uring_setup(0x65d, &(0x7f00000011c0))
io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000002780)=[{&(0x7f0000001240)=""/227, 0xe3}, {&(0x7f0000001340)=""/70, 0x46}], 0x2)

20:53:26 executing program 2:
r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$P9_RREAD(r2, &(0x7f00000002c0)={0xd5, 0x75, 0x1, {0xca, "cbc75564ad85acbad2b8db1c25508c4a651d18714b7f0b3ee60174b20ff0c12c0d21074d06c08786a83beddad948bb472f4d8f971d4bd41d24829bddcaabad37c070acc0368b9ccafee459105751816cadffd6c78ce29fb6e43e12b37be529cb1e3862539dda67034eebad4dc4a841dd6b20b43a4e7b0e6e97e99c7db2c2577976121e55d776e2bd7210444552a24df99e537751ca0f60d345487dea9b893c6fdf16b4e712cea54326a37dd66f54fbee4105731a4335dcbf2034ba9b8cd84017b335f3fdaef7066a701d"}}, 0xd5)
r3 = dup(r1)
r4 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}})
ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000000)={0x1, 0x196460b8, 0x1, 0x3, 0x2, @discrete={0x383, 0xdd7}})

20:53:27 executing program 2:
r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r2 = dup(r1)
r3 = syz_open_dev$sg(0x0, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x2000c00, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008000400", @ANYRES32=r6, @ANYBLOB="08011b0000000000"], 0x30}}, 0x0)
bind$can_raw(r0, &(0x7f0000000180)={0x1d, r6}, 0x10)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="7472e5be04f01d0a616e34a39844c177bf3a6e6f3d", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',\x00'])
setsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000080)=0x7f, 0x4)
r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x305240, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@loopback}}, {{}, 0x0, @in6=@mcast1}}, &(0x7f0000000100)=0xe8)

[ 1187.313162][T30383] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
20:53:36 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
clone(0x1000000210007fb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0)
write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c460000002ed8e4f9e765ce27b90300060000000000000000b738000000000035f4c38442a3bc82200005000000000203000000000000004000000000000000000000ffff080000000000090000000000000000000003000000000000000d60395a7088d7c27f000000a101000100030000000000a999caabac9d880348d1849ae697139777cc64e81a1ac4bc769e8c916c840d410c05e31dff0eca1ff9fc89d1ffd9f2174407619e3a318378887fa2920241332d623872339d63e84e2d5d14eefab45c2caab9c616"], 0xcb)
execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="805400003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4802, 0x0)

20:53:36 executing program 5:

20:53:36 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0xed, 0x101000)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r3, &(0x7f0000000200), 0x43400)
ioctl$LOOP_GET_STATUS(r3, 0x4c03, &(0x7f0000000040))
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x1140400, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:53:36 executing program 3:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
sendfile(r3, r4, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000240)={0x7, [0x50c, 0x5, 0x1000, 0x8, 0x3, 0xf9af, 0x3]}, &(0x7f0000000280)=0x12)
ftruncate(0xffffffffffffffff, 0x1000000)
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r6, 0x2272, &(0x7f00000002c0))
r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
write$cgroup_int(r7, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r7, 0x81785501, &(0x7f0000000000)=""/56)
r8 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r8, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:53:36 executing program 4:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r3, 0x1000000)
r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r5 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r5, 0x1000000)
sendfile(r4, r5, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0x410000, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x0, 0x0, 0x3, 0x0, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:53:36 executing program 0:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r3, 0x1000000)
r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000010000000000000008006966623000000000000000000000000064756d6d79300000000000e1ff00000069705f76746930000000000000000000697036746e6c30000000000000000000aaaaaaaaaabb0000000000000180c20000000000000000000000f000000070010000a8010000697000000000000000000000000000000000000000000000000000000000000020000000000000007f000001ac14140000000000000000000073412ab2f485d7e5b8580fe4fd20285b10286f3b230000000000007265616c6d0000000000000000000000000000000000000000000000000000001000000000000000000000000000000000002000000000006172707265706c7900000000000000000000001c0000000000000000000000001000000000000000aaaaaaaaaaaa000000000000000000005241544545535400000000000000000000000000000000000000000000000000200000000000000073797a310000000000000000000000000000000000000000000000005b650000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaa"]}, 0x2b0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"]}, 0x2b0)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f00000006c0)={'bridge0\x00', {0x2, 0x4e21, @local}})
r7 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r7, 0x1000000)
sendfile(r4, r7, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000080)=0x1)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r8, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"]}, 0x2b0)
recvmmsg(r8, &(0x7f0000000840)=[{{&(0x7f0000000300)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000380)=""/243, 0xf3}], 0x1, &(0x7f0000000480)=""/233, 0xe9}, 0xffffffff}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000005c0)=""/245, 0xf5}, {&(0x7f0000000140)=""/24, 0x18}, {&(0x7f00000006c0)}, {&(0x7f0000000700)=""/223, 0xdf}], 0x4}, 0x8}], 0x2, 0x8b9ca712209d2da2, &(0x7f00000008c0)={0x0, 0x1c9c380})
getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x6, 0x0, 0x3, 0x0, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r9, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r9, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xfff)

20:53:36 executing program 5:

20:53:36 executing program 2:
r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r2 = accept4$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14, 0x1000)
getsockopt$packet_buf(r2, 0x107, 0xd, &(0x7f00000002c0)=""/148, &(0x7f00000000c0)=0x94)
r3 = dup(r1)
r4 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}})

20:53:36 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
clone(0x1000000210007fb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0)
write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c460000002ed8e4f9e765ce27b90300060000000000000000b738000000000035f4c38442a3bc82200005000000000203000000000000004000000000000000000000ffff080000000000090000000000000000000003000000000000000d60395a7088d7c27f000000a101000100030000000000a999caabac9d880348d1849ae697139777cc64e81a1ac4bc769e8c916c840d410c05e31dff0eca1ff9fc89d1ffd9f2174407619e3a318378887fa2920241332d623872339d63e84e2d5d14eefab45c2caab9c616bd06ab9cb5f0f5"], 0xd2)
execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="805400003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4802, 0x0)

20:53:36 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"]}, 0x2b0)
ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000b40)={0x7f, 0x5e})
ioctl$VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000b00)=0x10000)
fsetxattr$trusted_overlay_redirect(r2, &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x1)
getresuid(0x0, &(0x7f00000002c0)=<r3=>0x0, &(0x7f0000000300))
r4 = getegid()
setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000940)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="a2960c282e9d4694c82624022957833be66c8e47820e19e0d8c5942ec925828a9ed5ce68f67763805f74291e56684bc18597a37145d2ca504d8f4c7cea521cf6a52fa4f42a0a8096ba9d38eb272c7d6eac8f8a4394db", @ANYRES32, @ANYBLOB="040006000000000008000400", @ANYRES32, @ANYBLOB, @ANYRES32=r4, @ANYBLOB="10000200000000002000040000000000"], 0x9, 0x0)
lstat(&(0x7f0000000380)='./file0/file0/../file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
syz_mount_image$reiserfs(&(0x7f0000000300)='reiserfs\x00', &(0x7f0000000340)='./file0/file0\x00', 0x19fb, 0x4, &(0x7f0000000900)=[{&(0x7f0000000600)="dddc25e108d9c769ba7ef5b729352a7b73ec9edf2c0ca9ef6a83764bd3d9623384cac0ab1b9ccb335e69868a3d1ed5e1ad2a801254b2eb554b2f8f7ce2b9ad2e8e9163470c37dd2d1f5b9bdee346f0aa05ed03ac8a85caebb9206148ea756619f800d44ab47a088ef336540d386530b3dfb95277fd2023996d1895507792f0c64109d7f90075d4189dc238bdd9788c4684a7c60aac034b6f37334bd32a01bdcdc20a95a2e8d5e2562dc4b1a9cfa08fb31e275611", 0xb4, 0x5}, {&(0x7f00000006c0)="fb47c8e0ea9036510b5c3d648abcd29b3c8212c6fc1d84e51332dbc4335c94986d653aa156159472ad94fd6aa251ca641f642046e0e4f366724ca7555e0076e29f1f", 0x42, 0x3}, {&(0x7f0000000740)="4f85e06b16a43ea5f98c4c07a0562497289b6fdc6aef7b3ea89f65ac912106e18a179fec2cf4877a3895cbb202e1d32f5ea5755907492c446de08dc961b23dc231785752697f4f45ac1f01f783569c3f24e52f58b33b71d0e7a408296e8850309aa0a1f1da5f9e87289691dec042903b8c8c9e32f5b10cae053054ba8063d2e83cb8dc1767dcbf9bef9d35b5773c", 0x8e, 0x200}, {&(0x7f0000000800)="d0a631d8461127f9b515fe08669134c58d927b1b441aadf72ea49652fcec9dd9c396eed2bb9fd9383cde855ff9efbd5601b95bdada6d77604fe9f904650d3f6f2550c6e32acb7d8f45f116a6c5cc6d9c6a4e016d4970656da9263dcc15d904e5736a80b688f34662668cec72046bf58d9e200754d75c925a4847f3dcaa5e84ae4677fac3955551b55485e6105a2c6fb961157c11dece7866c6b76ea3ff071d3d95175108af08ec21b63c8a98f0a235c58fbb7f3c1f42a1fdfa9ef84bafb23971ab949cd4dfd4a837a419ec4ee9d7a9f29b06111f7b160c677c3c44900c74", 0xde, 0xfffffffffffffff8}], 0x0, &(0x7f0000000a00)={[{@balloc_no_unhash_reloc='block-allocator=no_unhashed_relocation'}, {@expose_privroot='expose_privroot'}, {@acl='acl'}, {@commit={'commit', 0x3d, 0x5}}, {@expose_privroot='expose_privroot'}, {@balloc_border='block-allocator=border'}, {@tails_on='tails=on'}], [{@fowner_gt={'fowner>', r3}}, {@fowner_gt={'fowner>', r5}}, {@seclabel='seclabel'}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@subj_type={'subj_type', 0x3d, 'rfdno'}}, {@subj_type={'subj_type', 0x3d, 'wfdno'}}]})
r6 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="74aeb7e9e17261733d6609000000", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',\x00'])
r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r8, 0x40086602, 0x400007)
bind$rose(r8, &(0x7f0000000180)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @null, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40)
perf_event_open(&(0x7f00000000c0)={0x3, 0x70, 0x1, 0x23, 0x80, 0x0, 0x0, 0x0, 0x20048, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, @perf_bp={&(0x7f0000000000), 0x1}, 0x1020, 0x4, 0x2, 0x2, 0xff, 0x1, 0xc00}, 0x0, 0x4, r7, 0x5)

20:53:36 executing program 5:

20:53:36 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
clone(0x1000000210007fb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0)
write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c460000002ed8e4f9e765ce27b90300060000000000000000b738000000000035f4c38442a3bc82200005000000000203000000000000004000000000000000000000ffff080000000000090000000000000000000003000000000000000d60395a7088d7c27f000000a101000100030000000000a999caabac9d880348d1849ae697139777cc64e81a1ac4bc769e8c916c840d410c05e31dff0eca1ff9fc89d1ffd9f2174407619e3a318378887fa2920241332d623872339d63e84e2d5d14eefab45c2caab9c616bd06ab9cb5f0f5"], 0xd2)
execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="805400003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4802, 0x0)

20:53:36 executing program 5:

20:53:37 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = dup(0xffffffffffffffff)
r1 = syz_open_dev$sg(0x0, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x400007)
ioctl$DRM_IOCTL_AGP_ENABLE(r0, 0x40086432, &(0x7f0000000040)=0xfffffffd)
ioctl$VIDIOC_S_OUTPUT(r2, 0xc004562f, &(0x7f0000000000)=0x1000)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

20:53:37 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
clone(0x1000000210007fb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0)
write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c460000002ed8e4f9e765ce27b90300060000000000000000b738000000000035f4c38442a3bc82200005000000000203000000000000004000000000000000000000ffff080000000000090000000000000000000003000000000000000d60395a7088d7c27f000000a101000100030000000000a999caabac9d880348d1849ae697139777cc64e81a1ac4bc769e8c916c840d410c05e31dff0eca1ff9fc89d1ffd9f2174407619e3a318378887fa2920241332d623872339d63e84e2d5d14eefab45c2caab9c616bd06ab9cb5f0f5"], 0xd2)
execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="805400003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4802, 0x0)

20:53:37 executing program 3:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
sendfile(r3, r4, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000240)={0x7, [0x50c, 0x5, 0x1000, 0x8, 0x3, 0xf9af, 0x3]}, &(0x7f0000000280)=0x12)
ftruncate(0xffffffffffffffff, 0x1000000)
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r6, 0x2272, &(0x7f00000002c0))
r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
write$cgroup_int(r7, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r7, 0x81785501, &(0x7f0000000000)=""/56)
r8 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r8, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

[ 1197.277104][T30652] 9pnet: Insufficient options for proto=fd
20:53:37 executing program 5:

20:53:45 executing program 0:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x209, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r3, 0x1000000)
r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r5 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40086602, 0x400007)
setsockopt$inet6_MRT6_DEL_MFC(r6, 0x29, 0xcd, &(0x7f0000000300)={{0xa, 0x4e21, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0x4, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x2}, 0x200, [0x6fc, 0xa1b, 0x4, 0x9, 0x0, 0xe89, 0x10001, 0x5]}, 0x5c)
ftruncate(r5, 0x1000000)
sendfile(r4, r5, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000080)=0x1)
r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r7, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x6, 0x0, 0x3, 0x0, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r8, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r8, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:53:45 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
clone(0x1000000210007fb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0)
write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c460000002ed8e4f9e765ce27b90300060000000000000000b738000000000035f4c38442a3bc82200005000000000203000000000000004000000000000000000000ffff080000000000090000000000000000000003000000000000000d60395a7088d7c27f000000a101000100030000000000a999caabac9d880348d1849ae697139777cc64e81a1ac4bc769e8c916c840d410c05e31dff0eca1ff9fc89d1ffd9f2174407619e3a318378887fa2920241332d623872339d63e84e2d5d14eefab45c2caab9c616bd06ab9cb5f0f55c57ea"], 0xd5)
execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="805400003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4802, 0x0)

20:53:45 executing program 4:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40086602, 0x400007)
getdents(r4, &(0x7f0000000140)=""/35, 0x23)
ftruncate(r3, 0x1000000)
r5 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r6 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r6, 0x1000000)
sendfile(r5, r6, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r7, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x0, 0x0, 0x3, 0x0, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r8, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r8, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:53:45 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="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"]}, 0x2f9)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x2000c00, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r6}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x2000c00, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r9}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'e@\x80\xcf\x01\x00\x00\x00\x00\x00\x00\x00\x03\x00', r9})
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r10, &(0x7f0000000200), 0x43400)
ioctl$KVM_IRQ_LINE_STATUS(r10, 0xc008ae67, &(0x7f0000000040)={0x41a, 0x61f})
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x15, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:53:45 executing program 5:

20:53:45 executing program 3:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
sendfile(r3, r4, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000240)={0x7, [0x50c, 0x5, 0x1000, 0x8, 0x3, 0xf9af, 0x3]}, &(0x7f0000000280)=0x12)
ftruncate(0xffffffffffffffff, 0x1000000)
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r6, 0x2272, &(0x7f00000002c0))
r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
write$cgroup_int(r7, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r7, 0x81785501, &(0x7f0000000000)=""/56)
r8 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r8, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:53:45 executing program 5:

[ 1205.147249][T30865] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[ 1205.197348][T30874] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
20:53:45 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
clone(0x1000000210007fb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0)
write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c460000002ed8e4f9e765ce27b90300060000000000000000b738000000000035f4c38442a3bc82200005000000000203000000000000004000000000000000000000ffff080000000000090000000000000000000003000000000000000d60395a7088d7c27f000000a101000100030000000000a999caabac9d880348d1849ae697139777cc64e81a1ac4bc769e8c916c840d410c05e31dff0eca1ff9fc89d1ffd9f2174407619e3a318378887fa2920241332d623872339d63e84e2d5d14eefab45c2caab9c616bd06ab9cb5f0f55c57ea"], 0xd5)
execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="805400003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4802, 0x0)

20:53:45 executing program 5:

20:53:45 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r1 = dup(r0)
syz_open_dev$sg(0x0, 0x0, 0x0)
r2 = socket$caif_stream(0x25, 0x1, 0x3)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

20:53:45 executing program 5:

20:53:45 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
clone(0x1000000210007fb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0)
write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c460000002ed8e4f9e765ce27b90300060000000000000000b738000000000035f4c38442a3bc82200005000000000203000000000000004000000000000000000000ffff080000000000090000000000000000000003000000000000000d60395a7088d7c27f000000a101000100030000000000a999caabac9d880348d1849ae697139777cc64e81a1ac4bc769e8c916c840d410c05e31dff0eca1ff9fc89d1ffd9f2174407619e3a318378887fa2920241332d623872339d63e84e2d5d14eefab45c2caab9c616bd06ab9cb5f0f55c57ea"], 0xd5)
execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="805400003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4802, 0x0)

20:53:53 executing program 0:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000000500)={0x4000000, &(0x7f0000000000), &(0x7f0000000140), &(0x7f0000000300)=<r2=>0x0, {0x36}, &(0x7f0000000340)=""/177, 0xb1, &(0x7f0000000400)=""/152, &(0x7f00000004c0)=[0x0, 0x0], 0x2}, 0x50)
r3 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x5}, 0x10000, 0x0, 0x800, 0x6, 0x0, 0x0, 0x401}, r2, 0x1, 0xffffffffffffffff, 0x0)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
r5 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r6 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r6, 0x1000000)
sendfile(r5, r6, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r3)
ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000080)=0x1)
r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r7, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x6, 0x0, 0x3, 0x0, 0x3]}, &(0x7f0000000280)=0x14)
ftruncate(0xffffffffffffffff, 0x1000000)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r8, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r8, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:53:53 executing program 2:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0xa00, 0x0)
ioctl$SNDCTL_DSP_GETBLKSIZE(r0, 0xc0045004, &(0x7f0000000080))
bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x1, 0x2, 0x2, 0x39, 0x0, "fdc4d1f506c56787db9c3269a10bf13e3b6753c7671a0926a667ba56b2ca2b8c62cb2c56f36bcbf798967d4139fc73ee32bb7f7c0b3ea4b68125e41bc09939", 0x3b}, 0x60)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000200), 0x43400)
getresuid(0x0, &(0x7f00000002c0)=<r2=>0x0, &(0x7f0000000300))
r3 = getegid()
setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000940)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="a2960c282e9d4694c82624022957833be66c8e47820e19e0d8c5942ec925828a9ed5ce68f67763805f74291e56684bc18597a37145d2ca504d8f4c7cea521cf6a52fa4f42a0a8096ba9d38eb272c7d6eac8f8a4394db", @ANYRES32, @ANYBLOB="040006000000000008000400", @ANYRES32, @ANYBLOB, @ANYRES32=r3, @ANYBLOB="10000200000000002000040000000000"], 0x9, 0x0)
r4 = getegid()
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r5, 0x40086602, 0x400007)
getresuid(0x0, &(0x7f00000002c0)=<r6=>0x0, &(0x7f0000000300))
r7 = getegid()
setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000940)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="a2960c282e9d4694c82624022957833be66c8e47820e19e0d8c5942ec925828a9ed5ce68f67763805f74291e56684bc18597a37145d2ca504d8f4c7cea521cf6a52fa4f42a0a8096ba9d38eb272c7d6eac8f8a4394db", @ANYRES32, @ANYBLOB="040006000000000008000400", @ANYRES32, @ANYBLOB, @ANYRES32=r7, @ANYBLOB="10000200000000002000040000000000"], 0x9, 0x0)
setfsuid(r6)
ioctl$NS_GET_OWNER_UID(r5, 0xb704, &(0x7f0000000180)=<r8=>0x0)
write$P9_RSTATu(r1, &(0x7f0000000200)={0x64, 0x7d, 0x1, {{0x0, 0x4c, 0x27, 0x1, {0x80, 0x4, 0x8}, 0xd36b05bfad6dec05, 0x1, 0x3, 0x10001, 0xd, '+@cgroupwlan0', 0x3, '9p\x00', 0x9, '/dev/sg#\x00'}, 0x3, '9p\x00', r2, r4, r8}}, 0x64)
ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x7c82, 0xeb})
r9 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r10 = dup(r9)
r11 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r10, @ANYBLOB="2c7766646e6f3dc6d6892481ae7dc51057e67d501a8a4478666c65a8b06754ebf287a23a4a214b1a1578523042db4d0275fb21230688bb8904ebc55b97eb074e120c52ad645e66aa454ac7cc77c03971114c854353d291ee562bb8afd63755e282c2b17afc4d11f6a8638d418002e704778660021a00"/127, @ANYRESHEX=r11, @ANYBLOB])

20:53:53 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
clone(0x1000000210007fb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0)
write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c460000002ed8e4f9e765ce27b90300060000000000000000b738000000000035f4c38442a3bc82200005000000000203000000000000004000000000000000000000ffff080000000000090000000000000000000003000000000000000d60395a7088d7c27f000000a101000100030000000000a999caabac9d880348d1849ae697139777cc64e81a1ac4bc769e8c916c840d410c05e31dff0eca1ff9fc89d1ffd9f2174407619e3a318378887fa2920241332d623872339d63e84e2d5d14eefab45c2caab9c616bd06ab9cb5f0f55c57ea0000"], 0xd7)
execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="805400003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4802, 0x0)

20:53:53 executing program 5:

20:53:53 executing program 3:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0x1000000)
r3 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r4, 0x1000000)
sendfile(r3, r4, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000840)={0x1f, 0x0, 0x1}, 0xc)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000240)={0x7, [0x50c, 0x5, 0x1000, 0x8, 0x3, 0xf9af, 0x3]}, &(0x7f0000000280)=0x12)
ftruncate(0xffffffffffffffff, 0x1000000)
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r6, 0x2272, &(0x7f00000002c0))
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r7, 0x81785501, &(0x7f0000000000)=""/56)
r8 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r8, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:53:53 executing program 4:
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x12a, 0x0, 0x200000000000df8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r3, 0x1000000)
r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2)
r5 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
ftruncate(r5, 0x1000000)
sendfile(r4, r5, &(0x7f00000000c0)=0xf18001, 0xeefffdef)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40086602, 0x400007)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000006c0)={{{@in=@multicast1, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000500)=0xe8)
setsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f00000007c0)={{{@in6=@local, @in6=@local, 0x4e20, 0x0, 0x4e22, 0x866, 0x2, 0x20, 0x80, 0x2f, r7, 0xffffffffffffffff}, {0x9, 0xccf80000, 0xf800000000000000, 0x3ff, 0x6, 0x400, 0x5}, {0x6, 0x42d7, 0x7, 0xd10}, 0x4, 0x6e6bb3, 0x0, 0x2}, {{@in6=@mcast1, 0x4d2, 0xff}, 0x2, @in6=@local, 0x0, 0x6, 0x0, 0x2, 0x100, 0x5, 0x4}}, 0xe8)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
r8 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xf05fd903538a0bf7, 0x0)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r8, 0x84, 0x16, &(0x7f0000000240)={0x8, [0x50c, 0x5, 0x1000, 0x0, 0x0, 0x3, 0x0, 0x3]}, &(0x7f0000000280)=0x14)
r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000300)='nbd\x00')
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r10, 0x40086602, 0x400007)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r11, &(0x7f0000000000)=ANY=[], 0x32600)
write$cgroup_subtree(r11, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0xda00)
r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r12, &(0x7f0000000200), 0x43400)
r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r13, &(0x7f0000000000)=ANY=[], 0x32600)
write$cgroup_subtree(r13, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0xda00)
r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r14, 0x40086602, 0x400007)
r15 = gettid()
tkill(r15, 0x14)
r16 = syz_open_procfs(r15, &(0x7f0000000340)='clear_refs\x00')
r17 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r17, &(0x7f0000000000)=ANY=[], 0x32600)
write$cgroup_subtree(r17, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0xda00)
sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000000480)={&(0x7f0000000140), 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xac, r9, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x44, 0x7, [{0x8, 0x1, r10}, {0x8, 0x1, r6}, {0x8, 0x1, r8}, {0x8, 0x1, r2}, {0x8, 0x1, r6}, {0x8, 0x1, r11}, {0x8, 0x1, r12}, {0x8, 0x1, r13}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_SOCKETS={0x3c, 0x7, [{0x8, 0x1, r8}, {0x8, 0x1, r8}, {0x8, 0x1, r14}, {0x8, 0x1, r16}, {0x8, 0x1, r17}, {0x8, 0x1, r6}, {0x8, 0x1, r6}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
ftruncate(0xffffffffffffffff, 0x1000000)
r18 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r18, 0x40086602, 0x400007)
ioctl$SG_GET_RESERVED_SIZE(r18, 0x2272, &(0x7f00000002c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000000)=""/56)
ftruncate(0xffffffffffffffff, 0x1000000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

20:53:53 executing program 5:

[ 1213.844991][T31104] 9pnet: Insufficient options for proto=fd
20:53:53 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
clone(0x1000000210007fb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0)
write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c460000002ed8e4f9e765ce27b90300060000000000000000b738000000000035f4c38442a3bc82200005000000000203000000000000004000000000000000000000ffff080000000000090000000000000000000003000000000000000d60395a7088d7c27f000000a101000100030000000000a999caabac9d880348d1849ae697139777cc64e81a1ac4bc769e8c916c840d410c05e31dff0eca1ff9fc89d1ffd9f2174407619e3a318378887fa2920241332d623872339d63e84e2d5d14eefab45c2caab9c616bd06ab9cb5f0f55c57ea0000"], 0xd7)
execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="805400003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4802, 0x0)

20:53:54 executing program 5:

[ 1213.987739][T31114] 9pnet: Insufficient options for proto=fd
20:53:54 executing program 5:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0)
ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000280)='\x00')
ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x00\x01\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93\r\x99\xbe\x18\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c')
ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000280)='\x00\x00\x00\x01\x00\x00\x00\xbc\x06^\xbewV\xf3\xb3\xa4e\xfb\xc5}\x9c\"\xc4\xee\xba\x064\xb2\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\xda\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x1f\x00\x00\x00\x00\x00\x00\x00\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17yn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93\r\x99\xbe\x18\xe3c\x8dn\xce\x10\xfc\x97\x85).(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafDd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\x90\x9e}\x89\xff\x8c\xcf\xfd\xffMp\xdc\x9e\xad\x9aj\x99\xd5\xc1\x8f\xb5S\xcb\rA\xc5\xc2\x16\x95\x9f\xa8\xc8\x86\v-\xb4\xb5c\x94\xc6\xca\x9b\xee\x02I:\x98SF\x82\xac\x0e~~\x15\fn\xe2X\xe3%\xc7\x04q\x87\x8d\xe6\xee\xc0\x82w\xa9rX\v\x1f9\xcc-&8\x06W\x83\xa9\xca\xa5\xba\x7f\xae\xe4\xea')

20:53:54 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"]}, 0x2b0)
r1 = socket$inet(0x2, 0x0, 0x2)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x400007)
getsockname$packet(r2, &(0x7f0000002ec0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000002f00)=0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000003380)=[{{&(0x7f0000000200)=@llc={0x1a, 0x0, 0x0, 0x20, 0x81, 0xfa}, 0x80, &(0x7f0000000080)=[{&(0x7f00000002c0)="b6304b75448bdfd70ca02676e08943af581245557415824bcf226ad72a87887afec136dc329146f0e126bfaccb667eab74bcacf41ec872e3953ed35cf795e4db574675be76e9378e933789942c46", 0x4e}, {&(0x7f0000000340)="82b12d051d74f0109b16aee015e5baeb9279d94daf93a869b9bc0676df2257be7f8bb3f6b97837cefab761dbe52d8d79e9dc3ffd7ef18f6e1350e0d886b3ba9a1fc207c8947af13524fb4a0e773fc649277b5b57f145bfe65de76421e84d03008ee876c5e0ec6d58b52a4bef9b3d7771081c830f165026f2ee50ec4cbc5c3b729014d3e3ffc210dbd903ca36752c9df48f997d785728a3aff0e1418fb5600232a4efd16f8099d22348327ff3898c27c383d55b3b89ca2fb15a2ec5cfd4eaa89ae25aa787e5f5db3207e61c05033c9d4c", 0xd0}], 0x2, &(0x7f0000000180)=[{0x28, 0x104, 0x1, "f72a7fae2096fd5e8e3738ae2d1b46958764"}], 0x28}}, {{&(0x7f0000000440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x4, 0x3, 0x3, {0xa, 0x4e24, 0x6, @remote, 0x1}}}, 0x80, &(0x7f0000000500)=[{&(0x7f00000004c0)="ce258b3b914621efdab60993", 0xc}], 0x1, &(0x7f0000000540)=[{0x70, 0x111, 0x10001, "23b461fcbd2216454a03e6fb1484287e1e6648814c592e6d8be597b45bb9a8f30abbc8d8f21d0b290945940f053c46e542cc70811215b928bb44140aa04e08391d95dc9af454cca53ee5424fe5c17f1267408d2c475845f212"}], 0x70}}, {{&(0x7f00000005c0)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @remote}, 0x3, 0x0, 0x1, 0x2}}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000640)="bf90afefef5c6db566a7ee418e30f83db0e1949fffb27049463bb496952f7f5d881a60fcf077833eba094937f004cfe948ec492f2b629b655e53528da4943432188fcaf38c3a3ab50f128c477f682e93a3d37c4119213a778386d5af4d96f0195526b742e13730b00e94d370f5ddf0", 0x6f}, {&(0x7f00000006c0)="2e28f04f7e2a239a74b31de3b8e0a7408cf298f7770804700595c395cd465e670744c1e665324647042361af1132a7fa4adc8bb5bd3c4e873c0b409ca3", 0x3d}], 0x2}}, {{&(0x7f0000000740)=@hci={0x1f, 0x8}, 0x80, &(0x7f0000001840)=[{&(0x7f00000007c0)}, {&(0x7f0000000800)="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", 0x1000}, {&(0x7f0000001800)="0a1cf5eb5169fbd4c4585fc6a5efaf9e4739716c3ac3d5368ae3967459cf3c8359c2201022", 0x25}], 0x3}}, {{&(0x7f0000001880)=@pppoe={0x18, 0x0, {0x1, @random="3c380ea1f09d", 'eql\x00'}}, 0x80, &(0x7f0000002940)=[{&(0x7f0000001900)="fcc0af257dde7d64de48325acad7628aa0", 0x11}, {&(0x7f0000001940)="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", 0x1000}], 0x2, &(0x7f0000002980)=[{0xc0, 0x105, 0x7, "b20ad54b599348c61746c570999e17e621f5c9359fd34c8818b8c810c8f02f5aa677b9a64289ce615f598e6ee2ac36b67c50b913a251f2473aa9d05e090eceb37db00d88463c9b80b5733ac8cdff905dce837d25f1a636f6cc49ee08c41a4294685b59637c623f1639fca3c08098efaefba089f4268029472e77179e3f22156f8841f372baa5349c9e04e2407f6db6b7f7cdeac91632b2afbe757f63bbd2f45aeb8bd5cc722472059b"}, {0x58, 0x18a, 0x8, "07bb3aa6d70fe2a497b490d94110032946cc07b94787fea91fb24b8574ba644c5d63b5196c8d7c68ebb58c2948de004b9b20fb182265edfafd7fcc52c4239f754a6ade25111f"}, {0x50, 0x1, 0x0, "a60010c942f3871153a58da9c83f82c4d0855c9e8598f793a0af77119cff2ac2356de0a41a398c81380e29007da4b958b4265698ab58ab087c816a"}], 0x168}}, {{0x0, 0x0, &(0x7f0000002d80)=[{&(0x7f0000002b00)="bc4529cacfc68a295794ede8d11b81e05981d267306bd95e3e", 0x19}, {&(0x7f0000002b40)="8b08f19a4ee5c89ecc8ed6a5c4b628", 0xf}, {&(0x7f0000002b80)="24f7b956403269ab7bc1958eb4c9363044a9ade4bff84a814f64d69237f27262a499941f06b4ac0f1ab26c48f9f2fca8a122f6aa12f29abc5a2bf342202867b72d3027a313aa74bbb4db3815de31c46ac9579987b5c2c71a757796be3541fcedf8854d2c701e2ba750c30622744faff3ef258f33bce56afdf2cc95260e0acbd24a2075f3a1f2d609c4b84132d19a406630fb2cfb79eb80d7d249fdccc6b2dc3f8d117d064038f4520f641ce4b1a8fa33cecab2", 0xb3}, {&(0x7f0000002c40)="22428a55ffd0b868df312c4b881141655db2db8d59faeeedc151f0131618bb979c82cf282484f66e808add93fc438dd27cd99cd582ebdcb40018e1f179f899b88825340efd12c7b62844d102633f14234544477de74d848a4a634292d9658cf7aeba648e64e680fb03df00a3b3bcb37376fa8fd8aa132db8a7e69c6d6793af6482308c40a3137fefbe4696a9e610eda75af515bea856813761645beeb1c093c1a51445a901b93f26603b816796bb9d244a090de8313cf2d2df00cf3805bbe22716f99119da38d4240e247352e1612716d1f6d3be3eba9813a6bd9c1939dcc9c6f48dcf054c", 0xe5}, {&(0x7f0000002d40)="64866deb35d3d389ce256f87dad60dd6b605855a18364dc8369e71c1afa2596c0c4691317fcbba79618b2d3fe1281996692bcd4c46a033a65357af5a59acbe", 0x3f}], 0x5}}, {{&(0x7f0000002f40)=@xdp={0x2c, 0x1, r3, 0xa}, 0x80, &(0x7f0000003140)=[{&(0x7f0000002fc0)="60f540e7662db60d85c0eea5e8e4b5a33d0bd3c5dc03b9891e6ebeff7fe9224d9de69641fe6db978d40bf921a42c7f9318896ae683c9b69431401bb6e9a0d04382900a5c015138802ca81de81d156af0cd9686671bf34aaac2b51aba4dc8f7a061e500aa79fb9a772fef53218bf12ca02c31", 0x72}, {&(0x7f0000003040)="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", 0xff}], 0x2, &(0x7f0000003180)=[{0x40, 0x107, 0x40, "de11c8b258912433fe7e85ee8a8385fb456973715b45c3a718d1fae238441dfff96361d3271a573157"}, {0xd0, 0x102, 0x10001, "61f9925c494e822802017ebd2cc356252afad2cbd7b5f96b5fbd37152c60be885faca59fe6fe2f630649b949062416cd30bce82dd723fccac9ab7cf9e6bf091d973bc1584d8319fd62295a1fdd8d830a954305f7a0adcab08f6caf5b3f93026a7fc7cf539d6eb9a875181220009defe445273bcfb797ed853eac541c2d2b4e94765ae0a719209977298ef057b7df58af3e2c87053267bb3b89ad79b510bcb652dfa8f0748e85d91154631800ebb07cc2ae3a703acb49367c3d284a10c6b416"}, {0x88, 0x104, 0x4, "986f3569dfd88940f93f691ab167b9ba9c41aca8c75de398acdb1c9f4ec9701b8de1fd97a2f39e0462acc52e3beaafcfcb851aedae0b95dd34117f20ac4b29045f28410c820ba8aeb41a1d4e76eeae59f6187e6f5113f388def2ac3e3b1cd821f1a70dc797553b053b1de8dafd85b4a2338ee7"}, {0x68, 0x119, 0x6, "029d974816ca719281c73a86fa809daebc2364fc18df9757889794365aaf124de62b6f79230a900291ed93fc20073d1897a5a7868e34d938aa7115c56412f8486e4e2542399326af8a0dbb1c795ad8496ee28b84"}], 0x200}}], 0x7, 0xc9bc92b931035d45)
r4 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0)
r5 = dup(r4)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40086602, 0x400007)
getsockopt$netrom_NETROM_T1(r6, 0x103, 0x1, &(0x7f00000007c0), &(0x7f0000002e00)=0x4)
r7 = syz_open_dev$sg(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x82, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@privport='privport'}]}})
getsockname$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id, &(0x7f0000000040)=0x10)

[ 1214.408756][T31124] EXT4-fs (loop1): bad geometry: block count 580964351930795064 exceeds size of device (4096 blocks)
20:53:54 executing program 2:
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x81)
r1 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x80)
r2 = dup(r1)
r3 = syz_open_dev$sg(0x0, 0x0, 0x400000)
ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000040)=0x4)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}})

[ 1214.602345][T31150] 9pnet: Insufficient options for proto=fd
[ 1215.068944][T30342] ==================================================================
[ 1215.077086][T30342] BUG: KCSAN: data-race in inotify_handle_event / inotify_remove_from_idr
[ 1215.086622][T30342] 
[ 1215.088974][T30342] write to 0xffff88812b0f35e8 of 4 bytes by task 30231 on cpu 1:
[ 1215.096790][T30342]  inotify_remove_from_idr+0xff/0x320
[ 1215.102274][T30342]  inotify_ignored_and_remove_idr+0x9c/0xe0
[ 1215.108178][T30342]  inotify_freeing_mark+0x27/0x40
[ 1215.113214][T30342]  fsnotify_free_mark+0xad/0xe0
[ 1215.118602][T30342]  fsnotify_destroy_mark+0x40/0x50
[ 1215.123819][T30342]  __x64_sys_inotify_rm_watch+0xcc/0x130
[ 1215.129461][T30342]  do_syscall_64+0xcc/0x3a0
[ 1215.133969][T30342]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 1215.140207][T30342] 
[ 1215.142848][T30342] read to 0xffff88812b0f35e8 of 4 bytes by task 30342 on cpu 0:
[ 1215.150679][T30342]  inotify_handle_event+0x236/0x41a
[ 1215.158043][T30342]  fsnotify+0x556/0x7d0
[ 1215.162196][T30342]  __fput+0x3aa/0x520
[ 1215.166174][T30342]  ____fput+0x1f/0x30
[ 1215.170155][T30342]  task_work_run+0xf6/0x130
[ 1215.174657][T30342]  exit_to_usermode_loop+0x2b4/0x2c0
[ 1215.179951][T30342]  do_syscall_64+0x384/0x3a0
[ 1215.184543][T30342]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 1215.190415][T30342] 
[ 1215.192750][T30342] Reported by Kernel Concurrency Sanitizer on:
[ 1215.198986][T30342] CPU: 0 PID: 30342 Comm: syz-executor.1 Not tainted 5.5.0-rc1-syzkaller #0
[ 1215.207732][T30342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1215.217866][T30342] ==================================================================
[ 1215.226006][T30342] Kernel panic - not syncing: panic_on_warn set ...
[ 1215.232588][T30342] CPU: 0 PID: 30342 Comm: syz-executor.1 Not tainted 5.5.0-rc1-syzkaller #0
[ 1215.242461][T30342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1215.252675][T30342] Call Trace:
[ 1215.255961][T30342]  dump_stack+0x11d/0x181
[ 1215.260607][T30342]  panic+0x210/0x640
[ 1215.264505][T30342]  ? vprintk_func+0x8d/0x140
[ 1215.269100][T30342]  kcsan_report.cold+0xc/0xd
[ 1215.273692][T30342]  kcsan_setup_watchpoint+0x3fe/0x460
[ 1215.279238][T30342]  __tsan_read4+0xc6/0x100
[ 1215.284288][T30342]  inotify_handle_event+0x236/0x41a
[ 1215.289588][T30342]  fsnotify+0x556/0x7d0
[ 1215.293754][T30342]  __fput+0x3aa/0x520
[ 1215.297745][T30342]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1215.303987][T30342]  ____fput+0x1f/0x30
[ 1215.307969][T30342]  task_work_run+0xf6/0x130
[ 1215.312480][T30342]  exit_to_usermode_loop+0x2b4/0x2c0
[ 1215.317785][T30342]  do_syscall_64+0x384/0x3a0
[ 1215.322379][T30342]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 1215.328268][T30342] RIP: 0033:0x4144b1
[ 1215.332170][T30342] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01
[ 1215.351766][T30342] RSP: 002b:00007fd94a0a9a60 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
[ 1215.360183][T30342] RAX: 0000000000000000 RBX: 00007fd94a0aa6d4 RCX: 00000000004144b1
[ 1215.368151][T30342] RDX: 0000000000000003 RSI: 0000000000004c00 RDI: 0000000000000003
[ 1215.376118][T30342] RBP: 000000000075bf20 R08: 0000000000000000 R09: 000000000000000a
[ 1215.384105][T30342] R10: 0000000000000075 R11: 0000000000000293 R12: 00007fd94a0aa6d4
[ 1215.392071][T30342] R13: 00000000004cad33 R14: 0000000000000003 R15: 00000000ffffffff
[ 1215.401413][T30342] Kernel Offset: disabled
[ 1215.405743][T30342] Rebooting in 86400 seconds..